This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/d3ab28-7f47-41f3-b231-78844e101133/1/UfSwsEaesNBxmUzYI480vvAMb74.mft
File:                     UfSwsEaesNBxmUzYI480vvAMb74.mft (raw, json)
Hash identifier:          Ewb7gmYT1RkhsN9iuTOVX2et1KrFU2/1LgH958upk5I=
Subject key identifier:   BC:DE:2B:48:57:63:58:69:F4:E7:07:B3:35:F4:83:8B:37:BB:FF:E1
Authority key identifier: 51:F4:B0:B0:46:9E:B0:D0:71:99:4C:D8:23:8F:34:BE:F0:0C:6F:BE
Certificate issuer:       /CN=51f4b0b0469eb0d071994cd8238f34bef00c6fbe
Certificate serial:       019AF42E392CDEA1A2B5028742423286EA42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UfSwsEaesNBxmUzYI480vvAMb74.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/d3ab28-7f47-41f3-b231-78844e101133/1/UfSwsEaesNBxmUzYI480vvAMb74.mft
Manifest number:          06DF
Signing time:             Sat 06 Dec 2025 15:01:01 +0000
Manifest this update:     Sat 06 Dec 2025 15:01:01 +0000
Manifest next update:     Sun 07 Dec 2025 15:01:01 +0000
Files and hashes:         1: KHE55IVfhkxEyRPjetKWMXa2fOg.roa (hash: yUvUxbUmijIWF7cOOamnBQm49nexWbf1vGMkvSs2OSs=)
                          2: MUOaLZ3d_QsQnysUJySXLMsZzOU.roa (hash: 1qoGyuyStZqxcmt0N9pUTOJmPuRj96okDTjQXgbS+Y4=)
                          3: Rhy7zTj1EkXhElbIMETGgJpRjqs.roa (hash: ykkvIUtAn8lmI1ZdNTc/3RSxnBdbB/KGggwB/jZhXVs=)
                          4: UfSwsEaesNBxmUzYI480vvAMb74.crl (hash: BYWyZhoz0OELFws3m0A7ySx/NKF2Za8+Hy1ZJSTRXbk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/d3ab28-7f47-41f3-b231-78844e101133/1/UfSwsEaesNBxmUzYI480vvAMb74.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/d3ab28-7f47-41f3-b231-78844e101133/1/UfSwsEaesNBxmUzYI480vvAMb74.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UfSwsEaesNBxmUzYI480vvAMb74.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 13:09:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f4:2e:39:2c:de:a1:a2:b5:02:87:42:42:32:86:ea:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51f4b0b0469eb0d071994cd8238f34bef00c6fbe
        Validity
            Not Before: Dec  6 15:01:01 2025 GMT
            Not After : Dec  7 15:01:01 2025 GMT
        Subject: CN=bcde2b4857635869f4e707b335f4838b37bbffe1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:25:de:cf:52:a2:e0:31:e9:b4:f4:5c:90:2c:
                    56:eb:77:f5:86:59:db:c8:c1:32:38:fe:fa:ac:68:
                    ba:43:dd:d3:aa:c9:17:dc:69:42:60:fb:8a:81:45:
                    10:99:88:9b:37:83:1e:8f:e1:c7:e8:e9:9c:b9:d4:
                    b1:c8:43:5c:b6:10:60:43:83:59:8d:08:48:d4:25:
                    09:af:12:54:0e:4a:62:f6:32:fa:84:e7:76:d9:f9:
                    5b:8c:28:4e:8d:da:58:2e:af:de:fa:ee:57:41:24:
                    6e:24:01:d7:c4:c9:45:b0:42:1f:fd:65:69:d4:66:
                    78:06:01:33:34:fe:d8:b8:92:2c:f9:70:b5:ba:bc:
                    9f:91:f5:9c:4b:9a:f7:53:df:8d:25:81:b9:00:e9:
                    b5:95:3c:18:7c:da:28:92:ea:ff:4c:3f:33:ea:4f:
                    97:04:60:88:64:8f:88:f9:9a:38:c9:20:5a:27:95:
                    ee:39:d1:83:be:16:4f:25:c0:a8:4c:a6:0a:04:f5:
                    94:f6:4c:db:b9:38:66:50:35:0c:70:ad:94:06:49:
                    9e:10:28:f1:dd:b9:75:d9:92:29:60:8e:9c:05:8f:
                    ab:36:3f:7b:ab:2e:d0:32:2f:ee:94:4e:22:61:c8:
