This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/d92557-8c46-482c-91a8-c1e974bed12e/1/Ub-0Y1O_zM_5QS3L3UgPGbTJg5c.mft
File:                     Ub-0Y1O_zM_5QS3L3UgPGbTJg5c.mft (raw, json)
Hash identifier:          dox7GsPAFYKoi7l4InD4KJFWaDHapPx/Lq76F1dQ8mQ=
Subject key identifier:   FA:95:CF:3A:58:3A:0F:8D:19:7A:EE:14:15:B0:38:4D:BB:E4:D5:12
Authority key identifier: 51:BF:B4:63:53:BF:CC:CF:F9:41:2D:CB:DD:48:0F:19:B4:C9:83:97
Certificate issuer:       /CN=51bfb46353bfcccff9412dcbdd480f19b4c98397
Certificate serial:       019B0F3797B7C89B19EA9991D29474F6F05F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ub-0Y1O_zM_5QS3L3UgPGbTJg5c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/d92557-8c46-482c-91a8-c1e974bed12e/1/Ub-0Y1O_zM_5QS3L3UgPGbTJg5c.mft
Manifest number:          078B
Signing time:             Thu 11 Dec 2025 21:01:00 +0000
Manifest this update:     Thu 11 Dec 2025 21:01:00 +0000
Manifest next update:     Fri 12 Dec 2025 21:01:00 +0000
Files and hashes:         1: EDb9Liv3zA_92bId7joWHYrQzoo.roa (hash: A16x8qUxqiR7ERWaWAaG6LaaDTVQHFQ/x2nUxjREXXk=)
                          2: Ub-0Y1O_zM_5QS3L3UgPGbTJg5c.crl (hash: 8hMikL9nCLWmDVVesQf/d2gC6PJAOSvGCYjb1eJH9tI=)
                          3: Xa29r_CsUUcUzEz0BNLTpiSiPBY.roa (hash: 53O4SVjNPzjqjz8qQLc5DlGX0iO3fhbcYi4JddJ19BE=)
                          4: nBuwfBTi3z0zJL6pv11ndmM21yA.roa (hash: ghnQu5Ks9AwvTzzenho3SXArjUF3Z2Fr2IytACYgM0s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/d92557-8c46-482c-91a8-c1e974bed12e/1/Ub-0Y1O_zM_5QS3L3UgPGbTJg5c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/d92557-8c46-482c-91a8-c1e974bed12e/1/Ub-0Y1O_zM_5QS3L3UgPGbTJg5c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ub-0Y1O_zM_5QS3L3UgPGbTJg5c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Dec 2025 14:45:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:0f:37:97:b7:c8:9b:19:ea:99:91:d2:94:74:f6:f0:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51bfb46353bfcccff9412dcbdd480f19b4c98397
        Validity
            Not Before: Dec 11 21:01:00 2025 GMT
            Not After : Dec 12 21:01:00 2025 GMT
        Subject: CN=fa95cf3a583a0f8d197aee1415b0384dbbe4d512
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:48:1d:64:e0:b5:3b:d6:8e:e5:f5:36:66:a7:
                    83:8d:94:d6:e0:f6:35:af:b3:61:e0:c9:76:88:c5:
                    f3:14:ec:36:85:c9:6e:79:74:bf:6f:40:39:2a:2f:
                    0a:dc:a4:b3:c1:e5:58:59:29:45:d4:f4:e6:fc:5d:
                    31:60:3c:1e:08:be:b1:5b:ad:36:5d:ab:7e:8f:94:
                    95:95:e6:a6:23:ca:87:b2:cf:98:26:5b:e6:ea:64:
                    8c:5b:93:ee:2f:c4:fb:1e:b0:cd:7e:47:77:d7:e6:
                    e1:79:29:a1:55:e5:7c:7e:0b:05:bc:d0:f5:a8:c6:
                    f7:fa:19:d8:42:81:9c:50:34:03:e0:dc:12:cd:3f:
                    4b:f4:64:02:ce:91:9b:ec:91:02:7a:63:ef:5d:92:
                    e9:65:5a:a4:fc:91:58:fe:08:04:43:06:99:4f:ad:
                    be:51:56:f3:67:cf:7a:13:65:ea:0c:75:12:33:1c:
                    d7:5e:8e:8d:18:4b:f6:29:cc:c4:f2:ae:31:78:05:
                    dd:42:d5:4f:21:ab:9a:b7:a5:56:a3:0c:d5:00:e9:
                    70:6e:c3:1c:c7:62:9e:df:2a:50:90:85:84:73:cc:
                    06:1c:d6:aa:c7:70:3c:71:fc:e5:ea:d1:5d:ec:66:
                    ed:22:aa:8c:83:6d:6d:a0:ce:83:da:48:6e:c6:87:
                    60:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:95:CF:3A:58:3A:0F:8D:19:7A:EE:14:15:B0:38:4D:BB:E4:D5:12
            X509v3 Authority Key Identifier:
                keyid:51:BF:B4:63:53:BF:CC:CF:F9:41:2D:CB:DD:48:0F:19:B4:C9:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ub-0Y1O_zM_5QS3L3UgPGbTJg5c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/d92557-8c46-482c-91a8-c1e974bed12e/1/Ub-0Y1O_zM_5QS3L3UgPGbTJg5c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/d92557-8c46-482c-91a8-c1e974bed12e/1/Ub-0Y1O_zM_5QS3L3UgPGbTJg5c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:fd:27:0b:fa:c7:57:ff:f7:6e:13:27:21:62:5d:be:ff:2c:
         69:d9:a4:60:e9:aa:07:c1:0c:16:4c:91:20:5d:e0:de:76:d0:
         e5:fa:ce:3c:45:da:b1:16:f3:f3:1e:82:43:0b:14:1e:e0:a0:
         57:27:fb:7b:f1:02:fe:04:7f:a9:db:bc:96:c2:05:13:95:89:
         1b:7c:0b:23:b0:0d:69:e1:b8:17:7a:78:34:43:5a:c5:da:64:
         63:58:61:38:18:92:df:68:eb:a2:58:90:9d:18:5e:ef:34:00:
         b8:7f:46:e0:4b:19:99:ba:59:ab:c2:a6:2a:35:36:0a:9c:1f:
         f7:42:a7:7d:2f:9f:9f:52:1a:61:a6:df:32:10:af:65:e0:06:
         68:15:47:21:25:5a:7c:5c:5b:09:5a:6a:b5:76:82:73:92:cb:
         70:61:d8:e9:24:77:fb:62:67:99:72:98:88:87:6e:35:60:e0:
         21:a7:9b:64:48:46:74:73:87:26:4f:87:54:1a:f5:31:a8:46:
         0b:95:86:eb:ea:1a:72:fd:46:64:c2:21:51:ae:37:b8:c7:a7:
         e5:33:ce:d5:ba:eb:8f:b1:03:0f:e2:93:18:db:f0:71:63:7c:
         f6:d9:19:40:8d:b1:45:b8:3a:2d:6d:54:1f:0f:87:16:f3:6f:
         e4:b5:c5:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 12 00:01:29 2025 by rpki-client