This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/285850-7551-4229-87b6-3a4468c4dfdf/1/uYYCjJ_rbxQrP-y2Rmf0iHS6nDc.mft
File:                     uYYCjJ_rbxQrP-y2Rmf0iHS6nDc.mft (raw, json)
Hash identifier:          2tXJRBCl1XejQ+szmK6TvtskvF2aDyg361chDVoQhns=
Subject key identifier:   59:FE:85:B9:50:B2:D5:27:7A:C4:B1:0D:B6:C7:B2:03:73:7A:78:37
Authority key identifier: B9:86:02:8C:9F:EB:6F:14:2B:3F:EC:B6:46:67:F4:88:74:BA:9C:37
Certificate issuer:       /CN=b986028c9feb6f142b3fecb64667f48874ba9c37
Certificate serial:       019B38D85CEF38D4F59CB004AE799B6C3A9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uYYCjJ_rbxQrP-y2Rmf0iHS6nDc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/285850-7551-4229-87b6-3a4468c4dfdf/1/uYYCjJ_rbxQrP-y2Rmf0iHS6nDc.mft
Manifest number:          1786
Signing time:             Fri 19 Dec 2025 23:01:02 +0000
Manifest this update:     Fri 19 Dec 2025 23:01:02 +0000
Manifest next update:     Sat 20 Dec 2025 23:01:02 +0000
Files and hashes:         1: 8zI-HN-JYFyfgILvr9zfTCbs0ds.roa (hash: 1sTx3tescRJTi+8dNgjbNQgEYulQVlIWJfqn2hjKmvE=)
                          2: Ck8KWAOp0OiApi8sM8DlwNi2iNw.roa (hash: AtNRUIXDWlWkvPw9HA278DuXcNcCmUIBAWFIiOSvpUQ=)
                          3: q-ihxTx20OUAnVHNFFcYB5dSVFg.roa (hash: E2e3aiYkFxz102ztqUxfhjzNFXG410Fy4awppSQ4du4=)
                          4: uYYCjJ_rbxQrP-y2Rmf0iHS6nDc.crl (hash: th9x64J1/KaIUmqIIIVe3Zr+CjvMuGf2feGjAQlsWzA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/285850-7551-4229-87b6-3a4468c4dfdf/1/uYYCjJ_rbxQrP-y2Rmf0iHS6nDc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/285850-7551-4229-87b6-3a4468c4dfdf/1/uYYCjJ_rbxQrP-y2Rmf0iHS6nDc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uYYCjJ_rbxQrP-y2Rmf0iHS6nDc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Dec 2025 16:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:38:d8:5c:ef:38:d4:f5:9c:b0:04:ae:79:9b:6c:3a:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b986028c9feb6f142b3fecb64667f48874ba9c37
        Validity
            Not Before: Dec 19 23:01:02 2025 GMT
            Not After : Dec 20 23:01:02 2025 GMT
        Subject: CN=59fe85b950b2d5277ac4b10db6c7b203737a7837
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:c7:64:1e:b8:1d:7c:d2:8b:cf:c9:2a:d2:e3:
                    e4:2d:2d:67:fa:a4:fb:e6:3c:9e:65:dd:38:2c:20:
                    64:47:38:7e:bd:12:07:ad:54:c2:b3:d6:12:8a:17:
                    2c:02:6f:89:13:22:57:a9:ee:cc:f8:35:f1:b7:66:
                    b7:a7:5b:c5:05:50:13:42:a8:1f:b5:1a:b8:c9:9e:
                    20:aa:5b:7f:0b:30:8e:c0:11:bc:d0:24:a0:ab:76:
                    01:02:79:e4:17:17:d8:c8:e5:44:c0:84:91:9f:95:
                    6d:a6:62:28:d8:02:51:11:d8:e7:f0:b6:4f:b8:01:
                    a1:70:03:2f:36:e5:45:94:96:f9:4a:7d:75:bc:7c:
                    39:fd:17:42:54:4e:ae:60:19:b0:ef:6f:39:e1:32:
                    d2:88:6f:67:70:07:d2:4c:d2:e2:a8:c8:5c:24:06:
                    09:c9:07:dc:c9:03:22:5f:e7:04:97:8e:6f:54:b5:
                    bf:92:fe:d9:da:b0:e5:d7:5f:cc:fa:81:00:94:71:
                    ff:ee:3c:19:c5:4d:a3:e5:ab:e3:09:94:c0:ea:78:
                    49:ae:ca:bd:9b:ee:c5:7f:7b:f6:fe:a5:cf:f8:48:
                    1f:cc:3c:0e:b2:e7:d6:1e:a0:be:87:70:bd:cb:9a:
