This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/1d5ee1-accf-474f-a589-cd1fa484411b/1/uGnuZhZNPLQdvS31QXgXwy9M6gU.mft
File:                     uGnuZhZNPLQdvS31QXgXwy9M6gU.mft (raw, json)
Hash identifier:          z7Ru3EtAoL1RrjlFJiwJlngkA1n3wGmsidnvmrcjemA=
Subject key identifier:   BF:D4:C1:10:AF:A1:5C:4F:3C:72:39:19:85:21:75:F2:DC:0E:B8:D1
Authority key identifier: B8:69:EE:66:16:4D:3C:B4:1D:BD:2D:F5:41:78:17:C3:2F:4C:EA:05
Certificate issuer:       /CN=b869ee66164d3cb41dbd2df5417817c32f4cea05
Certificate serial:       019AF3F757968234D1A1671CE56421021CF0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uGnuZhZNPLQdvS31QXgXwy9M6gU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/1d5ee1-accf-474f-a589-cd1fa484411b/1/uGnuZhZNPLQdvS31QXgXwy9M6gU.mft
Manifest number:          1762
Signing time:             Sat 06 Dec 2025 14:01:04 +0000
Manifest this update:     Sat 06 Dec 2025 14:01:04 +0000
Manifest next update:     Sun 07 Dec 2025 14:01:04 +0000
Files and hashes:         1: 2hZweGDLaTOG9__dBEdUkTtfsSw.roa (hash: x2mvxEnLHZTwd7sK9WWW9RrPHq1tkRpvzUBh9hY6j6E=)
                          2: YKs5bmFUVAk0U3c65JyA-yx_ru8.roa (hash: /iSRIEZxHR2KYrSfKlv13GZuPtZZ9il7XqwpwVFRwXE=)
                          3: uGnuZhZNPLQdvS31QXgXwy9M6gU.crl (hash: hu1/EYreRu1GcsY7QqwmD6lcZJnK+STAe5GVm8Q9uN8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/1d5ee1-accf-474f-a589-cd1fa484411b/1/uGnuZhZNPLQdvS31QXgXwy9M6gU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/1d5ee1-accf-474f-a589-cd1fa484411b/1/uGnuZhZNPLQdvS31QXgXwy9M6gU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uGnuZhZNPLQdvS31QXgXwy9M6gU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 13:09:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f3:f7:57:96:82:34:d1:a1:67:1c:e5:64:21:02:1c:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b869ee66164d3cb41dbd2df5417817c32f4cea05
        Validity
            Not Before: Dec  6 14:01:04 2025 GMT
            Not After : Dec  7 14:01:04 2025 GMT
        Subject: CN=bfd4c110afa15c4f3c723919852175f2dc0eb8d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e6:23:e8:13:c3:62:68:92:ee:34:fc:b9:fc:
                    d8:93:7c:4f:9e:9d:da:f8:e4:7d:de:40:f0:75:6b:
                    33:6d:02:d1:24:a7:89:d0:75:68:d7:9b:7b:cc:0d:
                    69:fb:3c:d5:d9:f9:f4:7e:4d:1f:a8:49:7f:81:de:
                    ca:f0:57:09:df:c2:7e:a2:1e:7f:a1:3d:f6:28:86:
                    1b:b3:ef:fd:10:02:55:8c:7a:e6:c9:65:67:9e:2e:
                    6d:1f:95:89:ad:4d:e5:f9:d7:49:7d:4a:06:90:9f:
                    07:90:0e:2e:3c:11:53:ff:1d:2c:7f:29:88:82:96:
                    3b:81:0d:ff:a2:2f:5e:d2:18:40:61:2f:3d:91:48:
                    b3:4a:88:ca:00:f7:2f:9f:af:6a:9e:ae:96:4a:87:
                    15:57:68:32:67:11:08:e3:c5:8f:1b:9a:99:5a:18:
                    19:e0:3b:05:8c:85:01:c8:cd:68:cf:1e:5e:5a:2b:
                    08:17:5c:00:5a:ad:c5:4a:07:7e:2a:e7:01:5f:4d:
                    b4:97:29:29:4c:6c:6e:ae:ac:a8:9b:4e:59:c5:1f:
                    a8:31:ef:31:6b:26:a6:25:63:06:33:cc:42:d8:fc:
                    19:6b:55:b3:bd:c4:e1:01:84:a1:eb:c6:fb:37:2f:
                    4d:03:20:bd:e9:00:cb:b2:e8:8f:c2:e6:b0:05:ee:
                    ca:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:D4:C1:10:AF:A1:5C:4F:3C:72:39:19:85:21:75:F2:DC:0E:B8:D1
            X509v3 Authority Key Identifier:
                keyid:B8:69:EE:66:16:4D:3C:B4:1D:BD:2D:F5:41:78:17:C3:2F:4C:EA:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uGnuZhZNPLQdvS31QXgXwy9M6gU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/1d5ee1-accf-474f-a589-cd1fa484411b/1/uGnuZhZNPLQdvS31QXgXwy9M6gU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/1d5ee1-accf-474f-a589-cd1fa484411b/1/uGnuZhZNPLQdvS31QXgXwy9M6gU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:07:2e:21:73:99:0b:e6:4e:aa:47:75:58:54:06:b1:f2:b6:
         0a:89:ab:92:39:71:05:a4:28:f5:28:6a:ff:34:b4:3c:1d:b3:
         c0:99:f7:79:f0:86:70:e8:fb:45:9a:42:71:5b:b9:59:66:06:
         eb:a2:09:a1:97:86:18:f8:05:4d:cc:f9:25:e0:5e:5a:3c:2c:
         e8:90:de:06:81:8c:ba:8c:32:bb:bb:2c:18:e9:c4:4d:2f:16:
         ce:88:da:ae:0b:c3:f3:a1:a6:39:9b:27:a4:d1:2c:8d:d2:93:
         78:70:88:ae:3a:77:4e:e7:c6:6e:cc:ce:e2:e9:cd:75:7f:da:
         77:6b:16:37:ec:5d:78:89:63:62:c0:40:79:9c:71:5f:4a:0c:
         92:3e:01:80:9c:9b:fe:d4:29:37:26:7c:1d:49:1f:64:71:80:
         07:8b:13:df:25:63:6b:1e:d0:50:1e:43:eb:b1:bf:17:c0:94:
         d0:45:58:ec:df:e4:c6:b9:60:70:90:e5:bd:e4:17:f5:04:ff:
         f0:1c:6d:e8:45:05:b4:cb:26:d6:a6:1a:82:6f:f1:f6:91:98:
         32:aa:26:a1:f5:5b:c0:4c:46:02:c9:b1:bc:79:b5:e6:9d:dd:
         02:7b:5b:0d:b6:2e:33:00:ab:d7:c1:c4:01:09:1d:63:4e:0a:
         57:df:e4:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZrz91eWgjTRoWcc5WQhAhzwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4NjllZTY2MTY0ZDNjYjQxZGJkMmRmNTQxNzgxN2MzMmY0
Y2VhMDUwHhcNMjUxMjA2MTQwMTA0WhcNMjUxMjA3MTQwMTA0WjAzMTEwLwYDVQQD
EyhiZmQ0YzExMGFmYTE1YzRmM2M3MjM5MTk4NTIxNzVmMmRjMGViOGQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuuYj6BPDYmiS7jT8ufzYk3xPnp3a
+OR93kDwdWszbQLRJKeJ0HVo15t7zA1p+zzV2fn0fk0fqEl/gd7K8FcJ38J+oh5/
oT32KIYbs+/9EAJVjHrmyWVnni5tH5WJrU3l+ddJfUoGkJ8HkA4uPBFT/x0sfymI
gpY7gQ3/oi9e0hhAYS89kUizSojKAPcvn69qnq6WSocVV2gyZxEI48WPG5qZWhgZ
4DsFjIUByM1ozx5eWisIF1wAWq3FSgd+KucBX020lykpTGxurqyom05ZxR+oMe8x
ayamJWMGM8xC2PwZa1WzvcThAYSh68b7Ny9NAyC96QDLsuiPwuawBe7K6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL/UwRCvoVxPPHI5GYUhdfLcDrjRMB8GA1UdIwQY
MBaAFLhp7mYWTTy0Hb0t9UF4F8MvTOoFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdUdudVpoWk5QTFFkdlMzMVFYZ1h3eTlNNmdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi8xZDVlZTEtYWNjZi00NzRmLWE1ODkt
Y2QxZmE0ODQ0MTFiLzEvdUdudVpoWk5QTFFkdlMzMVFYZ1h3eTlNNmdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi8xZDVlZTEtYWNjZi00NzRmLWE1ODktY2QxZmE0ODQ0MTFi
LzEvdUdudVpoWk5QTFFkdlMzMVFYZ1h3eTlNNmdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvgcuIXOZ
C+ZOqkd1WFQGsfK2ComrkjlxBaQo9Shq/zS0PB2zwJn3efCGcOj7RZpCcVu5WWYG
66IJoZeGGPgFTcz5JeBeWjws6JDeBoGMuowyu7ssGOnETS8WzojargvD86GmOZsn
pNEsjdKTeHCIrjp3TufGbszO4unNdX/ad2sWN+xdeIljYsBAeZxxX0oMkj4BgJyb
/tQpNyZ8HUkfZHGAB4sT3yVjax7QUB5D67G/F8CU0EVY7N/kxrlgcJDlveQX9QT/
8Bxt6EUFtMsm1qYagm/x9pGYMqomofVbwExGAsmxvHm15p3dAntbDbYuMwCr18HE
AQkdY04KV9/kng==
-----END CERTIFICATE-----
Generated at Sat Dec 6 20:01:59 2025 by rpki-client