This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/3d3b56-e4e1-4c07-99e6-2fdfe3507a2f/1/Urq202DpPZj86eeIjlZL1GTonoo.mft
File:                     Urq202DpPZj86eeIjlZL1GTonoo.mft (raw, json)
Hash identifier:          1CLi0NfjIs/MduwJp4KZD1DgMJgGqEmX0SGsKf6p4Y8=
Subject key identifier:   AB:2A:D4:87:F2:6A:C2:AB:44:43:5D:1A:9F:A4:8B:68:18:1F:D9:45
Authority key identifier: 52:BA:B6:D3:60:E9:3D:98:FC:E9:E7:88:8E:56:4B:D4:64:E8:9E:8A
Certificate issuer:       /CN=52bab6d360e93d98fce9e7888e564bd464e89e8a
Certificate serial:       019B5ABF54942D1680B7A06DE116D3861DC4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Urq202DpPZj86eeIjlZL1GTonoo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/3d3b56-e4e1-4c07-99e6-2fdfe3507a2f/1/Urq202DpPZj86eeIjlZL1GTonoo.mft
Manifest number:          0EBD
Signing time:             Fri 26 Dec 2025 13:00:46 +0000
Manifest this update:     Fri 26 Dec 2025 13:00:46 +0000
Manifest next update:     Sat 27 Dec 2025 13:00:46 +0000
Files and hashes:         1: B-lR09vEcTp8KKlqK97Mr1BSe9k.roa (hash: Es3L421jlBfBefISWEPBSuTEyJhc2FSpGfD+ySdZNXs=)
                          2: Urq202DpPZj86eeIjlZL1GTonoo.crl (hash: Oo0+GTaIiamiqLYa1flwl3UQDlceD9KV1bcoA5TeFR0=)
                          3: qIkK_6-F6txR9niUUOebhF6pfjI.roa (hash: Yqd5GO2kfOv5jA1UhsukLQGyb/CHFf/DnTRtWG2ci40=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/3d3b56-e4e1-4c07-99e6-2fdfe3507a2f/1/Urq202DpPZj86eeIjlZL1GTonoo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/3d3b56-e4e1-4c07-99e6-2fdfe3507a2f/1/Urq202DpPZj86eeIjlZL1GTonoo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Urq202DpPZj86eeIjlZL1GTonoo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 27 Dec 2025 06:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:5a:bf:54:94:2d:16:80:b7:a0:6d:e1:16:d3:86:1d:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52bab6d360e93d98fce9e7888e564bd464e89e8a
        Validity
            Not Before: Dec 26 13:00:46 2025 GMT
            Not After : Dec 27 13:00:46 2025 GMT
        Subject: CN=ab2ad487f26ac2ab44435d1a9fa48b68181fd945
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:1c:8d:6a:c2:6f:e5:9e:d5:22:12:01:1c:ab:
                    83:f5:cb:4a:df:56:d5:f7:bc:b3:88:89:77:b8:88:
                    5a:a7:36:bd:7b:c0:b1:c2:33:ff:21:c2:6d:24:51:
                    70:53:c4:3c:be:d5:30:3f:4e:94:db:2e:97:08:2c:
                    7d:92:da:c4:0f:9b:36:78:67:dd:ef:e4:51:6a:2f:
                    49:68:a2:f1:71:50:8c:b2:3c:97:3b:fb:ba:92:d2:
                    71:a3:06:75:05:b5:d2:52:ac:07:89:c0:48:44:cf:
                    2c:ab:69:3c:eb:b0:f1:d0:5b:9b:f1:e9:a2:1e:2f:
                    ee:ae:49:51:99:9e:04:e3:b0:94:ff:6a:8f:83:33:
                    c0:cf:c6:77:6b:10:b4:39:59:bd:5f:c2:5a:0a:80:
                    9a:9a:7d:8c:4b:4f:31:95:8f:a4:a5:3e:10:ac:b4:
                    be:8f:72:41:e7:02:fa:a3:ff:83:a2:7f:88:d4:90:
                    41:a0:51:e0:22:74:26:ed:c8:eb:21:7e:65:e1:0e:
                    57:e9:4d:c0:f8:91:92:fb:54:c5:60:71:2c:46:38:
                    6c:ba:60:6e:62:a8:ed:aa:ae:9a:8e:14:a3:c6:b1:
                    c3:07:70:38:cc:f6:23:24:5e:2f:a7:f4:f3:4f:2a:
                    82:78:8a:9a:c6:a3:db:ec:ed:1d:39:91:04:8b:86:
                    2f:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:2A:D4:87:F2:6A:C2:AB:44:43:5D:1A:9F:A4:8B:68:18:1F:D9:45
            X509v3 Authority Key Identifier:
                keyid:52:BA:B6:D3:60:E9:3D:98:FC:E9:E7:88:8E:56:4B:D4:64:E8:9E:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Urq202DpPZj86eeIjlZL1GTonoo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/3d3b56-e4e1-4c07-99e6-2fdfe3507a2f/1/Urq202DpPZj86eeIjlZL1GTonoo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/3d3b56-e4e1-4c07-99e6-2fdfe3507a2f/1/Urq202DpPZj86eeIjlZL1GTonoo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:7c:e7:f0:50:3c:aa:46:ab:29:16:14:12:19:c2:68:2d:1a:
         0f:c0:77:12:64:39:f9:68:b9:6c:35:2a:73:92:97:e3:77:48:
         05:27:85:99:6e:78:31:a1:b4:e9:58:d4:a3:06:d7:1c:be:34:
         41:ad:44:8d:a1:91:02:61:3b:aa:b7:c7:11:3e:43:35:bd:e7:
         b9:37:41:ca:02:1e:32:39:9b:d6:53:e5:3f:95:21:cd:6d:d0:
         26:4b:b5:7f:de:3d:32:2a:b8:3b:69:e9:08:22:4b:2a:30:30:
         db:ed:34:a0:d1:e3:16:e3:3c:a3:43:ca:49:03:cb:a4:65:3e:
         3a:93:56:1f:fe:0a:ac:7f:ea:dc:ee:fa:21:13:9b:5f:d3:a8:
         e5:4b:f1:37:cd:91:90:0c:4a:3e:fe:7e:57:6b:04:a3:db:55:
         b5:3c:dd:d8:52:0f:a8:d1:cd:0a:a0:25:51:b9:8a:5e:9d:93:
         66:47:2f:e2:8e:d5:94:33:1f:75:d2:c8:69:64:0b:1e:f0:a0:
         10:f0:93:f5:4c:44:c1:19:ec:de:5a:a5:9e:f4:c9:3f:b4:d3:
         a7:f4:41:39:89:9a:b0:70:aa:05:85:0b:6b:08:6a:2b:75:a3:
         d6:e5:2b:2f:5c:2d:9a:0d:53:2f:0c:f4:ea:09:94:25:d0:8a:
         e1:7a:26:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 26 15:44:19 2025 by rpki-client