This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d16f59-7754-46a7-aa59-2a06ed104553/1/uAYz_nmmKWEJ_b9kddTCpl4tTxw.mft
File:                     uAYz_nmmKWEJ_b9kddTCpl4tTxw.mft (raw, json)
Hash identifier:          NubXoyCWfH8BOAv7HOYM8jIf0fu/owSTijJt4y9JptE=
Subject key identifier:   3D:29:85:55:A2:94:36:2A:DB:8B:12:14:73:C3:9C:E8:47:16:93:70
Authority key identifier: B8:06:33:FE:79:A6:29:61:09:FD:BF:64:75:D4:C2:A6:5E:2D:4F:1C
Certificate issuer:       /CN=b80633fe79a6296109fdbf6475d4c2a65e2d4f1c
Certificate serial:       019B59E3C21F1AC4A5D2B274F4730CC01FBF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uAYz_nmmKWEJ_b9kddTCpl4tTxw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/d16f59-7754-46a7-aa59-2a06ed104553/1/uAYz_nmmKWEJ_b9kddTCpl4tTxw.mft
Manifest number:          179A
Signing time:             Fri 26 Dec 2025 09:00:57 +0000
Manifest this update:     Fri 26 Dec 2025 09:00:57 +0000
Manifest next update:     Sat 27 Dec 2025 09:00:57 +0000
Files and hashes:         1: B7KapZ9zf220SPymCgFVRPK86qY.roa (hash: Mp2EdhJqFvvoCvWz4DJdAt20dP8wVfqkrw01SLTIFAo=)
                          2: uAYz_nmmKWEJ_b9kddTCpl4tTxw.crl (hash: rNzLFXtT+TVRt4DZcgfznMD2ZbhBi2EpIGxE6an9YOk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/d16f59-7754-46a7-aa59-2a06ed104553/1/uAYz_nmmKWEJ_b9kddTCpl4tTxw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/d16f59-7754-46a7-aa59-2a06ed104553/1/uAYz_nmmKWEJ_b9kddTCpl4tTxw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uAYz_nmmKWEJ_b9kddTCpl4tTxw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 27 Dec 2025 06:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:59:e3:c2:1f:1a:c4:a5:d2:b2:74:f4:73:0c:c0:1f:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b80633fe79a6296109fdbf6475d4c2a65e2d4f1c
        Validity
            Not Before: Dec 26 09:00:57 2025 GMT
            Not After : Dec 27 09:00:57 2025 GMT
        Subject: CN=3d298555a294362adb8b121473c39ce847169370
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:d7:21:95:b6:fe:5b:92:43:5e:e4:05:43:c5:
                    84:35:44:30:1f:ee:c7:d3:b8:d8:11:79:80:38:86:
                    9b:2b:7d:06:05:52:ad:e9:9d:d2:cd:74:eb:e9:92:
                    13:ba:21:71:69:17:ab:7b:c4:34:63:93:2c:dc:37:
                    c1:74:b2:c0:3c:b4:1b:0c:4c:32:47:ea:cb:13:51:
                    5d:3e:52:e4:c4:eb:03:47:f7:60:95:bc:bc:dd:45:
                    24:9b:fe:0c:25:b6:88:1a:14:87:34:b3:19:92:cb:
                    d7:2d:14:5e:d4:90:09:19:ca:7a:e8:0a:6e:d1:eb:
                    d8:17:b8:b8:12:33:24:65:b6:ec:2e:83:75:4c:72:
                    d4:2a:6b:8a:39:2b:4b:af:90:5c:4d:61:be:80:32:
                    8e:89:2b:28:99:8f:c9:5e:e0:b4:4b:4c:54:92:a2:
                    fd:ef:4a:0e:5b:e6:b1:cc:96:e0:b3:06:70:e1:16:
                    cc:62:31:c2:0b:dc:6f:28:da:d6:bd:5c:3e:b5:45:
                    7b:e2:5f:6a:44:69:95:9a:56:c7:bd:1a:38:f1:0d:
                    ae:e1:f5:58:33:cc:98:0e:78:e8:25:9b:61:45:33:
                    b7:9c:90:42:2c:5f:71:51:6e:09:b9:7e:3d:f9:87:
                    f5:bd:80:73:cf:1e:19:32:54:01:d3:1c:3a:31:f7:
                    9a:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:29:85:55:A2:94:36:2A:DB:8B:12:14:73:C3:9C:E8:47:16:93:70
            X509v3 Authority Key Identifier:
                keyid:B8:06:33:FE:79:A6:29:61:09:FD:BF:64:75:D4:C2:A6:5E:2D:4F:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAYz_nmmKWEJ_b9kddTCpl4tTxw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d16f59-7754-46a7-aa59-2a06ed104553/1/uAYz_nmmKWEJ_b9kddTCpl4tTxw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d16f59-7754-46a7-aa59-2a06ed104553/1/uAYz_nmmKWEJ_b9kddTCpl4tTxw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:1c:18:fe:a6:fa:ae:a9:a1:cd:f3:f4:c4:48:3d:89:89:60:
         df:8f:30:7a:c1:52:37:f5:5b:a2:d9:c0:74:0d:c5:9e:fb:a6:
         fc:72:24:0b:ff:18:14:4b:50:ac:96:3f:9a:ab:2b:7c:dc:3e:
         ee:9f:e5:65:e9:e4:0a:a7:8b:98:64:8f:72:a3:ee:d4:5b:c7:
         a1:98:5b:44:cb:18:11:a6:02:47:77:2e:3f:8e:0a:ae:45:53:
         0c:06:98:8a:39:4e:7b:6f:b2:ba:35:2e:4e:eb:17:6e:97:6d:
         b3:31:8b:91:d4:03:5d:05:86:0e:36:d1:9a:73:4f:94:d8:e9:
         e9:94:a4:a9:d8:e6:a4:fc:0d:78:87:b1:f0:19:0f:8f:dd:79:
         a7:ef:21:96:64:2b:7f:3d:97:3a:e9:35:db:c5:dd:41:2f:97:
         e4:49:43:7c:c3:2f:b5:b7:f1:32:1f:a2:04:3a:30:fa:3e:d7:
         cf:c7:11:bc:b3:d4:92:5c:37:da:8d:74:9a:d8:79:af:9f:52:
         2f:14:0f:b9:7c:18:1b:06:89:b0:d6:53:e9:7d:a6:61:4d:d9:
         99:70:36:9b:07:9d:56:37:6c:b3:93:e6:4a:51:d4:5e:10:5c:
         9b:82:f3:94:ef:b8:2a:bc:b6:71:44:ed:b5:ef:a8:10:d8:03:
         10:30:a0:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 26 14:17:23 2025 by rpki-client