This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/b122b0-d461-409d-bbd8-6d1f60543e9c/1/9UUMY3ZlXuwd0tpL0h1fEEqW2QQ.mft
File:                     9UUMY3ZlXuwd0tpL0h1fEEqW2QQ.mft (raw, json)
Hash identifier:          yKH4MPsuK5cDNU1Tt7kCiJUbPxt8gbKrbszkgS35asA=
Subject key identifier:   72:49:C8:17:FB:21:60:1B:FE:98:0B:DE:4C:77:5B:86:C5:76:3D:14
Authority key identifier: F5:45:0C:63:76:65:5E:EC:1D:D2:DA:4B:D2:1D:5F:10:4A:96:D9:04
Certificate issuer:       /CN=f5450c6376655eec1dd2da4bd21d5f104a96d904
Certificate serial:       019B115C821CE3B2D077DDDA68357DEDACE2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9UUMY3ZlXuwd0tpL0h1fEEqW2QQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/b122b0-d461-409d-bbd8-6d1f60543e9c/1/9UUMY3ZlXuwd0tpL0h1fEEqW2QQ.mft
Manifest number:          1731
Signing time:             Fri 12 Dec 2025 07:00:33 +0000
Manifest this update:     Fri 12 Dec 2025 07:00:33 +0000
Manifest next update:     Sat 13 Dec 2025 07:00:33 +0000
Files and hashes:         1: 26DE9mwGulhT4dAnYga81faFL_0.asa (hash: mV7JHt6u/aewJ14E3UNG49W5RevaD1YiVI/wS+G92JQ=)
                          2: 9UUMY3ZlXuwd0tpL0h1fEEqW2QQ.crl (hash: 1k3+2MOqh7jveNZ32jijK1j13AIRCRU1QszXd7jPRxg=)
                          3: As_EZ-RvP3qi1sws1jil8dnna6k.roa (hash: OtrJo+OCLnikRPWLn5xnNsduIJXUQk6NGSjartknylA=)
                          4: IiBvNtte0BK03j32z9ol7pwqiRc.asa (hash: NG9cggSuQispY4seSaLXxlc9sBjRa+7fIOrlnoVlaFM=)
                          5: MSgwMQBVeKrb-aSmClVXWXeIrYA.roa (hash: QNReZgAEU8FQp9RxZ7cqr3S4KzJDn6XR61dqK9DUir4=)
                          6: smter7NQ29umjrWZnTKOoms7tGM.asa (hash: Nxv3g9K7Hwn853S+o5K2Svc8UNIF+3DDWPUR11aVzKM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/b122b0-d461-409d-bbd8-6d1f60543e9c/1/9UUMY3ZlXuwd0tpL0h1fEEqW2QQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/b122b0-d461-409d-bbd8-6d1f60543e9c/1/9UUMY3ZlXuwd0tpL0h1fEEqW2QQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9UUMY3ZlXuwd0tpL0h1fEEqW2QQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Dec 2025 07:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:11:5c:82:1c:e3:b2:d0:77:dd:da:68:35:7d:ed:ac:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5450c6376655eec1dd2da4bd21d5f104a96d904
        Validity
            Not Before: Dec 12 07:00:33 2025 GMT
            Not After : Dec 13 07:00:33 2025 GMT
        Subject: CN=7249c817fb21601bfe980bde4c775b86c5763d14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:0d:fc:5b:9c:8d:6c:db:cf:a1:aa:ac:d4:86:
                    27:37:c6:3a:97:e2:70:fe:b2:ad:00:f5:ea:54:0b:
                    4d:20:3d:8d:d7:b4:56:45:08:b4:e1:0d:a4:23:eb:
                    38:7c:87:18:1a:3d:d0:6f:01:f7:f0:de:72:55:fb:
                    42:42:05:fd:f4:bc:60:1c:46:ee:6e:e5:cb:92:8d:
                    03:84:28:d2:03:04:7f:17:b7:83:3c:26:f8:80:5e:
                    15:c0:60:53:ee:49:ab:5d:22:44:e0:05:3b:ee:02:
                    a7:d9:ff:04:44:6f:a4:20:8d:4e:53:a9:3d:d2:06:
                    3d:70:af:2f:c7:92:1b:f9:89:18:6b:1b:c9:38:19:
                    af:6d:18:d9:63:89:66:43:98:54:26:e3:ea:c8:df:
                    97:e9:e6:5a:61:c8:b6:3d:fe:96:79:24:0d:ca:4f:
                    ab:fb:6e:52:d5:10:2c:1a:c1:2e:10:f6:e7:68:cd:
                    54:c9:7d:90:85:2d:97:3b:5e:6c:a2:80:23:f9:12:
                    2c:2a:1b:03:5d:d1:35:88:a7:54:f8:75:49:d2:4e:
                    71:bd:a9:47:af:75:cd:f8:14:7a:87:8f:4d:c1:5a:
                    ce:46:bf:46:a2:b9:6a:1d:74:6b:83:d3:ce:93:da:
                    ca:b3:73:b6:65:89:90:c0:8b:88:e9:a8:7f:fb:24:
                    39:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:49:C8:17:FB:21:60:1B:FE:98:0B:DE:4C:77:5B:86:C5:76:3D:14
            X509v3 Authority Key Identifier:
                keyid:F5:45:0C:63:76:65:5E:EC:1D:D2:DA:4B:D2:1D:5F:10:4A:96:D9:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9UUMY3ZlXuwd0tpL0h1fEEqW2QQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/b122b0-d461-409d-bbd8-6d1f60543e9c/1/9UUMY3ZlXuwd0tpL0h1fEEqW2QQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/b122b0-d461-409d-bbd8-6d1f60543e9c/1/9UUMY3ZlXuwd0tpL0h1fEEqW2QQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:63:eb:ba:8a:49:a8:a6:a0:93:34:1a:03:be:06:14:ef:ec:
         6a:bb:38:c2:90:0a:d3:cc:5a:63:c2:91:36:db:3b:af:5d:25:
         7f:b7:ba:a2:bc:5e:98:1a:d6:3a:ad:7b:fb:ca:82:2d:fa:44:
         1a:19:9a:2b:40:d5:0e:60:e4:10:95:23:ac:29:a1:91:92:56:
         51:9a:a1:16:a3:1f:b2:8f:fe:99:8c:bf:47:1e:b7:48:f1:30:
         61:9c:b4:99:e6:fa:a8:2f:a1:b0:36:42:e5:f3:cd:bf:cd:05:
         8c:ef:ba:a2:3d:e4:67:dc:3f:d9:c2:ad:26:ef:c7:7e:d9:37:
         2c:37:5e:61:f5:e4:2f:fc:57:69:4f:62:d1:8c:c5:2c:0a:ce:
         42:f1:6e:4a:7e:2e:3a:39:4d:2f:0a:a5:9a:d4:b0:bd:58:42:
         65:d3:88:0f:2b:9e:69:0b:19:d1:a1:ed:7e:71:cf:43:cc:e9:
         d6:e7:d6:5f:15:37:0a:7e:66:32:e0:7e:8a:f4:fb:d7:ce:a3:
         38:70:91:8d:8d:ed:b8:b1:20:db:28:55:84:0d:30:0a:a6:f7:
         54:c0:88:4a:1e:41:b2:34:1c:ef:ee:55:ae:9b:6f:29:a1:4b:
         84:ed:40:61:39:c4:fc:59:b6:14:18:73:fb:00:42:b9:98:eb:
         53:9f:fe:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 12 09:28:19 2025 by rpki-client