This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/75d4fd-90f5-4baa-a35c-87a6333d6e64/1/u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.mft
File:                     u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.mft (raw, json)
Hash identifier:          5uqxawzBgfSrSlHjiiSRvzCxEAj1uIBBjqj8e1KgWKU=
Subject key identifier:   27:A9:94:FD:3A:D7:D6:A9:E2:54:BB:86:03:D0:EF:E5:49:A9:C1:95
Authority key identifier: BB:E6:FE:14:B8:75:5D:9F:F7:46:6F:A9:7C:4A:55:F7:35:18:32:49
Certificate issuer:       /CN=bbe6fe14b8755d9ff7466fa97c4a55f735183249
Certificate serial:       019B348D4DAD83B591C520159FBF395EC6F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/75d4fd-90f5-4baa-a35c-87a6333d6e64/1/u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.mft
Manifest number:          0514
Signing time:             Fri 19 Dec 2025 03:00:34 +0000
Manifest this update:     Fri 19 Dec 2025 03:00:34 +0000
Manifest next update:     Sat 20 Dec 2025 03:00:34 +0000
Files and hashes:         1: C14DRI-snEsOkMIiNc-U5aBQhaY.roa (hash: 5Ry3pWdioDfi9ncgeY0rIB8W8oudaHMSAsLacYeKQos=)
                          2: Ug4nXcExKYw0HQJvuRnQRFIifi4.roa (hash: IsLyJr6VvvPjlgsDoJhXlSp7Ms5JrJ3DUw9MD905qA8=)
                          3: jeMcQRYZ_oYZiw07CtOXr5jFtyU.roa (hash: aHtdDlixj/M+4CUwjHPA7Rj7IL2V/Zp5w9edz80DuFQ=)
                          4: u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.crl (hash: N9d5c4jEnnUUL/SueJJ7/+t7JQOny3pGIFhPaE0Pl/k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/75d4fd-90f5-4baa-a35c-87a6333d6e64/1/u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/75d4fd-90f5-4baa-a35c-87a6333d6e64/1/u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Dec 2025 03:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:34:8d:4d:ad:83:b5:91:c5:20:15:9f:bf:39:5e:c6:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bbe6fe14b8755d9ff7466fa97c4a55f735183249
        Validity
            Not Before: Dec 19 03:00:34 2025 GMT
            Not After : Dec 20 03:00:34 2025 GMT
        Subject: CN=27a994fd3ad7d6a9e254bb8603d0efe549a9c195
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:c8:7e:94:d0:98:44:f3:0b:c0:20:30:f3:88:
                    5a:8a:29:9f:2b:d4:dd:ba:7e:d2:9d:c9:78:22:2c:
                    4d:3f:ec:ba:6d:11:73:6c:5f:d6:a4:42:2e:c6:e4:
                    e0:a0:6c:18:1f:e1:83:87:61:99:1c:ac:fa:c7:b2:
                    3e:da:ff:c4:28:d7:74:e3:bc:36:c0:af:cc:d2:b6:
                    00:a6:87:f8:d1:c2:c2:4c:5b:bc:56:8a:ef:32:c6:
                    7a:fe:83:e4:35:88:a1:8b:7d:0e:db:24:ab:f1:ad:
                    3c:d5:93:81:9d:04:bc:60:32:3f:8d:6b:50:08:69:
                    37:80:75:c4:2c:da:5e:52:32:27:03:4f:a0:92:f6:
                    a4:f1:3b:3e:50:17:8d:7d:53:48:36:db:09:53:02:
                    d6:9e:88:ba:4d:6a:8e:d7:db:01:21:59:66:ef:11:
                    19:9c:64:09:e5:aa:31:5e:98:28:97:1f:17:ad:de:
                    76:30:5c:d4:cd:d7:11:f8:f2:cc:df:62:f9:be:7d:
                    b6:e0:48:01:6b:f4:69:8f:22:10:76:5f:88:5e:1a:
                    6c:1b:2a:3f:69:a4:83:d1:16:d6:da:9d:41:5d:8e:
                    e0:c9:a9:ab:b0:20:eb:f3:43:3c:e0:3d:a6:83:af:
                    5c:0e:24:37:58:d6:6f:d1:bf:91:1a:de:35:79:5d:
                    d6:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:A9:94:FD:3A:D7:D6:A9:E2:54:BB:86:03:D0:EF:E5:49:A9:C1:95
            X509v3 Authority Key Identifier:
                keyid:BB:E6:FE:14:B8:75:5D:9F:F7:46:6F:A9:7C:4A:55:F7:35:18:32:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/75d4fd-90f5-4baa-a35c-87a6333d6e64/1/u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/75d4fd-90f5-4baa-a35c-87a6333d6e64/1/u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:88:49:cf:ae:93:f2:f4:44:78:18:fb:17:b7:eb:56:8e:f7:
         b9:f9:e6:b7:6d:a5:6a:ea:a8:14:0c:84:30:74:06:dc:af:e1:
         b1:67:a3:93:44:6f:77:4f:55:f8:4f:17:1f:2e:c7:de:7f:0b:
         74:9e:dc:37:41:3b:4b:91:07:b2:ff:9b:98:56:e1:f7:3e:26:
         1d:08:72:23:ce:26:fa:c0:b2:23:15:82:e1:94:ed:f7:a5:da:
         f4:3a:eb:63:05:d7:e2:cc:f1:a6:01:9c:1c:cc:ee:bb:74:e5:
         91:72:c2:bb:72:bd:00:5b:82:6b:9a:9d:aa:93:7b:41:3a:1d:
         b6:27:5c:a7:f4:94:46:d2:e4:4f:a0:3b:d7:52:36:f2:e2:0a:
         e9:04:a3:b6:5d:b1:73:fb:39:a1:19:d4:f9:01:35:0b:db:1a:
         a6:2d:56:00:6d:72:bc:24:ea:5c:62:69:d0:48:86:f1:2e:3f:
         c8:11:a8:9a:68:7c:0c:91:f3:38:34:81:fb:1f:42:25:5a:ca:
         d0:e3:f8:81:98:74:84:39:04:f2:a5:e9:72:3b:e3:1a:d5:3d:
         6d:11:39:6a:ec:c2:bb:68:8f:08:20:c1:d9:54:51:ef:e3:32:
         44:18:7f:dc:74:49:ed:d0:a1:cf:12:1a:91:18:fb:5d:9d:8d:
         1d:10:71:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZs0jU2tg7WRxSAVn785XsbxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiZTZmZTE0Yjg3NTVkOWZmNzQ2NmZhOTdjNGE1NWY3MzUx
ODMyNDkwHhcNMjUxMjE5MDMwMDM0WhcNMjUxMjIwMDMwMDM0WjAzMTEwLwYDVQQD
EygyN2E5OTRmZDNhZDdkNmE5ZTI1NGJiODYwM2QwZWZlNTQ5YTljMTk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhch+lNCYRPMLwCAw84haiimfK9Td
un7Sncl4IixNP+y6bRFzbF/WpEIuxuTgoGwYH+GDh2GZHKz6x7I+2v/EKNd047w2
wK/M0rYApof40cLCTFu8VorvMsZ6/oPkNYihi30O2ySr8a081ZOBnQS8YDI/jWtQ
CGk3gHXELNpeUjInA0+gkvak8Ts+UBeNfVNINtsJUwLWnoi6TWqO19sBIVlm7xEZ
nGQJ5aoxXpgolx8Xrd52MFzUzdcR+PLM32L5vn224EgBa/RpjyIQdl+IXhpsGyo/
aaSD0RbW2p1BXY7gyamrsCDr80M84D2mg69cDiQ3WNZv0b+RGt41eV3WUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCeplP0619ap4lS7hgPQ7+VJqcGVMB8GA1UdIwQY
MBaAFLvm/hS4dV2f90ZvqXxKVfc1GDJJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdS1iLUZMaDFYWl8zUm0tcGZFcFY5elVZTWtrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC83NWQ0ZmQtOTBmNS00YmFhLWEzNWMt
ODdhNjMzM2Q2ZTY0LzEvdS1iLUZMaDFYWl8zUm0tcGZFcFY5elVZTWtrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC83NWQ0ZmQtOTBmNS00YmFhLWEzNWMtODdhNjMzM2Q2ZTY0
LzEvdS1iLUZMaDFYWl8zUm0tcGZFcFY5elVZTWtrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGIhJz66T
8vREeBj7F7frVo73ufnmt22lauqoFAyEMHQG3K/hsWejk0Rvd09V+E8XHy7H3n8L
dJ7cN0E7S5EHsv+bmFbh9z4mHQhyI84m+sCyIxWC4ZTt96Xa9DrrYwXX4szxpgGc
HMzuu3TlkXLCu3K9AFuCa5qdqpN7QTodtidcp/SURtLkT6A711I28uIK6QSjtl2x
c/s5oRnU+QE1C9sapi1WAG1yvCTqXGJp0EiG8S4/yBGommh8DJHzODSB+x9CJVrK
0OP4gZh0hDkE8qXpcjvjGtU9bRE5auzCu2iPCCDB2VRR7+MyRBh/3HRJ7dChzxIa
kRj7XZ2NHRBxKA==
-----END CERTIFICATE-----
Generated at Fri Dec 19 09:46:47 2025 by rpki-client