This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/65aaf4-a005-451b-9026-dff3519b2a06/1/UoPLS4EObFkudHmvpCEY91XH-H4.mft
File:                     UoPLS4EObFkudHmvpCEY91XH-H4.mft (raw, json)
Hash identifier:          BuezqQp73iEtpwINCx7+qhRKzPK68UdYY8gaZ+91DwQ=
Subject key identifier:   93:1B:A3:90:7D:7B:5E:B3:50:73:72:B6:C7:1A:28:9C:E0:9F:A4:DF
Authority key identifier: 52:83:CB:4B:81:0E:6C:59:2E:74:79:AF:A4:21:18:F7:55:C7:F8:7E
Certificate issuer:       /CN=5283cb4b810e6c592e7479afa42118f755c7f87e
Certificate serial:       019B2399E27437A6B65A9B5E57D0EC8C3DC8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UoPLS4EObFkudHmvpCEY91XH-H4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/65aaf4-a005-451b-9026-dff3519b2a06/1/UoPLS4EObFkudHmvpCEY91XH-H4.mft
Manifest number:          0711
Signing time:             Mon 15 Dec 2025 20:00:45 +0000
Manifest this update:     Mon 15 Dec 2025 20:00:45 +0000
Manifest next update:     Tue 16 Dec 2025 20:00:45 +0000
Files and hashes:         1: KoejX2pwYLGIDnJMn_cfXo-zpFw.roa (hash: EZwZ1UXG+Sx/lBymXk/XYrR4THrw5DyuELp1sBrJX3o=)
                          2: UoPLS4EObFkudHmvpCEY91XH-H4.crl (hash: yNI1H1+kegYsrrUdP73YtpZXfWR96WrywACXUW+2Yu8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/65aaf4-a005-451b-9026-dff3519b2a06/1/UoPLS4EObFkudHmvpCEY91XH-H4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/65aaf4-a005-451b-9026-dff3519b2a06/1/UoPLS4EObFkudHmvpCEY91XH-H4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UoPLS4EObFkudHmvpCEY91XH-H4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 16 Dec 2025 20:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:23:99:e2:74:37:a6:b6:5a:9b:5e:57:d0:ec:8c:3d:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5283cb4b810e6c592e7479afa42118f755c7f87e
        Validity
            Not Before: Dec 15 20:00:45 2025 GMT
            Not After : Dec 16 20:00:45 2025 GMT
        Subject: CN=931ba3907d7b5eb3507372b6c71a289ce09fa4df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:d7:36:a3:11:ee:12:83:09:98:dd:0a:6d:bf:
                    0b:38:ed:b6:a5:87:5b:f6:8e:0d:5a:22:95:c3:a2:
                    af:ab:a8:6f:8f:dc:31:e5:52:94:b8:5c:8a:a2:44:
                    c2:82:07:bf:a1:14:dd:55:78:3d:17:4a:16:9b:b0:
                    6f:f0:2d:6b:64:60:3b:55:04:18:e9:56:ef:7b:c3:
                    c6:56:20:f6:8f:65:57:d9:5f:39:05:a7:49:4c:bc:
                    57:29:5c:a3:4e:ff:ab:39:50:86:13:e8:97:c0:ad:
                    94:69:98:a3:19:87:bc:ac:e8:5e:d8:41:38:30:c0:
                    ea:52:93:94:ee:e3:0f:aa:a3:31:a5:b7:dd:5e:48:
                    b2:03:84:77:ce:43:36:84:56:d9:d6:60:06:ed:dd:
                    ba:42:11:e6:c7:72:8f:2d:5d:15:f1:ad:51:23:69:
                    5e:32:be:43:b5:b6:76:af:e7:a5:90:d6:28:fe:9c:
                    7f:c1:90:4e:63:23:ec:9e:51:a1:21:10:83:84:3d:
                    32:17:e4:15:cf:0d:83:e7:24:1e:9e:aa:3b:a1:16:
                    f3:6b:c5:6f:90:59:67:4c:80:91:45:53:d6:83:da:
                    bd:04:7b:d9:d9:5e:49:6a:b3:28:7f:e7:9e:36:3f:
                    b4:49:e1:ad:33:80:93:8c:09:bd:ed:09:36:37:a2:
                    65:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:1B:A3:90:7D:7B:5E:B3:50:73:72:B6:C7:1A:28:9C:E0:9F:A4:DF
            X509v3 Authority Key Identifier:
                keyid:52:83:CB:4B:81:0E:6C:59:2E:74:79:AF:A4:21:18:F7:55:C7:F8:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UoPLS4EObFkudHmvpCEY91XH-H4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/65aaf4-a005-451b-9026-dff3519b2a06/1/UoPLS4EObFkudHmvpCEY91XH-H4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/65aaf4-a005-451b-9026-dff3519b2a06/1/UoPLS4EObFkudHmvpCEY91XH-H4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:16:84:d9:22:df:a8:b4:1c:d3:8d:32:d2:b9:f9:e7:aa:a5:
         04:30:da:61:15:86:ba:66:5c:72:3a:be:ba:4c:83:a8:f4:8d:
         5e:2e:45:34:d8:64:88:7d:69:0c:5b:2e:81:5d:dc:ee:54:55:
         e5:4b:e6:34:ff:0a:4d:88:85:9a:7b:7f:25:ee:02:75:b6:53:
         a2:74:96:c0:42:3f:22:bd:19:ce:23:4c:c8:12:9b:dd:99:77:
         91:a3:86:1f:ab:e8:28:09:31:8f:d6:ef:59:17:48:8a:43:fc:
         58:71:d9:57:58:25:26:fe:3c:6d:19:06:69:9d:9b:6c:87:36:
         1c:d4:d1:e9:46:eb:63:15:b3:e1:fb:09:80:80:e4:7b:67:20:
         9d:a5:89:df:9e:c4:d9:d8:13:58:58:ab:dc:b2:9b:79:fe:8e:
         d9:da:f4:5f:a1:cb:43:16:ef:f6:87:04:4e:3d:36:dd:9e:6b:
         5c:d4:5b:8d:84:16:a0:56:ed:0c:0f:d6:4b:e4:24:cd:f1:56:
         05:bb:95:5a:c3:72:f7:0d:c8:5e:10:81:c1:13:e5:5b:0a:dd:
         3a:13:52:06:4c:f9:e4:33:1f:eb:66:8e:c0:c9:f2:ae:b7:a0:
         bc:bb:ec:87:09:3b:92:b1:44:4b:36:8f:f9:e5:ad:bb:20:89:
         75:86:bf:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 06:25:44 2025 by rpki-client