This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/80aceb-50e2-40c0-a852-e298b41b6c81/1/UqFl3Dqvvixi4mX_EEMno-Z1-J8.mft
File:                     UqFl3Dqvvixi4mX_EEMno-Z1-J8.mft (raw, json)
Hash identifier:          oC4Or8VrpbPKOK1PWAjSYDrUcHaugO+OFI1wCOz5k7M=
Subject key identifier:   B2:21:9F:DD:0A:4E:56:0D:EE:B5:6B:95:F6:8A:AE:5D:02:12:C5:37
Authority key identifier: 52:A1:65:DC:3A:AF:BE:2C:62:E2:65:FF:10:43:27:A3:E6:75:F8:9F
Certificate issuer:       /CN=52a165dc3aafbe2c62e265ff104327a3e675f89f
Certificate serial:       019AF19B64D1BB6F64B72786FB185B24F120
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UqFl3Dqvvixi4mX_EEMno-Z1-J8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/80aceb-50e2-40c0-a852-e298b41b6c81/1/UqFl3Dqvvixi4mX_EEMno-Z1-J8.mft
Manifest number:          10C5
Signing time:             Sat 06 Dec 2025 03:01:24 +0000
Manifest this update:     Sat 06 Dec 2025 03:01:24 +0000
Manifest next update:     Sun 07 Dec 2025 03:01:24 +0000
Files and hashes:         1: 3r_ETONky6E0ht04dT8KlE05aWA.roa (hash: 5YqtEwAOo33bp6YyDMyktpU2orZ8oIMLNsWxsJ5Pw74=)
                          2: 6czTDwgbw_hG3rtX5EbRgdxWDCg.roa (hash: O6dY+2pnFwnKeeBFsLsl5BJ8l9rfKrvyLFI9YgpRmUc=)
                          3: QpAJ4vf1qXK5jaYvVWmL5jIF3Pw.roa (hash: cvXwgvPz8qfjcC7GpIKDqE7c3dlSczcrBaKQqZloC5A=)
                          4: UqFl3Dqvvixi4mX_EEMno-Z1-J8.crl (hash: rixgw1NNC5P35Fll9wEQ7XXWLbPr8OoM4vpVX+nXyzo=)
                          5: hXvKA5uXq9fHfGbQP3jsD3XVrgo.roa (hash: kSmYrg/l/aoXGp6g2rsqAnZqsn/T1RMfjN3KJX086Q0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/80aceb-50e2-40c0-a852-e298b41b6c81/1/UqFl3Dqvvixi4mX_EEMno-Z1-J8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/80aceb-50e2-40c0-a852-e298b41b6c81/1/UqFl3Dqvvixi4mX_EEMno-Z1-J8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UqFl3Dqvvixi4mX_EEMno-Z1-J8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:9b:64:d1:bb:6f:64:b7:27:86:fb:18:5b:24:f1:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52a165dc3aafbe2c62e265ff104327a3e675f89f
        Validity
            Not Before: Dec  6 03:01:24 2025 GMT
            Not After : Dec  7 03:01:24 2025 GMT
        Subject: CN=b2219fdd0a4e560deeb56b95f68aae5d0212c537
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:c9:11:19:43:da:78:81:ae:c3:22:78:8b:d2:
                    03:ff:f2:57:14:a0:57:bd:6c:4a:bc:c7:ae:4b:c9:
                    72:22:3a:f0:22:d7:ed:88:14:0b:ee:0d:9e:b8:de:
                    96:aa:94:26:10:3f:ab:c3:e4:13:82:73:a3:e7:87:
                    de:14:db:5c:7a:4c:df:0e:d6:40:41:c4:e6:6d:ad:
                    b4:a5:90:f9:6a:1a:ad:c3:60:24:8c:22:38:57:62:
                    5b:4a:f3:a6:5b:28:00:f5:bf:41:52:52:35:af:0d:
                    93:86:43:58:0b:38:43:53:b7:07:43:d5:f0:ef:05:
                    36:83:10:be:b2:4c:1b:3d:3b:85:d3:7a:2c:8d:c8:
                    41:b2:57:34:6e:4a:e5:b6:ad:d6:de:b9:74:7d:45:
                    4e:a9:32:5a:5e:b0:34:55:0b:ba:a6:90:90:64:d2:
                    50:d1:a5:ee:df:81:9f:cb:13:aa:70:f1:2a:ba:56:
                    c0:8a:bb:3a:ae:db:3d:3e:7a:ff:fe:d4:6d:95:03:
                    e4:79:61:79:ef:29:67:5c:27:2c:f3:1a:63:68:9c:
                    58:cd:cf:13:68:a6:ad:fc:2d:88:c4:7a:26:1a:24:
                    3d:b2:b2:1f:b2:c4:52:e2:d0:55:10:22:b7:6d:16:
