This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/3abe20-1e75-4abe-9e89-6ac35370fd73/1/UeDfyTcalJHKqFhwD9lFI2bZ7dw.mft
File:                     UeDfyTcalJHKqFhwD9lFI2bZ7dw.mft (raw, json)
Hash identifier:          kNXcapRViNmOu5fKJ8FQHQar3qyITH+XxWU5Q9l2tZE=
Subject key identifier:   E2:CB:2F:43:0D:3F:06:AB:12:E0:32:3E:12:F1:A3:60:F4:1F:95:40
Authority key identifier: 51:E0:DF:C9:37:1A:94:91:CA:A8:58:70:0F:D9:45:23:66:D9:ED:DC
Certificate issuer:       /CN=51e0dfc9371a9491caa858700fd9452366d9eddc
Certificate serial:       019B71EC411E12270F50F444432CCC0B8E01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UeDfyTcalJHKqFhwD9lFI2bZ7dw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/3abe20-1e75-4abe-9e89-6ac35370fd73/1/UeDfyTcalJHKqFhwD9lFI2bZ7dw.mft
Manifest number:          035D
Signing time:             Wed 31 Dec 2025 01:01:07 +0000
Manifest this update:     Wed 31 Dec 2025 01:01:07 +0000
Manifest next update:     Thu 01 Jan 2026 01:01:07 +0000
Files and hashes:         1: UeDfyTcalJHKqFhwD9lFI2bZ7dw.crl (hash: eFm7J9Du1VSj23qsqXBvKJa50QGIEvTMWuN8MzyYkGE=)
                          2: nmBuzHJtZ8Dl8WdiCnqlxf6RBwE.roa (hash: 5lO2yokCGdZ3wXh+anWEIpykoRp00iS8dYyJESAicQI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/3abe20-1e75-4abe-9e89-6ac35370fd73/1/UeDfyTcalJHKqFhwD9lFI2bZ7dw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/3abe20-1e75-4abe-9e89-6ac35370fd73/1/UeDfyTcalJHKqFhwD9lFI2bZ7dw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UeDfyTcalJHKqFhwD9lFI2bZ7dw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 31 Dec 2025 23:41:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:71:ec:41:1e:12:27:0f:50:f4:44:43:2c:cc:0b:8e:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51e0dfc9371a9491caa858700fd9452366d9eddc
        Validity
            Not Before: Dec 31 01:01:07 2025 GMT
            Not After : Jan  1 01:01:07 2026 GMT
        Subject: CN=e2cb2f430d3f06ab12e0323e12f1a360f41f9540
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:0e:01:4c:81:1f:f2:ca:e5:38:5c:69:d5:27:
                    18:0c:f5:de:8f:b8:fa:7c:84:a8:9b:32:49:62:ea:
                    09:67:93:cd:bf:d5:06:7a:0c:bb:a1:f4:4d:5d:2b:
                    f6:bb:5e:9b:f3:91:70:a3:02:c5:9f:38:66:83:6f:
                    97:33:31:00:92:db:9a:aa:e0:19:a4:ce:3c:7e:7e:
                    44:6e:af:31:28:ea:3b:e8:0e:e9:53:56:14:5b:ec:
                    7e:1b:55:d2:5d:dd:43:0b:8d:7c:77:e3:df:47:d6:
                    54:44:f5:4b:ba:44:93:76:25:af:7b:ca:3f:9b:64:
                    08:0e:9f:c6:83:9a:5c:5b:ee:a9:84:4d:2c:eb:19:
                    b7:af:5b:5f:44:f6:5d:e5:d9:29:86:84:f1:3c:38:
                    b1:68:03:ec:7e:4f:06:6b:14:05:97:1f:0b:f0:2b:
                    cb:8b:7d:b7:14:17:89:59:48:f1:6f:c5:02:4d:a5:
                    9c:fe:aa:a2:0f:be:b1:77:f5:e7:92:ee:cd:6c:4a:
                    68:59:78:7a:63:f8:7b:63:80:1b:e5:c4:db:32:b6:
