This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/uC57gGjErprkykw6ayCWGZp0H_I.mft
File:                     uC57gGjErprkykw6ayCWGZp0H_I.mft (raw, json)
Hash identifier:          WBuvUsbZIztTHDIAnCc8i5bVdOSGla2+8nDQUnC22hE=
Subject key identifier:   2B:03:10:C7:DA:10:68:1B:D6:1C:00:1B:37:D9:C1:2A:B3:F8:36:04
Authority key identifier: B8:2E:7B:80:68:C4:AE:9A:E4:CA:4C:3A:6B:20:96:19:9A:74:1F:F2
Certificate issuer:       /CN=b82e7b8068c4ae9ae4ca4c3a6b2096199a741ff2
Certificate serial:       019B3BA2972A51EFF007A84F5273C57392A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uC57gGjErprkykw6ayCWGZp0H_I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/uC57gGjErprkykw6ayCWGZp0H_I.mft
Manifest number:          1422
Signing time:             Sat 20 Dec 2025 12:01:09 +0000
Manifest this update:     Sat 20 Dec 2025 12:01:09 +0000
Manifest next update:     Sun 21 Dec 2025 12:01:09 +0000
Files and hashes:         1: Qzb63e7PrJpZnvdh_5KRROvhZ1c.roa (hash: NrGLLIb4hN1ItaaNKC1Rm9N6KTQQi8aKbLrok20ftwo=)
                          2: Yfhum0KNh2Gnj-D225eaegSifek.roa (hash: hFj3F+5EFPAfEmBnLkE+pwBV9YPDAjNKfqWc9k7TK2Q=)
                          3: fdkJ1crdoZsVaQKYKpliE3h8Iic.roa (hash: Fggk+Z3eXTA4oA3FRp2fifMQA6RQjXgkjXvgKh+G64U=)
                          4: uC57gGjErprkykw6ayCWGZp0H_I.crl (hash: 7EgzJSDTVvrLEh8S5NN8+RkrzzAoxln7tNj7mcmRHd8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/uC57gGjErprkykw6ayCWGZp0H_I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/uC57gGjErprkykw6ayCWGZp0H_I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uC57gGjErprkykw6ayCWGZp0H_I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 10:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3b:a2:97:2a:51:ef:f0:07:a8:4f:52:73:c5:73:92:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b82e7b8068c4ae9ae4ca4c3a6b2096199a741ff2
        Validity
            Not Before: Dec 20 12:01:09 2025 GMT
            Not After : Dec 21 12:01:09 2025 GMT
        Subject: CN=2b0310c7da10681bd61c001b37d9c12ab3f83604
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:60:cb:a7:cd:ad:ab:86:46:4b:63:01:a6:1e:
                    8b:85:3a:e7:92:da:cc:50:51:1c:ed:59:83:0c:f3:
                    4e:15:6f:7d:b2:65:66:ce:ac:ad:18:05:4a:52:16:
                    dd:ea:0c:46:d7:5c:f1:99:3b:2d:62:be:9b:e8:17:
                    45:a8:5e:22:d8:20:9d:f0:8d:b5:49:cd:11:70:bb:
                    ea:65:ff:5c:7e:a1:2a:80:88:08:1a:57:44:d0:88:
                    5a:13:96:e2:f5:d6:11:11:98:17:8d:6f:5c:62:ff:
                    f4:f8:cb:b7:ca:f7:db:58:41:11:c1:45:a7:44:9a:
                    35:66:27:da:fd:b8:50:1d:fe:ce:4f:25:0e:d2:3f:
                    b9:ab:7b:7e:05:06:ad:70:f6:d3:75:ff:92:78:85:
                    8d:75:43:0d:84:df:af:57:45:79:a6:ea:28:51:40:
                    a6:16:6e:82:35:60:08:66:be:46:c0:6c:f0:db:a0:
                    31:cf:bd:a3:c8:80:1b:31:91:d1:43:39:bc:5a:21:
                    24:cd:8b:ea:d1:99:5e:6a:94:8f:6a:c1:69:56:2b:
                    78:5e:1c:52:eb:2a:d6:fe:7f:e4:0c:74:07:20:fb:
                    26:3a:09:42:5b:b9:7d:19:f8:fd:08:9b:69:15:b8:
                    33:ea:c5:c3:f2:6f:97:50:f9:31:53:be:89:5f:ea:
