This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.mft
File:                     u0cxiEug9XP6YYtuetUDoSyWWvM.mft (raw, json)
Hash identifier:          dQs0MwjACmk7ykOCrqVOIrsY68EDoq5mBwTZvnTeRJ0=
Subject key identifier:   3C:0F:10:37:6E:6C:F1:36:AF:7C:52:3F:51:3F:16:AF:81:D0:9A:C4
Authority key identifier: BB:47:31:88:4B:A0:F5:73:FA:61:8B:6E:7A:D5:03:A1:2C:96:5A:F3
Certificate issuer:       /CN=bb4731884ba0f573fa618b6e7ad503a12c965af3
Certificate serial:       019AF5781D61FAC4344BEA3381B7F759F888
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u0cxiEug9XP6YYtuetUDoSyWWvM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.mft
Manifest number:          0EF2
Signing time:             Sat 06 Dec 2025 21:01:20 +0000
Manifest this update:     Sat 06 Dec 2025 21:01:20 +0000
Manifest next update:     Sun 07 Dec 2025 21:01:20 +0000
Files and hashes:         1: J2J2124S8bl0D8F_rprl_YIDy9g.roa (hash: EwSuszD8kbzr8hDPn6y6v2FnpMpKvYRTbCp+B6KwMRQ=)
                          2: TgyKwJa2KkbDi0Hpkc1sfLVSKbY.roa (hash: PBkxa8WbS+Zs7wyVcsYo6bQBjySTnxQqvA/GU7hJEfs=)
                          3: u0cxiEug9XP6YYtuetUDoSyWWvM.crl (hash: PFKxmTUUuL7/Y+Td3tWSdo+V70uHUrbgYNW6GmriYxI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/u0cxiEug9XP6YYtuetUDoSyWWvM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f5:78:1d:61:fa:c4:34:4b:ea:33:81:b7:f7:59:f8:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb4731884ba0f573fa618b6e7ad503a12c965af3
        Validity
            Not Before: Dec  6 21:01:20 2025 GMT
            Not After : Dec  7 21:01:20 2025 GMT
        Subject: CN=3c0f10376e6cf136af7c523f513f16af81d09ac4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:88:1b:1e:53:8e:e4:ea:b1:a8:64:a7:e8:ac:
                    65:bc:5a:8f:7c:5c:c6:3f:6c:93:80:51:69:b1:5f:
                    a3:bc:34:43:47:2e:96:e2:a3:1a:73:ad:ae:b2:0f:
                    65:64:34:41:06:74:ed:d3:32:9c:48:29:04:d5:38:
                    ec:9b:43:20:7d:3c:e3:af:0f:e0:20:85:fe:47:41:
                    af:b9:9d:12:ca:20:3e:15:40:88:9f:5d:c5:fc:30:
                    94:7b:85:d3:51:eb:95:91:f0:30:0e:95:01:26:1e:
                    bb:fb:47:f4:54:a2:98:b1:17:1b:98:07:46:0d:e8:
                    8b:17:b7:b1:25:1f:48:cf:6a:fb:25:c7:34:46:2b:
                    8e:6f:84:0b:b1:90:6c:f0:9d:67:85:17:ee:1b:09:
                    5c:4b:82:00:af:e5:6f:8e:ff:7a:a5:b0:b2:e2:00:
                    fa:6a:33:60:0e:da:41:4a:d7:48:0c:07:69:8a:31:
                    63:2d:1c:f0:03:e8:17:62:b2:95:86:bb:83:45:aa:
                    8b:e7:c3:13:48:8c:b5:c4:e0:1f:76:91:88:60:5f:
                    19:a6:3d:1b:b1:ba:58:4e:f6:97:1a:8e:ee:2f:02:
                    bd:8a:1a:e7:37:57:82:8b:33:3b:a7:73:a2:32:bb:
                    ac:9f:26:cb:e8:14:35:fd:cb:1e:2d:f9:11:6f:9c:
                    35:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:0F:10:37:6E:6C:F1:36:AF:7C:52:3F:51:3F:16:AF:81:D0:9A:C4
            X509v3 Authority Key Identifier:
                keyid:BB:47:31:88:4B:A0:F5:73:FA:61:8B:6E:7A:D5:03:A1:2C:96:5A:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u0cxiEug9XP6YYtuetUDoSyWWvM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:f8:65:70:89:56:30:c0:75:32:dc:79:b2:c9:b1:fa:e9:7e:
         45:f1:ae:4d:c9:c5:71:bc:93:e8:ff:b2:89:56:ef:57:46:fe:
         38:9e:78:98:bf:0d:0c:6d:4e:bf:27:b8:88:12:9d:3d:f6:c7:
         15:b5:6b:7f:77:26:15:7d:74:72:9a:17:0b:a1:2f:91:0e:25:
         51:34:88:8b:80:33:24:1b:d6:56:19:8e:ad:2b:38:f7:ee:78:
         c6:f5:55:e4:43:30:81:28:0b:5e:6c:06:1b:5f:6f:60:ac:87:
         50:1c:2d:42:6e:b6:c0:fa:7f:b2:7a:0a:54:09:c3:12:01:1a:
         5e:1a:93:92:95:5a:c2:7e:fe:89:c3:85:59:bc:3c:0e:0d:f0:
         dc:db:9c:ce:f1:81:05:ec:17:6c:f1:9a:04:99:55:13:b7:4f:
         79:68:67:9f:77:28:08:27:8f:6b:76:fc:eb:2e:14:cb:d9:4f:
         9f:78:42:d4:b1:37:30:2e:9c:94:fd:97:5d:09:90:5b:22:a5:
         aa:75:b0:19:b4:ca:72:cc:d5:a7:f6:eb:bb:b6:ef:cd:79:0b:
         79:01:b1:a1:ae:da:34:80:61:d0:54:7c:72:d2:c3:55:60:75:
         6f:97:45:47:c6:1f:c0:1e:b8:62:09:16:32:e6:fc:9e:59:df:
         85:66:71:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 03:36:21 2025 by rpki-client