This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/b993ef-aaa7-400c-8db7-96d304c8db02/1/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.mft
File:                     uCB2l9C3wkGZ5t0SgrSbVs7wJE8.mft (raw, json)
Hash identifier:          0VP+Mxto2U7EhigChRM19ziFz5s2Ukj+9rZHNG92Da8=
Subject key identifier:   B2:D3:D6:E1:87:15:21:7B:2D:2A:FB:62:82:29:C1:46:EF:E0:B4:82
Authority key identifier: B8:20:76:97:D0:B7:C2:41:99:E6:DD:12:82:B4:9B:56:CE:F0:24:4F
Certificate issuer:       /CN=b8207697d0b7c24199e6dd1282b49b56cef0244f
Certificate serial:       019AF208BFE11B5AD44D10B153E76FDF0D4E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/b993ef-aaa7-400c-8db7-96d304c8db02/1/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.mft
Manifest number:          1084
Signing time:             Sat 06 Dec 2025 05:00:50 +0000
Manifest this update:     Sat 06 Dec 2025 05:00:50 +0000
Manifest next update:     Sun 07 Dec 2025 05:00:50 +0000
Files and hashes:         1: 007nvtWixZOugOaPC4TALuzRNpU.roa (hash: nb2ffToXl9QEO/9H4On/CDRfMFNOM0eyZbkaz2nxsO8=)
                          2: E6R94wdwkh-hvCHzRqeitSBB2O8.roa (hash: 1a2WMmmz+ouXlrOwjMj3BpLs/97+QuTmqE3PpY2RusU=)
                          3: gCO1ND9wcaBDHzN0352WZvu2OM8.roa (hash: vHCRaVMpRHFUNXZQ8voh/coatK6+6x9ToQmFjeDovrI=)
                          4: kpFxxzn5rxVSC7pUTip-34ePAH8.roa (hash: 2PbpsfTlZEwOXoeKMnWL66QR3WBkUd2nLs/ZQj9Tcq4=)
                          5: uCB2l9C3wkGZ5t0SgrSbVs7wJE8.crl (hash: IDp5kBZbnBB1/1JGTk0nOIWl/Lvewq30LUmYot2O4eM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/b993ef-aaa7-400c-8db7-96d304c8db02/1/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/b993ef-aaa7-400c-8db7-96d304c8db02/1/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:08:bf:e1:1b:5a:d4:4d:10:b1:53:e7:6f:df:0d:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8207697d0b7c24199e6dd1282b49b56cef0244f
        Validity
            Not Before: Dec  6 05:00:50 2025 GMT
            Not After : Dec  7 05:00:50 2025 GMT
        Subject: CN=b2d3d6e18715217b2d2afb628229c146efe0b482
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:00:41:db:78:1f:25:7a:01:2c:e3:0f:72:49:
                    a3:ea:f0:72:87:6f:5f:40:a7:1e:e4:1c:a5:66:d3:
                    3b:50:b8:c0:78:54:51:d6:77:b2:af:4c:01:d3:33:
                    eb:c9:ba:8f:e3:24:c6:58:82:49:a9:26:24:24:38:
                    aa:f8:62:a3:61:05:b0:c6:bc:aa:81:16:38:17:e5:
                    d7:ee:6e:bb:99:20:18:f8:bb:d1:84:01:9e:da:5f:
                    da:d9:92:9c:55:92:62:f5:9f:6e:d4:f0:94:94:a6:
                    f9:5d:05:36:1b:23:c8:f5:18:37:41:a8:49:80:5a:
                    eb:b0:8c:aa:3e:e2:43:0f:27:f2:1c:96:c8:00:c1:
                    83:89:fe:c2:e9:0a:a9:7b:a6:5d:04:e8:64:5d:ba:
                    e2:00:18:75:61:12:45:ef:80:98:a9:72:a3:05:8d:
                    ce:14:92:42:ba:c4:de:67:21:32:85:35:78:98:da:
                    2c:c2:90:c2:f7:86:97:bf:92:da:05:be:59:5c:e0:
                    6d:e7:a5:23:95:61:03:ab:11:bd:0e:d9:2a:9b:95:
                    09:91:66:e9:fe:5a:d3:cb:99:b4:c6:91:76:1c:0f:
                    c8:ea:04:01:8e:cb:5e:93:57:da:21:96:6c:db:4d:
                    5a:11:a7:8c:57:43:43:b0:f0:41:06:1d:4a:83:77:
                    01:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:D3:D6:E1:87:15:21:7B:2D:2A:FB:62:82:29:C1:46:EF:E0:B4:82
            X509v3 Authority Key Identifier:
                keyid:B8:20:76:97:D0:B7:C2:41:99:E6:DD:12:82:B4:9B:56:CE:F0:24:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/b993ef-aaa7-400c-8db7-96d304c8db02/1/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/b993ef-aaa7-400c-8db7-96d304c8db02/1/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:93:de:93:fa:3d:73:ad:a4:67:02:87:d6:67:1e:7b:a2:59:
         23:41:f5:be:64:4e:84:09:17:ee:d4:2c:fe:90:95:8a:fe:bd:
         c3:1b:d7:53:86:92:41:de:4a:b1:6a:53:e5:3f:6e:d7:be:75:
         1a:05:db:35:ac:18:c2:95:8c:38:4f:22:45:49:d6:42:d2:e3:
         88:da:d6:b8:d8:65:ff:c0:aa:7a:28:44:6d:89:77:e9:5e:f9:
         d8:21:bb:70:6d:f0:fc:64:29:99:96:c6:d1:4c:40:48:31:80:
         12:a2:e7:28:d9:2b:fc:0d:86:49:04:56:66:83:d7:2b:92:0a:
         fa:7e:c4:a7:a9:ca:bc:31:f6:fb:9f:f0:7a:69:e3:3b:25:80:
         86:9c:93:92:63:d6:0f:2c:13:13:a0:9d:ad:a0:88:0e:98:d1:
         91:1f:97:fb:b7:19:83:00:07:7a:d1:25:e8:2c:d6:68:96:8c:
         46:9b:4d:01:57:21:20:4b:29:dd:8b:88:d0:a4:1d:be:7a:3b:
         28:01:7e:77:8d:71:86:0e:dc:c8:4e:25:8c:27:99:1e:39:b9:
         c6:ec:a3:1d:f8:4b:03:69:d6:8e:3a:ff:0a:33:b6:26:c8:71:
         c0:58:2e:29:a2:9e:24:f6:75:20:65:11:4d:4f:32:0c:68:aa:
         5a:70:62:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 07:01:04 2025 by rpki-client