This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/uRSWH2fyLGHoSmbIrZwajOUdCZs.mft
File:                     uRSWH2fyLGHoSmbIrZwajOUdCZs.mft (raw, json)
Hash identifier:          lAO60CphEkDIBDv/lxJGZTeUWYupxUR8fkHs9NNakcM=
Subject key identifier:   43:F1:F3:30:14:BA:26:C4:EF:31:42:03:45:73:1D:10:EB:7C:82:C5
Authority key identifier: B9:14:96:1F:67:F2:2C:61:E8:4A:66:C8:AD:9C:1A:8C:E5:1D:09:9B
Certificate issuer:       /CN=b914961f67f22c61e84a66c8ad9c1a8ce51d099b
Certificate serial:       019B08228582DAF2A6528568D27D523B1769
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uRSWH2fyLGHoSmbIrZwajOUdCZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/uRSWH2fyLGHoSmbIrZwajOUdCZs.mft
Manifest number:          04CA
Signing time:             Wed 10 Dec 2025 12:00:38 +0000
Manifest this update:     Wed 10 Dec 2025 12:00:38 +0000
Manifest next update:     Thu 11 Dec 2025 12:00:38 +0000
Files and hashes:         1: 0H7Thc0vxzHE538Kg__IsozOYbE.roa (hash: giCD6rVmFgKHziT2AIqsZO6VuG2Tfm2cxgqOASpwxX8=)
                          2: 0dxtzDDIBpJLWdXevO6x5B1OKA4.roa (hash: UqHGU8Z6HQuyuziKd8Tlbq7+vFF+SPN6uUTmW4pD29w=)
                          3: 1-IYV20_BFsSESebPalSWi945mc4.roa (hash: OsWGdya6Ch/46NWAXvFYRAE2agKYGSeHmSsi9DNzWYU=)
                          4: 1ZOqwcEasiN91mmeTtM3X2KSg98.roa (hash: xm9H1TSk8MSrCNoUM5Ts0xxMj18kv3SUVRlY9XIQrgw=)
                          5: 1ZiCgvnRBknJUXt1Uz6nNo7_pO4.roa (hash: yxvYsCLwo+HHivfhDyL+8Sdo+tKY+1OVoiINgf6EUGk=)
                          6: 1xA0E3JMPDydJ13Prmcc7Dnta0s.roa (hash: ogbhbFSepGfxytpnhFuB67o0q79KylhQPVl2PN0hOHA=)
                          7: 2Rska5d1fz-1LyWeLY5wNEQt-08.roa (hash: U17BQ8jBRMMMfY5zHF1Q7cNP8BTLe/506H0OjkJUWZc=)
                          8: 7bkqv-5V5iNs3-aTwhXfpe1N_H4.roa (hash: wNJTS1s1GS5nqF/G2hmQFOimq7UQMenpdIPW59xhivU=)
                          9: 9zLvzm8otYmFem1Qd75FwmrsSxc.roa (hash: mU0sIkevG3y3WSoCK/P7ZAFf/EzDIDHpCIUVj9uqHhU=)
                          10: B7e_rOOepZWmaiFWJH1w3a37GGg.roa (hash: 2WwB/EPxijem205r42CRpsJjfETG8nT1KWQIZUs7ayI=)
                          11: HSiwKyMoJ6I6zGaHKCL7FsIgGys.roa (hash: i6y69Y+T/O92kLnvSAm3+5UaYRDFfESGJJXvQ0n1I8E=)
                          12: L4NUW0fD1fouom_s0JvPLwOdhKA.roa (hash: 1QOsAiAO9NanX+ESsp6JiEauNz2AtY78OF9Q05/RwMU=)
                          13: UyMTJ8vfaZMZ3K5xcIfKiRk_5oI.roa (hash: p032VP0xM7qM67uVYdhb1lo+Lr6r8lZKSQd50sPMvZQ=)
                          14: Vn3N2K8vUmpzpb7aHJxP7a4cI_Y.roa (hash: 6EnaepVuemYAM0UjuUfy+J1VA+Rh+UYSQtrRPuxamIk=)
                          15: Wt8q81G3lq42cpbQgi--7hMpnzk.roa (hash: 3wzOUsBnY0js90eLihw9wHKZneTkdasUVemnQb+Ppys=)
                          16: Y72V-mPUtkPMzOcUtEbrhdYjFXM.roa (hash: IxbYeGjmmxw3vx1ysPlJvhxU9D7BWMWOG39yWL47F+k=)
                          17: ZOWSdTU-WTWFbQ4ucTrzxUSSz90.roa (hash: A0HqrcZPbTEXuB3W/5criOXFdJviighEOaAGyhHlYd4=)
                          18: Z_hTrtsbQSpKrMGMOW6_0J8ZpdA.roa (hash: feCFBc/epRQ4sJNHhJEBA2Ljs4/rpvwE/wZpPd9yp04=)
                          19: aLZQhetZPScjmzF_3TV-b7UX2aQ.roa (hash: TO/CrQqt8l93Rbi2zVKa5elUK43be8sHniPaaeWsqbs=)
                          20: bIJxT9tnkNJQ4c2mEtFdUJKVePk.roa (hash: OvEl/cosJ15Umi/YXioUm+VBzOn/QAmyGskrTXES3y8=)
                          21: cKynaQHnSt381VIcTQApgbYb_ws.roa (hash: 7rx4+e5TenBrpsBT5lxdY3jIzFb2xLdj/6iZmgJIGMo=)
                          22: dratYjSl9-WvcM2aksz8_oQEXSs.roa (hash: ReiiFF2mETCXJQvhGO99zmN6lnkdTbJGPvvJ1N1py3U=)
                          23: mM2enVDYdLiXBKAs6x9oVxUDYoc.roa (hash: 8WzLZPt1oUUmxk4YfWhm8jgi6Eau9QV4/cHfIxSx6Rk=)
                          24: nvGMbscQr-nCRZKJCx_sXVAuXnM.roa (hash: FEjJqoH/uFbjUlp+UiOuar/ZgJYrfKdP4uZu1K+Z/R4=)
