This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/uqp7TAHpKcOJI5gatRyXJ6H58H4.mft
File:                     uqp7TAHpKcOJI5gatRyXJ6H58H4.mft (raw, json)
Hash identifier:          TJWAn2zfivPs6hgHPKncBpiMR4M+7oA4DgjsN005M5o=
Subject key identifier:   16:4A:85:98:4D:55:F6:7F:4F:D0:EF:A5:50:9E:AE:DF:96:BB:E3:A6
Authority key identifier: BA:AA:7B:4C:01:E9:29:C3:89:23:98:1A:B5:1C:97:27:A1:F9:F0:7E
Certificate issuer:       /CN=baaa7b4c01e929c38923981ab51c9727a1f9f07e
Certificate serial:       019B07B59D7591E9BAB8F85C56CDE9E791BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uqp7TAHpKcOJI5gatRyXJ6H58H4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/uqp7TAHpKcOJI5gatRyXJ6H58H4.mft
Manifest number:          0FEA
Signing time:             Wed 10 Dec 2025 10:01:41 +0000
Manifest this update:     Wed 10 Dec 2025 10:01:41 +0000
Manifest next update:     Thu 11 Dec 2025 10:01:41 +0000
Files and hashes:         1: 7McO252I-2XmB-n1NnBeB1r5CWE.roa (hash: 24OjT44qRE3dHEPo0tp7gh6oq8ab7wOoKSNtPKZcaBc=)
                          2: Bec3FuivOBDOqgjzPfv4d13m2lM.roa (hash: owG94wKPWPllEhJt14j/A1tpXG3GUHNv4s01kzZtAnY=)
                          3: HrLnTFOPuXGJZKS7rlmaWMaB12U.roa (hash: jcuLWaH/rcaC8v9EK0xYWQuHABbf0+s0Obyth7vsFT0=)
                          4: JSR7L8D9xzMVHTQmxCxocupUPs8.roa (hash: sFWVvlE7717fYPfXWHO2rnVLWNcg9ik7geNB96fmazw=)
                          5: JnCqxhyvDDTFwlQwcYA45oqNsts.roa (hash: X2ViL15etoBaQT1ZtUkjo76AgO/tgVupvfM/YNVslSw=)
                          6: McMBr1hsxhXrROzf0sr3mjGRuDc.roa (hash: Fvo8oGCRkNBeNpNWcCOxOgEGI6vuaFHxjYVbWtFIey0=)
                          7: Sh525ZOQJJbH9YDhZrYpqPsIxfs.roa (hash: PGMXYMk9j2WkhNa5b+RRTezsJs7pRowlF2ax1MZi69A=)
                          8: cIDWJL9g_fa8H__ObMHRE-i2WwY.roa (hash: WZfhhX//aYpvYb55NKq8Rk6SJoX28Rmvm2m76EVMcvc=)
                          9: uqp7TAHpKcOJI5gatRyXJ6H58H4.crl (hash: msCGz2bJNUgopzX3/DKLhAubYazpdVsiL+CRe3Cr2rc=)
                          10: z7Zbfv6Q5DvvTSZX25hLRJ36zu8.roa (hash: uQ11jkD+2MzIqFlHgr0jlAF+ezlOM9wpcUkZ5cI8xPI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/uqp7TAHpKcOJI5gatRyXJ6H58H4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/uqp7TAHpKcOJI5gatRyXJ6H58H4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uqp7TAHpKcOJI5gatRyXJ6H58H4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 11 Dec 2025 10:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:07:b5:9d:75:91:e9:ba:b8:f8:5c:56:cd:e9:e7:91:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=baaa7b4c01e929c38923981ab51c9727a1f9f07e
        Validity
            Not Before: Dec 10 10:01:41 2025 GMT
            Not After : Dec 11 10:01:41 2025 GMT
