This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/UqXJDKkoMTvHDSaDuw9k1jKyc6E.mft
File:                     UqXJDKkoMTvHDSaDuw9k1jKyc6E.mft (raw, json)
Hash identifier:          8BHn2eWv+R5MfcKlOyCySXQX34+y1RhEW49uGMZkEnY=
Subject key identifier:   A2:DD:29:C1:B9:6B:18:8F:51:4A:7B:53:99:FE:BA:32:9E:D2:74:E6
Authority key identifier: 52:A5:C9:0C:A9:28:31:3B:C7:0D:26:83:BB:0F:64:D6:32:B2:73:A1
Certificate issuer:       /CN=52a5c90ca928313bc70d2683bb0f64d632b273a1
Certificate serial:       019AF19AE59DC37108F76F868A327F6B23C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UqXJDKkoMTvHDSaDuw9k1jKyc6E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/UqXJDKkoMTvHDSaDuw9k1jKyc6E.mft
Manifest number:          176E
Signing time:             Sat 06 Dec 2025 03:00:51 +0000
Manifest this update:     Sat 06 Dec 2025 03:00:51 +0000
Manifest next update:     Sun 07 Dec 2025 03:00:51 +0000
Files and hashes:         1: Tfr-7D7j2lNNHKqg1wf4wAWyKLs.roa (hash: TDIng4XMMUv1oCQo74mZWI08OWTpEbwfzmj+Yz7Mcjs=)
                          2: UqXJDKkoMTvHDSaDuw9k1jKyc6E.crl (hash: JpiTBcGcTjcqLrANsBGmZXzVMdzQ+bg4+ivbfX76BWI=)
                          3: V30JXSTwCvMQbqRFqhemlITS5yI.roa (hash: MiIdeWVjQ/VodXANph+J9yQekOJ2MrUPBDNctMB5WZg=)
                          4: fvX9lVCmVkwxFN8HZnxPO7cbKOc.roa (hash: 0YH2vuu49gx5SRz7HwNFAksVufD7yu4WlEj1/zzH+14=)
                          5: g2Tr9uvyLm_vlwkGo6cp6yBSgPk.roa (hash: FXX+7zvwl+jhFJ/RqVEU3TMW14QBwo/9W7IU9URXq7s=)
                          6: g4mdoMQ7AxJUDrtz_UzKcq2BGGE.roa (hash: 4DUzhU0iuTSUQunYJIMnvSS7wKLl3zF9lIYPHqPkajo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/UqXJDKkoMTvHDSaDuw9k1jKyc6E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/UqXJDKkoMTvHDSaDuw9k1jKyc6E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UqXJDKkoMTvHDSaDuw9k1jKyc6E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 03:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:9a:e5:9d:c3:71:08:f7:6f:86:8a:32:7f:6b:23:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52a5c90ca928313bc70d2683bb0f64d632b273a1
        Validity
            Not Before: Dec  6 03:00:51 2025 GMT
            Not After : Dec  7 03:00:51 2025 GMT
        Subject: CN=a2dd29c1b96b188f514a7b5399feba329ed274e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:04:13:22:1d:e7:d4:99:e3:33:14:ed:09:d5:
                    f5:d3:3b:9f:5c:52:18:40:85:ee:75:6e:0f:5d:c2:
                    6d:a7:b3:90:a5:4d:44:49:8c:00:a6:4f:4a:ce:89:
                    44:c0:f0:f8:8c:bf:20:39:44:3c:ff:22:90:52:28:
                    d8:c8:a3:21:72:19:ad:c5:69:3f:0a:71:5e:3a:a6:
                    d5:e4:69:9b:9c:a4:35:53:1a:9a:45:d3:d8:55:1c:
                    6b:23:38:bc:be:73:62:de:40:50:2c:c9:e4:53:46:
                    67:f2:77:c7:7d:92:87:bd:63:f5:15:84:1c:a6:e3:
                    db:cf:be:08:58:cc:53:ed:31:0e:1c:c5:f4:75:e3:
                    a8:fb:78:0c:4b:11:38:4e:8c:68:43:58:68:8f:22:
                    cd:b1:06:da:35:f8:5e:7f:62:5f:61:11:81:30:79:
                    66:c7:4c:08:86:cf:2c:01:88:44:c0:f4:45:71:dd:
                    3a:7b:15:9e:35:e9:02:dd:df:63:fe:93:7c:5a:a2:
                    0e:33:d4:84:e4:6d:97:d9:8c:71:f5:bb:63:75:25:
                    cd:40:f4:6a:75:15:d8:02:1f:35:c6:52:84:79:5f:
                    91:a8:2f:be:46:5d:6f:b2:e6:c1:ad:a5:a2:40:a2:
                    23:00:7a:85:4d:3f:ed:a9:65:4b:56:a7:5f:f7:c3:
                    c4:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:DD:29:C1:B9:6B:18:8F:51:4A:7B:53:99:FE:BA:32:9E:D2:74:E6
            X509v3 Authority Key Identifier:
                keyid:52:A5:C9:0C:A9:28:31:3B:C7:0D:26:83:BB:0F:64:D6:32:B2:73:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UqXJDKkoMTvHDSaDuw9k1jKyc6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/UqXJDKkoMTvHDSaDuw9k1jKyc6E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/UqXJDKkoMTvHDSaDuw9k1jKyc6E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:a0:1e:46:69:54:06:79:f7:0b:16:43:a6:c0:51:08:58:66:
         e2:6d:b0:fa:11:89:71:69:ba:6a:e0:db:35:e4:0f:15:7e:dd:
         8b:01:30:5e:50:53:38:8f:57:02:14:61:c7:ac:7a:ab:8b:ed:
         43:de:3c:3d:49:66:8d:85:3c:d5:2f:65:08:12:6c:9d:35:96:
         32:7e:4d:11:ed:0b:68:7c:25:d6:fb:43:5e:20:c3:be:62:3d:
         ef:da:5e:89:0a:09:ba:d9:80:12:aa:44:f2:c9:63:48:e9:5e:
         6a:1f:66:01:b0:b7:e1:30:4a:bf:36:af:32:51:0c:25:ef:eb:
         d6:7c:c0:86:88:27:df:d2:c5:06:29:05:bb:64:94:9f:4c:1a:
         0d:7f:f8:a3:5c:b5:8d:aa:59:54:69:0c:82:15:95:4c:e1:f5:
         cc:5f:b5:87:47:a0:96:81:73:34:86:d7:78:ab:92:f2:71:d7:
         60:c4:e8:95:7a:c3:54:d6:9e:d5:8d:50:e1:73:54:93:3b:91:
         b9:19:55:72:ee:2c:64:dc:21:2e:5e:60:b5:c2:91:4c:2c:97:
         bd:9e:e7:31:bb:9f:54:78:29:02:38:e6:f5:a9:1a:19:fe:4a:
         9f:b4:88:ff:b4:4b:b5:b1:14:e2:aa:30:3f:85:cb:d4:47:ae:
         df:b2:5a:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 10:54:09 2025 by rpki-client