This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/b122b0-d461-409d-bbd8-6d1f60543e9c/1/9UUMY3ZlXuwd0tpL0h1fEEqW2QQ.mft
File:                     9UUMY3ZlXuwd0tpL0h1fEEqW2QQ.mft (raw, json)
Hash identifier:          g2fDSFTN1h/qJS+7FB9XNSPdAhu0fJks3hi/Y/nWLhM=
Subject key identifier:   87:1B:7B:18:41:27:62:E7:5A:3C:C1:38:DD:15:0C:8E:FA:2B:84:0F
Authority key identifier: F5:45:0C:63:76:65:5E:EC:1D:D2:DA:4B:D2:1D:5F:10:4A:96:D9:04
Certificate issuer:       /CN=f5450c6376655eec1dd2da4bd21d5f104a96d904
Certificate serial:       019B75C8CBB5DF871A23532245528570AF92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9UUMY3ZlXuwd0tpL0h1fEEqW2QQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/b122b0-d461-409d-bbd8-6d1f60543e9c/1/9UUMY3ZlXuwd0tpL0h1fEEqW2QQ.mft
Manifest number:          1765
Signing time:             Wed 31 Dec 2025 19:00:52 +0000
Manifest this update:     Wed 31 Dec 2025 19:00:52 +0000
Manifest next update:     Thu 01 Jan 2026 19:00:52 +0000
Files and hashes:         1: 26DE9mwGulhT4dAnYga81faFL_0.asa (hash: mV7JHt6u/aewJ14E3UNG49W5RevaD1YiVI/wS+G92JQ=)
                          2: 9UUMY3ZlXuwd0tpL0h1fEEqW2QQ.crl (hash: M/Ul1ZcHJNQhrk6z9+j6ZhhQc84zjSaBlge2rBA4ZEw=)
                          3: As_EZ-RvP3qi1sws1jil8dnna6k.roa (hash: OtrJo+OCLnikRPWLn5xnNsduIJXUQk6NGSjartknylA=)
                          4: IiBvNtte0BK03j32z9ol7pwqiRc.asa (hash: NG9cggSuQispY4seSaLXxlc9sBjRa+7fIOrlnoVlaFM=)
                          5: MSgwMQBVeKrb-aSmClVXWXeIrYA.roa (hash: QNReZgAEU8FQp9RxZ7cqr3S4KzJDn6XR61dqK9DUir4=)
                          6: smter7NQ29umjrWZnTKOoms7tGM.asa (hash: Nxv3g9K7Hwn853S+o5K2Svc8UNIF+3DDWPUR11aVzKM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/b122b0-d461-409d-bbd8-6d1f60543e9c/1/9UUMY3ZlXuwd0tpL0h1fEEqW2QQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/b122b0-d461-409d-bbd8-6d1f60543e9c/1/9UUMY3ZlXuwd0tpL0h1fEEqW2QQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9UUMY3ZlXuwd0tpL0h1fEEqW2QQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 Jan 2026 19:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:75:c8:cb:b5:df:87:1a:23:53:22:45:52:85:70:af:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5450c6376655eec1dd2da4bd21d5f104a96d904
        Validity
            Not Before: Dec 31 19:00:52 2025 GMT
            Not After : Jan  1 19:00:52 2026 GMT
        Subject: CN=871b7b18412762e75a3cc138dd150c8efa2b840f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:53:28:59:10:ac:1a:e6:2e:ec:68:bc:30:49:
                    6f:d3:84:08:fd:f8:58:68:41:f8:9d:c5:97:97:70:
                    63:1c:4a:ad:cc:e4:e8:2a:d0:8c:3d:4e:0a:da:3c:
                    68:db:89:89:38:ac:62:ef:00:1b:ae:b0:c2:47:43:
                    de:61:68:01:38:e9:b0:6d:d4:e0:21:ca:1d:26:05:
                    5d:65:46:2c:15:3a:25:29:d6:d8:2d:20:79:0c:de:
                    be:61:c2:3d:08:b7:47:df:33:55:00:b1:1e:e3:28:
                    b8:56:78:2f:9b:f7:f2:56:52:26:0f:ba:1c:91:4f:
                    29:2b:26:3a:40:96:d0:dd:0e:28:3b:ca:c6:e6:94:
                    78:e8:6d:86:10:47:31:15:65:9e:98:f3:f7:dc:57:
                    10:e9:7f:81:30:6a:2b:2f:40:db:cf:84:35:3f:47:
                    6b:7b:d6:54:d6:84:fc:25:18:f8:e2:71:0d:94:99:
                    99:db:f2:96:23:c0:76:af:b9:c6:a3:ff:46:96:43:
                    70:9a:1d:9d:f3:3b:20:a6:c9:03:2f:e4:c2:ce:72:
                    b1:b4:48:b9:f7:4e:bf:ff:03:c2:8e:9a:a6:5a:e3:
                    64:7a:84:e7:39:80:68:47:bf:8d:2a:66:ac:ac:7c:
                    25:eb:25:40:bf:68:42:44:19:9f:78:0f:d8:b3:98:
                    70:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:1B:7B:18:41:27:62:E7:5A:3C:C1:38:DD:15:0C:8E:FA:2B:84:0F
            X509v3 Authority Key Identifier:
                keyid:F5:45:0C:63:76:65:5E:EC:1D:D2:DA:4B:D2:1D:5F:10:4A:96:D9:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9UUMY3ZlXuwd0tpL0h1fEEqW2QQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/b122b0-d461-409d-bbd8-6d1f60543e9c/1/9UUMY3ZlXuwd0tpL0h1fEEqW2QQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/b122b0-d461-409d-bbd8-6d1f60543e9c/1/9UUMY3ZlXuwd0tpL0h1fEEqW2QQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:9e:48:32:40:fb:af:1e:d2:44:a5:54:dd:c7:ce:5c:63:31:
         73:fd:0d:25:72:5d:e5:74:1f:80:b2:cc:c5:b5:ae:bf:b4:a7:
         ec:ef:b5:97:25:ad:56:72:dd:f3:8c:8c:c3:b1:ec:d4:5e:d5:
         1d:7f:70:80:42:19:8d:0a:69:08:c3:16:23:d0:ba:84:f8:50:
         c8:1c:3d:85:11:6f:16:11:e3:20:f6:8e:a5:a4:b6:da:09:9c:
         c7:d1:fa:04:50:63:b5:48:46:a4:fa:4d:15:4b:77:be:64:99:
         bb:02:6d:85:cc:b3:4d:db:21:9c:1e:eb:83:ff:e0:03:56:01:
         14:8a:1a:58:cb:f8:4d:08:61:77:d0:fa:bf:2d:c1:4d:9a:63:
         88:10:7a:a8:47:9b:8d:ab:71:55:1e:c4:12:5a:81:9c:d5:0f:
         b1:e8:94:62:6c:ae:57:b4:0c:b8:e8:14:dd:cd:3d:2d:cc:d6:
         66:7a:3d:53:a5:e9:26:59:74:2c:23:2e:56:1f:ff:ce:8b:24:
         be:87:17:dc:4b:60:25:42:89:78:88:9d:e5:5d:bc:ba:09:0a:
         be:1e:e2:5d:ed:ff:bd:01:f4:06:bd:19:e2:0d:e6:01:78:f6:
         1a:57:ad:88:09:43:c0:b5:6b:4e:aa:d4:e9:72:c9:8f:a5:7b:
         ac:59:d4:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 1 03:53:12 2026 by rpki-client