This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/c77825-68a3-4b3e-bc90-523fd86a07c7/1/U3h815RuENiGRqx53lfMbsWeQTI.mft
File:                     U3h815RuENiGRqx53lfMbsWeQTI.mft (raw, json)
Hash identifier:          z2g6KV3S4gH2N6VRsGpzeAJ+hWamh5tk9dsNhOzkpFw=
Subject key identifier:   4D:5C:2D:D2:87:F8:E0:91:02:B9:C0:EB:F3:B0:74:8B:AB:68:E6:66
Authority key identifier: 53:78:7C:D7:94:6E:10:D8:86:46:AC:79:DE:57:CC:6E:C5:9E:41:32
Certificate issuer:       /CN=53787cd7946e10d88646ac79de57cc6ec59e4132
Certificate serial:       019AF49C4334EA9E69BE05A2147E66F2CABE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U3h815RuENiGRqx53lfMbsWeQTI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/c77825-68a3-4b3e-bc90-523fd86a07c7/1/U3h815RuENiGRqx53lfMbsWeQTI.mft
Manifest number:          1411
Signing time:             Sat 06 Dec 2025 17:01:12 +0000
Manifest this update:     Sat 06 Dec 2025 17:01:12 +0000
Manifest next update:     Sun 07 Dec 2025 17:01:12 +0000
Files and hashes:         1: Gb_tS4tDYUhq7ZFBBu6bXOHKxSQ.roa (hash: j+ql1A+cPykDsn/U+bRsvn2rorjyFgGlp+mF0Qt3tRQ=)
                          2: U3h815RuENiGRqx53lfMbsWeQTI.crl (hash: xcIlx9PQ+ANH7YUedjNz0f5A9LUgXD3P31587wuMss0=)
                          3: aDocXw9aAWTC2tonweXjSXZoNMs.roa (hash: M6NywDoKFY4uKrDQ3WCmTb7f59Ph9hBt6rzgbYZvGvU=)
                          4: dqRRF9NrCy7kpjHElym2fRaWWpg.roa (hash: yVbcvUrGd5qHEf8kKaXL1t+AGyhms8ILF9sbmeot86I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/c77825-68a3-4b3e-bc90-523fd86a07c7/1/U3h815RuENiGRqx53lfMbsWeQTI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/c77825-68a3-4b3e-bc90-523fd86a07c7/1/U3h815RuENiGRqx53lfMbsWeQTI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/U3h815RuENiGRqx53lfMbsWeQTI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 13:09:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f4:9c:43:34:ea:9e:69:be:05:a2:14:7e:66:f2:ca:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53787cd7946e10d88646ac79de57cc6ec59e4132
        Validity
            Not Before: Dec  6 17:01:12 2025 GMT
            Not After : Dec  7 17:01:12 2025 GMT
        Subject: CN=4d5c2dd287f8e09102b9c0ebf3b0748bab68e666
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:4b:a2:f5:a9:36:ce:db:51:a8:bb:cb:e1:a9:
                    05:96:4f:6e:c8:02:49:6c:03:02:ca:8e:c6:8e:8b:
                    22:be:4a:1f:9d:7b:ec:e4:a3:8a:0a:d9:82:30:74:
                    69:ad:48:f9:86:51:88:23:b1:b3:6f:8a:c7:2f:f0:
                    51:29:c5:76:10:1d:96:08:ae:bd:06:fb:d9:29:1b:
                    88:92:2f:7c:7c:03:bb:7a:d9:11:12:09:d5:8c:49:
                    2e:a2:35:3b:c3:b2:c2:2d:3a:45:4e:37:15:ea:2f:
                    69:f8:6c:3b:bc:e0:90:b9:6c:41:c0:de:e7:88:f5:
                    88:29:26:6e:a4:f8:ea:81:3a:b2:09:5d:9b:a8:bd:
                    fc:7c:6d:1c:b8:b4:db:9e:18:0f:bc:c5:ba:3d:16:
                    9d:63:23:7e:db:16:2f:51:fa:b8:a4:dc:58:ad:9e:
                    07:1c:57:87:90:3f:38:b9:3b:6b:18:60:31:4d:fa:
                    fe:3b:7d:0e:ba:7e:28:a2:2e:72:7d:ef:68:2d:37:
                    69:b8:41:f8:ef:cc:73:48:83:20:2e:04:c7:69:39:
                    aa:5d:f8:95:46:fd:bd:3f:04:a1:bc:27:b2:75:71:
                    e8:d3:e5:a3:fe:d0:38:b1:2e:dc:9a:00:69:59:90:
                    f5:ab:f1:92:fe:16:b1:fa:a0:ef:4c:2d:61:1f:40:
                    ff:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:5C:2D:D2:87:F8:E0:91:02:B9:C0:EB:F3:B0:74:8B:AB:68:E6:66
            X509v3 Authority Key Identifier:
                keyid:53:78:7C:D7:94:6E:10:D8:86:46:AC:79:DE:57:CC:6E:C5:9E:41:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U3h815RuENiGRqx53lfMbsWeQTI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/c77825-68a3-4b3e-bc90-523fd86a07c7/1/U3h815RuENiGRqx53lfMbsWeQTI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/c77825-68a3-4b3e-bc90-523fd86a07c7/1/U3h815RuENiGRqx53lfMbsWeQTI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:1d:26:a2:66:61:95:a3:17:df:42:db:85:60:96:23:79:a3:
         67:fd:f0:02:7c:1c:2a:6a:f5:61:15:e3:f7:96:fc:a4:05:3e:
         92:b5:04:2a:7d:4e:2b:97:88:47:6a:6c:9b:7e:1a:be:c5:f3:
         10:c0:14:07:55:15:e5:54:8e:d7:dd:6d:aa:3b:24:f7:0a:19:
         ea:4a:11:30:7a:f4:2a:6d:de:da:42:79:7b:5e:88:c9:f9:98:
         50:21:9b:58:e3:10:f9:d4:61:58:2f:a7:27:a6:07:75:01:eb:
         f9:f7:31:b2:21:b3:28:41:a5:04:cc:4b:6f:1c:6e:07:60:c8:
         10:d2:94:d7:1c:79:cc:4d:21:94:78:54:0a:d9:fb:40:71:da:
         64:b8:8e:21:9a:41:d8:c1:c9:b1:d1:bd:a5:0d:fe:4b:1c:7e:
         70:e1:e5:cb:8e:2f:06:e6:4a:77:e4:54:8f:84:7e:c1:19:2c:
         60:c3:02:1d:bc:4c:24:8d:72:42:60:ec:aa:f2:9e:fa:a1:b9:
         73:ec:4d:e5:cd:cc:37:d1:65:63:b3:28:e3:14:3c:0d:6d:70:
         aa:04:d2:20:cd:e1:de:e2:15:e9:dd:dd:40:91:7d:5b:b5:e4:
         b1:81:a9:c9:77:75:48:6f:d4:04:ea:a5:ae:f0:44:bd:51:48:
         5d:fa:fe:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:57:05 2025 by rpki-client