This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/d3ab28-7f47-41f3-b231-78844e101133/1/UfSwsEaesNBxmUzYI480vvAMb74.mft
File:                     UfSwsEaesNBxmUzYI480vvAMb74.mft (raw, json)
Hash identifier:          kaHSdBhlDHeG9vIq72BWLQgx5MwbDFHpmoQCeURVQtg=
Subject key identifier:   51:95:69:57:72:4B:66:81:6F:3D:6C:91:51:63:3D:D2:1F:89:9B:FE
Authority key identifier: 51:F4:B0:B0:46:9E:B0:D0:71:99:4C:D8:23:8F:34:BE:F0:0C:6F:BE
Certificate issuer:       /CN=51f4b0b0469eb0d071994cd8238f34bef00c6fbe
Certificate serial:       019B367BF81D19D4C91AAEA0C9ADF9C28268
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UfSwsEaesNBxmUzYI480vvAMb74.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/d3ab28-7f47-41f3-b231-78844e101133/1/UfSwsEaesNBxmUzYI480vvAMb74.mft
Manifest number:          0702
Signing time:             Fri 19 Dec 2025 12:00:52 +0000
Manifest this update:     Fri 19 Dec 2025 12:00:52 +0000
Manifest next update:     Sat 20 Dec 2025 12:00:52 +0000
Files and hashes:         1: 6SE0GUdovthwCJnBecSees-R98Q.roa (hash: wuAooSaYMdUEo2LCRFAmaguJm9EhLDeuwm3V/FeDNYQ=)
                          2: KHE55IVfhkxEyRPjetKWMXa2fOg.roa (hash: yUvUxbUmijIWF7cOOamnBQm49nexWbf1vGMkvSs2OSs=)
                          3: Rhy7zTj1EkXhElbIMETGgJpRjqs.roa (hash: ykkvIUtAn8lmI1ZdNTc/3RSxnBdbB/KGggwB/jZhXVs=)
                          4: UfSwsEaesNBxmUzYI480vvAMb74.crl (hash: re3A0EWF+Lhf2ISzM5rwqEWt2KrcyP7Smb7/XT7lsmI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/d3ab28-7f47-41f3-b231-78844e101133/1/UfSwsEaesNBxmUzYI480vvAMb74.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/d3ab28-7f47-41f3-b231-78844e101133/1/UfSwsEaesNBxmUzYI480vvAMb74.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UfSwsEaesNBxmUzYI480vvAMb74.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Dec 2025 12:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:36:7b:f8:1d:19:d4:c9:1a:ae:a0:c9:ad:f9:c2:82:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51f4b0b0469eb0d071994cd8238f34bef00c6fbe
        Validity
            Not Before: Dec 19 12:00:52 2025 GMT
            Not After : Dec 20 12:00:52 2025 GMT
        Subject: CN=51956957724b66816f3d6c9151633dd21f899bfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ee:b3:33:25:9b:97:a0:48:b0:d8:6c:97:0a:
                    4a:df:63:ef:f9:bd:ad:df:a2:3e:d4:2a:24:7b:e6:
                    79:df:43:81:61:a6:07:bb:2c:7e:15:38:11:fe:ee:
                    4d:e6:35:3e:e8:f4:65:77:70:ba:b5:e0:14:b0:f4:
                    99:71:4c:33:e6:2d:c8:cd:d8:8d:dc:ab:36:e5:47:
                    86:5a:2e:72:87:81:a6:e8:62:d8:ad:ca:d2:21:64:
                    f9:46:7c:34:8e:a1:5a:83:25:20:4f:f4:89:71:c0:
                    91:6a:da:e1:08:d3:aa:a1:4a:ff:c2:bc:64:e5:cf:
                    2b:e0:3c:b9:83:33:80:66:16:65:f5:dd:ff:6e:4e:
                    93:0e:42:ad:7c:43:a7:50:d1:04:57:9a:e1:90:ad:
                    bf:d7:26:ed:96:6e:11:ee:54:63:d9:68:7b:92:9f:
                    bc:74:ee:5f:42:3a:d8:5d:d6:92:a7:5a:85:aa:a1:
                    94:02:74:ee:15:3a:f0:eb:a1:5c:8e:69:9d:2d:4b:
                    b1:21:da:c0:b3:e6:41:94:6d:21:71:7a:68:d2:f9:
                    74:4d:6a:b1:b2:e0:82:5c:41:a6:34:12:58:e6:f2:
                    00:89:20:d6:bf:91:04:b8:77:15:86:97:5d:10:56:
                    73:3b:65:ee:18:bf:ac:30:cd:54:57:e2:ec:b6:ae:
                    1e:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:95:69:57:72:4B:66:81:6F:3D:6C:91:51:63:3D:D2:1F:89:9B:FE
            X509v3 Authority Key Identifier:
                keyid:51:F4:B0:B0:46:9E:B0:D0:71:99:4C:D8:23:8F:34:BE:F0:0C:6F:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UfSwsEaesNBxmUzYI480vvAMb74.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/d3ab28-7f47-41f3-b231-78844e101133/1/UfSwsEaesNBxmUzYI480vvAMb74.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/d3ab28-7f47-41f3-b231-78844e101133/1/UfSwsEaesNBxmUzYI480vvAMb74.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:e9:73:f3:ad:68:24:27:64:d1:24:eb:55:55:ab:0f:78:d5:
         3c:e6:1a:64:ec:bb:c2:3d:8b:d6:b2:31:d8:84:71:35:07:9f:
         68:22:f4:18:fc:3a:1a:e3:d9:16:d4:9c:00:fc:7b:30:f4:4d:
         35:31:71:94:e2:24:43:fa:6d:87:d2:84:39:59:c9:09:8a:e3:
         1f:f7:de:3a:65:38:f3:90:42:8d:a6:ae:5e:31:e1:e9:ed:68:
         47:40:9d:34:f9:04:7f:bb:1e:f6:d0:4a:60:31:82:fb:78:37:
         d3:2b:a4:bc:72:42:32:3f:50:8e:73:88:a6:73:14:8a:f5:22:
         f1:ac:50:14:a6:f9:11:7a:d5:8e:06:b6:f2:0b:86:08:c4:2a:
         45:cc:a8:84:f7:80:1e:27:5e:d9:a4:55:c9:8f:1f:83:96:a7:
         70:fe:fe:cf:c4:b3:1e:54:7e:70:a3:53:da:cc:c9:40:69:b0:
         1a:90:70:94:f3:b9:a3:04:4a:14:e4:7b:0e:af:96:94:06:b7:
         6c:44:27:5f:99:d3:87:35:59:7b:5b:7d:5a:b5:ac:7e:7f:f6:
         28:4a:01:e7:04:a6:ab:15:d0:d3:f4:e9:c9:db:69:3e:74:83:
         69:63:8b:2d:bc:9a:d2:f0:a4:aa:52:85:e5:83:41:0a:df:85:
         75:05:d2:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 20:50:08 2025 by rpki-client