This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/8b0b19-fbfa-4357-b290-9ea751d59ab7/1/UUxVK7lETAD5Ty8FlMujUvwsu7w.mft
File:                     UUxVK7lETAD5Ty8FlMujUvwsu7w.mft (raw, json)
Hash identifier:          mc6gJ9fAEFAN2tMeiYO3EBdch6r9RWF6mpXWEatgSt4=
Subject key identifier:   9E:3C:DA:FC:55:DB:2A:B1:7A:6E:42:80:77:46:49:4E:95:10:B2:20
Authority key identifier: 51:4C:55:2B:B9:44:4C:00:F9:4F:2F:05:94:CB:A3:52:FC:2C:BB:BC
Certificate issuer:       /CN=514c552bb9444c00f94f2f0594cba352fc2cbbbc
Certificate serial:       019B59ACF331CF410E0A537B92B8E11DCFD0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UUxVK7lETAD5Ty8FlMujUvwsu7w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/8b0b19-fbfa-4357-b290-9ea751d59ab7/1/UUxVK7lETAD5Ty8FlMujUvwsu7w.mft
Manifest number:          1797
Signing time:             Fri 26 Dec 2025 08:01:05 +0000
Manifest this update:     Fri 26 Dec 2025 08:01:05 +0000
Manifest next update:     Sat 27 Dec 2025 08:01:05 +0000
Files and hashes:         1: UUxVK7lETAD5Ty8FlMujUvwsu7w.crl (hash: UzpLkNN+2Q9f9upcpxgd+rVTF5JK4ADcSEN+qiUalRc=)
                          2: xWOpZfRr7thuD6cUtKvPdI-_VBQ.roa (hash: Pf5kik5m7cGGBhNkzoxIAzTv7Y7VAUUsC50OhLmpfJs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/8b0b19-fbfa-4357-b290-9ea751d59ab7/1/UUxVK7lETAD5Ty8FlMujUvwsu7w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/8b0b19-fbfa-4357-b290-9ea751d59ab7/1/UUxVK7lETAD5Ty8FlMujUvwsu7w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UUxVK7lETAD5Ty8FlMujUvwsu7w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 27 Dec 2025 06:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:59:ac:f3:31:cf:41:0e:0a:53:7b:92:b8:e1:1d:cf:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=514c552bb9444c00f94f2f0594cba352fc2cbbbc
        Validity
            Not Before: Dec 26 08:01:05 2025 GMT
            Not After : Dec 27 08:01:05 2025 GMT
        Subject: CN=9e3cdafc55db2ab17a6e42807746494e9510b220
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:5b:f8:82:09:ec:14:3f:68:83:57:c1:1d:cd:
                    0d:6d:b8:4c:55:e3:ed:16:7f:79:81:fa:08:7d:e4:
                    ac:d5:d0:83:79:fb:c3:49:aa:f5:7b:38:d2:2d:9a:
                    e0:c9:68:a6:1e:09:cc:bb:87:4a:cb:03:7a:b2:84:
                    e7:de:c0:75:a5:82:0d:1c:a5:95:2c:19:29:73:94:
                    b6:50:b9:a4:a0:83:d8:72:b8:56:1b:87:e1:f5:7d:
                    f9:00:fa:13:d2:95:aa:f0:4a:3d:3b:5d:2d:a5:8a:
                    3b:2d:7c:fe:78:73:3e:62:d3:29:48:9d:03:1d:4e:
                    fa:61:4a:2f:b5:72:94:c8:52:4c:1a:62:e8:d2:b0:
                    ff:31:4d:99:bf:e2:47:bc:9b:a3:09:62:27:86:d0:
                    41:cd:39:11:32:af:6b:23:87:b0:a3:c2:1c:32:c7:
                    24:34:e8:b5:b1:80:4c:58:ba:4b:a2:92:88:f4:1d:
                    73:1c:3f:84:e4:6e:ea:36:aa:72:57:0d:16:14:73:
                    71:85:2a:c2:80:53:14:48:16:c5:84:0b:4a:dd:8e:
                    61:15:85:08:3a:4d:5c:8e:03:e2:bf:a9:f7:8d:da:
                    e1:f6:55:3f:73:f5:0a:c1:af:8a:41:d4:dc:39:7c:
                    05:9d:88:09:23:69:72:8e:5d:c6:35:07:dc:48:42:
                    0f:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:3C:DA:FC:55:DB:2A:B1:7A:6E:42:80:77:46:49:4E:95:10:B2:20
            X509v3 Authority Key Identifier:
                keyid:51:4C:55:2B:B9:44:4C:00:F9:4F:2F:05:94:CB:A3:52:FC:2C:BB:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UUxVK7lETAD5Ty8FlMujUvwsu7w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/8b0b19-fbfa-4357-b290-9ea751d59ab7/1/UUxVK7lETAD5Ty8FlMujUvwsu7w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/8b0b19-fbfa-4357-b290-9ea751d59ab7/1/UUxVK7lETAD5Ty8FlMujUvwsu7w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:50:74:51:95:b7:3f:47:77:13:70:d4:56:f3:26:d9:1e:22:
         2a:90:bd:bc:81:11:62:b9:81:41:d9:7b:23:2c:4b:fb:6d:15:
         d9:87:04:da:0c:79:70:7a:c5:4d:32:0f:3d:70:33:13:3e:a3:
         18:dd:33:0c:52:b7:df:0c:4d:cc:f5:ed:5a:6c:dd:1e:51:f9:
         60:5a:1e:51:1b:f7:cb:66:19:38:a7:f7:5b:a5:4d:23:89:71:
         51:80:ab:86:43:19:ee:af:c8:1f:b2:50:a1:c1:26:57:37:f2:
         e7:aa:ea:cd:56:a6:8a:c9:83:c9:51:a7:6a:74:1e:87:da:25:
         65:46:0f:c4:7f:9b:72:c6:6e:91:98:87:a8:97:39:aa:b0:49:
         a6:05:d7:15:07:fc:06:67:c9:e3:a3:d7:2a:28:c2:db:a2:43:
         6c:5f:d8:e4:30:59:ab:9c:2a:f9:b2:1c:21:34:21:f2:26:a8:
         50:0a:ce:97:5c:19:5a:52:68:9a:19:05:4f:38:f0:2d:ed:cc:
         70:8e:e0:4e:25:7b:35:b5:df:44:d3:4f:02:5a:b3:81:4e:80:
         fc:25:35:3c:f7:a5:17:10:ac:7a:d5:1c:80:56:0b:5a:d5:84:
         60:74:8b:f5:cb:ae:9a:1c:eb:3c:71:b8:b5:eb:32:77:e5:96:
         56:95:22:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 26 14:15:46 2025 by rpki-client