This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/a94992-566b-4b6f-a689-a57604a3f6bb/1/uMiqGHMPSoPihSxWklUau1se5-o.mft
File:                     uMiqGHMPSoPihSxWklUau1se5-o.mft (raw, json)
Hash identifier:          CUFRs1fX7qyOmnnJ6thMBr9ZZBpfbDj8liLGL9zVjVE=
Subject key identifier:   FD:E5:FD:1E:84:D7:4D:24:A1:8D:96:6C:BA:6F:98:0A:32:D7:A3:51
Authority key identifier: B8:C8:AA:18:73:0F:4A:83:E2:85:2C:56:92:55:1A:BB:5B:1E:E7:EA
Certificate issuer:       /CN=b8c8aa18730f4a83e2852c5692551abb5b1ee7ea
Certificate serial:       019B38D808D212235E2694CFF9D20D021DAD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uMiqGHMPSoPihSxWklUau1se5-o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/a94992-566b-4b6f-a689-a57604a3f6bb/1/uMiqGHMPSoPihSxWklUau1se5-o.mft
Manifest number:          1791
Signing time:             Fri 19 Dec 2025 23:00:40 +0000
Manifest this update:     Fri 19 Dec 2025 23:00:40 +0000
Manifest next update:     Sat 20 Dec 2025 23:00:40 +0000
Files and hashes:         1: 8jfLOWrmGDDvWQJNnJgyiMC8iUk.roa (hash: 9ZylXMdQ8kCZ39z9f3QrUAyi00wBGTAAGALxBdEj8Cs=)
                          2: C22xAXnO8jmzvRiHbOnNs4eV8_w.roa (hash: GuR8xYcc6+bA8BzAosnTTJQ3SA2n0vvOojU/T1fcAE8=)
                          3: NvJ45ro7s6M4_38H0FslYBVTTPs.roa (hash: M3reiTgWBh27DHKW4KHQ5BITsFkVwNA247gsKU17JNM=)
                          4: f-oCqD3vYqESKoaVRc95tBZETeE.roa (hash: 5tCErpPhGGQcBClzD6wra3oafrOK+sL1B4Sr7pQ1HIM=)
                          5: mRxjUMb4A19WEoG031-D-jh94lo.roa (hash: 9BtlaBZl/GFPVYBxNJXRqsP0IZiStCfXW61EzbYDKj8=)
                          6: rFNBUvofc5xFVTdi0cN8neEVhkc.roa (hash: ESh8iY5c5lW4tW5XLrhtyizb42oB19124w7i9KKZHMQ=)
                          7: uMiqGHMPSoPihSxWklUau1se5-o.crl (hash: RPhHxPrjyNX8Fs9OmslBkXEDTEjNnLrc6n9g+XiNehA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/a94992-566b-4b6f-a689-a57604a3f6bb/1/uMiqGHMPSoPihSxWklUau1se5-o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/a94992-566b-4b6f-a689-a57604a3f6bb/1/uMiqGHMPSoPihSxWklUau1se5-o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uMiqGHMPSoPihSxWklUau1se5-o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Dec 2025 23:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:38:d8:08:d2:12:23:5e:26:94:cf:f9:d2:0d:02:1d:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8c8aa18730f4a83e2852c5692551abb5b1ee7ea
        Validity
            Not Before: Dec 19 23:00:40 2025 GMT
            Not After : Dec 20 23:00:40 2025 GMT
        Subject: CN=fde5fd1e84d74d24a18d966cba6f980a32d7a351
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:19:b7:70:a8:5d:6d:d9:09:8d:b7:b1:b4:75:
                    87:66:0f:e7:d9:fe:4f:b7:35:fd:ef:df:a0:cb:ad:
                    58:82:44:a9:66:55:ed:be:a5:8b:34:46:47:0a:80:
                    f4:98:26:70:24:11:f3:10:2a:47:df:f2:23:d3:d7:
                    a5:46:bb:da:f9:f0:b4:24:42:02:60:bf:de:57:b3:
                    e0:94:7a:c2:6e:01:80:ea:19:89:85:47:2b:e6:a3:
                    e6:a4:e3:90:22:da:a2:31:bd:83:8b:00:a1:b5:d6:
                    22:87:a7:81:1a:c5:e6:5c:2f:ea:8a:1b:b0:da:f6:
                    f4:21:48:c4:14:ec:bb:61:4d:e6:d3:45:28:10:36:
                    a3:4d:f9:60:e4:09:8f:c8:8a:b2:e2:6d:4d:91:42:
                    82:55:b6:1a:a8:14:ef:33:f6:b7:7a:ec:fe:44:2c:
                    c0:88:04:4e:91:a3:25:65:9a:07:78:0b:d1:c1:01:
                    37:64:85:0d:bc:7b:16:29:25:a8:aa:13:23:cb:59:
                    73:dc:d9:a9:87:02:37:4f:5c:58:71:d5:13:fc:cf:
                    8f:08:9b:00:f4:d8:a2:21:cb:e5:3a:ed:55:c0:03:
                    bf:bb:51:ec:14:46:a4:aa:d2:58:9d:40:72:fb:3e:
                    89:ca:3a:9d:47:3a:d3:0b:22:94:b9:6f:5c:7d:20:
                    76:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:E5:FD:1E:84:D7:4D:24:A1:8D:96:6C:BA:6F:98:0A:32:D7:A3:51
            X509v3 Authority Key Identifier:
                keyid:B8:C8:AA:18:73:0F:4A:83:E2:85:2C:56:92:55:1A:BB:5B:1E:E7:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uMiqGHMPSoPihSxWklUau1se5-o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a94992-566b-4b6f-a689-a57604a3f6bb/1/uMiqGHMPSoPihSxWklUau1se5-o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a94992-566b-4b6f-a689-a57604a3f6bb/1/uMiqGHMPSoPihSxWklUau1se5-o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:44:ab:12:73:a3:c3:ca:39:b0:1a:8b:ae:20:63:89:d4:4e:
         f0:c1:6a:89:92:d1:bb:c6:dc:e2:0b:0d:dd:33:ff:12:23:83:
         ed:de:6d:9c:2c:8b:d2:6a:1e:29:4e:79:0c:aa:8d:fd:4b:ac:
         d3:f1:b8:2b:ed:90:2b:97:77:f3:00:1b:46:cb:09:e1:8f:e8:
         c3:5d:67:5a:b3:53:68:79:a7:e1:96:f6:4c:05:a5:55:67:18:
         3b:b0:2a:09:50:91:68:52:2f:b8:00:b7:a2:7e:f5:44:07:60:
         05:2e:4a:14:ad:9f:14:1d:2f:78:17:f9:56:89:07:34:f8:91:
         5d:f5:9f:49:1a:67:63:05:29:63:e3:30:9a:1f:2b:c6:99:81:
         b6:44:b8:59:8a:0f:7c:3b:58:48:38:69:0b:1c:b5:1f:86:4b:
         21:67:90:28:d6:23:77:fe:bc:b3:48:af:ca:e2:0b:fd:e0:f5:
         61:6a:a8:23:d9:95:ae:5b:88:78:cb:ad:6d:cc:86:0f:cb:78:
         e3:2d:0d:02:41:49:73:31:0c:92:98:38:e5:98:1f:32:7a:6a:
         3c:72:cb:ac:3c:d8:b4:17:2e:d2:8e:24:e5:1a:f2:a8:5b:22:
         b1:f6:2c:ce:2f:fb:e9:9a:fd:fb:96:02:e6:db:20:fd:f8:87:
         95:2c:3c:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 08:00:25 2025 by rpki-client