This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/7781fe-1304-43f8-b77c-3d96bd3e7853/1/ueJzyLoLCvsgXQCzFw5puBZ0M5c.mft
File:                     ueJzyLoLCvsgXQCzFw5puBZ0M5c.mft (raw, json)
Hash identifier:          O3M6YghIBMGKVljE8ChCR+vwfCSBPiMiAOFQtp/O9Ao=
Subject key identifier:   1F:E5:8B:C6:7B:89:5E:97:52:D1:99:62:75:7E:57:B6:9B:25:4F:11
Authority key identifier: B9:E2:73:C8:BA:0B:0A:FB:20:5D:00:B3:17:0E:69:B8:16:74:33:97
Certificate issuer:       /CN=b9e273c8ba0b0afb205d00b3170e69b816743397
Certificate serial:       019B1FBD81458E474DD2781CA91AE4344BFF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ueJzyLoLCvsgXQCzFw5puBZ0M5c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/7781fe-1304-43f8-b77c-3d96bd3e7853/1/ueJzyLoLCvsgXQCzFw5puBZ0M5c.mft
Manifest number:          1466
Signing time:             Mon 15 Dec 2025 02:01:11 +0000
Manifest this update:     Mon 15 Dec 2025 02:01:11 +0000
Manifest next update:     Tue 16 Dec 2025 02:01:11 +0000
Files and hashes:         1: 9ESyzHY3tDwoLy0qTdzIIz35dKQ.roa (hash: jqOOKsXrn7t0ZH3AYn6ArJKblZkGHsI4rkiKFVYX+aw=)
                          2: ueJzyLoLCvsgXQCzFw5puBZ0M5c.crl (hash: Pa1Gw3LOboZUeh/fMpP1lGQKnvzgeEkconNcQ0faJfc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/7781fe-1304-43f8-b77c-3d96bd3e7853/1/ueJzyLoLCvsgXQCzFw5puBZ0M5c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/7781fe-1304-43f8-b77c-3d96bd3e7853/1/ueJzyLoLCvsgXQCzFw5puBZ0M5c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ueJzyLoLCvsgXQCzFw5puBZ0M5c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 16 Dec 2025 02:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:1f:bd:81:45:8e:47:4d:d2:78:1c:a9:1a:e4:34:4b:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9e273c8ba0b0afb205d00b3170e69b816743397
        Validity
            Not Before: Dec 15 02:01:11 2025 GMT
            Not After : Dec 16 02:01:11 2025 GMT
        Subject: CN=1fe58bc67b895e9752d19962757e57b69b254f11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:07:51:b9:17:10:ca:dc:b0:e9:b4:01:b9:f1:
                    ba:7c:a4:2c:a1:da:93:b7:10:28:97:54:23:3a:29:
                    ac:e1:ec:c7:dc:a9:a9:f5:5b:d3:2c:7f:ca:70:09:
                    f8:50:70:3f:21:ad:06:7f:c9:ef:40:8c:40:e1:b2:
                    17:c7:f3:b1:f1:bb:b1:2a:1b:96:85:27:6d:3f:f2:
                    f1:04:21:cc:2e:c4:8a:04:b7:42:38:52:6b:89:5d:
                    20:dd:bb:99:aa:32:46:66:a1:b4:ad:86:9c:3d:97:
                    26:c2:6b:d5:e6:af:b8:8b:60:15:64:88:d9:74:df:
                    6e:46:da:b7:76:59:03:6a:63:06:b6:3d:e7:c0:6f:
                    eb:27:b0:89:55:e2:37:3d:45:55:75:6b:8f:be:20:
                    ae:65:57:09:6e:19:fc:fa:94:ad:01:1b:24:9d:f9:
                    3e:0e:3c:8a:3f:31:8f:76:8e:31:f8:bc:8b:68:5c:
                    ce:52:4a:c8:4f:b3:1c:6c:4a:63:78:78:30:8d:82:
                    7c:29:86:ff:d5:c9:44:19:a9:1c:19:8f:05:b6:3f:
                    fe:7d:3f:28:46:94:9c:0e:d4:48:ea:bf:75:fa:75:
                    21:b6:f1:60:98:82:4b:13:80:24:97:b2:41:98:ba:
                    1b:df:f1:90:53:d2:b3:75:a4:b5:cf:7f:a9:50:60:
                    c1:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:E5:8B:C6:7B:89:5E:97:52:D1:99:62:75:7E:57:B6:9B:25:4F:11
            X509v3 Authority Key Identifier:
                keyid:B9:E2:73:C8:BA:0B:0A:FB:20:5D:00:B3:17:0E:69:B8:16:74:33:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ueJzyLoLCvsgXQCzFw5puBZ0M5c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/7781fe-1304-43f8-b77c-3d96bd3e7853/1/ueJzyLoLCvsgXQCzFw5puBZ0M5c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/7781fe-1304-43f8-b77c-3d96bd3e7853/1/ueJzyLoLCvsgXQCzFw5puBZ0M5c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:29:ae:0b:bd:6e:77:01:d9:2b:ba:ef:70:84:f6:fe:0b:8f:
         57:01:1a:4f:0f:f2:46:5e:06:0e:18:7e:f7:45:00:5d:59:9c:
         ac:ac:0a:78:fd:2b:89:54:6c:e3:5e:98:ef:d9:49:2d:01:6f:
         de:c6:47:3d:b3:3f:38:71:35:75:33:10:24:ee:42:94:3c:4c:
         3e:57:a8:3d:74:25:ed:0f:8d:14:15:01:5c:c1:00:3f:4e:95:
         89:cb:42:d3:7c:81:c1:f5:9c:6f:fd:7e:c2:b6:5f:00:03:ef:
         ac:20:67:56:e6:42:f5:9f:e8:f7:74:d5:a8:a3:1a:06:41:4e:
         fb:d7:a6:c0:69:7f:10:29:2d:81:04:a6:e2:6e:86:58:6d:eb:
         9d:8b:a8:f0:a9:4b:80:68:03:19:1f:f1:d3:84:d8:38:5b:af:
         d5:a8:7d:c5:14:33:5b:e1:d1:93:95:d9:74:a1:4f:e3:26:07:
         58:e9:69:9d:2b:5f:87:65:39:1e:e4:7d:10:20:44:53:f7:2d:
         37:e2:0e:a3:e0:1a:f3:87:43:ec:7a:07:85:89:2c:7b:33:00:
         fc:f9:c9:fc:c9:3e:2b:bf:41:3a:89:a7:3d:6d:5f:0b:91:40:
         d4:68:fa:90:73:63:4c:d8:10:2d:ae:4f:b8:eb:a7:8b:bf:41:
         d5:19:91:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 15 12:01:07 2025 by rpki-client