                    13:4d:ae:8b:f3:b1:09:95:47:5d:64:d3:2e:62:b4:
                    17:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:21:9F:DD:0A:4E:56:0D:EE:B5:6B:95:F6:8A:AE:5D:02:12:C5:37
            X509v3 Authority Key Identifier:
                keyid:52:A1:65:DC:3A:AF:BE:2C:62:E2:65:FF:10:43:27:A3:E6:75:F8:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UqFl3Dqvvixi4mX_EEMno-Z1-J8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/80aceb-50e2-40c0-a852-e298b41b6c81/1/UqFl3Dqvvixi4mX_EEMno-Z1-J8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/80aceb-50e2-40c0-a852-e298b41b6c81/1/UqFl3Dqvvixi4mX_EEMno-Z1-J8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:c3:ed:c4:f6:87:c8:8a:6d:84:61:5b:58:39:89:2f:ae:35:
         2d:66:c1:41:91:e8:35:b8:06:cc:f1:46:37:84:7a:66:87:3b:
         8b:4b:77:db:a4:ce:10:ec:d8:06:29:30:20:75:46:62:e6:e8:
         d1:bf:2f:3e:b8:d8:86:b7:7e:ec:bd:27:93:2b:7d:6c:b5:63:
         9e:a9:98:40:0b:36:f4:6e:d8:af:01:10:ec:e5:37:53:1b:83:
         89:0b:d3:ea:4e:69:b0:e2:39:18:6e:fd:d0:97:ad:dc:8b:a6:
         dc:23:d1:9e:0e:aa:b3:d3:54:04:56:5f:42:df:7a:e1:9e:e5:
         ba:21:7d:a7:6b:9c:3f:aa:5b:f4:ee:ba:a3:cd:0f:06:a3:d5:
         dd:5e:9d:4c:63:de:45:3b:ae:d8:2e:97:6e:a3:c3:a2:84:6e:
         86:37:4a:da:95:46:b4:22:83:8f:e9:c3:75:6f:b6:a3:1a:02:
         9a:44:8a:26:a4:1b:6c:fa:ea:9c:56:f6:d3:12:86:e4:03:92:
         00:50:33:bc:0b:b8:02:4c:1c:c8:fe:8d:b6:5c:77:ce:7c:25:
         4b:48:58:94:00:29:13:b9:84:69:e3:b2:20:98:c5:3e:74:61:
         84:93:40:6e:7e:92:df:5e:35:f7:31:25:c0:34:31:0f:7e:f3:
         d0:68:25:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZrxm2TRu29ktyeG+xhbJPEgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyYTE2NWRjM2FhZmJlMmM2MmUyNjVmZjEwNDMyN2EzZTY3
NWY4OWYwHhcNMjUxMjA2MDMwMTI0WhcNMjUxMjA3MDMwMTI0WjAzMTEwLwYDVQQD
EyhiMjIxOWZkZDBhNGU1NjBkZWViNTZiOTVmNjhhYWU1ZDAyMTJjNTM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoskRGUPaeIGuwyJ4i9ID//JXFKBX
vWxKvMeuS8lyIjrwItftiBQL7g2euN6WqpQmED+rw+QTgnOj54feFNtcekzfDtZA
QcTmba20pZD5ahqtw2AkjCI4V2JbSvOmWygA9b9BUlI1rw2ThkNYCzhDU7cHQ9Xw
7wU2gxC+skwbPTuF03osjchBslc0bkrltq3W3rl0fUVOqTJaXrA0VQu6ppCQZNJQ
0aXu34GfyxOqcPEqulbAirs6rts9Pnr//tRtlQPkeWF57ylnXCcs8xpjaJxYzc8T
aKat/C2IxHomGiQ9srIfssRS4tBVECK3bRYTTa6L87EJlUddZNMuYrQXswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLIhn90KTlYN7rVrlfaKrl0CEsU3MB8GA1UdIwQY
MBaAFFKhZdw6r74sYuJl/xBDJ6PmdfifMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXFGbDNEcXZ2aXhpNG1YX0VFTW5vLVoxLUo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy84MGFjZWItNTBlMi00MGMwLWE4NTIt
ZTI5OGI0MWI2YzgxLzEvVXFGbDNEcXZ2aXhpNG1YX0VFTW5vLVoxLUo4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy84MGFjZWItNTBlMi00MGMwLWE4NTItZTI5OGI0MWI2Yzgx
LzEvVXFGbDNEcXZ2aXhpNG1YX0VFTW5vLVoxLUo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK8PtxPaH
yIpthGFbWDmJL641LWbBQZHoNbgGzPFGN4R6Zoc7i0t326TOEOzYBikwIHVGYubo
0b8vPrjYhrd+7L0nkyt9bLVjnqmYQAs29G7YrwEQ7OU3UxuDiQvT6k5psOI5GG79
0Jet3Ium3CPRng6qs9NUBFZfQt964Z7luiF9p2ucP6pb9O66o80PBqPV3V6dTGPe
RTuu2C6XbqPDooRuhjdK2pVGtCKDj+nDdW+2oxoCmkSKJqQbbPrqnFb20xKG5AOS
AFAzvAu4AkwcyP6Ntlx3znwlS0hYlAApE7mEaeOyIJjFPnRhhJNAbn6S31419zEl
wDQxD37z0Ggl1w==
-----END CERTIFICATE-----
Generated at Sat Dec 6 07:45:59 2025 by rpki-client