This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/u5tW2NluvLX8-H3i7CtSwZTM-fk.mft
File:                     u5tW2NluvLX8-H3i7CtSwZTM-fk.mft (raw, json)
Hash identifier:          nmut7TlFF11ZlON3FVH1YLRwQvr8aoIV5M+DxkO++7U=
Subject key identifier:   DB:C1:D6:77:5F:1A:0B:FA:45:E3:4C:5A:7D:62:92:59:60:1F:6E:7D
Authority key identifier: BB:9B:56:D8:D9:6E:BC:B5:FC:F8:7D:E2:EC:2B:52:C1:94:CC:F9:F9
Certificate issuer:       /CN=bb9b56d8d96ebcb5fcf87de2ec2b52c194ccf9f9
Certificate serial:       019B101442337CBB7B81A5CBA6881AC26D37
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u5tW2NluvLX8-H3i7CtSwZTM-fk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/u5tW2NluvLX8-H3i7CtSwZTM-fk.mft
Manifest number:          1778
Signing time:             Fri 12 Dec 2025 01:02:01 +0000
Manifest this update:     Fri 12 Dec 2025 01:02:01 +0000
Manifest next update:     Sat 13 Dec 2025 01:02:01 +0000
Files and hashes:         1: 6XCQPd-gBaWI9uUfOl9Oxd_9HlY.roa (hash: rYTYbZJWQOZnH0RagwK8UwoxwTXRP+nIxOLYvS6LJxg=)
                          2: Sz4cgZk58K5KT8c6QEb0Ql3mAiY.roa (hash: XD1k9LSsxBfImI/ORmlcMWAQZfP4H0hZi+Dr1QtMaAI=)
                          3: bvhxhmAqyDusWG8L2BubxFp6Byg.roa (hash: SHS3jK9UFMV78c0xUf6ZLaaMiJ9/VJhwk1oZbalxq7g=)
                          4: o9ILjFHyqHFBLmfa8iktUbEEHgc.roa (hash: AnlJF340Arx0CyHCuh9//rcp5JhktymE+WZs85nUSA4=)
                          5: u5tW2NluvLX8-H3i7CtSwZTM-fk.crl (hash: 6PvdiMwbHErOjx2ZyU2YQ3pe7mAulUitHf6+2o7GnJI=)
                          6: ymgfqUNrxCFxxzWRZDTsTHDQ5qI.roa (hash: PUzNIv/ioXbZZoJUJezcZ8P2QSpd1W55TTBz10BXkDQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/u5tW2NluvLX8-H3i7CtSwZTM-fk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/u5tW2NluvLX8-H3i7CtSwZTM-fk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/u5tW2NluvLX8-H3i7CtSwZTM-fk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Dec 2025 23:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:10:14:42:33:7c:bb:7b:81:a5:cb:a6:88:1a:c2:6d:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb9b56d8d96ebcb5fcf87de2ec2b52c194ccf9f9
        Validity
            Not Before: Dec 12 01:02:01 2025 GMT
            Not After : Dec 13 01:02:01 2025 GMT
        Subject: CN=dbc1d6775f1a0bfa45e34c5a7d629259601f6e7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:cf:72:38:79:5a:b0:3a:a7:f7:20:a5:04:a9:
                    74:f0:c3:d5:37:fc:07:1e:6f:34:40:bc:eb:0d:8f:
                    b2:d7:33:97:fe:68:78:ee:63:02:ff:3c:66:bf:17:
                    2a:6d:5e:3e:a0:f0:d7:62:65:6e:d6:f7:a2:9e:e4:
                    2f:6c:63:8c:ac:f1:be:80:8e:e6:d9:cc:18:0e:fd:
                    d3:52:67:14:e6:28:f3:2e:a6:f9:3d:3e:e6:3b:38:
                    71:f8:50:83:32:a2:fd:38:9c:db:cd:72:5b:22:d9:
                    f4:92:e8:98:a3:ee:7a:18:cc:f6:97:44:94:78:0a:
                    87:e4:90:8b:5c:fe:e8:c8:5e:f7:a6:32:04:bb:d2:
                    84:2c:02:0d:5a:ba:a2:54:50:62:6a:08:f1:70:12:
                    be:fd:8f:82:90:bc:83:28:9e:50:c1:06:d3:25:ec:
                    be:17:a0:37:08:16:5b:be:31:04:2a:6f:49:33:fb:
                    9c:63:36:8c:3f:76:12:bc:85:19:92:57:9e:bf:b4:
                    9b:7b:26:0c:12:49:9d:26:b3:2f:ab:de:48:ef:d3:
                    13:0d:1e:0c:e9:d5:47:8d:de:ed:5a:9d:26:2a:98:
                    72:30:f0:d0:ad:65:b2:a7:ae:68:8d:38:43:a6:94:
                    d4:95:81:89:22:86:46:9a:a2:44:7f:16:d2:65:38:
                    35:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:C1:D6:77:5F:1A:0B:FA:45:E3:4C:5A:7D:62:92:59:60:1F:6E:7D
            X509v3 Authority Key Identifier:
                keyid:BB:9B:56:D8:D9:6E:BC:B5:FC:F8:7D:E2:EC:2B:52:C1:94:CC:F9:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u5tW2NluvLX8-H3i7CtSwZTM-fk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/u5tW2NluvLX8-H3i7CtSwZTM-fk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/u5tW2NluvLX8-H3i7CtSwZTM-fk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:88:25:35:a8:6e:39:e8:e2:e2:68:00:84:ae:bb:c4:a6:d3:
         c9:57:38:ff:3a:af:62:23:ca:53:c2:aa:54:9a:3a:68:de:28:
         60:4c:34:7d:35:01:17:bb:1f:6f:e0:da:b3:32:ef:dc:32:c2:
         85:62:82:02:2c:36:aa:32:26:b3:4b:c5:0b:97:31:18:e4:29:
         d8:90:57:61:db:bc:d1:07:16:37:9d:55:15:ee:17:c5:60:3a:
         f0:1d:17:4a:59:59:20:b2:c7:bb:04:c1:4e:b8:7f:69:2f:fe:
         70:db:fe:fa:b1:36:8c:35:22:a8:21:65:a2:b6:2b:fd:2e:50:
         32:a8:3f:07:9c:5d:8c:a3:2e:af:43:1c:2b:17:d7:9d:96:15:
         03:dd:d8:da:bc:5f:6a:3a:c7:9b:42:a9:d6:ad:34:0d:0e:fc:
         bc:20:e8:8f:cd:6d:6c:cc:84:34:1d:95:40:5e:7e:f6:a9:a5:
         3c:7d:75:f3:c7:0d:ca:8c:5c:c9:b4:bb:46:79:a6:29:e7:d9:
         2c:10:76:9b:83:33:9d:d7:6d:fb:aa:75:32:b8:8b:b2:af:f7:
         3d:fe:2e:0c:21:80:b6:c7:23:b2:5d:a0:85:60:e2:82:fd:5f:
         5c:7d:90:74:47:ed:c0:14:37:3b:46:77:c6:d4:2b:5e:bf:fa:
         1d:e8:a3:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 12 06:37:38 2025 by rpki-client