This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/8b4b1a-ea4f-42e1-b942-b119c258cfad/1/u-LMINabMN3hjsDQAs4vkUm_sG0.mft
File:                     u-LMINabMN3hjsDQAs4vkUm_sG0.mft (raw, json)
Hash identifier:          XSrmIznzCOavxXueWwsZcnWjg6BF/5ecEQ1wsuUxVMI=
Subject key identifier:   9B:5C:5D:E4:C5:95:64:BE:3E:C5:82:12:99:E2:1C:90:6B:9C:E7:F3
Authority key identifier: BB:E2:CC:20:D6:9B:30:DD:E1:8E:C0:D0:02:CE:2F:91:49:BF:B0:6D
Certificate issuer:       /CN=bbe2cc20d69b30dde18ec0d002ce2f9149bfb06d
Certificate serial:       019B26D22E111EE69EEDF962FE0189D3039C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u-LMINabMN3hjsDQAs4vkUm_sG0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/8b4b1a-ea4f-42e1-b942-b119c258cfad/1/u-LMINabMN3hjsDQAs4vkUm_sG0.mft
Manifest number:          021E
Signing time:             Tue 16 Dec 2025 11:01:07 +0000
Manifest this update:     Tue 16 Dec 2025 11:01:07 +0000
Manifest next update:     Wed 17 Dec 2025 11:01:07 +0000
Files and hashes:         1: 8ci54VVYciz_jxxq2gzGcTqq324.roa (hash: m8iDJ2nBFQ5dEA0SAfYW/kJtrFJRgfeU1s8OGK3JtLU=)
                          2: YFmR0Oe188-ep2EXK9-6L2jYCaY.roa (hash: FdIneObMEz6RRhDmxTXHgt4x9EaEt8DWTQFHXHKwhy0=)
                          3: f3paRU35mmDgdqeIi2pybryiSeI.roa (hash: hU3XgLvVJfMVc1Q29gOo4Y2tlEk0o2lnxKfiCdIau/A=)
                          4: trN1o901j4dwBUGmgorKM0dgbBc.roa (hash: OGHkh9XbmTbGJYHk7Ch716n4FnlQyUWpNyyXhbOOHGM=)
                          5: u-LMINabMN3hjsDQAs4vkUm_sG0.crl (hash: /coPqLvw979WObUJH0sKE6I6lftZD5KaP4QwYpp45+0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/8b4b1a-ea4f-42e1-b942-b119c258cfad/1/u-LMINabMN3hjsDQAs4vkUm_sG0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/8b4b1a-ea4f-42e1-b942-b119c258cfad/1/u-LMINabMN3hjsDQAs4vkUm_sG0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/u-LMINabMN3hjsDQAs4vkUm_sG0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 17 Dec 2025 11:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:26:d2:2e:11:1e:e6:9e:ed:f9:62:fe:01:89:d3:03:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bbe2cc20d69b30dde18ec0d002ce2f9149bfb06d
        Validity
            Not Before: Dec 16 11:01:07 2025 GMT
            Not After : Dec 17 11:01:07 2025 GMT
        Subject: CN=9b5c5de4c59564be3ec5821299e21c906b9ce7f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f9:e8:25:69:12:dd:7c:d9:49:f7:4f:db:8d:
                    e0:bc:a5:e2:9d:2c:12:82:85:2b:dc:73:a5:5a:b2:
                    e2:e0:32:4d:34:a8:32:62:b7:1f:a8:a3:f7:9b:f1:
                    2a:3a:ca:fb:e3:97:4f:15:d2:62:45:6a:07:72:c7:
                    27:4b:6d:80:2a:33:c3:8e:99:59:8f:c4:b7:9e:30:
                    30:27:2e:6e:cb:6c:38:0e:80:47:11:fa:81:dc:ef:
                    17:a3:74:b3:b5:2b:4d:ca:c1:61:ea:4d:86:35:03:
                    47:4a:f9:7d:b4:3f:7f:5f:ac:16:f6:77:4c:63:c4:
                    a5:41:73:a0:ce:e4:28:36:25:74:2f:1c:75:90:02:
                    f7:9e:8c:b9:c6:c2:74:78:15:c6:d1:54:8c:cd:e1:
                    39:e3:d8:ac:85:0c:39:38:46:fc:d1:69:74:f1:94:
                    1a:82:46:1b:1d:ea:ea:6a:5f:90:13:fd:16:cd:fe:
                    cd:1c:68:31:36:ed:26:56:4f:67:8c:dc:28:d2:3d:
                    b2:e3:ae:c4:09:f3:5e:9d:cb:2a:9e:b9:77:93:ab:
                    b8:04:8a:57:ea:63:a9:88:b8:c3:8c:f3:b2:c5:5f:
                    20:48:db:67:7f:1f:52:5c:a2:db:d0:87:67:13:02:
                    84:63:ea:92:b1:0a:4c:ee:2c:c9:a3:39:d5:71:24:
                    15:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:5C:5D:E4:C5:95:64:BE:3E:C5:82:12:99:E2:1C:90:6B:9C:E7:F3
            X509v3 Authority Key Identifier:
                keyid:BB:E2:CC:20:D6:9B:30:DD:E1:8E:C0:D0:02:CE:2F:91:49:BF:B0:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u-LMINabMN3hjsDQAs4vkUm_sG0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/8b4b1a-ea4f-42e1-b942-b119c258cfad/1/u-LMINabMN3hjsDQAs4vkUm_sG0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/8b4b1a-ea4f-42e1-b942-b119c258cfad/1/u-LMINabMN3hjsDQAs4vkUm_sG0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:81:cc:c0:f1:b0:31:01:7b:eb:22:a7:8a:57:a6:31:14:79:
         22:39:c8:32:26:b2:52:98:93:6f:0d:3a:f4:a9:9e:9e:f8:6e:
         9b:20:fe:98:42:61:7a:d5:e0:ea:1a:62:9a:32:77:5e:f5:e8:
         76:92:98:61:56:99:94:a9:bb:2f:41:83:b8:2e:4f:e6:1d:8f:
         b6:d7:a7:7b:a4:06:8a:93:19:09:e4:9d:15:56:f1:c0:d9:3e:
         9f:3a:27:7d:86:de:a2:5f:6f:7a:9b:3f:73:cb:3a:eb:26:d4:
         23:8b:6d:c4:39:39:4e:26:5f:1c:00:82:3f:56:ae:7e:94:6e:
         e6:30:ca:68:70:df:8e:48:a8:1e:68:cf:99:ea:4d:39:d8:35:
         04:eb:92:1d:bb:31:68:5d:4e:35:e5:a8:c3:35:f2:8c:17:c8:
         66:4f:4b:50:35:0d:2e:1b:5b:18:2d:09:87:de:5e:22:02:58:
         a2:9f:db:a2:de:d0:69:9d:86:fb:08:fe:ab:cf:71:80:b9:81:
         93:9d:6c:bf:39:46:97:21:7c:95:91:ae:9f:c0:95:55:71:d7:
         64:b1:7e:32:e4:ff:03:27:4a:36:1b:94:b1:84:37:39:58:dc:
         59:5f:3e:b6:d1:08:41:1e:30:c5:1e:e2:40:55:45:00:a8:36:
         1e:b8:5e:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 20:24:18 2025 by rpki-client