                    63:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:03:10:C7:DA:10:68:1B:D6:1C:00:1B:37:D9:C1:2A:B3:F8:36:04
            X509v3 Authority Key Identifier:
                keyid:B8:2E:7B:80:68:C4:AE:9A:E4:CA:4C:3A:6B:20:96:19:9A:74:1F:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uC57gGjErprkykw6ayCWGZp0H_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/uC57gGjErprkykw6ayCWGZp0H_I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/uC57gGjErprkykw6ayCWGZp0H_I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:84:c2:ff:1d:e7:a3:58:66:3b:08:45:ca:7e:2e:8a:9c:c7:
         6a:29:e0:f7:d0:c2:4a:c4:76:01:48:df:96:96:83:e7:f9:72:
         c3:24:f8:f0:71:00:94:81:2a:a0:8f:0f:5f:87:32:8b:2d:3e:
         88:25:e9:d6:56:6f:b0:61:0e:c8:d0:e4:5a:f9:42:6d:64:96:
         00:8d:eb:12:82:31:5f:ee:71:f9:5e:28:8d:aa:d8:5a:ac:75:
         57:c2:d4:49:2b:6d:9f:5f:1b:7b:6b:5b:61:27:f8:07:0a:a1:
         73:22:8b:78:ff:9a:cb:12:64:52:c5:d7:0f:95:b8:03:23:96:
         be:5d:65:23:b3:f8:de:c8:55:15:7d:d6:54:2f:cb:50:c5:37:
         dd:4c:6f:8d:d4:36:b6:24:5f:de:a3:0c:9b:b4:9f:51:27:08:
         b6:ab:c9:f4:b8:ec:07:a9:c0:35:30:ba:37:4d:88:c9:87:7c:
         69:8b:51:e6:35:71:0d:ed:8c:74:15:47:35:45:09:b6:7a:0b:
         92:26:30:66:4f:73:0b:81:f1:22:be:ab:dc:61:59:24:b2:3c:
         2d:e3:f5:5c:e9:d6:88:6e:bc:e9:49:83:54:fc:36:0b:e6:66:
         df:c8:45:7e:b8:cd:7c:1a:10:5b:50:fb:5a:26:33:2d:90:e0:
         08:9f:24:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZs7opcqUe/wB6hPUnPFc5KmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4MmU3YjgwNjhjNGFlOWFlNGNhNGMzYTZiMjA5NjE5OWE3
NDFmZjIwHhcNMjUxMjIwMTIwMTA5WhcNMjUxMjIxMTIwMTA5WjAzMTEwLwYDVQQD
EygyYjAzMTBjN2RhMTA2ODFiZDYxYzAwMWIzN2Q5YzEyYWIzZjgzNjA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA62DLp82tq4ZGS2MBph6LhTrnktrM
UFEc7VmDDPNOFW99smVmzqytGAVKUhbd6gxG11zxmTstYr6b6BdFqF4i2CCd8I21
Sc0RcLvqZf9cfqEqgIgIGldE0IhaE5bi9dYREZgXjW9cYv/0+Mu3yvfbWEERwUWn
RJo1Zifa/bhQHf7OTyUO0j+5q3t+BQatcPbTdf+SeIWNdUMNhN+vV0V5puooUUCm
Fm6CNWAIZr5GwGzw26Axz72jyIAbMZHRQzm8WiEkzYvq0ZleapSPasFpVit4XhxS
6yrW/n/kDHQHIPsmOglCW7l9Gfj9CJtpFbgz6sXD8m+XUPkxU76JX+pjSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCsDEMfaEGgb1hwAGzfZwSqz+DYEMB8GA1UdIwQY
MBaAFLgue4BoxK6a5MpMOmsglhmadB/yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdUM1N2dHakVycHJreWt3NmF5Q1dHWnAwSF9JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny8yOWM5MTUtMmNiYy00NzY4LTg0MGMt
YWFkZmE5YzA2NzQyLzEvdUM1N2dHakVycHJreWt3NmF5Q1dHWnAwSF9JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny8yOWM5MTUtMmNiYy00NzY4LTg0MGMtYWFkZmE5YzA2NzQy
LzEvdUM1N2dHakVycHJreWt3NmF5Q1dHWnAwSF9JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ4TC/x3n
o1hmOwhFyn4uipzHaing99DCSsR2AUjflpaD5/lywyT48HEAlIEqoI8PX4cyiy0+
iCXp1lZvsGEOyNDkWvlCbWSWAI3rEoIxX+5x+V4ojarYWqx1V8LUSSttn18be2tb
YSf4BwqhcyKLeP+ayxJkUsXXD5W4AyOWvl1lI7P43shVFX3WVC/LUMU33UxvjdQ2
tiRf3qMMm7SfUScItqvJ9LjsB6nANTC6N02IyYd8aYtR5jVxDe2MdBVHNUUJtnoL
kiYwZk9zC4HxIr6r3GFZJLI8LeP1XOnWiG686UmDVPw2C+Zm38hFfrjNfBoQW1D7
WiYzLZDgCJ8k6A==
-----END CERTIFICATE-----
Generated at Sat Dec 20 20:12:57 2025 by rpki-client