                          25: uRSWH2fyLGHoSmbIrZwajOUdCZs.crl (hash: f83EICzw8unKwQbML2q6Xv9qrfCbY8wdptehaQDd118=)
                          26: vM4pwSi8sw4lUOIAjvajCx7ETsM.roa (hash: fyFTTUciTRmBPzGF2SYSyVt7KyF04gllHZfanVt+Ptc=)
                          27: wD8nYbbqM1KLj38YM5LFeps6dvg.roa (hash: XKfem7e78QtcKfKCo2GBRZOY9h90lNcWcBElf0PBnV8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/uRSWH2fyLGHoSmbIrZwajOUdCZs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/uRSWH2fyLGHoSmbIrZwajOUdCZs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uRSWH2fyLGHoSmbIrZwajOUdCZs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 11 Dec 2025 10:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:08:22:85:82:da:f2:a6:52:85:68:d2:7d:52:3b:17:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b914961f67f22c61e84a66c8ad9c1a8ce51d099b
        Validity
            Not Before: Dec 10 12:00:38 2025 GMT
            Not After : Dec 11 12:00:38 2025 GMT
        Subject: CN=43f1f33014ba26c4ef31420345731d10eb7c82c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:61:9c:88:03:97:c8:a7:4b:e1:a0:30:5d:f5:
                    21:14:08:ad:d7:ca:0b:9e:d5:18:51:90:b0:51:f2:
                    3e:29:cf:42:d9:9a:97:1e:78:e8:ee:74:4c:c8:cc:
                    06:c1:10:9c:8e:ef:d0:6c:5f:ab:44:4b:72:a7:2f:
                    aa:26:88:98:d4:2b:41:e7:f0:3d:30:7c:7c:c4:1d:
                    5f:b6:cc:4f:10:e2:fd:ef:12:d6:5a:ce:28:7f:83:
                    15:9f:bc:06:a5:e4:23:f3:eb:68:9a:92:52:1e:91:
                    e7:c2:a2:7f:78:fe:7b:3b:f1:f6:f8:c7:a5:bf:f5:
                    cf:62:d2:5d:8a:b3:b4:28:a7:51:ba:99:48:a9:98:
                    3a:32:b1:71:aa:91:10:84:9d:94:95:f7:36:4e:3e:
                    63:c1:ae:62:3b:48:a4:0c:5f:11:18:bc:b9:7b:b7:
                    2b:f9:71:cb:2a:15:9a:66:92:77:75:cc:dd:6a:38:
                    ec:27:df:a7:4d:23:8b:f7:33:a6:5c:4e:4e:1e:88:
                    3c:f7:7c:65:19:41:f8:dd:13:39:7a:9b:5a:fa:b5:
                    ff:3c:f5:ce:63:e7:37:ea:74:d8:d1:73:07:17:70:
                    75:4d:72:e3:b4:97:68:22:b3:bb:02:f0:26:09:e2:
                    70:0b:fc:13:aa:6a:b7:a3:8b:3b:53:12:e3:b9:18:
                    cb:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:F1:F3:30:14:BA:26:C4:EF:31:42:03:45:73:1D:10:EB:7C:82:C5
            X509v3 Authority Key Identifier:
                keyid:B9:14:96:1F:67:F2:2C:61:E8:4A:66:C8:AD:9C:1A:8C:E5:1D:09:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRSWH2fyLGHoSmbIrZwajOUdCZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/uRSWH2fyLGHoSmbIrZwajOUdCZs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/uRSWH2fyLGHoSmbIrZwajOUdCZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:44:4a:02:bc:17:0e:c9:19:ca:05:97:d0:1e:98:d1:48:6a:
         56:b0:86:cf:03:25:22:3e:84:dc:6e:6b:aa:4a:ad:53:01:ee:
         18:ae:ad:d2:f6:f4:df:d2:2e:6d:61:b1:c9:79:93:cd:7f:43:
         cf:43:7c:55:7c:53:04:54:3e:1b:47:c9:03:c0:08:86:6b:13:
         e8:4e:43:11:16:fa:ae:e0:0c:f4:da:4d:e0:aa:46:ea:85:94:
         6a:8d:df:7f:51:fe:2c:fe:bb:c0:ce:66:68:80:b4:28:31:7c:
         7d:12:97:cc:30:df:46:4e:cc:8c:53:3b:f6:47:3e:6c:af:e5:
         60:1c:6a:ff:c1:30:70:8d:ae:f6:45:8c:f0:b9:c8:82:81:64:
         4d:3c:a9:55:a2:1b:eb:04:f9:c6:7a:ec:95:56:02:11:4b:1d:
         4a:ec:70:a2:f5:ac:2f:f1:9b:6d:94:fc:54:62:0c:ae:33:b6:
         ad:aa:75:45:53:82:fa:34:62:a8:ba:fb:72:65:7c:53:72:15:
         dc:ce:fd:e1:08:3b:49:21:60:2b:05:9e:12:74:91:b6:e5:03:
         dd:c8:bc:d8:3f:03:88:bc:d0:2b:73:27:c7:ec:ea:f8:e1:3a:
         5f:8d:46:01:d7:5e:ca:35:97:7f:bc:9e:bb:64:7b:b5:05:3b:
         95:1d:cc:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 10 18:27:01 2025 by rpki-client