This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/d92557-8c46-482c-91a8-c1e974bed12e/1/Ub-0Y1O_zM_5QS3L3UgPGbTJg5c.mft
File:                     Ub-0Y1O_zM_5QS3L3UgPGbTJg5c.mft (raw, json)
Hash identifier:          iW9FjABh/lhhSYFCTua1iKYZ5jAMxIbNPoolNWIKqQ0=
Subject key identifier:   3F:12:24:0A:82:67:1F:28:9C:D1:14:FE:D9:6D:F3:77:EE:01:F6:B9
Authority key identifier: 51:BF:B4:63:53:BF:CC:CF:F9:41:2D:CB:DD:48:0F:19:B4:C9:83:97
Certificate issuer:       /CN=51bfb46353bfcccff9412dcbdd480f19b4c98397
Certificate serial:       019AF42E486CD2FFEA2241BF9FE2926E660F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ub-0Y1O_zM_5QS3L3UgPGbTJg5c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/d92557-8c46-482c-91a8-c1e974bed12e/1/Ub-0Y1O_zM_5QS3L3UgPGbTJg5c.mft
Manifest number:          077D
Signing time:             Sat 06 Dec 2025 15:01:05 +0000
Manifest this update:     Sat 06 Dec 2025 15:01:05 +0000
Manifest next update:     Sun 07 Dec 2025 15:01:05 +0000
Files and hashes:         1: EDb9Liv3zA_92bId7joWHYrQzoo.roa (hash: A16x8qUxqiR7ERWaWAaG6LaaDTVQHFQ/x2nUxjREXXk=)
                          2: Ub-0Y1O_zM_5QS3L3UgPGbTJg5c.crl (hash: 2fdtD0BKphCXKyLGDnx++3tEmROjNOvxJmG8X/Wx6N4=)
                          3: Xa29r_CsUUcUzEz0BNLTpiSiPBY.roa (hash: 53O4SVjNPzjqjz8qQLc5DlGX0iO3fhbcYi4JddJ19BE=)
                          4: nBuwfBTi3z0zJL6pv11ndmM21yA.roa (hash: ghnQu5Ks9AwvTzzenho3SXArjUF3Z2Fr2IytACYgM0s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/d92557-8c46-482c-91a8-c1e974bed12e/1/Ub-0Y1O_zM_5QS3L3UgPGbTJg5c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/d92557-8c46-482c-91a8-c1e974bed12e/1/Ub-0Y1O_zM_5QS3L3UgPGbTJg5c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ub-0Y1O_zM_5QS3L3UgPGbTJg5c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 13:09:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f4:2e:48:6c:d2:ff:ea:22:41:bf:9f:e2:92:6e:66:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51bfb46353bfcccff9412dcbdd480f19b4c98397
        Validity
            Not Before: Dec  6 15:01:05 2025 GMT
            Not After : Dec  7 15:01:05 2025 GMT
        Subject: CN=3f12240a82671f289cd114fed96df377ee01f6b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:88:ef:f1:10:2c:9e:bb:4b:69:88:14:57:1f:
                    df:45:67:3b:31:49:18:76:b8:a9:a7:c0:95:7d:7a:
                    fe:a4:af:ee:87:6e:3c:23:07:72:61:a7:d1:34:13:
                    b6:58:c6:36:66:4e:a4:e4:87:9a:a3:9d:f7:99:a1:
                    5a:b4:e2:41:9b:8d:03:e1:10:e5:73:c9:b1:20:3d:
                    e2:54:ed:80:9e:35:ae:e4:2f:08:c0:65:d3:e3:43:
                    10:dc:5d:59:78:f5:8f:3e:4c:a1:60:62:fb:0e:2e:
                    f7:90:f9:e2:fc:e0:72:16:3a:42:72:4d:88:44:5e:
                    a2:da:fc:7c:92:b3:4e:76:80:93:26:1e:ba:b5:ea:
                    f6:b8:88:c3:d5:08:e0:c4:4f:16:1d:25:f6:cb:cf:
                    d2:6c:9d:1a:72:d4:8f:cd:25:d1:13:0b:91:95:98:
                    59:8c:4b:c1:eb:e8:02:24:b5:0e:b7:77:79:7c:ea:
                    a5:8e:9c:74:02:aa:52:85:ef:da:49:30:f0:f2:09:
                    79:f6:83:2b:57:08:c0:d3:37:a9:34:0e:fa:74:75:
                    1c:a0:07:e2:de:4f:9e:33:ec:ed:b9:16:2a:2a:e5:
                    f3:f0:80:9e:14:01:44:70:47:19:84:d9:81:fd:96:
                    09:85:28:87:d6:30:9b:53:9f:ba:76:e6:7f:5d:70:
                    4d:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:12:24:0A:82:67:1F:28:9C:D1:14:FE:D9:6D:F3:77:EE:01:F6:B9
            X509v3 Authority Key Identifier:
                keyid:51:BF:B4:63:53:BF:CC:CF:F9:41:2D:CB:DD:48:0F:19:B4:C9:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ub-0Y1O_zM_5QS3L3UgPGbTJg5c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/d92557-8c46-482c-91a8-c1e974bed12e/1/Ub-0Y1O_zM_5QS3L3UgPGbTJg5c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/d92557-8c46-482c-91a8-c1e974bed12e/1/Ub-0Y1O_zM_5QS3L3UgPGbTJg5c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:5c:d2:87:c6:99:ac:3b:9c:c3:78:86:98:da:77:de:66:44:
         c3:a9:5b:89:bb:43:f2:e0:fe:12:5f:22:70:6b:99:6b:46:08:
         9b:1e:8b:5a:09:5f:5f:b0:0b:4f:d8:6f:f5:87:0a:b4:75:8b:
         09:27:6d:bc:33:05:d1:3c:1f:c1:13:ee:3d:35:aa:e5:32:ec:
         6c:ed:0c:94:33:6d:63:78:02:fd:df:0f:61:49:19:c6:31:7f:
         81:eb:56:ba:ad:92:c3:e7:1f:59:12:50:17:ef:83:34:50:8c:
         69:6b:98:4d:15:49:77:67:6d:53:f4:19:71:b0:85:85:14:6a:
         39:31:26:74:d1:c2:a7:22:e1:db:dd:99:79:1c:49:fc:63:7e:
         dc:d0:f2:dd:9f:e9:12:a7:45:0a:12:df:6c:d5:69:1c:f3:2d:
         95:6d:eb:34:5e:1f:a9:c3:68:22:f2:54:fc:ff:ad:bf:05:2c:
         85:03:42:fc:66:75:05:4c:f2:90:42:02:00:35:3c:18:8d:98:
         15:16:06:0a:a7:e4:89:f5:ce:af:67:56:8c:3e:ec:f3:bb:21:
         86:9b:92:77:1c:cc:88:a4:00:e3:4f:55:8e:6c:bf:e2:b3:40:
         73:35:08:69:d4:81:b2:30:ac:00:78:d2:7a:93:4b:a1:c8:7e:
         82:79:b2:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 21:56:20 2025 by rpki-client