This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.mft
File:                     ueqJNvjlMGO0s73w87FbKuZn7xM.mft (raw, json)
Hash identifier:          Ova31KA8YybU9aWeW5NWmO29bczE5KwLB40fa8ftK2w=
Subject key identifier:   DA:A7:73:D3:26:D3:6E:1E:25:90:0B:6F:AB:7E:63:C8:8C:59:9F:F6
Authority key identifier: B9:EA:89:36:F8:E5:30:63:B4:B3:BD:F0:F3:B1:5B:2A:E6:67:EF:13
Certificate issuer:       /CN=b9ea8936f8e53063b4b3bdf0f3b15b2ae667ef13
Certificate serial:       019B31FAB5F7D01324CD9E8040B3A275F9F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ueqJNvjlMGO0s73w87FbKuZn7xM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.mft
Manifest number:          1335
Signing time:             Thu 18 Dec 2025 15:01:12 +0000
Manifest this update:     Thu 18 Dec 2025 15:01:12 +0000
Manifest next update:     Fri 19 Dec 2025 15:01:12 +0000
Files and hashes:         1: 1-yC-3OHn3v-G1smlX40MjBLjtIk.roa (hash: a65aVWnVNxmwRG3dcoSw93hwzHCpqxRPcFAazQc55Uw=)
                          2: 1Z8mxBJ-5mF0e5QEPAGyZpCKFxU.roa (hash: 6P4lvJGk11v0OAwMwa6Dw3iNwzGZi6eZ4h8l5OgG/a4=)
                          3: 1o33mTVp-sLzAkicxLikSA75wg4.roa (hash: ed6GlmsVsZfCNGu9N0GdJBDRnv8UTZkZYrtU19ndjKI=)
                          4: 6YyTiJSPbv1UicGAUpUrIjUSl7s.roa (hash: ywn3zNCMDdDSXu4XFpg6gkYa11yzJumgJ7B2JgWvpHQ=)
                          5: 8RH3qUKE88xn5HbZw6qudmUS57M.roa (hash: 2XUgMZycB/m/voP6J2TdO00CC19oe6XDb8VlW5+rmh4=)
                          6: FnKylUr6R_VPycGaWtm0ZgdzgFs.roa (hash: anhVyOcar+oGd9A/1X9bq9qCt93XDdGRp5RsP7BWo9k=)
                          7: VCAwWZ9rCpOgRbWaR-Mt_XNvoAs.roa (hash: AOA1cevRwpbH9c1Y3qkh8PFtO7TKkCHa9V08cN+S9so=)
                          8: XvsimD_vMwygE8r08SZyeuZ8Q70.roa (hash: ythpc5lZMC9teyOxod0+e00DuCJN7i/hGKSi655eunw=)
                          9: YqK1nXW8w2q_X2z3lSICRsWfjFw.roa (hash: l725tDRDqMSX597l+gr9+lU8fQNlGlVTOUy4mlZEjNw=)
                          10: c6eHaiXiRvnVAbCikD-QIkjcWys.roa (hash: tOo0YRqhlyq81kcBT/wqHTaOL3woOVGxvlxCwePoeKQ=)
                          11: eDLnlibMvqHABUnf0cTnTXfzjsQ.roa (hash: 23lsZWpFbgTvvmDoDor5ePX92IS7k3nIwuBhFjzfmm4=)
                          12: ueqJNvjlMGO0s73w87FbKuZn7xM.crl (hash: QJQzZeu6tjAQED5070oCH7Kcak15HTXCw8m2zfg/r64=)
                          13: yhwwpxJ3TQv7n4TMvIeaFV-ZDMU.roa (hash: Cx12upzLFR9R49twlwP6YThfGCdOHNc6BXhnNgg550Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ueqJNvjlMGO0s73w87FbKuZn7xM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 19 Dec 2025 15:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:31:fa:b5:f7:d0:13:24:cd:9e:80:40:b3:a2:75:f9:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9ea8936f8e53063b4b3bdf0f3b15b2ae667ef13
        Validity