                    84:0f:ea:99:e7:6e:b3:55:29:76:94:6a:b1:e3:97:
                    ce:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:DE:2B:48:57:63:58:69:F4:E7:07:B3:35:F4:83:8B:37:BB:FF:E1
            X509v3 Authority Key Identifier:
                keyid:51:F4:B0:B0:46:9E:B0:D0:71:99:4C:D8:23:8F:34:BE:F0:0C:6F:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UfSwsEaesNBxmUzYI480vvAMb74.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/d3ab28-7f47-41f3-b231-78844e101133/1/UfSwsEaesNBxmUzYI480vvAMb74.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/d3ab28-7f47-41f3-b231-78844e101133/1/UfSwsEaesNBxmUzYI480vvAMb74.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:29:71:73:f7:f6:ea:05:c5:01:40:da:9a:ac:6e:17:0f:1d:
         d2:3d:e7:55:da:f2:0e:79:0c:71:a6:95:e6:9e:9b:04:18:30:
         f2:d0:34:96:87:11:33:9e:4a:9d:19:96:10:a5:2b:96:23:ae:
         f2:fa:02:6e:c6:e1:8e:db:a5:39:b1:be:a3:83:ac:f0:4e:79:
         46:b3:81:df:08:b6:e9:e2:1b:52:a4:0d:e2:53:8a:12:3e:b6:
         2e:66:cd:15:af:ae:07:80:59:39:ef:c6:0c:71:a9:b0:89:c2:
         90:4b:ee:51:3c:ae:55:5a:b9:e1:e9:44:05:81:b0:ba:e9:97:
         fe:c1:6f:24:32:9d:a2:7d:9b:51:5e:1b:d1:19:ae:ab:9f:2c:
         27:d3:2b:06:87:0c:2f:ac:51:b3:31:00:e6:e1:d0:97:2a:c0:
         78:09:05:e1:21:67:35:a4:9e:61:b4:41:24:78:8c:e3:f8:62:
         a7:46:5d:f4:4e:ff:0a:53:e9:17:b9:c2:75:d3:e6:77:50:05:
         0e:cb:26:47:77:39:22:3d:88:a3:41:af:b9:97:4d:47:57:37:
         33:b2:ae:3b:9b:9c:58:ff:1a:b4:16:a8:f6:37:dd:20:38:80:
         ae:03:b5:c1:2e:a6:cd:04:9d:3a:cf:0a:b8:b5:6f:fa:4d:2c:
         35:07:aa:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZr0Ljks3qGitQKHQkIyhupCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxZjRiMGIwNDY5ZWIwZDA3MTk5NGNkODIzOGYzNGJlZjAw
YzZmYmUwHhcNMjUxMjA2MTUwMTAxWhcNMjUxMjA3MTUwMTAxWjAzMTEwLwYDVQQD
EyhiY2RlMmI0ODU3NjM1ODY5ZjRlNzA3YjMzNWY0ODM4YjM3YmJmZmUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqiXez1Ki4DHptPRckCxW63f1hlnb
yMEyOP76rGi6Q93TqskX3GlCYPuKgUUQmYibN4Mej+HH6OmcudSxyENcthBgQ4NZ
jQhI1CUJrxJUDkpi9jL6hOd22flbjChOjdpYLq/e+u5XQSRuJAHXxMlFsEIf/WVp
1GZ4BgEzNP7YuJIs+XC1uryfkfWcS5r3U9+NJYG5AOm1lTwYfNookur/TD8z6k+X
BGCIZI+I+Zo4ySBaJ5XuOdGDvhZPJcCoTKYKBPWU9kzbuThmUDUMcK2UBkmeECjx
3bl12ZIpYI6cBY+rNj97qy7QMi/ulE4iYciED+qZ526zVSl2lGqx45fOWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLzeK0hXY1hp9OcHszX0g4s3u//hMB8GA1UdIwQY
MBaAFFH0sLBGnrDQcZlM2COPNL7wDG++MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWZTd3NFYWVzTkJ4bVV6WUk0ODB2dkFNYjc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9kM2FiMjgtN2Y0Ny00MWYzLWIyMzEt
Nzg4NDRlMTAxMTMzLzEvVWZTd3NFYWVzTkJ4bVV6WUk0ODB2dkFNYjc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi9kM2FiMjgtN2Y0Ny00MWYzLWIyMzEtNzg4NDRlMTAxMTMz
LzEvVWZTd3NFYWVzTkJ4bVV6WUk0ODB2dkFNYjc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjSlxc/f2
6gXFAUDamqxuFw8d0j3nVdryDnkMcaaV5p6bBBgw8tA0locRM55KnRmWEKUrliOu
8voCbsbhjtulObG+o4Os8E55RrOB3wi26eIbUqQN4lOKEj62LmbNFa+uB4BZOe/G
DHGpsInCkEvuUTyuVVq54elEBYGwuumX/sFvJDKdon2bUV4b0Rmuq58sJ9MrBocM
L6xRszEA5uHQlyrAeAkF4SFnNaSeYbRBJHiM4/hip0Zd9E7/ClPpF7nCddPmd1AF
DssmR3c5Ij2Io0GvuZdNR1c3M7KuO5ucWP8atBao9jfdIDiArgO1wS6mzQSdOs8K
uLVv+k0sNQeqmQ==
-----END CERTIFICATE-----
Generated at Sat Dec 6 19:56:10 2025 by rpki-client