This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/4b8f5a-24e0-4ede-a4ab-50c78916f8e3/1/uDtc22Xsxb10bYt0mCgxptjcEFM.mft
File:                     uDtc22Xsxb10bYt0mCgxptjcEFM.mft (raw, json)
Hash identifier:          bRgA5UUSdU8w3IKp+UTys+VSOAb3n2lCOc47Z+2hAkY=
Subject key identifier:   6C:24:90:FF:79:EA:52:FC:32:FE:61:6A:D1:0C:A7:25:0C:0F:E3:94
Authority key identifier: B8:3B:5C:DB:65:EC:C5:BD:74:6D:8B:74:98:28:31:A6:D8:DC:10:53
Certificate issuer:       /CN=b83b5cdb65ecc5bd746d8b74982831a6d8dc1053
Certificate serial:       019B1D983842F4402F1E1C424547C35032DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uDtc22Xsxb10bYt0mCgxptjcEFM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/4b8f5a-24e0-4ede-a4ab-50c78916f8e3/1/uDtc22Xsxb10bYt0mCgxptjcEFM.mft
Manifest number:          0FF6
Signing time:             Sun 14 Dec 2025 16:01:13 +0000
Manifest this update:     Sun 14 Dec 2025 16:01:13 +0000
Manifest next update:     Mon 15 Dec 2025 16:01:13 +0000
Files and hashes:         1: N3q6u0fJAm5cfueMeHqWslOkGeg.roa (hash: PA7XmdPesUmpMNoT7zqJAR9d7u3yrzJY6Ip8rCLxobU=)
                          2: uDtc22Xsxb10bYt0mCgxptjcEFM.crl (hash: qcCCwKVfN7RWiojsqhoGKQldmdPyIZc0dV7GlM3cR+U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/4b8f5a-24e0-4ede-a4ab-50c78916f8e3/1/uDtc22Xsxb10bYt0mCgxptjcEFM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/4b8f5a-24e0-4ede-a4ab-50c78916f8e3/1/uDtc22Xsxb10bYt0mCgxptjcEFM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uDtc22Xsxb10bYt0mCgxptjcEFM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 15 Dec 2025 11:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:1d:98:38:42:f4:40:2f:1e:1c:42:45:47:c3:50:32:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b83b5cdb65ecc5bd746d8b74982831a6d8dc1053
        Validity
            Not Before: Dec 14 16:01:13 2025 GMT
            Not After : Dec 15 16:01:13 2025 GMT
        Subject: CN=6c2490ff79ea52fc32fe616ad10ca7250c0fe394
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ac:11:fe:37:95:07:ff:79:12:22:52:53:f0:
                    8d:be:1a:7d:f2:fb:51:1c:2b:2d:61:89:f9:64:91:
                    29:d7:e1:be:78:44:3b:04:6a:e9:1e:3e:21:e6:36:
                    fb:f0:28:3b:c4:5d:a0:12:a4:d3:ed:8d:7b:85:c7:
                    ef:3a:4a:0b:f0:a6:7e:3d:42:e8:0a:77:28:17:a9:
                    d1:c7:f1:9a:5c:61:71:36:cb:35:4f:49:50:25:31:
                    5a:13:07:b6:91:32:ad:fc:2b:db:e9:1f:14:01:32:
                    33:7b:c9:c2:83:9b:9b:8b:a4:3a:43:d9:4f:b9:ab:
                    b6:81:3e:21:17:7b:90:66:e7:52:71:b4:ef:31:a8:
                    0e:13:11:52:4c:62:f3:35:0a:54:8e:5c:72:77:66:
                    d9:18:30:66:62:26:3b:93:95:92:7b:41:9d:66:bd:
                    26:8b:d3:03:68:3c:5e:ca:58:33:39:a5:4f:96:4c:
                    8f:50:8c:4b:96:15:cf:8b:98:51:1c:ac:65:66:ea:
                    00:89:2f:ef:ae:31:9d:5b:ec:c6:15:ed:a4:58:da:
                    9f:e0:c2:49:6f:80:54:a7:ef:9c:2d:4f:1a:82:e9:
                    6e:56:60:6c:90:08:54:86:59:75:53:c6:53:de:55:
                    de:ea:3d:e3:d2:a5:19:f1:ea:1d:7a:a4:e6:1c:5f:
                    4c:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:24:90:FF:79:EA:52:FC:32:FE:61:6A:D1:0C:A7:25:0C:0F:E3:94
            X509v3 Authority Key Identifier:
                keyid:B8:3B:5C:DB:65:EC:C5:BD:74:6D:8B:74:98:28:31:A6:D8:DC:10:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uDtc22Xsxb10bYt0mCgxptjcEFM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/4b8f5a-24e0-4ede-a4ab-50c78916f8e3/1/uDtc22Xsxb10bYt0mCgxptjcEFM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/4b8f5a-24e0-4ede-a4ab-50c78916f8e3/1/uDtc22Xsxb10bYt0mCgxptjcEFM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cc:eb:68:ad:a0:8b:cf:57:61:80:48:60:72:61:e9:f1:25:59:
         74:a6:12:eb:be:92:b9:29:1c:6a:2f:92:3b:c8:14:7a:fa:2f:
         0e:44:b9:5d:1c:6b:79:37:8a:24:9d:02:fb:71:ad:c0:32:a9:
         b7:cb:cd:db:c8:4e:25:fd:7f:12:64:a6:6d:cc:70:24:93:68:
         51:2a:f9:ce:9b:f3:40:a3:b1:d7:62:e0:d3:d1:24:95:a9:3c:
         72:e7:d8:a6:9b:e7:31:3e:a0:0f:5c:0d:13:97:1b:7e:85:1e:
         d7:d2:6f:80:18:95:c4:ce:9a:a3:e6:49:b4:f0:26:fe:6b:60:
         75:f5:2f:8a:5a:52:c0:3a:37:44:7d:67:c8:0f:b9:63:cd:f8:
         33:39:e7:69:4d:b3:d1:58:df:65:c9:01:75:19:5a:e0:ef:99:
         8f:3b:72:24:b9:11:d6:af:7d:42:fd:63:92:1c:53:35:41:ae:
         37:fd:b2:62:c6:9c:7d:70:f3:37:2c:8f:9d:09:44:c4:1a:04:
         a3:5b:b6:2e:0d:0e:ca:5f:dc:f3:ad:21:67:bb:2f:71:dc:6a:
         19:68:3f:f2:c1:29:06:4f:5a:81:47:d1:50:bf:06:9d:4f:e2:
         de:1b:ae:90:cc:df:a8:82:68:99:68:25:c2:d3:43:7c:42:73:
         bc:25:eb:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 14 19:13:55 2025 by rpki-client