        Subject: CN=164a85984d55f67f4fd0efa5509eaedf96bbe3a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:27:ce:bf:2c:1c:9b:32:6c:82:cc:27:35:ae:
                    f3:06:53:6a:c3:61:9b:c1:08:4a:e5:c3:1c:70:25:
                    d0:d4:6e:be:ca:7e:83:12:d9:24:83:c3:92:3c:65:
                    59:1a:f5:e6:80:0e:81:90:67:d1:05:e4:8c:2e:7f:
                    a1:b4:79:d2:44:b6:90:38:cf:fb:ed:4a:f2:7f:6c:
                    fe:be:cf:ab:d6:23:19:3e:31:66:bb:ac:b5:ae:f6:
                    60:22:1d:c9:05:fa:e7:fc:a7:53:ae:4e:8a:5d:b9:
                    c1:b5:82:5a:3d:0e:96:80:76:fe:1a:72:8a:94:09:
                    c9:f8:db:c9:e4:59:d8:7d:04:5e:2d:32:d0:33:af:
                    6b:a0:8a:17:48:8d:72:b8:b9:cd:94:dc:c1:4e:fe:
                    8a:87:5d:17:cd:5c:9e:2c:24:d1:ce:57:55:34:44:
                    59:c5:64:95:3e:f6:b8:bd:18:dd:a3:2b:7e:ff:6a:
                    40:38:cd:86:55:d1:fb:81:0b:64:e1:6d:4b:2c:12:
                    f3:7f:d9:40:92:6f:13:b6:57:43:d2:23:47:6a:9a:
                    39:fb:d6:b7:3c:7b:87:c3:15:5e:8c:22:a2:b9:f2:
                    e0:a3:14:2d:c4:4f:cb:26:17:cd:e3:4f:14:de:00:
                    61:f4:05:89:8d:98:b0:54:26:04:63:22:3f:50:e4:
                    02:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:4A:85:98:4D:55:F6:7F:4F:D0:EF:A5:50:9E:AE:DF:96:BB:E3:A6
            X509v3 Authority Key Identifier:
                keyid:BA:AA:7B:4C:01:E9:29:C3:89:23:98:1A:B5:1C:97:27:A1:F9:F0:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqp7TAHpKcOJI5gatRyXJ6H58H4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/uqp7TAHpKcOJI5gatRyXJ6H58H4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/uqp7TAHpKcOJI5gatRyXJ6H58H4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:c9:aa:aa:c8:82:b0:75:6a:3a:49:78:34:0a:1c:f2:e2:20:
         c2:f5:4a:27:13:ed:15:c4:0d:77:65:37:49:d2:c5:f8:52:27:
         99:8f:7d:fc:04:57:35:a8:58:47:aa:f2:69:75:8d:38:17:a4:
         64:d1:94:4c:6b:7a:61:a3:99:53:c5:19:2a:ed:e4:de:d8:55:
         db:09:d8:44:3a:74:9e:90:95:8e:cc:5a:42:a0:70:85:a0:96:
         a5:0b:a1:a1:d0:42:e0:a4:47:75:2a:71:11:7c:3d:19:a8:50:
         a8:1f:9d:b0:6f:45:33:20:71:d4:46:bb:72:78:66:c2:3c:13:
         4d:6f:fc:20:b0:1d:9d:6f:39:76:51:c8:81:86:4f:3e:23:2e:
         20:e5:8f:90:24:7f:ff:95:39:e3:a8:35:b3:ad:9d:f6:36:00:
         b7:96:8a:66:0c:e0:f0:59:ee:04:55:2d:0c:1c:28:73:47:52:
         b3:41:52:ed:5e:af:7d:46:63:2b:5f:a7:b2:4e:50:36:42:ab:
         0a:78:b8:7a:1b:51:b4:02:1d:21:47:c2:76:19:33:15:d5:a4:
         e0:51:7c:73:54:a5:11:71:97:bf:54:de:19:89:f7:57:57:16:
         28:1a:43:84:d6:28:db:23:4a:32:0e:5a:25:8a:76:82:83:ba:
         a5:a5:97:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 10 11:40:31 2025 by rpki-client