                    85:c8:95:66:bc:69:60:33:6c:17:de:cf:a6:48:f2:
                    e9:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:FE:85:B9:50:B2:D5:27:7A:C4:B1:0D:B6:C7:B2:03:73:7A:78:37
            X509v3 Authority Key Identifier:
                keyid:B9:86:02:8C:9F:EB:6F:14:2B:3F:EC:B6:46:67:F4:88:74:BA:9C:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uYYCjJ_rbxQrP-y2Rmf0iHS6nDc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/285850-7551-4229-87b6-3a4468c4dfdf/1/uYYCjJ_rbxQrP-y2Rmf0iHS6nDc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/285850-7551-4229-87b6-3a4468c4dfdf/1/uYYCjJ_rbxQrP-y2Rmf0iHS6nDc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:b8:dd:51:fa:b5:1f:a6:6b:dc:3a:4a:14:7d:da:08:e0:14:
         35:5a:d6:1c:bc:61:f4:06:b0:a5:0c:52:db:c4:2d:a4:ee:7c:
         46:6e:f5:8c:cb:bc:cc:4b:e7:60:55:4f:97:45:a0:b9:27:a8:
         7e:6f:50:f3:31:40:f2:b7:e0:8c:b8:04:bf:d7:b3:86:89:dc:
         58:90:36:f4:81:dd:cf:55:2c:f8:e3:66:35:fa:f2:5a:4c:17:
         4d:fa:36:fc:96:c6:81:fe:7b:14:3b:8d:c3:4c:39:c8:1a:d9:
         ed:d0:35:b3:32:3b:7a:ad:12:9b:a1:b7:d6:76:37:61:49:25:
         40:08:d1:e1:dc:21:4c:17:e7:ed:5b:cd:ed:1f:d2:bf:2b:b2:
         82:43:cb:86:7f:c3:66:88:43:4f:7e:1e:f0:e1:ee:49:4d:2a:
         27:64:e5:d1:ec:0b:cd:12:10:25:53:6e:0f:aa:0a:b2:36:b4:
         0b:d2:7e:44:77:b6:ed:ad:5d:34:31:92:a2:f2:e0:91:a9:cb:
         b0:ee:a4:8c:31:4e:7d:01:95:db:bc:10:d6:47:f8:17:bd:32:
         62:ea:8e:cd:05:1c:dd:55:22:be:e9:51:56:d6:6a:e2:f9:8d:
         e4:87:5b:da:72:2d:18:c1:36:b4:3e:35:d6:26:64:6a:a9:f6:
         18:74:7e:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZs42FzvONT1nLAErnmbbDqcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5ODYwMjhjOWZlYjZmMTQyYjNmZWNiNjQ2NjdmNDg4NzRi
YTljMzcwHhcNMjUxMjE5MjMwMTAyWhcNMjUxMjIwMjMwMTAyWjAzMTEwLwYDVQQD
Eyg1OWZlODViOTUwYjJkNTI3N2FjNGIxMGRiNmM3YjIwMzczN2E3ODM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq8dkHrgdfNKLz8kq0uPkLS1n+qT7
5jyeZd04LCBkRzh+vRIHrVTCs9YSihcsAm+JEyJXqe7M+DXxt2a3p1vFBVATQqgf
tRq4yZ4gqlt/CzCOwBG80CSgq3YBAnnkFxfYyOVEwISRn5VtpmIo2AJREdjn8LZP
uAGhcAMvNuVFlJb5Sn11vHw5/RdCVE6uYBmw72854TLSiG9ncAfSTNLiqMhcJAYJ
yQfcyQMiX+cEl45vVLW/kv7Z2rDl11/M+oEAlHH/7jwZxU2j5avjCZTA6nhJrsq9
m+7Ff3v2/qXP+EgfzDwOsufWHqC+h3C9y5qFyJVmvGlgM2wX3s+mSPLpPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFn+hblQstUnesSxDbbHsgNzeng3MB8GA1UdIwQY
MBaAFLmGAoyf628UKz/stkZn9Ih0upw3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVlZQ2pKX3JieFFyUC15MlJtZjBpSFM2bkRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS8yODU4NTAtNzU1MS00MjI5LTg3YjYt
M2E0NDY4YzRkZmRmLzEvdVlZQ2pKX3JieFFyUC15MlJtZjBpSFM2bkRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS8yODU4NTAtNzU1MS00MjI5LTg3YjYtM2E0NDY4YzRkZmRm
LzEvdVlZQ2pKX3JieFFyUC15MlJtZjBpSFM2bkRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXbjdUfq1
H6Zr3DpKFH3aCOAUNVrWHLxh9AawpQxS28QtpO58Rm71jMu8zEvnYFVPl0WguSeo
fm9Q8zFA8rfgjLgEv9ezhoncWJA29IHdz1Us+ONmNfryWkwXTfo2/JbGgf57FDuN
w0w5yBrZ7dA1szI7eq0Sm6G31nY3YUklQAjR4dwhTBfn7VvN7R/SvyuygkPLhn/D
ZohDT34e8OHuSU0qJ2Tl0ewLzRIQJVNuD6oKsja0C9J+RHe27a1dNDGSovLgkanL
sO6kjDFOfQGV27wQ1kf4F70yYuqOzQUc3VUivulRVtZq4vmN5Idb2nItGME2tD41
1iZkaqn2GHR+Pw==
-----END CERTIFICATE-----
Generated at Sat Dec 20 00:16:24 2025 by rpki-client