This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/47645f-3cd0-4b36-8c53-1850fff04425/1/U1hROBB5ZcOJ82e1Wr15K1Meuco.mft
File:                     U1hROBB5ZcOJ82e1Wr15K1Meuco.mft (raw, json)
Hash identifier:          S4WOBoejChmrm1/WyTe53vbGPHc7rnfMVERet2JXsdo=
Subject key identifier:   48:6A:F7:34:10:38:1C:B5:67:A1:11:E3:96:B9:57:7C:8C:DC:45:7E
Authority key identifier: 53:58:51:38:10:79:65:C3:89:F3:67:B5:5A:BD:79:2B:53:1E:B9:CA
Certificate issuer:       /CN=53585138107965c389f367b55abd792b531eb9ca
Certificate serial:       019B2F307E6747D5596EDA12EC8287A3D1E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U1hROBB5ZcOJ82e1Wr15K1Meuco.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/47645f-3cd0-4b36-8c53-1850fff04425/1/U1hROBB5ZcOJ82e1Wr15K1Meuco.mft
Manifest number:          086B
Signing time:             Thu 18 Dec 2025 02:01:05 +0000
Manifest this update:     Thu 18 Dec 2025 02:01:05 +0000
Manifest next update:     Fri 19 Dec 2025 02:01:05 +0000
Files and hashes:         1: 9bpfBQjgK3dw6rgeYBGUGC_KQdI.roa (hash: LLXaZp76DD3QRRqXxKgWM7+FKfHGkvTdFTOznhul5ME=)
                          2: U1hROBB5ZcOJ82e1Wr15K1Meuco.crl (hash: ysigNMqhcjC/ony9lGDye2vwwzoY9htH8tbo6IAXvys=)
                          3: trR0gOkOqLM9i33P9z5lDKAYVLA.roa (hash: yYJpYO73PDxpmBJL0VJQpTeNGi0zNN4BxZzYljkZajw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/47645f-3cd0-4b36-8c53-1850fff04425/1/U1hROBB5ZcOJ82e1Wr15K1Meuco.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/47645f-3cd0-4b36-8c53-1850fff04425/1/U1hROBB5ZcOJ82e1Wr15K1Meuco.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/U1hROBB5ZcOJ82e1Wr15K1Meuco.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 18 Dec 2025 19:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:2f:30:7e:67:47:d5:59:6e:da:12:ec:82:87:a3:d1:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53585138107965c389f367b55abd792b531eb9ca
        Validity
            Not Before: Dec 18 02:01:05 2025 GMT
            Not After : Dec 19 02:01:05 2025 GMT
        Subject: CN=486af73410381cb567a111e396b9577c8cdc457e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:cb:44:0f:48:fe:87:5f:e0:b4:90:3b:af:b3:
                    48:ad:31:b5:b7:02:4b:8b:b4:36:56:87:c5:91:83:
                    94:9f:46:1d:df:c4:76:0f:04:bb:a9:e0:ef:22:25:
                    1f:5f:b7:50:c6:51:f9:e6:d4:c6:d0:dc:6f:5b:b2:
                    b8:4a:9b:a3:92:f6:1e:4e:33:47:b5:59:d8:6f:33:
                    35:9b:87:3f:dd:1e:ed:f5:47:20:31:da:58:a4:6b:
                    0a:7c:46:15:e1:0a:cf:7e:1a:49:87:95:d4:83:59:
                    0e:c3:a7:fb:04:81:4d:17:99:56:cf:81:b3:50:31:
                    88:5f:70:0b:41:d5:ae:15:9f:c1:57:01:8f:79:2f:
                    b9:15:a5:79:01:67:cd:d5:dd:ee:4e:28:e3:47:36:
                    d0:47:07:d1:15:8e:5f:14:4c:83:b1:3f:ed:b1:c9:
                    14:44:a7:2d:0a:7f:14:7c:5e:d2:24:66:e9:21:32:
                    41:8f:77:e9:aa:4b:bf:d2:db:d3:42:63:98:5d:e8:
                    33:fd:9c:0a:2b:44:21:0f:66:99:d9:a9:3f:67:6e:
                    c5:f5:9f:4b:86:03:99:77:38:c1:f6:86:06:5d:11:
                    1c:82:68:4b:a6:57:e5:73:66:c8:0f:d2:40:e4:78:
                    93:a5:6a:ff:d1:72:bc:4d:58:72:1a:fa:52:65:8d:
                    7a:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:6A:F7:34:10:38:1C:B5:67:A1:11:E3:96:B9:57:7C:8C:DC:45:7E
            X509v3 Authority Key Identifier:
                keyid:53:58:51:38:10:79:65:C3:89:F3:67:B5:5A:BD:79:2B:53:1E:B9:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1hROBB5ZcOJ82e1Wr15K1Meuco.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/47645f-3cd0-4b36-8c53-1850fff04425/1/U1hROBB5ZcOJ82e1Wr15K1Meuco.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/47645f-3cd0-4b36-8c53-1850fff04425/1/U1hROBB5ZcOJ82e1Wr15K1Meuco.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:eb:2d:8a:8b:c2:3b:72:bd:5b:ea:35:81:90:89:f7:0b:9c:
         45:27:28:f4:ee:6e:7b:aa:c1:2b:56:41:e8:7a:7f:8a:a3:2f:
         47:26:fb:f5:cb:18:4b:18:a9:b8:ae:e3:cc:26:ea:7e:3b:c3:
         41:48:33:77:72:10:b5:e0:56:0f:46:5e:19:33:d0:0b:75:48:
         1f:01:e3:56:a8:0b:d2:59:93:80:32:7d:56:97:80:53:3e:5c:
         57:86:ec:10:a6:12:a9:97:72:d1:c0:06:76:86:92:1a:93:7d:
         1a:d8:12:b3:42:8d:f5:9d:41:56:6c:bd:fa:f6:1a:8b:a9:e9:
         9f:ea:c2:d9:df:79:da:ae:f8:83:53:ed:c6:90:38:3a:01:b8:
         85:12:fb:dd:89:e4:24:a9:46:e0:03:57:17:d3:e8:10:cb:f5:
         7e:f4:fe:3b:cd:a7:cb:51:f2:34:03:18:06:12:1d:4b:29:4f:
         62:5a:36:5d:30:4a:09:e1:9c:fc:a4:54:17:3d:b5:5a:04:9d:
         08:eb:b1:33:c8:6e:65:63:18:97:65:03:40:82:78:01:66:70:
         c0:12:a3:5a:f6:75:30:1a:11:de:ea:ae:cd:a5:19:09:af:3c:
         9d:fd:29:7b:a1:23:e9:9c:32:cf:d1:10:07:57:9e:2f:16:87:
         f2:d6:8a:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 04:41:14 2025 by rpki-client