This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c14a62-aa6a-486d-b9e6-bc004649ee99/1/uW6LbXPy84VImW9mYhMwqNcQhSk.mft
File:                     uW6LbXPy84VImW9mYhMwqNcQhSk.mft (raw, json)
Hash identifier:          ya7lFOJQkSgyRlB4a9Iea09kBqMTbesLy26wllY9UWw=
Subject key identifier:   F1:2A:FB:3B:FA:4C:03:14:7A:A3:37:36:36:C1:6C:B2:A1:CC:51:00
Authority key identifier: B9:6E:8B:6D:73:F2:F3:85:48:99:6F:66:62:13:30:A8:D7:10:85:29
Certificate issuer:       /CN=b96e8b6d73f2f38548996f66621330a8d7108529
Certificate serial:       019B3D23035A3639C16017F107D45725C97C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uW6LbXPy84VImW9mYhMwqNcQhSk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/c14a62-aa6a-486d-b9e6-bc004649ee99/1/uW6LbXPy84VImW9mYhMwqNcQhSk.mft
Manifest number:          178F
Signing time:             Sat 20 Dec 2025 19:01:03 +0000
Manifest this update:     Sat 20 Dec 2025 19:01:03 +0000
Manifest next update:     Sun 21 Dec 2025 19:01:03 +0000
Files and hashes:         1: kLOHs2aUXUatQyKVPIEe-1d92MQ.roa (hash: B5tdEXGniW22KjPp3AjVEy2zyRZTbkwM1WWA2qg8bSc=)
                          2: kqDek8H-nDrW1Zbe8JT5Vc5TRHo.roa (hash: nO5OjxTeZircSn1tyTNcEKWJ6F7KhmQpyf8WHUeT9FU=)
                          3: oUOtRV7pUYw15-5AdTCHfTFJYmA.roa (hash: 6WpA5rDmOxSR5I+UxNUiJzVqMhIhP9GYpFZRnnoMCmg=)
                          4: uW6LbXPy84VImW9mYhMwqNcQhSk.crl (hash: m/bxbeUSO/uPKxqP1aLohsZndStAip3nlQnnhzJtkK8=)
                          5: v7faT88h9FQXwmd6ooV79XLEuDc.roa (hash: CNgJmJnrj1ZC4LjfHCAq1xid9gV3zArUgelpQMRzNq4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/c14a62-aa6a-486d-b9e6-bc004649ee99/1/uW6LbXPy84VImW9mYhMwqNcQhSk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/c14a62-aa6a-486d-b9e6-bc004649ee99/1/uW6LbXPy84VImW9mYhMwqNcQhSk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uW6LbXPy84VImW9mYhMwqNcQhSk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 15:46:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3d:23:03:5a:36:39:c1:60:17:f1:07:d4:57:25:c9:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b96e8b6d73f2f38548996f66621330a8d7108529
        Validity
            Not Before: Dec 20 19:01:03 2025 GMT
            Not After : Dec 21 19:01:03 2025 GMT
        Subject: CN=f12afb3bfa4c03147aa3373636c16cb2a1cc5100
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:00:f7:69:e0:28:bc:24:47:6d:b5:7a:1b:85:
                    7f:29:d0:6e:d0:cb:e9:91:26:a5:aa:01:d6:f1:f6:
                    a3:e5:91:5b:2c:1f:70:45:14:6a:bd:91:fd:3d:2f:
                    93:f2:45:99:68:02:88:8c:c7:00:66:14:bd:89:2c:
                    5c:09:42:be:7e:e0:aa:7b:da:e0:e5:c8:e5:e5:2a:
                    d2:33:27:02:f0:9d:d2:73:6a:95:8d:2d:8e:63:3b:
                    df:db:19:db:54:66:e5:66:50:5f:3e:56:8a:82:2b:
                    df:0b:61:c7:a1:cb:42:b1:f6:93:69:6a:79:61:a1:
                    84:10:9a:82:4b:95:4c:86:37:a1:bb:08:a8:8f:31:
                    98:1a:8f:15:91:dd:3c:f0:45:2a:37:35:cd:b1:65:
                    04:e7:b6:ed:f1:16:e5:09:6c:09:8e:e0:c8:37:cc:
                    e7:49:c4:7d:b8:4e:af:af:01:e7:2f:bd:4a:d6:31:
                    37:d6:30:3e:94:b5:ca:f2:67:8a:09:43:76:61:1c:
                    fa:a1:2e:ce:9a:6e:ed:2d:bd:36:58:aa:eb:a4:40:
                    6a:60:e9:ba:c7:4d:32:8b:e4:6d:e1:9c:d1:e9:18:
                    bd:30:a3:9f:00:95:1f:55:3e:1e:d9:4e:2c:08:68:
                    0a:5b:07:8d:2d:b9:ef:b8:25:2c:72:9e:84:55:f0:
                    d9:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:2A:FB:3B:FA:4C:03:14:7A:A3:37:36:36:C1:6C:B2:A1:CC:51:00
            X509v3 Authority Key Identifier:
                keyid:B9:6E:8B:6D:73:F2:F3:85:48:99:6F:66:62:13:30:A8:D7:10:85:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uW6LbXPy84VImW9mYhMwqNcQhSk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c14a62-aa6a-486d-b9e6-bc004649ee99/1/uW6LbXPy84VImW9mYhMwqNcQhSk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c14a62-aa6a-486d-b9e6-bc004649ee99/1/uW6LbXPy84VImW9mYhMwqNcQhSk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:fa:c2:9f:9f:9f:9a:61:ca:9d:b6:88:cd:1b:e1:e9:53:32:
         37:b8:8c:1b:9e:94:ee:37:9c:0b:ec:64:6a:18:b5:a7:9d:00:
         8c:ab:55:be:cc:ee:2a:79:67:18:06:b6:a0:e7:29:39:be:f3:
         74:c0:1f:39:7b:bf:da:92:fc:ae:81:04:29:73:e2:7f:ae:1b:
         51:c5:82:88:bf:23:f8:de:ab:31:97:eb:b7:cf:f3:80:bf:7b:
         1c:2b:5c:bc:a4:aa:58:fc:85:f3:81:00:b3:df:92:7b:6b:c3:
         03:39:32:56:57:ad:59:e7:06:61:8d:de:09:0c:b5:aa:0b:9f:
         fc:db:f4:d9:5f:fb:e0:d7:f2:c5:d1:ca:e5:07:21:dc:da:9c:
         0e:89:84:f4:c8:6c:92:e6:c6:aa:d2:d6:68:2a:d7:aa:19:bf:
         de:c9:8d:cb:8f:9d:2a:17:c3:29:16:0d:66:20:60:3b:6f:a3:
         10:8f:dc:fd:2d:1f:a0:cf:57:2a:fe:35:ab:73:03:0c:47:f6:
         f2:26:69:bf:05:9a:e1:89:8d:ee:34:b4:91:22:91:06:fb:fe:
         fe:6a:95:52:25:cb:43:a3:06:75:01:52:21:ba:23:3e:4b:29:
         db:fa:e1:e2:b1:df:c9:ee:3b:ed:27:18:ab:57:d0:2e:35:bf:
         9f:e6:1a:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 21:32:22 2025 by rpki-client