This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/abb62e-4b75-44c3-8fb3-18ccbc995bf8/1/uIog4vueEVBGObZ8_sCv6z8wZpA.mft
File:                     uIog4vueEVBGObZ8_sCv6z8wZpA.mft (raw, json)
Hash identifier:          AWw8eqSp3fwH4vW3dfzd3I2DIcObpjRsn5CNI4dZ3NY=
Subject key identifier:   DE:85:E5:D7:3B:62:EC:B5:1E:6A:EF:79:42:AE:0E:F0:AD:C1:62:BC
Authority key identifier: B8:8A:20:E2:FB:9E:11:50:46:39:B6:7C:FE:C0:AF:EB:3F:30:66:90
Certificate issuer:       /CN=b88a20e2fb9e11504639b67cfec0afeb3f306690
Certificate serial:       019B19BCE5205D79C0D343CB41F1FD73E2DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uIog4vueEVBGObZ8_sCv6z8wZpA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/abb62e-4b75-44c3-8fb3-18ccbc995bf8/1/uIog4vueEVBGObZ8_sCv6z8wZpA.mft
Manifest number:          1773
Signing time:             Sat 13 Dec 2025 22:02:48 +0000
Manifest this update:     Sat 13 Dec 2025 22:02:48 +0000
Manifest next update:     Sun 14 Dec 2025 22:02:48 +0000
Files and hashes:         1: uIog4vueEVBGObZ8_sCv6z8wZpA.crl (hash: gYGxOuxDRNL0r7dI+rjx6udBR8Tl6fQ9jftWLyk/cbs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/abb62e-4b75-44c3-8fb3-18ccbc995bf8/1/uIog4vueEVBGObZ8_sCv6z8wZpA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/abb62e-4b75-44c3-8fb3-18ccbc995bf8/1/uIog4vueEVBGObZ8_sCv6z8wZpA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uIog4vueEVBGObZ8_sCv6z8wZpA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Dec 2025 22:02:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:19:bc:e5:20:5d:79:c0:d3:43:cb:41:f1:fd:73:e2:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b88a20e2fb9e11504639b67cfec0afeb3f306690
        Validity
            Not Before: Dec 13 22:02:48 2025 GMT
            Not After : Dec 14 22:02:48 2025 GMT
        Subject: CN=de85e5d73b62ecb51e6aef7942ae0ef0adc162bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:b0:a7:99:d1:b8:26:26:d0:1a:c3:82:df:9a:
                    cb:15:8b:ff:3f:e5:d5:42:86:c7:7f:28:f8:22:eb:
                    e1:c2:07:4f:a6:bd:e5:28:b6:ef:7f:77:e5:05:23:
                    53:11:f1:13:0e:0d:40:7e:64:26:ae:6f:74:d5:68:
                    28:50:73:b2:3e:68:18:13:e9:88:04:39:00:49:32:
                    0e:94:9c:2b:b5:42:fe:b4:be:45:c7:52:62:60:5a:
                    3b:47:d0:c5:60:f7:90:48:96:53:bc:e2:42:94:8d:
                    62:a9:85:98:1d:1e:95:e0:c8:fa:f0:62:05:51:be:
                    88:9d:b3:0e:ac:b6:2a:0d:65:75:f1:e7:39:12:41:
                    19:6e:1e:99:3d:af:b1:fb:bd:b4:35:48:c4:8d:ed:
                    ab:a7:b8:aa:61:12:44:12:39:c0:c8:2f:96:48:90:
                    1f:1a:93:ed:e3:8e:0b:ad:b8:9e:b8:62:e8:ef:66:
                    48:b9:16:e4:02:40:f3:36:5f:9f:c4:63:b2:10:da:
                    32:11:a3:a4:31:4c:1e:e2:14:c4:41:c4:06:56:4f:
                    cd:2f:2f:51:6d:bb:ad:19:6d:7b:05:11:55:5a:08:
                    4f:54:b3:b0:13:c0:ea:fe:7d:79:06:e6:fc:f8:ba:
                    d2:ae:43:9e:ef:29:ca:a7:52:72:a1:d4:d6:8d:50:
                    81:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:85:E5:D7:3B:62:EC:B5:1E:6A:EF:79:42:AE:0E:F0:AD:C1:62:BC
            X509v3 Authority Key Identifier:
                keyid:B8:8A:20:E2:FB:9E:11:50:46:39:B6:7C:FE:C0:AF:EB:3F:30:66:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uIog4vueEVBGObZ8_sCv6z8wZpA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/abb62e-4b75-44c3-8fb3-18ccbc995bf8/1/uIog4vueEVBGObZ8_sCv6z8wZpA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/abb62e-4b75-44c3-8fb3-18ccbc995bf8/1/uIog4vueEVBGObZ8_sCv6z8wZpA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:94:fc:63:ae:68:bd:d3:89:48:fa:c7:20:ca:34:76:96:6f:
         4d:d6:85:d4:1e:1b:b8:cc:c5:6b:f4:44:57:c1:65:85:0e:93:
         76:2e:c0:21:a0:0a:d4:8c:bf:6f:63:5a:f3:92:17:a6:e4:22:
         a8:06:6e:be:33:f1:ce:f8:f4:5a:66:41:e4:3a:fa:7c:59:75:
         b7:97:61:af:04:d4:74:3b:4b:ed:03:bd:e7:80:75:b5:10:5d:
         80:3e:6f:f9:47:f0:17:8d:b2:a8:2c:b8:69:38:5f:78:25:3a:
         d0:15:4a:fa:11:5d:9e:3f:76:a8:91:b7:26:2a:d4:f2:15:5f:
         16:ed:25:26:88:9b:7f:8f:ec:26:b5:9a:a2:58:f1:bd:b1:9f:
         b1:4a:ef:a9:1b:d4:98:76:4e:12:72:65:be:df:57:ac:f3:ce:
         11:c2:0b:5a:7d:3e:86:e8:33:3e:2b:d8:66:64:7c:af:05:a7:
         3a:80:ae:89:08:19:97:a6:ff:cf:91:3f:7b:6e:9e:d5:bf:05:
         48:0a:f2:e3:0e:29:21:dc:c3:45:7f:dc:b0:cf:76:a6:ed:d6:
         9c:75:43:2a:92:6c:14:cc:a7:88:ed:36:b6:8c:51:c7:46:68:
         03:0b:ae:24:43:18:9d:47:cf:06:3f:8b:87:1b:22:70:51:2d:
         b4:d3:b2:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 14 07:45:47 2025 by rpki-client