This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.mft
File:                     uRuRUEmDCRUGoalERXpFWLlNq38.mft (raw, json)
Hash identifier:          x9sEwh4oe6up+YnVb103ycAMedEwVSyMRLZFveBaK3s=
Subject key identifier:   11:F7:42:40:46:BE:C6:E0:A8:0C:05:39:FC:4B:8B:CC:8F:F7:54:D2
Authority key identifier: B9:1B:91:50:49:83:09:15:06:A1:A9:44:45:7A:45:58:B9:4D:AB:7F
Certificate issuer:       /CN=b91b91504983091506a1a944457a4558b94dab7f
Certificate serial:       019B06A288F68C79DD46480AF70AD7B3EB85
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.mft
Manifest number:          179B
Signing time:             Wed 10 Dec 2025 05:01:13 +0000
Manifest this update:     Wed 10 Dec 2025 05:01:13 +0000
Manifest next update:     Thu 11 Dec 2025 05:01:13 +0000
Files and hashes:         1: 3cHkY6M3wghqy0E4fRU4kWGrFkQ.roa (hash: PisxdaF0q8E/ZaKxH7iqkdJWp2eWRH5HsNlfuhmL4YA=)
                          2: 7XN9wyggBJAAN_phHgYk5ZELjD4.roa (hash: 1wlvTE3rEqXXANBSrqvKUfV7fo/KmcUcs6Xsp62Q0YQ=)
                          3: CkF_shnLM2M31f9NtC6ofpAehWk.roa (hash: 9XHscVm5GJVGw7mr6oC1JuCI9DQ/dY6py+7xzxUKvgw=)
                          4: DB8vpbqfjA4YjCb-2FzU7zAiwmw.roa (hash: I/8Gokk6XG3QeOAJYtW+jvmWnIyDjJaFgsMUIbtc+Tw=)
                          5: FFJ257cuWQvQOnyedneEzTkSEbg.roa (hash: WRIXzHulc7/3HRlvOUiBPW1I+RRv7EFQWc42kqGWgNE=)
                          6: RwtCVfFtaPV9RdeIV0kETaXiDzU.roa (hash: qGOs1nAXRnai3SqF63Pp3mOz35yOks9UR3jXK1Ksk+Y=)
                          7: V-ySkVo6AJD2k7bi0FwLmTw722g.roa (hash: ZQrxU4+RIDKWDuYxdvlV6VUP5fCT7nrPCzOEdrO784k=)
                          8: Zy6Mn7YK1WfqH_7jhbTrGEFIJlc.roa (hash: MCR5uR19iNBi1hjIv4S5IsAnt3QNxZlCjl9ClZPKKuo=)
                          9: oicr-SH4uj1bEvnrrwUj7ri66GU.roa (hash: 1OP0Bnk8WtUk8p0pkwFceXgNGqSThNnA6BUw75ZT3Jk=)
                          10: uRuRUEmDCRUGoalERXpFWLlNq38.crl (hash: 5dqaeE1sbaOqK8pD4BtFF+Ac2sNdA8w46xe3H+U58WA=)
                          11: ytRifUfzPmLAaJXJ2__CJPys9bo.roa (hash: 0HrxV+TBxPYNRPY94lk9XCsut+8XflFKvCHLDKEzYNA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 11 Dec 2025 05:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:06:a2:88:f6:8c:79:dd:46:48:0a:f7:0a:d7:b3:eb:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b91b91504983091506a1a944457a4558b94dab7f
        Validity
            Not Before: Dec 10 05:01:13 2025 GMT
            Not After : Dec 11 05:01:13 2025 GMT
        Subject: CN=11f7424046bec6e0a80c0539fc4b8bcc8ff754d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e2:4e:35:d7:ce:a8:e4:2c:17:12:a9:3b:25:
                    af:60:7c:da:3d:74:c1:80:6b:98:90:61:7b:e3:c6:
                    6c:3c:0f:41:70:3b:93:54:4d:e4:4b:f0:0f:e3:6a:
                    c0:d3:09:0e:6d:fd:84:a1:c4:bd:ef:aa:77:15:bd:
                    ef:b6:fb:82:a7:60:55:ec:2d:97:b6:42:da:97:46:
                    d1:3c:73:e9:7e:3b:c3:63:6b:b6:e8:cf:6c:6a:bb:
                    67:2a:4d:ef:70:9b:d3:eb:de:49:0e:9e:a6:ca:95:
                    f0:3a:f6:74:b7:f7:95:9b:52:4b:b2:7a:4e:3a:2d:
                    48:51:c1:51:20:ce:61:9e:ea:0f:a1:af:13:80:c1:
                    ed:15:cc:6d:6e:11:43:76:81:9f:26:39:93:c9:8a:
                    c9:12:ba:24:e2:a8:f8:fd:b4:d0:77:d9:06:fd:6a:
                    02:08:a0:a7:1b:00:4c:0a:ec:8c:f0:a2:e7:8f:bb:
                    eb:22:dd:a5:77:ea:37:2e:8d:67:bf:a2:f8:c0:21:
                    10:42:d5:4d:d9:d9:f7:b3:e4:a7:cd:76:a1:29:ae:
                    1a:2b:97:52:c3:47:8b:b3:d1:67:bf:d9:5c:3f:51:
                    f1:84:31:8f:d8:96:fb:9a:4b:00:87:4a:b3:bc:90:
                    d2:0a:4c:01:89:58:35:3c:50:d3:b5:0d:4b:86:33:
                    65:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:F7:42:40:46:BE:C6:E0:A8:0C:05:39:FC:4B:8B:CC:8F:F7:54:D2
            X509v3 Authority Key Identifier:
                keyid:B9:1B:91:50:49:83:09:15:06:A1:A9:44:45:7A:45:58:B9:4D:AB:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:6f:68:76:30:0c:43:f6:2d:8d:77:e4:4d:7f:32:d9:95:fe:
         c0:99:1b:c3:32:05:ba:b9:3a:61:af:fe:26:21:d8:5d:6a:dd:
         8c:a8:74:82:44:f8:f0:fb:d3:be:21:27:99:97:bd:57:bd:c1:
         82:64:ea:d1:76:d3:46:5c:a6:46:ea:84:6b:56:93:8c:1a:21:
         32:ef:ac:1d:bd:8f:10:a9:10:19:4b:45:c4:25:3d:ca:2e:3e:
         eb:26:66:2f:2e:03:1e:ed:0b:35:19:c8:5e:b5:36:bc:d8:26:
         81:6c:20:9a:1f:9d:69:2c:21:b0:83:cb:8e:8c:05:47:89:84:
         c2:94:fb:5f:b0:e5:f4:a3:6a:2a:15:66:3b:e7:68:5f:8b:99:
         7d:89:0b:dd:dd:ac:c4:bc:89:a6:f0:60:94:10:a4:30:5b:ff:
         55:b0:cb:79:91:0e:3b:11:af:1a:53:91:75:5f:a6:09:f3:9f:
         66:60:64:ef:a0:0a:d2:f4:53:95:e9:f8:13:12:be:1b:49:1e:
         17:f3:e2:31:61:9e:3d:76:74:1c:09:b7:41:e2:7c:a4:e9:b2:
         bc:da:c4:c9:29:ab:91:19:96:54:b5:ad:40:83:19:80:da:16:
         b2:ca:54:1a:5e:d7:c5:44:b8:bf:b4:8b:1d:f9:65:db:24:1b:
         93:d2:47:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 10 13:35:04 2025 by rpki-client