This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/fd5f04-1d26-4451-a6ae-9867642c2f10/1/UeFASVvQbC6O-st-0KMVFtsfQF8.mft
File:                     UeFASVvQbC6O-st-0KMVFtsfQF8.mft (raw, json)
Hash identifier:          xQcACb3KXHv0F2IjLQV3Dof5zWjwa5PspB+g3AwxjHk=
Subject key identifier:   EC:40:B7:36:44:E3:B0:76:85:90:D4:BD:F7:45:B7:2E:09:5B:09:49
Authority key identifier: 51:E1:40:49:5B:D0:6C:2E:8E:FA:CB:7E:D0:A3:15:16:DB:1F:40:5F
Certificate issuer:       /CN=51e140495bd06c2e8efacb7ed0a31516db1f405f
Certificate serial:       019B3BD96C9E5CC972DB62AE97C4DD62C834
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UeFASVvQbC6O-st-0KMVFtsfQF8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/fd5f04-1d26-4451-a6ae-9867642c2f10/1/UeFASVvQbC6O-st-0KMVFtsfQF8.mft
Manifest number:          0EE2
Signing time:             Sat 20 Dec 2025 13:01:03 +0000
Manifest this update:     Sat 20 Dec 2025 13:01:03 +0000
Manifest next update:     Sun 21 Dec 2025 13:01:03 +0000
Files and hashes:         1: It1W1nFMSnvON6n0WueAxjrC3W0.roa (hash: FlHwhHOBprRKHgvgu+zMZLXgeJSLpK6evOb32wMUYTo=)
                          2: UeFASVvQbC6O-st-0KMVFtsfQF8.crl (hash: HkdWWi0nsFoovRjXH+Zbgs9CdfHAsGwNk2eRU15dlYk=)
                          3: aLexfPDGULdeLEaZK1qcN8F_0gk.roa (hash: mf1iYDEjsne4mRwDfdumJxwd7j7HuNwZ6q+crjDLiV4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/fd5f04-1d26-4451-a6ae-9867642c2f10/1/UeFASVvQbC6O-st-0KMVFtsfQF8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/fd5f04-1d26-4451-a6ae-9867642c2f10/1/UeFASVvQbC6O-st-0KMVFtsfQF8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UeFASVvQbC6O-st-0KMVFtsfQF8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 10:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3b:d9:6c:9e:5c:c9:72:db:62:ae:97:c4:dd:62:c8:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51e140495bd06c2e8efacb7ed0a31516db1f405f
        Validity
            Not Before: Dec 20 13:01:03 2025 GMT
            Not After : Dec 21 13:01:03 2025 GMT
        Subject: CN=ec40b73644e3b0768590d4bdf745b72e095b0949
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:eb:c3:ea:16:09:dc:aa:7a:08:7b:50:10:c9:
                    86:0a:ee:1f:0e:9c:22:7e:e2:d5:bf:57:aa:f5:03:
                    49:5a:68:87:75:b9:b9:26:1e:d0:d9:f3:cd:4a:01:
                    c6:a3:b0:a1:39:ca:4f:3b:e0:d4:ce:27:e4:2b:62:
                    5e:3a:ce:22:04:69:11:df:bc:e1:56:bd:3b:f4:48:
                    f0:93:61:ac:27:63:48:28:58:da:2f:27:6c:1c:2a:
                    c2:fd:a0:53:8d:ce:a4:a3:9e:df:f5:a1:51:db:7e:
                    ca:36:62:a1:a9:71:bf:ca:bf:9d:cc:03:a1:b9:4e:
                    11:1e:5f:1f:4a:9f:1e:7c:8f:08:d6:a7:2e:99:e7:
                    22:69:b3:fa:d8:ba:b8:62:ef:88:3b:56:76:ad:bb:
                    9a:d5:c7:6c:d7:a2:29:f5:ab:3a:25:56:1a:e4:68:
                    98:f1:fe:07:6e:08:d0:6e:b9:4f:44:89:8d:e7:60:
                    0a:09:46:77:62:3a:c9:97:87:a2:86:97:59:de:8c:
                    59:4c:42:d7:a1:7e:6e:15:a0:7a:68:10:c7:ef:54:
                    23:65:91:a2:08:27:bb:04:bf:f5:58:8b:12:75:d1:
                    7c:62:d3:3d:56:9a:c4:22:ad:11:93:10:51:52:fc:
                    a3:7e:74:36:8b:87:79:bc:5d:c8:95:a5:1f:f6:f4:
                    f2:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:40:B7:36:44:E3:B0:76:85:90:D4:BD:F7:45:B7:2E:09:5B:09:49
            X509v3 Authority Key Identifier:
                keyid:51:E1:40:49:5B:D0:6C:2E:8E:FA:CB:7E:D0:A3:15:16:DB:1F:40:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UeFASVvQbC6O-st-0KMVFtsfQF8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/fd5f04-1d26-4451-a6ae-9867642c2f10/1/UeFASVvQbC6O-st-0KMVFtsfQF8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/fd5f04-1d26-4451-a6ae-9867642c2f10/1/UeFASVvQbC6O-st-0KMVFtsfQF8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:6b:f6:6c:61:40:19:16:d7:7c:39:c7:67:17:17:21:d6:58:
         19:c8:03:bb:8d:a4:8a:83:73:b8:6c:da:3e:5b:89:a7:ea:22:
         bb:8f:1c:27:d2:f5:55:16:fd:97:56:ea:66:0d:75:4d:8c:7d:
         41:61:d0:92:3b:56:da:53:31:fd:9c:a1:c5:94:2c:f5:3a:45:
         5b:38:8d:be:91:ea:be:c7:e7:5a:01:c4:7d:92:04:dc:97:13:
         0a:dd:27:b9:8c:7e:91:8e:15:47:24:f9:32:80:12:40:3e:70:
         57:44:cc:14:cb:fb:37:a5:cf:5d:e9:1c:e3:00:93:64:27:c7:
         1a:dd:38:db:f2:e3:60:19:f9:54:04:14:06:11:39:dd:9f:d1:
         00:57:ca:8f:c3:d7:8a:ad:d8:cf:2e:7b:23:fe:78:1e:a7:8f:
         6f:fa:78:d9:47:7b:8b:be:04:22:68:5e:1b:ce:13:c8:16:25:
         2d:f8:e7:e6:b1:1a:b6:c0:7a:06:9c:2a:44:e5:7d:a2:8e:a7:
         bc:c3:30:63:09:74:56:68:cd:eb:52:87:c7:77:d8:3b:45:77:
         55:75:b0:cb:b9:14:61:28:b6:57:67:f8:b2:ce:bd:b9:1f:8d:
         70:a6:48:44:67:23:eb:3d:70:63:f2:1e:01:a2:43:47:23:0d:
         54:b9:6b:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZs72WyeXMly22Kul8TdYsg0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxZTE0MDQ5NWJkMDZjMmU4ZWZhY2I3ZWQwYTMxNTE2ZGIx
ZjQwNWYwHhcNMjUxMjIwMTMwMTAzWhcNMjUxMjIxMTMwMTAzWjAzMTEwLwYDVQQD
EyhlYzQwYjczNjQ0ZTNiMDc2ODU5MGQ0YmRmNzQ1YjcyZTA5NWIwOTQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw+vD6hYJ3Kp6CHtQEMmGCu4fDpwi
fuLVv1eq9QNJWmiHdbm5Jh7Q2fPNSgHGo7ChOcpPO+DUzifkK2JeOs4iBGkR37zh
Vr079Ejwk2GsJ2NIKFjaLydsHCrC/aBTjc6ko57f9aFR237KNmKhqXG/yr+dzAOh
uU4RHl8fSp8efI8I1qcumeciabP62Lq4Yu+IO1Z2rbua1cds16Ip9as6JVYa5GiY
8f4HbgjQbrlPRImN52AKCUZ3YjrJl4eihpdZ3oxZTELXoX5uFaB6aBDH71QjZZGi
CCe7BL/1WIsSddF8YtM9VprEIq0RkxBRUvyjfnQ2i4d5vF3IlaUf9vTyNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOxAtzZE47B2hZDUvfdFty4JWwlJMB8GA1UdIwQY
MBaAFFHhQElb0GwujvrLftCjFRbbH0BfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWVGQVNWdlFiQzZPLXN0LTBLTVZGdHNmUUY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi9mZDVmMDQtMWQyNi00NDUxLWE2YWUt
OTg2NzY0MmMyZjEwLzEvVWVGQVNWdlFiQzZPLXN0LTBLTVZGdHNmUUY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi9mZDVmMDQtMWQyNi00NDUxLWE2YWUtOTg2NzY0MmMyZjEw
LzEvVWVGQVNWdlFiQzZPLXN0LTBLTVZGdHNmUUY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcWv2bGFA
GRbXfDnHZxcXIdZYGcgDu42kioNzuGzaPluJp+oiu48cJ9L1VRb9l1bqZg11TYx9
QWHQkjtW2lMx/ZyhxZQs9TpFWziNvpHqvsfnWgHEfZIE3JcTCt0nuYx+kY4VRyT5
MoASQD5wV0TMFMv7N6XPXekc4wCTZCfHGt042/LjYBn5VAQUBhE53Z/RAFfKj8PX
iq3Yzy57I/54HqePb/p42Ud7i74EImheG84TyBYlLfjn5rEatsB6BpwqROV9oo6n
vMMwYwl0VmjN61KHx3fYO0V3VXWwy7kUYSi2V2f4ss69uR+NcKZIRGcj6z1wY/Ie
AaJDRyMNVLlrmg==
-----END CERTIFICATE-----
Generated at Sat Dec 20 18:45:11 2025 by rpki-client