This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/458078-426e-4449-a2a9-18882a2809b2/1/uWCxR0bFh1JErjtpQWLsbYxjJV4.mft
File:                     uWCxR0bFh1JErjtpQWLsbYxjJV4.mft (raw, json)
Hash identifier:          8xBCKo/2S+NhmUbrf8Jofuw0GyssK/3tfvvf+WfoxSk=
Subject key identifier:   2C:4D:D5:DC:B2:F5:61:EC:B4:F8:70:9B:C3:26:F3:28:DA:B7:D4:45
Authority key identifier: B9:60:B1:47:46:C5:87:52:44:AE:3B:69:41:62:EC:6D:8C:63:25:5E
Certificate issuer:       /CN=b960b14746c5875244ae3b694162ec6d8c63255e
Certificate serial:       019AF12DDFA93EA35EDDEDB0D458D255DD97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uWCxR0bFh1JErjtpQWLsbYxjJV4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/458078-426e-4449-a2a9-18882a2809b2/1/uWCxR0bFh1JErjtpQWLsbYxjJV4.mft
Manifest number:          1763
Signing time:             Sat 06 Dec 2025 01:01:46 +0000
Manifest this update:     Sat 06 Dec 2025 01:01:46 +0000
Manifest next update:     Sun 07 Dec 2025 01:01:46 +0000
Files and hashes:         1: DKOXi_z4MSZddtY43K_RvFdLWrA.roa (hash: YzkvxZCaiCcQ2o8QHaxCeoWLOl0t5AZ3W6UkEeHutAk=)
                          2: f4hIaIpBe2uj_P7WnwZdZXU2kNM.roa (hash: r9inBCbaMnpafZ/V8WyTAmWxF/0oxnkbtMD4hiM0OCk=)
                          3: fTKnFvJYm1yALDcPlDpSnYgxqpY.roa (hash: 0r+kS5xUC78h1sECkEiq4BPaUDs0csbTxmZyZ6FQa7I=)
                          4: uWCxR0bFh1JErjtpQWLsbYxjJV4.crl (hash: QCeXMKcUF9fvGb8bY3JLHgpVMpr4bwYc/hM9I9UKQhI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/458078-426e-4449-a2a9-18882a2809b2/1/uWCxR0bFh1JErjtpQWLsbYxjJV4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/458078-426e-4449-a2a9-18882a2809b2/1/uWCxR0bFh1JErjtpQWLsbYxjJV4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uWCxR0bFh1JErjtpQWLsbYxjJV4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 01:01:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:2d:df:a9:3e:a3:5e:dd:ed:b0:d4:58:d2:55:dd:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b960b14746c5875244ae3b694162ec6d8c63255e
        Validity
            Not Before: Dec  6 01:01:46 2025 GMT
            Not After : Dec  7 01:01:46 2025 GMT
        Subject: CN=2c4dd5dcb2f561ecb4f8709bc326f328dab7d445
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:14:aa:97:db:6e:18:aa:fc:7d:d2:c8:56:3e:
                    d8:2c:2a:eb:ee:ae:de:7e:b3:50:ff:ca:24:75:d5:
                    0a:5c:aa:ce:1b:ce:bf:c4:e9:74:91:8c:d1:3d:fa:
                    49:63:c7:48:17:c7:7c:3d:e1:cf:7d:c5:6c:05:40:
                    f6:66:c0:a2:51:e8:b2:7b:9c:28:62:08:d5:01:e8:
                    5a:4c:95:36:da:d0:c3:64:60:68:50:03:53:6b:1f:
                    87:d4:57:91:c6:ef:db:be:5a:24:f6:ef:1d:1e:d4:
                    09:9d:c6:c9:69:7f:a2:4f:74:3d:0a:29:e5:ff:3d:
                    3d:1b:b2:b0:14:b2:79:7f:24:a9:d0:f2:c9:0d:32:
                    0d:ab:08:b4:dd:d7:94:d8:d9:e4:a6:5a:ca:4c:72:
                    62:99:0b:78:01:26:6e:fd:6b:4d:fd:d9:f6:23:43:
                    f0:d7:c0:6f:43:00:00:d0:58:81:71:28:e6:83:0d:
                    80:98:58:ea:48:1a:b6:83:d2:05:2a:2b:15:06:eb:
                    22:f0:49:ea:d1:f8:4d:42:56:2a:d5:6c:ab:95:93:
                    80:33:67:b1:07:6f:a4:79:40:5b:46:2b:11:a3:33:
                    fa:f0:b9:09:fb:28:60:a9:da:93:6b:46:95:82:d4:
                    5b:94:25:08:86:f9:d3:7e:49:ca:7b:f7:2a:e7:20:
                    93:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:4D:D5:DC:B2:F5:61:EC:B4:F8:70:9B:C3:26:F3:28:DA:B7:D4:45
            X509v3 Authority Key Identifier:
                keyid:B9:60:B1:47:46:C5:87:52:44:AE:3B:69:41:62:EC:6D:8C:63:25:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uWCxR0bFh1JErjtpQWLsbYxjJV4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/458078-426e-4449-a2a9-18882a2809b2/1/uWCxR0bFh1JErjtpQWLsbYxjJV4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/458078-426e-4449-a2a9-18882a2809b2/1/uWCxR0bFh1JErjtpQWLsbYxjJV4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:09:e9:39:eb:4c:c0:21:36:fb:9f:09:ee:07:26:6c:10:ca:
         c2:74:0c:86:40:95:f8:ec:11:da:06:a2:5d:75:21:b3:62:fe:
         d5:01:95:be:5a:1f:d9:fd:61:bc:60:0e:7d:17:f9:53:1c:63:
         15:8a:f5:7e:ab:af:06:3d:8d:8c:21:23:7e:b0:1f:47:ee:a7:
         39:64:8a:05:86:15:9f:92:d0:38:97:f3:f5:16:00:26:9e:fd:
         1c:ee:a9:f5:a0:f2:66:d8:98:5b:a2:22:7e:05:c2:a9:fb:5e:
         7f:1a:37:87:8c:ff:cb:4d:87:82:a5:cb:9c:84:9f:a9:d2:b7:
         36:2e:86:3e:19:ff:9f:da:0a:54:12:30:f3:d6:61:b9:d3:b2:
         1c:1e:3a:de:5d:0b:c8:c5:ff:ac:51:3b:45:75:cb:e3:ce:cd:
         ce:4a:c7:83:33:04:2d:4d:bc:25:d1:5d:88:1b:cd:f3:38:90:
         d0:54:fe:d5:fe:6a:1f:94:01:09:99:75:1b:ae:40:89:8e:d6:
         6a:04:f2:3d:b5:19:87:18:bf:df:32:5e:45:85:17:1e:f0:ad:
         20:a7:bc:5f:aa:bd:c9:e1:80:09:ad:6a:1f:53:c1:68:d2:ed:
         15:36:27:2a:ef:74:9f:8f:89:1d:4d:dc:76:08:f9:1a:42:9d:
         d7:ce:fc:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 08:11:03 2025 by rpki-client