This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/f539cb-14bf-48a2-a835-ce8d2dd43066/1/UxIuA6hBuIeJY6__9pXKT5_QaCw.mft
File:                     UxIuA6hBuIeJY6__9pXKT5_QaCw.mft (raw, json)
Hash identifier:          NSOfx5gRkkiZQXZXW5IuSFg16Tzq+FEP8h2wTvdsfmk=
Subject key identifier:   01:0A:B0:81:72:EB:69:37:09:A4:45:24:2C:17:51:F9:A5:D6:A6:00
Authority key identifier: 53:12:2E:03:A8:41:B8:87:89:63:AF:FF:F6:95:CA:4F:9F:D0:68:2C
Certificate issuer:       /CN=53122e03a841b8878963affff695ca4f9fd0682c
Certificate serial:       019B3BD92A818A6AFF84026EFC72DA6C7FC0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UxIuA6hBuIeJY6__9pXKT5_QaCw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/f539cb-14bf-48a2-a835-ce8d2dd43066/1/UxIuA6hBuIeJY6__9pXKT5_QaCw.mft
Manifest number:          109C
Signing time:             Sat 20 Dec 2025 13:00:46 +0000
Manifest this update:     Sat 20 Dec 2025 13:00:46 +0000
Manifest next update:     Sun 21 Dec 2025 13:00:46 +0000
Files and hashes:         1: 8Gu79OIRNXvUo-bIQSvBx7xUqx0.roa (hash: BX2fgKcwA/D+GDVmNic2yN4VwJrGKaQ4xJFsZbX1RYA=)
                          2: UxIuA6hBuIeJY6__9pXKT5_QaCw.crl (hash: NF/v41zR2bcp6AUhFxF1VFyH/bZMuDdJBK0JQZTZMVA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/f539cb-14bf-48a2-a835-ce8d2dd43066/1/UxIuA6hBuIeJY6__9pXKT5_QaCw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/f539cb-14bf-48a2-a835-ce8d2dd43066/1/UxIuA6hBuIeJY6__9pXKT5_QaCw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UxIuA6hBuIeJY6__9pXKT5_QaCw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 09:56:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3b:d9:2a:81:8a:6a:ff:84:02:6e:fc:72:da:6c:7f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53122e03a841b8878963affff695ca4f9fd0682c
        Validity
            Not Before: Dec 20 13:00:46 2025 GMT
            Not After : Dec 21 13:00:46 2025 GMT
        Subject: CN=010ab08172eb693709a445242c1751f9a5d6a600
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:2e:b6:f8:6d:88:07:5e:7d:fa:47:e9:af:a8:
                    3b:a4:47:6c:d6:60:91:eb:d8:f8:04:5e:6c:56:97:
                    a2:54:27:eb:ce:99:fe:a9:bb:cf:a9:d9:65:9e:33:
                    1b:d9:3d:6e:76:7e:e7:f3:e8:cd:f9:ca:f1:b3:e3:
                    b4:a8:58:ca:63:15:b6:14:2f:95:5e:8e:07:99:23:
                    a1:fa:05:2e:1f:2e:fe:5c:fb:26:3e:bb:0e:cc:15:
                    d6:bd:d9:de:98:d0:24:e9:65:5b:21:c4:20:43:2a:
                    d4:19:7f:a2:31:5f:e2:7e:24:69:57:33:ae:8f:88:
                    55:46:1e:54:bc:dd:ab:d1:0f:c5:8f:98:b5:a5:3a:
                    08:fd:6f:10:b3:f9:85:70:ba:16:cc:e5:7c:69:c1:
                    90:22:29:7e:40:a8:ab:3f:a8:18:a0:a9:fd:e5:16:
                    a8:b2:cf:01:8b:ad:76:5e:4d:8b:10:b3:29:e4:1b:
                    18:33:7e:10:dc:ff:05:32:85:84:79:8f:ce:1c:18:
                    93:c1:a5:45:b2:ca:c4:ad:54:ae:a0:25:20:34:6c:
                    3e:15:ec:92:14:14:8c:4d:ac:4f:c7:34:68:88:9b:
                    d3:73:61:fc:33:04:4c:22:65:9a:c2:88:f9:3d:73:
                    6e:2c:0d:f7:dc:da:97:02:fc:f7:ad:1d:13:bb:3c:
                    69:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:0A:B0:81:72:EB:69:37:09:A4:45:24:2C:17:51:F9:A5:D6:A6:00
            X509v3 Authority Key Identifier:
                keyid:53:12:2E:03:A8:41:B8:87:89:63:AF:FF:F6:95:CA:4F:9F:D0:68:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UxIuA6hBuIeJY6__9pXKT5_QaCw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/f539cb-14bf-48a2-a835-ce8d2dd43066/1/UxIuA6hBuIeJY6__9pXKT5_QaCw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/f539cb-14bf-48a2-a835-ce8d2dd43066/1/UxIuA6hBuIeJY6__9pXKT5_QaCw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:8b:e2:2a:53:f6:89:fa:98:db:42:ab:d4:ea:47:b6:28:ce:
         d9:ab:6d:66:cd:92:44:44:05:33:14:b6:c9:b0:19:39:5c:05:
         5f:51:f9:ab:75:65:60:bd:26:fe:d9:17:ea:de:8e:b5:ef:11:
         4c:4c:66:8d:60:a0:4b:61:e9:b4:9b:d1:94:3f:3c:b7:75:98:
         12:18:97:53:77:21:9e:07:d5:2c:5c:c6:e4:eb:4e:d3:22:3d:
         40:7a:6e:45:35:85:dc:13:a4:9f:ac:73:77:38:40:f2:b6:3b:
         9f:4e:79:3b:18:bf:6a:ed:67:68:91:60:89:ca:df:0a:c1:e3:
         5f:4a:89:9e:57:60:e3:35:5c:78:e7:39:60:9e:a8:09:0f:6f:
         8b:81:a9:9e:fd:b3:5c:22:6a:bd:65:3d:42:53:9a:e5:2a:27:
         d3:73:10:b8:6e:e9:6b:5d:a2:fd:9b:6d:81:99:90:07:0f:05:
         31:65:be:1b:c9:44:88:32:21:43:14:1d:a6:41:44:99:d0:05:
         f1:b6:05:d1:0c:31:92:8a:68:25:e3:2f:23:71:ba:de:62:87:
         5f:65:e0:c2:24:21:d8:10:6a:48:5c:e6:e2:d9:28:a4:27:e9:
         63:88:2d:1e:04:07:fa:7d:bc:f9:3d:e8:67:7a:88:e6:d6:db:
         78:f9:d5:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 16:06:09 2025 by rpki-client