This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/bb4854-1c51-4bc7-8b24-9bc3e56f7af7/1/uZLzi1W_wTe7ntAm-gAz7vj6fVA.mft
File:                     uZLzi1W_wTe7ntAm-gAz7vj6fVA.mft (raw, json)
Hash identifier:          ZqrNTUSGhLaaFMAt41amH3nml7BDpnKKf03tqJTzX3U=
Subject key identifier:   FF:A3:FD:42:A3:BE:85:9D:63:59:8F:62:68:F3:49:D6:CC:8B:AC:9F
Authority key identifier: B9:92:F3:8B:55:BF:C1:37:BB:9E:D0:26:FA:00:33:EE:F8:FA:7D:50
Certificate issuer:       /CN=b992f38b55bfc137bb9ed026fa0033eef8fa7d50
Certificate serial:       019B2C661E8D03B11DEA45CD700104310A72
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uZLzi1W_wTe7ntAm-gAz7vj6fVA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/bb4854-1c51-4bc7-8b24-9bc3e56f7af7/1/uZLzi1W_wTe7ntAm-gAz7vj6fVA.mft
Manifest number:          0E66
Signing time:             Wed 17 Dec 2025 13:00:48 +0000
Manifest this update:     Wed 17 Dec 2025 13:00:48 +0000
Manifest next update:     Thu 18 Dec 2025 13:00:48 +0000
Files and hashes:         1: eRHIy3mv3BXwoLavV3BtZjDi-Hc.roa (hash: 6bAq9inqYNzefNG/gsv4hHUEJeNDRT5tgQx9TwbA0k4=)
                          2: uZLzi1W_wTe7ntAm-gAz7vj6fVA.crl (hash: gcBvBHVoB5hw76qoP9pOronUiiXF/gOsDTnIyerLvWM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/bb4854-1c51-4bc7-8b24-9bc3e56f7af7/1/uZLzi1W_wTe7ntAm-gAz7vj6fVA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/bb4854-1c51-4bc7-8b24-9bc3e56f7af7/1/uZLzi1W_wTe7ntAm-gAz7vj6fVA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uZLzi1W_wTe7ntAm-gAz7vj6fVA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 18 Dec 2025 10:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:2c:66:1e:8d:03:b1:1d:ea:45:cd:70:01:04:31:0a:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b992f38b55bfc137bb9ed026fa0033eef8fa7d50
        Validity
            Not Before: Dec 17 13:00:48 2025 GMT
            Not After : Dec 18 13:00:48 2025 GMT
        Subject: CN=ffa3fd42a3be859d63598f6268f349d6cc8bac9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:9d:5a:d0:36:70:22:59:c3:ed:b1:80:a0:04:
                    0c:b1:6c:fb:a2:38:38:3c:8c:18:c2:67:91:b3:ad:
                    cc:c4:9d:35:65:ed:76:26:63:02:68:c3:5e:66:9e:
                    33:97:35:45:e7:42:27:4a:87:11:56:13:b1:8e:95:
                    92:61:37:73:79:e3:82:6e:21:af:e0:64:cd:38:c8:
                    d0:c4:84:f3:d3:b6:77:cf:dd:ee:45:19:ea:07:58:
                    27:80:a2:19:48:04:e6:61:8d:24:66:8c:f0:16:0a:
                    de:54:a2:58:e4:59:a0:b0:48:95:f3:67:af:21:a4:
                    a7:7a:c0:32:f6:8d:3c:da:c9:6f:c2:b5:d6:6f:8f:
                    3b:58:76:1c:44:de:12:da:b1:e7:ba:93:af:76:86:
                    b6:87:af:96:3f:12:f0:69:a7:07:09:83:c8:6f:d8:
                    bd:51:f9:b0:d4:c2:b8:3a:4c:61:2a:eb:b8:66:77:
                    eb:3b:7a:e9:f7:3d:ef:f9:48:ce:7a:42:3b:29:21:
                    58:aa:0b:4d:6b:f2:e0:0b:8b:da:e1:31:d0:23:76:
                    c5:7e:bc:40:55:8b:19:54:de:df:80:0f:e8:b9:0d:
                    b9:2b:80:14:36:67:f5:68:ea:c8:b2:a5:3c:50:ba:
                    91:fb:66:42:2e:c3:34:9d:31:97:4e:a6:c1:7d:77:
                    4b:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:A3:FD:42:A3:BE:85:9D:63:59:8F:62:68:F3:49:D6:CC:8B:AC:9F
            X509v3 Authority Key Identifier:
                keyid:B9:92:F3:8B:55:BF:C1:37:BB:9E:D0:26:FA:00:33:EE:F8:FA:7D:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZLzi1W_wTe7ntAm-gAz7vj6fVA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/bb4854-1c51-4bc7-8b24-9bc3e56f7af7/1/uZLzi1W_wTe7ntAm-gAz7vj6fVA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/bb4854-1c51-4bc7-8b24-9bc3e56f7af7/1/uZLzi1W_wTe7ntAm-gAz7vj6fVA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:a3:6d:54:3b:a9:48:a5:88:50:8d:cc:a4:1f:fa:8c:9a:43:
         48:8c:c7:39:b9:ee:6e:c4:19:3a:9e:1d:88:9f:5a:2d:9c:99:
         45:ba:93:15:b7:26:d6:e7:eb:48:5e:32:0d:6f:9d:e0:2b:8e:
         50:14:0f:42:03:d8:97:b9:ae:11:9a:35:8b:e3:e2:62:1f:9f:
         69:04:e2:b7:3d:85:5d:fb:be:60:e1:55:cb:76:55:81:d0:12:
         cf:77:ff:67:ff:5b:c2:76:2b:94:73:eb:99:be:ae:f5:fe:fc:
         92:89:d9:7a:ef:1d:41:4a:cf:3a:86:12:e7:8c:b9:c5:1c:c6:
         5b:09:29:12:5c:96:a7:07:24:95:79:e5:84:0b:f2:b3:90:89:
         87:10:ef:19:b3:e7:6c:01:1a:3d:a7:72:9b:73:63:47:90:b7:
         5a:7c:a7:8d:2f:2a:59:68:46:0a:0b:a2:9e:9e:d0:55:18:49:
         c8:ed:6e:eb:43:41:9b:b4:71:1b:df:f9:a0:0b:e2:2f:76:1c:
         8b:a0:73:d4:37:b6:1a:82:dd:30:78:36:87:ef:df:41:a5:1d:
         c6:21:7f:a7:0e:25:c2:0b:ef:6a:ec:70:bc:a5:bc:f7:98:bf:
         3a:68:15:dd:0e:aa:3f:b3:51:44:4c:e3:28:06:3b:d2:df:9d:
         f3:fe:f4:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 17:55:30 2025 by rpki-client