This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/df8105-18ee-4172-b6bb-0dc33acc1dba/1/uEeFeR4HZG9cxYsV6GQ0y5wkFJ0.mft
File:                     uEeFeR4HZG9cxYsV6GQ0y5wkFJ0.mft (raw, json)
Hash identifier:          AhqZJpq3dpIsvmw2cknnJCiNHbWB6zu3vaZd6jSJWk4=
Subject key identifier:   BA:D5:C3:B7:60:16:04:7A:3A:E6:58:FC:C7:24:E3:3F:79:91:A6:36
Authority key identifier: B8:47:85:79:1E:07:64:6F:5C:C5:8B:15:E8:64:34:CB:9C:24:14:9D
Certificate issuer:       /CN=b84785791e07646f5cc58b15e86434cb9c24149d
Certificate serial:       019B0D121DBBDB2ECFD9FD562FEE0FD9965F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uEeFeR4HZG9cxYsV6GQ0y5wkFJ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/df8105-18ee-4172-b6bb-0dc33acc1dba/1/uEeFeR4HZG9cxYsV6GQ0y5wkFJ0.mft
Manifest number:          176F
Signing time:             Thu 11 Dec 2025 11:00:49 +0000
Manifest this update:     Thu 11 Dec 2025 11:00:49 +0000
Manifest next update:     Fri 12 Dec 2025 11:00:49 +0000
Files and hashes:         1: glEOdXhVW21eI1WzkfhB7HXgdWk.roa (hash: NB7punoyXRSMYamA4JNNL+eHLxMEHb1wLp8lwyoauNo=)
                          2: uEeFeR4HZG9cxYsV6GQ0y5wkFJ0.crl (hash: Hvjm3nUH4opJae4GakBdd3CVUUFF4kYxmg/Pi123Pmc=)
                          3: ybYQIpMfde41Tc94ckzGr4yZyvk.roa (hash: o6qsKgPuxOXvm5e0AfBzKvfmoP1y9YyfuSfaRj+weT4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/df8105-18ee-4172-b6bb-0dc33acc1dba/1/uEeFeR4HZG9cxYsV6GQ0y5wkFJ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/df8105-18ee-4172-b6bb-0dc33acc1dba/1/uEeFeR4HZG9cxYsV6GQ0y5wkFJ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uEeFeR4HZG9cxYsV6GQ0y5wkFJ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Dec 2025 11:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:0d:12:1d:bb:db:2e:cf:d9:fd:56:2f:ee:0f:d9:96:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b84785791e07646f5cc58b15e86434cb9c24149d
        Validity
            Not Before: Dec 11 11:00:49 2025 GMT
            Not After : Dec 12 11:00:49 2025 GMT
        Subject: CN=bad5c3b76016047a3ae658fcc724e33f7991a636
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:ef:e6:73:59:c9:58:ac:75:67:7b:c0:4a:e9:
                    52:0b:a7:43:be:a3:33:5b:5c:65:e8:29:ac:dd:f9:
                    55:0e:9e:d8:46:04:95:a5:e9:0f:e9:f8:76:66:e7:
                    07:fa:0a:7d:f2:76:36:1e:ab:db:0f:e2:22:ff:8a:
                    87:71:0d:47:9f:11:51:8f:9e:cc:79:9e:c8:44:26:
                    8e:f6:18:1c:c3:4c:ce:97:66:2b:39:79:86:44:36:
                    0f:d6:30:b4:dd:61:14:53:89:f1:2a:a7:84:eb:97:
                    ef:5e:a5:6e:38:b1:71:0f:12:1e:96:04:0c:0c:b4:
                    a5:47:8c:1d:d1:01:08:7e:8d:bb:77:07:df:92:e1:
                    d9:3b:31:f6:d8:f2:c7:17:9f:4a:9b:1f:5e:51:3e:
                    99:bb:be:e8:78:22:80:36:c1:47:f5:3e:9b:48:cc:
                    6e:71:1e:b9:84:7d:bb:62:83:e9:5f:84:02:ce:47:
                    81:4b:38:ee:35:85:b8:3d:e0:d0:2b:a5:cc:f9:d6:
                    6b:ac:63:11:07:42:d7:14:ad:ac:9e:75:ad:bb:55:
                    ed:d7:1c:a6:af:85:9e:7c:a8:5b:33:59:e9:73:08:
                    21:f0:5a:42:57:26:e1:4f:cd:32:e1:c3:a2:3b:b3:
                    8a:92:ad:43:eb:f2:b1:d5:62:4a:3e:26:03:d9:85:
                    ff:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:D5:C3:B7:60:16:04:7A:3A:E6:58:FC:C7:24:E3:3F:79:91:A6:36
            X509v3 Authority Key Identifier:
                keyid:B8:47:85:79:1E:07:64:6F:5C:C5:8B:15:E8:64:34:CB:9C:24:14:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uEeFeR4HZG9cxYsV6GQ0y5wkFJ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/df8105-18ee-4172-b6bb-0dc33acc1dba/1/uEeFeR4HZG9cxYsV6GQ0y5wkFJ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/df8105-18ee-4172-b6bb-0dc33acc1dba/1/uEeFeR4HZG9cxYsV6GQ0y5wkFJ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:33:a6:6f:7b:1f:d5:93:72:eb:e7:87:3c:84:5b:23:d7:64:
         83:c2:a7:13:f5:82:1e:98:1b:70:0f:3c:9a:76:36:ce:e7:ca:
         d4:e6:4f:3e:5f:5b:0f:4c:09:d4:de:9e:d1:10:dc:ec:8c:be:
         7c:f8:57:9f:36:5e:71:30:0c:8f:14:96:10:29:39:3a:43:97:
         ab:8b:e1:9f:af:c6:85:bd:de:f5:4f:71:76:e9:fe:ac:57:df:
         8f:92:84:68:a0:e6:4d:40:5f:29:40:24:7a:65:09:cc:36:ea:
         fc:dd:99:84:34:84:88:ca:44:c2:8c:f2:3d:bd:3b:9d:7d:45:
         c6:61:ab:88:3c:16:5a:6d:f9:61:59:e2:f7:c9:20:46:72:4e:
         3b:42:f2:41:2c:03:d8:2a:64:a1:9e:23:a0:37:81:3a:13:ba:
         94:f5:a7:a4:52:78:7b:52:a7:8b:10:e2:38:e9:ff:50:4d:c1:
         03:54:7f:59:0a:f0:b3:05:e5:76:37:45:79:58:39:bf:f5:35:
         83:40:4d:87:7a:b6:a0:ea:86:7d:9d:40:7a:19:74:1f:8f:8e:
         c7:e4:52:dc:9b:b7:d4:0f:bf:1a:7f:f7:4b:36:7f:c2:02:3d:
         36:aa:a6:73:bb:d6:7d:6f:ce:db:c6:95:51:d7:7d:34:e8:eb:
         06:55:06:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 11 19:22:23 2025 by rpki-client