This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/1faa3e-884c-445f-845d-79b3db659dfc/1/UYje2s3CQLSy94bxI0LgqD2K6A8.mft
File:                     UYje2s3CQLSy94bxI0LgqD2K6A8.mft (raw, json)
Hash identifier:          7jU5qURh8P2DpkfKiLDFEILBgBqdTEZ4tzXLErGCrDs=
Subject key identifier:   FE:2B:7E:96:CD:A7:22:42:33:DB:B5:7C:63:1B:27:52:77:D3:C8:6A
Authority key identifier: 51:88:DE:DA:CD:C2:40:B4:B2:F7:86:F1:23:42:E0:A8:3D:8A:E8:0F
Certificate issuer:       /CN=5188dedacdc240b4b2f786f12342e0a83d8ae80f
Certificate serial:       019B2F9E67BC6B81A1F423E7AD24EE3EA1ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UYje2s3CQLSy94bxI0LgqD2K6A8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/1faa3e-884c-445f-845d-79b3db659dfc/1/UYje2s3CQLSy94bxI0LgqD2K6A8.mft
Manifest number:          178A
Signing time:             Thu 18 Dec 2025 04:01:08 +0000
Manifest this update:     Thu 18 Dec 2025 04:01:08 +0000
Manifest next update:     Fri 19 Dec 2025 04:01:08 +0000
Files and hashes:         1: 7qvgIj3jypWMSKFnvSypb6eNA_Y.roa (hash: MROlFsFZhg7uUHfqBSW5TAr927G+FcG0aizwMj7xAAs=)
                          2: UYje2s3CQLSy94bxI0LgqD2K6A8.crl (hash: /QO8FEe0pHiI4l4i6g3gTl7NaloPA76G09MC8zwbCx8=)
                          3: VzEuM4wQpuwbT-xJ7bC1xNm7YDc.roa (hash: Pz1SZUH98WHk5LHtbhA9Ppfrk48GkT05UG0eFHMTuIU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/1faa3e-884c-445f-845d-79b3db659dfc/1/UYje2s3CQLSy94bxI0LgqD2K6A8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/1faa3e-884c-445f-845d-79b3db659dfc/1/UYje2s3CQLSy94bxI0LgqD2K6A8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UYje2s3CQLSy94bxI0LgqD2K6A8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 19 Dec 2025 01:18:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:2f:9e:67:bc:6b:81:a1:f4:23:e7:ad:24:ee:3e:a1:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5188dedacdc240b4b2f786f12342e0a83d8ae80f
        Validity
            Not Before: Dec 18 04:01:08 2025 GMT
            Not After : Dec 19 04:01:08 2025 GMT
        Subject: CN=fe2b7e96cda7224233dbb57c631b275277d3c86a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:39:76:5e:41:9f:90:6c:fc:73:79:df:27:f5:
                    98:e5:09:70:e2:d6:ce:3d:9a:15:10:7e:52:52:dc:
                    58:6c:34:74:e0:d9:4b:b0:bb:ff:23:98:e5:71:71:
                    eb:82:57:c5:03:86:c2:22:dd:55:71:b3:7c:39:eb:
                    78:49:ae:91:6c:a7:42:40:11:91:88:58:0b:db:cf:
                    8d:39:33:90:34:25:a2:48:d1:6b:a1:de:56:1e:28:
                    5d:47:76:80:19:c6:e0:c4:a4:52:e3:e7:70:17:dc:
                    45:da:ea:b8:03:e1:e8:8d:38:32:e2:e5:81:79:26:
                    6b:cc:98:a7:8c:f5:08:ba:32:fb:a0:68:ba:85:be:
                    1e:5f:5c:85:30:fa:1f:9f:2c:29:34:0b:6f:7f:17:
                    84:1a:51:92:d2:76:2d:64:b6:f6:b9:97:c8:41:9c:
                    f3:ac:f0:22:ba:85:e6:5d:fd:43:40:da:1b:c5:6e:
                    99:66:cc:04:4c:c5:cc:91:e8:3b:83:b8:b8:e4:7c:
                    34:1f:40:6b:9c:e8:95:b6:ab:74:91:7f:96:f4:7b:
                    09:39:51:e0:1a:64:21:47:45:c5:5a:01:ce:e3:a5:
                    ed:aa:d5:9d:b5:43:c8:32:5c:75:85:ef:81:fd:f0:
                    93:14:6e:86:7c:04:96:74:a6:5f:e3:e3:da:e7:df:
                    72:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:2B:7E:96:CD:A7:22:42:33:DB:B5:7C:63:1B:27:52:77:D3:C8:6A
            X509v3 Authority Key Identifier:
                keyid:51:88:DE:DA:CD:C2:40:B4:B2:F7:86:F1:23:42:E0:A8:3D:8A:E8:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UYje2s3CQLSy94bxI0LgqD2K6A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/1faa3e-884c-445f-845d-79b3db659dfc/1/UYje2s3CQLSy94bxI0LgqD2K6A8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/1faa3e-884c-445f-845d-79b3db659dfc/1/UYje2s3CQLSy94bxI0LgqD2K6A8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:b3:d6:b1:72:c0:9b:b8:e9:5e:c3:86:29:84:ab:d8:05:77:
         f1:25:cb:3f:b8:85:2d:27:45:e8:76:b2:99:f4:f4:ac:7e:cd:
         34:dd:da:32:ef:68:83:7d:41:ef:f6:4f:f0:a7:64:0c:59:e7:
         20:be:4f:1c:9c:48:ed:f5:58:81:b7:4c:dd:0b:c9:72:87:49:
         9c:6d:ec:77:35:ee:9a:41:54:0e:81:7f:f4:11:f5:cd:9b:c1:
         47:cd:69:bf:b7:40:6b:a0:79:8f:62:e5:64:01:66:68:b1:2d:
         9d:0a:66:a6:5c:30:6e:06:91:8a:df:4e:86:85:37:a7:04:50:
         26:f5:e0:c8:0e:0b:e9:01:19:78:fd:6e:87:13:2f:24:88:3c:
         da:5c:54:e9:1a:a5:c2:e2:e2:98:aa:cf:92:2f:7b:b6:c6:2e:
         23:61:94:a1:ae:3b:cd:66:3e:1c:db:0d:16:9f:1f:5b:91:ea:
         73:9f:c5:aa:df:9c:40:b6:ab:d5:60:9a:42:b6:82:95:d3:96:
         df:06:b9:e6:ae:c8:a6:e4:d5:f9:94:d7:2f:20:5f:8e:bc:7f:
         17:32:ad:76:ab:75:0b:2d:04:fb:f9:fb:4a:20:57:17:bc:29:
         fd:4b:bd:9f:85:7b:e4:de:cd:17:af:14:07:bb:5f:9a:04:e2:
         fd:b2:9a:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZsvnme8a4Gh9CPnrSTuPqHtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxODhkZWRhY2RjMjQwYjRiMmY3ODZmMTIzNDJlMGE4M2Q4
YWU4MGYwHhcNMjUxMjE4MDQwMTA4WhcNMjUxMjE5MDQwMTA4WjAzMTEwLwYDVQQD
EyhmZTJiN2U5NmNkYTcyMjQyMzNkYmI1N2M2MzFiMjc1Mjc3ZDNjODZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApzl2XkGfkGz8c3nfJ/WY5Qlw4tbO
PZoVEH5SUtxYbDR04NlLsLv/I5jlcXHrglfFA4bCIt1VcbN8Oet4Sa6RbKdCQBGR
iFgL28+NOTOQNCWiSNFrod5WHihdR3aAGcbgxKRS4+dwF9xF2uq4A+HojTgy4uWB
eSZrzJinjPUIujL7oGi6hb4eX1yFMPofnywpNAtvfxeEGlGS0nYtZLb2uZfIQZzz
rPAiuoXmXf1DQNobxW6ZZswETMXMkeg7g7i45Hw0H0BrnOiVtqt0kX+W9HsJOVHg
GmQhR0XFWgHO46XtqtWdtUPIMlx1he+B/fCTFG6GfASWdKZf4+Pa599y7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP4rfpbNpyJCM9u1fGMbJ1J308hqMB8GA1UdIwQY
MBaAFFGI3trNwkC0sveG8SNC4Kg9iugPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVVlqZTJzM0NRTFN5OTRieEkwTGdxRDJLNkE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi8xZmFhM2UtODg0Yy00NDVmLTg0NWQt
NzliM2RiNjU5ZGZjLzEvVVlqZTJzM0NRTFN5OTRieEkwTGdxRDJLNkE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi8xZmFhM2UtODg0Yy00NDVmLTg0NWQtNzliM2RiNjU5ZGZj
LzEvVVlqZTJzM0NRTFN5OTRieEkwTGdxRDJLNkE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY7PWsXLA
m7jpXsOGKYSr2AV38SXLP7iFLSdF6HaymfT0rH7NNN3aMu9og31B7/ZP8KdkDFnn
IL5PHJxI7fVYgbdM3QvJcodJnG3sdzXumkFUDoF/9BH1zZvBR81pv7dAa6B5j2Ll
ZAFmaLEtnQpmplwwbgaRit9OhoU3pwRQJvXgyA4L6QEZeP1uhxMvJIg82lxU6Rql
wuLimKrPki97tsYuI2GUoa47zWY+HNsNFp8fW5Hqc5/Fqt+cQLar1WCaQraCldOW
3wa55q7IpuTV+ZTXLyBfjrx/FzKtdqt1Cy0E+/n7SiBXF7wp/Uu9n4V75N7NF68U
B7tfmgTi/bKaUw==
-----END CERTIFICATE-----
Generated at Thu Dec 18 06:49:54 2025 by rpki-client