This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.mft
File:                     UzahBs7N66kuC4Dl6aXHibp0xis.mft (raw, json)
Hash identifier:          SCXMOVAVWmU+Rr1yLh2x+cID+3CUg4iG5bDkjoFwAwo=
Subject key identifier:   03:5A:77:AC:F6:40:36:F0:0F:F6:BE:63:F0:90:0C:AC:D3:48:34:A2
Authority key identifier: 53:36:A1:06:CE:CD:EB:A9:2E:0B:80:E5:E9:A5:C7:89:BA:74:C6:2B
Certificate issuer:       /CN=5336a106cecdeba92e0b80e5e9a5c789ba74c62b
Certificate serial:       019AF540744E0D3FBA0D4B6487D814FEA66D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UzahBs7N66kuC4Dl6aXHibp0xis.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.mft
Manifest number:          0C0D
Signing time:             Sat 06 Dec 2025 20:00:33 +0000
Manifest this update:     Sat 06 Dec 2025 20:00:33 +0000
Manifest next update:     Sun 07 Dec 2025 20:00:33 +0000
Files and hashes:         1: 3XFZjvmipuYl3ZWlHwQH5J3zMBo.roa (hash: waCPVYUPagNA2C/8qUWA6TsWBhxDDZLgjh2zXP9UUxQ=)
                          2: 7k8l9jRcUvUU0PoFjWmWy5vQ4RU.roa (hash: EkvhsCktAS/aEN7qGD8m7gGA2WllZuGA03mFu0p4SxA=)
                          3: NQzxfbg6mUjToWYd761iH1Aj8M0.roa (hash: gTeoWCaUXq7PaCcs+yvz12eVkeAA0ArL5OPG5CvIUNQ=)
                          4: QDeglJ-kf-CPwjwijAyu-xuaRJQ.roa (hash: F1qjIGAjhb4CCD6+mprPcFrHYg12/ZjUkVJtYzNpI98=)
                          5: UzahBs7N66kuC4Dl6aXHibp0xis.crl (hash: 8R4kNsXFBnBKJq7H2WUB9GZlNF3cv5Q2v/W0sJWrcdk=)
                          6: bjcT27Mkrmm6YUKTzHgcNPrjPBU.roa (hash: Yn0RgyPmmLSzCmXSFkvVjdwnmhf67ZsvVo3LY47XFQY=)
                          7: jegjWR7VprdJlP9Id7lnXfq_3BY.roa (hash: 3+QVUbiATKXjEawCpJp9FdwXwbHQPUAeJSJ9r2KyWeA=)
                          8: l5UHl_04bz9hmdByW-mS5aOLzVQ.roa (hash: 44oRNABvdxfx6PrHpOdx7KjJ3dNX5DY1G8L30+SPRh4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UzahBs7N66kuC4Dl6aXHibp0xis.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 20:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f5:40:74:4e:0d:3f:ba:0d:4b:64:87:d8:14:fe:a6:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5336a106cecdeba92e0b80e5e9a5c789ba74c62b
        Validity
            Not Before: Dec  6 20:00:33 2025 GMT
            Not After : Dec  7 20:00:33 2025 GMT
        Subject: CN=035a77acf64036f00ff6be63f0900cacd34834a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:7b:1d:25:1c:b7:71:aa:13:eb:90:5a:aa:0c:
                    2b:b1:96:6f:6c:b4:2a:e8:b1:de:0f:2c:fc:2f:15:
                    38:d8:c4:df:15:e2:0c:52:35:92:14:44:83:5c:df:
                    30:63:f4:33:ac:75:34:94:5a:e2:72:4d:47:4f:45:
                    32:c0:54:11:ba:ea:44:59:e2:3d:2a:4b:a3:64:ee:
                    ac:b1:5c:a3:9c:b2:f4:8d:3d:dd:5f:ce:22:a6:7f:
                    be:d1:ae:9f:54:f6:ea:15:80:59:ee:6c:48:dd:6a:
                    4d:0f:cc:26:38:25:8f:17:cd:7c:2d:97:8e:f6:d8:
                    14:f5:bf:43:76:6b:a1:40:78:56:1f:38:3e:15:39:
                    fc:d4:d9:c5:fd:58:7d:de:5c:90:b0:20:9f:69:a3:
                    3f:45:67:8c:70:3a:ce:64:ff:ed:b2:94:3d:1f:50:
                    26:6f:f3:95:08:a7:8d:b0:42:99:39:a5:49:f5:cc:
                    36:b4:c3:24:6d:85:2a:06:0d:c8:8b:e7:0b:88:dc:
                    14:6c:38:f1:a3:18:18:e5:78:56:9e:f0:60:e8:7f:
                    51:18:31:4c:6a:93:f1:6a:32:13:3b:88:ff:cf:47:
                    6e:96:e9:fc:b0:58:fb:cb:86:e5:75:34:a5:9b:64:
                    8a:b7:98:69:44:d1:b3:67:8e:ab:c4:a0:a5:43:23:
                    3a:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:5A:77:AC:F6:40:36:F0:0F:F6:BE:63:F0:90:0C:AC:D3:48:34:A2
            X509v3 Authority Key Identifier:
                keyid:53:36:A1:06:CE:CD:EB:A9:2E:0B:80:E5:E9:A5:C7:89:BA:74:C6:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UzahBs7N66kuC4Dl6aXHibp0xis.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:05:c4:f9:e6:c9:28:2a:db:f2:02:9e:ee:41:12:06:b5:bd:
         aa:e1:60:35:ed:36:f6:45:a6:04:26:12:1f:cb:6e:6a:58:28:
         40:c3:11:cc:b3:35:1f:4c:20:6f:83:87:7a:64:48:1f:d7:9c:
         86:3c:d9:06:ff:5d:be:96:6a:03:2d:2c:67:1a:8d:e3:4b:71:
         2b:32:43:da:aa:0e:6a:30:32:32:77:77:b5:58:60:cc:a2:db:
         1e:79:74:f7:29:12:d0:dd:20:a1:54:29:5d:44:c4:c8:88:c7:
         6b:3c:82:4f:33:4f:db:90:c9:8c:8a:10:b9:ad:6b:20:a8:42:
         00:24:7e:e7:3d:13:e2:c4:a3:71:ec:a3:2f:59:e7:95:6c:74:
         b8:41:d8:01:3c:7a:e9:40:bd:87:5e:e1:08:c7:72:bf:10:2f:
         02:ef:43:43:4d:1a:99:50:47:92:9c:6f:28:23:e4:0c:37:65:
         1b:a4:dd:01:d0:73:7b:49:95:c3:3e:da:ae:cf:2e:c3:77:38:
         00:6c:03:d7:97:f7:fa:3e:8b:5c:b1:37:a6:fb:ee:c7:0e:b6:
         b6:6c:be:05:1d:3b:a3:8f:87:65:3b:c3:00:60:cb:de:a1:47:
         67:d9:fb:60:d6:ef:a0:96:f1:e6:3c:d6:95:f0:70:48:b4:4b:
         09:cb:ad:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:54:29 2025 by rpki-client