This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/458078-426e-4449-a2a9-18882a2809b2/1/uWCxR0bFh1JErjtpQWLsbYxjJV4.mft
File:                     uWCxR0bFh1JErjtpQWLsbYxjJV4.mft (raw, json)
Hash identifier:          EAbSS93YaNgWln2zIwYJ8YQC5nHxP8An6Lx7oDx1QFg=
Subject key identifier:   6B:A0:35:C4:D6:28:C0:C5:7F:2C:B9:86:1D:C7:61:54:72:4C:1C:1C
Authority key identifier: B9:60:B1:47:46:C5:87:52:44:AE:3B:69:41:62:EC:6D:8C:63:25:5E
Certificate issuer:       /CN=b960b14746c5875244ae3b694162ec6d8c63255e
Certificate serial:       019B0E24F18E98D442999D2D21C722388A9A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uWCxR0bFh1JErjtpQWLsbYxjJV4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/458078-426e-4449-a2a9-18882a2809b2/1/uWCxR0bFh1JErjtpQWLsbYxjJV4.mft
Manifest number:          1772
Signing time:             Thu 11 Dec 2025 16:01:00 +0000
Manifest this update:     Thu 11 Dec 2025 16:01:00 +0000
Manifest next update:     Fri 12 Dec 2025 16:01:00 +0000
Files and hashes:         1: DKOXi_z4MSZddtY43K_RvFdLWrA.roa (hash: YzkvxZCaiCcQ2o8QHaxCeoWLOl0t5AZ3W6UkEeHutAk=)
                          2: f4hIaIpBe2uj_P7WnwZdZXU2kNM.roa (hash: r9inBCbaMnpafZ/V8WyTAmWxF/0oxnkbtMD4hiM0OCk=)
                          3: fTKnFvJYm1yALDcPlDpSnYgxqpY.roa (hash: 0r+kS5xUC78h1sECkEiq4BPaUDs0csbTxmZyZ6FQa7I=)
                          4: uWCxR0bFh1JErjtpQWLsbYxjJV4.crl (hash: qnExQq8o5kUvDAPpblb1DjxgCiplH+igDDlIXVqo5cM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/458078-426e-4449-a2a9-18882a2809b2/1/uWCxR0bFh1JErjtpQWLsbYxjJV4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/458078-426e-4449-a2a9-18882a2809b2/1/uWCxR0bFh1JErjtpQWLsbYxjJV4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uWCxR0bFh1JErjtpQWLsbYxjJV4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Dec 2025 16:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:0e:24:f1:8e:98:d4:42:99:9d:2d:21:c7:22:38:8a:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b960b14746c5875244ae3b694162ec6d8c63255e
        Validity
            Not Before: Dec 11 16:01:00 2025 GMT
            Not After : Dec 12 16:01:00 2025 GMT
        Subject: CN=6ba035c4d628c0c57f2cb9861dc76154724c1c1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:6d:c4:e7:88:33:47:09:f1:f8:51:71:2b:74:
                    0c:2a:47:39:78:67:41:0f:a2:e6:6b:0c:20:99:e2:
                    49:7f:56:29:de:97:ef:c0:86:43:c0:49:0e:a5:d9:
                    8a:42:c6:fa:5d:ea:f0:be:fb:0c:63:03:5f:26:ef:
                    43:0d:08:0a:21:7a:ef:f8:1d:64:94:ae:9d:42:11:
                    ac:49:be:a5:62:6f:f3:c7:bf:1a:fb:c1:c6:10:e6:
                    25:91:f9:de:72:bc:3d:2e:50:53:21:e9:6e:74:64:
                    57:aa:d7:19:75:a3:33:b9:4f:ec:d0:c9:b7:0c:99:
                    b8:c5:94:e8:f0:87:14:b8:70:74:a9:a6:2c:bf:fb:
                    fe:23:4f:44:5c:24:1e:f5:e3:4b:40:8b:b2:9e:66:
                    d5:aa:77:a4:52:93:e9:80:0f:b0:de:7b:c4:9e:81:
                    f1:ef:77:66:b3:92:29:4f:ae:7c:9e:c0:69:79:de:
                    11:e5:a6:ca:3f:0a:a3:f2:d0:de:37:4c:9a:00:68:
                    e3:79:94:f6:0b:de:92:5a:21:67:3b:a6:26:26:c7:
                    00:a2:ba:a6:0d:af:9b:2f:c1:f2:c2:0e:1b:a2:31:
                    91:3e:b5:ee:18:99:08:00:9c:1d:f6:36:08:74:51:
                    71:e8:08:38:9c:4c:7d:5b:c8:34:29:27:74:a7:bc:
                    cf:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:A0:35:C4:D6:28:C0:C5:7F:2C:B9:86:1D:C7:61:54:72:4C:1C:1C
            X509v3 Authority Key Identifier:
                keyid:B9:60:B1:47:46:C5:87:52:44:AE:3B:69:41:62:EC:6D:8C:63:25:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uWCxR0bFh1JErjtpQWLsbYxjJV4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/458078-426e-4449-a2a9-18882a2809b2/1/uWCxR0bFh1JErjtpQWLsbYxjJV4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/458078-426e-4449-a2a9-18882a2809b2/1/uWCxR0bFh1JErjtpQWLsbYxjJV4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:00:a1:3f:12:ab:87:3c:e6:e3:c3:fd:28:d9:56:ad:7d:25:
         ad:cd:01:7e:ce:ca:14:d8:a9:95:b9:34:db:1b:28:50:aa:1e:
         c2:ba:c8:0f:5a:19:f1:22:31:48:66:a2:63:cd:46:31:f6:3b:
         73:12:ca:ae:dd:76:fb:cc:07:1c:ce:70:d9:e7:84:07:c9:c1:
         69:ec:4d:e7:f6:46:1a:8a:51:eb:8b:b3:27:fb:89:ef:03:4c:
         d0:0a:1b:69:5f:76:b1:4f:32:fb:16:da:1a:d0:49:41:63:9c:
         30:4f:3a:0e:e9:13:e6:cb:66:06:97:d7:d4:b2:0c:27:80:a8:
         be:84:01:2c:7b:bc:bf:8c:c6:2d:31:d5:26:9a:e9:82:05:18:
         e1:51:a0:89:cb:43:a5:63:f3:da:32:53:b4:98:31:45:0d:7e:
         2b:91:2f:96:f4:ca:31:65:a9:63:a1:2c:41:cf:41:7c:b0:c3:
         b8:5c:8a:cc:2c:40:3a:65:a2:66:b3:3c:28:15:75:a9:89:ee:
         7d:5e:03:63:10:52:13:08:ea:07:af:ce:ed:f7:8f:89:c8:b9:
         a7:42:b9:40:80:ea:98:7b:72:5b:9a:e1:03:58:c8:1b:b2:b5:
         e4:b0:20:21:7e:2c:8c:76:12:f5:e8:cf:7c:54:2d:b0:93:3b:
         65:f3:e1:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 12 01:00:57 2025 by rpki-client