            Not Before: Dec 18 15:01:12 2025 GMT
            Not After : Dec 19 15:01:12 2025 GMT
        Subject: CN=daa773d326d36e1e25900b6fab7e63c88c599ff6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:9c:80:12:66:41:ea:c1:6b:63:89:4e:49:99:
                    b8:f0:47:bd:65:47:f9:36:c8:eb:18:da:26:f2:02:
                    8a:c7:a6:90:f6:66:ca:a2:6b:0f:ad:f4:e6:b1:22:
                    36:6c:fd:f0:ff:ee:d4:4a:73:67:1f:71:d4:f7:ad:
                    f8:cc:96:85:24:1a:1e:38:19:45:2c:2a:f0:ac:36:
                    14:41:5e:90:e8:28:70:75:0e:55:1a:49:64:a6:5b:
                    33:d7:bd:7a:b1:b7:e6:13:b0:bc:85:5a:42:38:33:
                    47:27:aa:21:b6:3f:f4:fa:3c:91:ce:b6:99:d1:ea:
                    f6:0b:95:6b:d8:01:39:3e:6e:0b:b4:ed:4f:2e:b1:
                    f1:04:1c:7e:60:11:da:7e:4f:f3:f0:c3:0f:26:24:
                    55:66:a9:57:93:07:ef:17:13:e7:0a:ca:46:18:b3:
                    1d:9f:6c:3f:e9:8b:79:ee:bc:06:1a:db:4d:fe:97:
                    7a:58:85:f9:c3:58:8b:02:48:5d:3f:dc:75:67:b5:
                    e1:e8:73:1f:bc:53:bf:d5:66:ac:8b:67:46:f8:89:
                    de:f1:c2:02:6c:18:01:18:80:73:8b:fc:22:eb:19:
                    cb:9e:c8:af:11:a6:f1:a1:b2:da:78:65:17:65:d4:
                    78:5c:e5:d9:c6:40:6e:e9:a2:86:bc:e3:3d:fe:19:
                    ac:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:A7:73:D3:26:D3:6E:1E:25:90:0B:6F:AB:7E:63:C8:8C:59:9F:F6
            X509v3 Authority Key Identifier:
                keyid:B9:EA:89:36:F8:E5:30:63:B4:B3:BD:F0:F3:B1:5B:2A:E6:67:EF:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ueqJNvjlMGO0s73w87FbKuZn7xM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:88:a3:66:79:60:16:89:c7:8b:b9:33:5e:30:86:8d:e8:9d:
         d8:dd:3e:a3:de:a7:86:1b:43:94:a7:5d:63:ab:5a:a8:09:0f:
         9d:fa:11:11:ae:42:2f:a5:43:8c:fe:4f:49:33:a6:41:9a:84:
         c6:b7:3b:90:65:18:9a:5d:04:f0:65:66:5d:d7:09:57:de:3a:
         03:ec:76:6b:b8:d2:be:43:e0:a1:4c:99:7a:48:29:85:79:5a:
         23:07:f2:2f:6b:aa:1c:ed:e1:02:8f:1f:ac:82:f4:7e:13:27:
         d6:a1:c4:a4:57:f1:63:ee:45:67:f4:47:bf:30:e0:f4:1b:c8:
         4b:a5:3c:55:a2:af:a9:65:9a:f5:76:13:8f:49:c5:63:55:c2:
         5e:d3:4a:86:3f:cc:0f:86:71:35:a0:ce:db:7b:c2:c4:ed:32:
         43:fb:a9:bc:3d:3b:43:2d:f8:de:78:5a:28:98:41:d0:95:5b:
         85:c8:7c:19:c9:09:71:50:38:29:e6:ec:61:b1:e2:8c:ef:73:
         b3:15:7c:3a:f4:3e:9b:dc:d1:27:4e:42:4a:05:63:71:a1:5b:
         3a:bb:9f:11:ee:8c:0d:a4:f3:e0:4b:f8:2a:3d:e5:a8:35:90:
         b9:95:ba:33:52:35:29:2e:de:34:5d:63:27:48:4a:9f:cd:58:
         87:51:4a:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 00:55:21 2025 by rpki-client