This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/311bc5-3f36-4d5e-abde-b8da89406bed/1/UuAiJP-5cRcuSTXtfdll0RVQibY.mft
File:                     UuAiJP-5cRcuSTXtfdll0RVQibY.mft (raw, json)
Hash identifier:          UHuafrVsB34+R7SUGWvnGN6kFvN5SuC8qM0f0oGnDps=
Subject key identifier:   C6:2E:B4:5F:99:D1:64:DF:6D:62:A3:38:7F:21:8F:49:FA:C9:0D:25
Authority key identifier: 52:E0:22:24:FF:B9:71:17:2E:49:35:ED:7D:D9:65:D1:15:50:89:B6
Certificate issuer:       /CN=52e02224ffb971172e4935ed7dd965d1155089b6
Certificate serial:       019B3945ECD617946EBAE729BF564D2A664E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UuAiJP-5cRcuSTXtfdll0RVQibY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/311bc5-3f36-4d5e-abde-b8da89406bed/1/UuAiJP-5cRcuSTXtfdll0RVQibY.mft
Manifest number:          1112
Signing time:             Sat 20 Dec 2025 01:00:42 +0000
Manifest this update:     Sat 20 Dec 2025 01:00:42 +0000
Manifest next update:     Sun 21 Dec 2025 01:00:42 +0000
Files and hashes:         1: 8g7txje9SoqKQ2otzBwN4bLks6E.roa (hash: jScybjiDRqy1KfNxgfGU+W1leoiKzswBB30SIf7izkk=)
                          2: E4EhM0-kA25MP39S_T3GJCpO3Pw.roa (hash: hTsswn0ssoYNPfeB4crcap6/QoIOzl9xyRnuZFRerT0=)
                          3: UuAiJP-5cRcuSTXtfdll0RVQibY.crl (hash: 0uahvqLTDP1u5V8KQTR9DL26NgcHgREki1tMeFe153c=)
                          4: XAWoF1o6RF-O0CnxEu5_WiGXOA0.roa (hash: HOK/I+6RekhxtoM3dVSYk41KWy3U6Z5NuhquO1H0w+A=)
                          5: xRvop4eDwIlWec9OLfdUtV2OZS4.roa (hash: dMqiD2K0LVdcRyi1ti46JUn48ZtCTxuc9WQCXxg9omI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/311bc5-3f36-4d5e-abde-b8da89406bed/1/UuAiJP-5cRcuSTXtfdll0RVQibY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/311bc5-3f36-4d5e-abde-b8da89406bed/1/UuAiJP-5cRcuSTXtfdll0RVQibY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UuAiJP-5cRcuSTXtfdll0RVQibY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Dec 2025 17:13:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:39:45:ec:d6:17:94:6e:ba:e7:29:bf:56:4d:2a:66:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52e02224ffb971172e4935ed7dd965d1155089b6
        Validity
            Not Before: Dec 20 01:00:42 2025 GMT
            Not After : Dec 21 01:00:42 2025 GMT
        Subject: CN=c62eb45f99d164df6d62a3387f218f49fac90d25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ec:b4:f2:d9:c8:49:19:93:a3:9a:51:c0:31:
                    5d:16:e0:6a:23:9e:21:53:fb:1c:47:3e:41:b3:02:
                    3a:19:a1:91:d1:de:41:ba:4a:c5:83:b5:11:1a:29:
                    c8:21:17:a4:f8:5d:e5:fd:37:f8:91:79:68:34:fd:
                    8d:9b:48:46:f3:11:60:f7:01:b4:5d:a6:01:35:dd:
                    6f:0b:8f:1a:44:17:90:33:8c:44:7f:7a:35:ea:17:
                    00:84:ff:e7:13:58:b7:7c:a9:b6:0f:97:bb:ac:1d:
                    54:87:43:64:19:35:cc:ef:b0:28:e7:a7:97:99:e5:
                    33:e9:38:be:80:18:f7:a2:b8:8c:48:54:d1:22:54:
                    db:a8:b2:49:f8:ad:8e:18:45:70:13:74:98:6b:33:
                    dd:7b:61:30:43:74:e2:70:02:46:e9:2c:7f:eb:0e:
                    c9:94:95:88:e9:5a:b6:35:39:66:e0:f4:49:d6:09:
                    3b:47:f7:fd:ea:c7:ad:73:b5:aa:25:61:15:28:e6:
                    43:0f:35:35:0c:4c:7b:2f:3a:a3:ce:8b:80:d1:b0:
                    b2:95:05:dd:7f:cf:cd:2b:54:be:8d:f3:3f:78:f8:
                    0f:22:70:14:4d:eb:8e:f6:f6:8e:4f:af:18:61:bb:
                    7f:b1:0d:19:38:21:55:d7:3f:9b:95:28:2a:0c:a8:
                    3b:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:2E:B4:5F:99:D1:64:DF:6D:62:A3:38:7F:21:8F:49:FA:C9:0D:25
            X509v3 Authority Key Identifier:
                keyid:52:E0:22:24:FF:B9:71:17:2E:49:35:ED:7D:D9:65:D1:15:50:89:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UuAiJP-5cRcuSTXtfdll0RVQibY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/311bc5-3f36-4d5e-abde-b8da89406bed/1/UuAiJP-5cRcuSTXtfdll0RVQibY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/311bc5-3f36-4d5e-abde-b8da89406bed/1/UuAiJP-5cRcuSTXtfdll0RVQibY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:dc:c2:68:c8:3a:b2:b5:7b:1f:b6:73:94:c7:c2:92:0c:bc:
         88:3a:b8:8b:2a:72:3c:37:b6:ca:f8:b0:87:d6:61:87:4d:28:
         2f:c6:c9:96:60:53:5e:c5:eb:20:29:4a:8c:46:d4:ff:47:df:
         78:23:21:78:77:a4:97:d5:82:d6:85:7c:8e:07:f9:b8:e2:c1:
         08:08:3c:89:17:f5:bf:7f:de:d6:6d:e0:35:e2:19:0d:16:da:
         0f:66:69:ba:64:0a:77:62:63:c0:8b:4b:fa:da:23:62:21:b2:
         c3:e6:e4:19:22:40:7c:78:a5:21:d9:72:e3:ff:11:12:f2:36:
         dc:5c:39:e9:3b:b2:60:34:e7:4a:65:8f:82:19:5f:60:59:ce:
         e1:8a:94:67:06:47:af:02:cf:8d:a4:ed:d5:e4:52:db:e7:6b:
         d5:35:9a:74:00:8a:ff:b8:3c:c9:61:61:ba:ae:23:a8:51:49:
         95:66:5a:6b:7c:f1:b3:97:c0:e2:c1:a0:85:e8:8c:b6:c1:c4:
         3f:cb:cc:51:5c:23:02:d8:bd:e0:91:02:c2:6b:3a:5b:42:0e:
         5b:dc:c2:ae:e1:88:1e:4b:79:7c:79:d0:f8:a0:21:4a:bc:82:
         59:a9:3f:bd:9b:51:0c:5b:e6:6f:64:0f:59:6c:56:cd:12:b5:
         73:05:f9:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZs5RezWF5Ruuucpv1ZNKmZOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyZTAyMjI0ZmZiOTcxMTcyZTQ5MzVlZDdkZDk2NWQxMTU1
MDg5YjYwHhcNMjUxMjIwMDEwMDQyWhcNMjUxMjIxMDEwMDQyWjAzMTEwLwYDVQQD
EyhjNjJlYjQ1Zjk5ZDE2NGRmNmQ2MmEzMzg3ZjIxOGY0OWZhYzkwZDI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArey08tnISRmTo5pRwDFdFuBqI54h
U/scRz5BswI6GaGR0d5BukrFg7URGinIIRek+F3l/Tf4kXloNP2Nm0hG8xFg9wG0
XaYBNd1vC48aRBeQM4xEf3o16hcAhP/nE1i3fKm2D5e7rB1Uh0NkGTXM77Ao56eX
meUz6Ti+gBj3oriMSFTRIlTbqLJJ+K2OGEVwE3SYazPde2EwQ3TicAJG6Sx/6w7J
lJWI6Vq2NTlm4PRJ1gk7R/f96setc7WqJWEVKOZDDzU1DEx7LzqjzouA0bCylQXd
f8/NK1S+jfM/ePgPInAUTeuO9vaOT68YYbt/sQ0ZOCFV1z+blSgqDKg7aQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMYutF+Z0WTfbWKjOH8hj0n6yQ0lMB8GA1UdIwQY
MBaAFFLgIiT/uXEXLkk17X3ZZdEVUIm2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXVBaUpQLTVjUmN1U1RYdGZkbGwwUlZRaWJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC8zMTFiYzUtM2YzNi00ZDVlLWFiZGUt
YjhkYTg5NDA2YmVkLzEvVXVBaUpQLTVjUmN1U1RYdGZkbGwwUlZRaWJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC8zMTFiYzUtM2YzNi00ZDVlLWFiZGUtYjhkYTg5NDA2YmVk
LzEvVXVBaUpQLTVjUmN1U1RYdGZkbGwwUlZRaWJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU9zCaMg6
srV7H7ZzlMfCkgy8iDq4iypyPDe2yviwh9Zhh00oL8bJlmBTXsXrIClKjEbU/0ff
eCMheHekl9WC1oV8jgf5uOLBCAg8iRf1v3/e1m3gNeIZDRbaD2ZpumQKd2JjwItL
+tojYiGyw+bkGSJAfHilIdly4/8REvI23Fw56TuyYDTnSmWPghlfYFnO4YqUZwZH
rwLPjaTt1eRS2+dr1TWadACK/7g8yWFhuq4jqFFJlWZaa3zxs5fA4sGgheiMtsHE
P8vMUVwjAti94JECwms6W0IOW9zCruGIHkt5fHnQ+KAhSryCWak/vZtRDFvmb2QP
WWxWzRK1cwX5FQ==
-----END CERTIFICATE-----
Generated at Sat Dec 20 03:26:45 2025 by rpki-client