This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/cde757-7672-4720-8ce1-6e26b91f6910/1/2Uvdr7XfCYQZAgqPvHqQsW40HWM.mft
File:                     2Uvdr7XfCYQZAgqPvHqQsW40HWM.mft (raw, json)
Hash identifier:          94h+cadoS1aH9Tdq4tRlwHkLvRoQK/r5IJ7wVoxaEuU=
Subject key identifier:   0C:A8:4B:A6:57:A0:3D:60:5B:3E:43:3F:8E:2B:15:BF:16:5E:A7:07
Authority key identifier: D9:4B:DD:AF:B5:DF:09:84:19:02:0A:8F:BC:7A:90:B1:6E:34:1D:63
Certificate issuer:       /CN=d94bddafb5df098419020a8fbc7a90b16e341d63
Certificate serial:       019B1CBC656F2307BA4E75079A2AB15A6203
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2Uvdr7XfCYQZAgqPvHqQsW40HWM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/cde757-7672-4720-8ce1-6e26b91f6910/1/2Uvdr7XfCYQZAgqPvHqQsW40HWM.mft
Manifest number:          143A
Signing time:             Sun 14 Dec 2025 12:01:07 +0000
Manifest this update:     Sun 14 Dec 2025 12:01:07 +0000
Manifest next update:     Mon 15 Dec 2025 12:01:07 +0000
Files and hashes:         1: 2Uvdr7XfCYQZAgqPvHqQsW40HWM.crl (hash: TzOTG5Zt6Nwx1U0/UQ847N1b7aFxp+GMW266bYuHF3A=)
                          2: XbqqIgUuiPQ7s4i6gwADBbMAwT4.roa (hash: cRp4FxnA8UimLs+QIeRi/nTr91UWmFZBwZVHNphDdoA=)
                          3: jnFs14ubYigoY0h9h1_Eofh0724.roa (hash: cmLBP5v8zTmaWqQDLZqcYtnuqxPCD1kybV6k+KwkWhM=)
                          4: y1bjq6t2wUukz9W6C_N_eJWE5pQ.roa (hash: rbXidQhk2TpaZB/G3C+NahAJvD9lrvrxNyxSFhR0BVE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/cde757-7672-4720-8ce1-6e26b91f6910/1/2Uvdr7XfCYQZAgqPvHqQsW40HWM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/cde757-7672-4720-8ce1-6e26b91f6910/1/2Uvdr7XfCYQZAgqPvHqQsW40HWM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2Uvdr7XfCYQZAgqPvHqQsW40HWM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 15 Dec 2025 11:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:1c:bc:65:6f:23:07:ba:4e:75:07:9a:2a:b1:5a:62:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d94bddafb5df098419020a8fbc7a90b16e341d63
        Validity
            Not Before: Dec 14 12:01:07 2025 GMT
            Not After : Dec 15 12:01:07 2025 GMT
        Subject: CN=0ca84ba657a03d605b3e433f8e2b15bf165ea707
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:b4:24:ed:28:44:f4:54:b4:91:c1:12:4a:7a:
                    b6:d2:74:80:e8:e7:41:32:a3:27:af:fb:15:55:07:
                    38:66:78:ce:b3:2f:79:97:40:6e:c0:ea:77:9d:95:
                    03:91:00:69:fb:29:e2:0f:08:d0:4b:f4:0d:fc:a5:
                    04:64:fa:47:23:4e:8c:77:cf:9d:7b:3d:b1:ce:0c:
                    64:95:0b:7a:40:3e:19:77:43:6c:7f:8e:86:5d:4f:
                    ef:65:55:8c:a9:0d:75:91:c8:a4:d3:42:63:8b:c3:
                    ce:e7:cc:f5:0c:7b:19:38:d8:56:2c:4e:96:ef:e2:
                    8b:c0:98:13:33:70:79:1d:1b:0e:89:f0:5b:5f:4c:
                    e0:3e:5f:00:f6:4b:fb:72:70:cf:18:74:e1:08:bf:
                    c2:4b:f2:0d:ab:37:01:2d:72:4c:b3:67:0a:1a:90:
                    c5:9f:74:f4:1b:f9:be:51:f3:27:cd:f3:78:88:03:
                    b0:19:1f:71:2e:a4:df:e0:3a:af:40:e7:79:d1:17:
                    7e:e0:93:06:8a:76:32:1b:b4:cd:59:0c:6f:ea:83:
                    8b:1a:49:fc:cd:08:29:0c:de:af:77:19:01:8c:b2:
                    4f:8f:32:2b:29:14:57:d4:14:c5:9c:3a:7a:12:5a:
                    a0:22:27:dd:6b:36:0f:b9:21:61:4f:71:c9:35:b2:
                    3d:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:A8:4B:A6:57:A0:3D:60:5B:3E:43:3F:8E:2B:15:BF:16:5E:A7:07
            X509v3 Authority Key Identifier:
                keyid:D9:4B:DD:AF:B5:DF:09:84:19:02:0A:8F:BC:7A:90:B1:6E:34:1D:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Uvdr7XfCYQZAgqPvHqQsW40HWM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/cde757-7672-4720-8ce1-6e26b91f6910/1/2Uvdr7XfCYQZAgqPvHqQsW40HWM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/cde757-7672-4720-8ce1-6e26b91f6910/1/2Uvdr7XfCYQZAgqPvHqQsW40HWM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:5b:1d:4b:ef:fe:e6:97:be:cf:15:d7:f7:c3:9d:64:a3:e8:
         9d:aa:12:dc:64:dc:78:a4:37:57:f3:ab:6c:67:06:5d:be:87:
         7c:6f:01:f2:89:fe:58:4a:2a:dd:ed:7c:f3:77:09:a8:52:ee:
         1a:61:8e:8a:46:1c:21:a2:ee:dd:a6:f0:11:4c:c1:e8:95:90:
         8d:a7:a9:b7:60:d7:44:d4:b6:0b:62:de:54:46:c6:f0:54:1c:
         3b:a2:d9:ad:7d:d9:cc:c1:e5:98:2a:e5:46:ee:88:f3:fa:29:
         7b:4c:56:5c:4b:97:4d:dd:ef:02:92:7c:6b:ab:66:3f:31:12:
         37:e7:82:91:81:88:2b:58:c3:29:b6:74:df:c9:77:3f:d8:a9:
         af:a3:1a:91:5e:0d:fa:ad:05:6c:9f:52:c4:de:80:f4:50:e0:
         0d:f5:67:3f:00:04:d3:7c:57:b1:21:ae:5b:13:89:b7:c5:f4:
         a5:4e:3c:32:ab:25:24:bb:86:3b:23:53:7a:84:e3:7c:d0:41:
         01:a6:92:ad:7e:c6:a5:9a:74:2a:74:78:82:ae:87:78:9e:a5:
         ee:8a:d4:84:8c:92:91:33:40:8f:ff:a7:73:e1:57:80:d7:d9:
         8e:93:da:9c:ea:91:6d:94:70:09:c4:c4:25:33:a9:5d:d7:2e:
         67:27:cf:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 14 21:40:07 2025 by rpki-client