                    09:d6:80:45:e0:17:26:f8:c5:4b:46:e3:c2:92:27:
                    76:d5:9e:91:e0:ed:de:3b:1c:0d:c6:7d:9e:94:f1:
                    e3:84:b5:d0:16:88:08:76:2b:41:ca:8c:6c:d4:fa:
                    d6:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:CB:2F:43:0D:3F:06:AB:12:E0:32:3E:12:F1:A3:60:F4:1F:95:40
            X509v3 Authority Key Identifier:
                keyid:51:E0:DF:C9:37:1A:94:91:CA:A8:58:70:0F:D9:45:23:66:D9:ED:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UeDfyTcalJHKqFhwD9lFI2bZ7dw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/3abe20-1e75-4abe-9e89-6ac35370fd73/1/UeDfyTcalJHKqFhwD9lFI2bZ7dw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/3abe20-1e75-4abe-9e89-6ac35370fd73/1/UeDfyTcalJHKqFhwD9lFI2bZ7dw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:1d:7b:81:3c:58:08:18:0e:76:84:fb:72:5c:42:67:5d:e5:
         2a:70:f2:9d:04:3c:a2:7c:7c:ec:4e:97:c7:fb:70:e6:d8:41:
         1e:34:ec:d5:d1:b7:11:23:7c:87:56:7b:b1:fd:9c:a6:4d:41:
         5d:35:05:ce:89:2a:a5:cd:ce:d5:2d:63:aa:b2:85:2f:fe:e4:
         61:ed:21:cd:b7:70:8c:87:0a:36:2f:2b:d7:d6:28:20:4a:41:
         37:54:a0:e9:95:43:5f:77:27:18:1b:cb:3c:92:7d:52:52:5a:
         1c:10:9e:0a:be:2c:a4:b5:f4:9b:be:8b:7b:80:82:97:92:61:
         da:0d:b5:2d:50:1f:e9:d9:32:3a:b8:1f:82:46:1e:00:98:b0:
         f3:7e:76:0d:dd:1a:79:6f:bf:41:57:1a:75:5a:d0:a5:6d:fa:
         a3:e1:dc:b7:7e:d7:58:b6:72:26:d8:42:47:29:b5:00:be:9d:
         94:80:cf:0b:af:15:a1:eb:74:93:16:f0:f9:36:a1:9f:77:73:
         bb:0d:55:95:82:a5:9b:18:bc:ce:67:df:a8:af:58:b7:b2:06:
         eb:ab:48:65:69:0a:93:18:41:98:f6:88:6c:3d:88:92:70:84:
         39:b8:30:dc:4a:2c:bb:1a:0f:1d:ed:53:82:e6:ec:ef:fe:1e:
         e4:30:fa:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZtx7EEeEicPUPREQyzMC44BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxZTBkZmM5MzcxYTk0OTFjYWE4NTg3MDBmZDk0NTIzNjZk
OWVkZGMwHhcNMjUxMjMxMDEwMTA3WhcNMjYwMTAxMDEwMTA3WjAzMTEwLwYDVQQD
EyhlMmNiMmY0MzBkM2YwNmFiMTJlMDMyM2UxMmYxYTM2MGY0MWY5NTQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArw4BTIEf8srlOFxp1ScYDPXej7j6
fISomzJJYuoJZ5PNv9UGegy7ofRNXSv2u16b85FwowLFnzhmg2+XMzEAktuaquAZ
pM48fn5Ebq8xKOo76A7pU1YUW+x+G1XSXd1DC418d+PfR9ZURPVLukSTdiWve8o/
m2QIDp/Gg5pcW+6phE0s6xm3r1tfRPZd5dkphoTxPDixaAPsfk8GaxQFlx8L8CvL
i323FBeJWUjxb8UCTaWc/qqiD76xd/Xnku7NbEpoWXh6Y/h7Y4Ab5cTbMrYJ1oBF
4Bcm+MVLRuPCkid21Z6R4O3eOxwNxn2elPHjhLXQFogIditByoxs1PrWEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOLLL0MNPwarEuAyPhLxo2D0H5VAMB8GA1UdIwQY
MBaAFFHg38k3GpSRyqhYcA/ZRSNm2e3cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWVEZnlUY2FsSkhLcUZod0Q5bEZJMmJaN2R3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS8zYWJlMjAtMWU3NS00YWJlLTllODkt
NmFjMzUzNzBmZDczLzEvVWVEZnlUY2FsSkhLcUZod0Q5bEZJMmJaN2R3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS8zYWJlMjAtMWU3NS00YWJlLTllODktNmFjMzUzNzBmZDcz
LzEvVWVEZnlUY2FsSkhLcUZod0Q5bEZJMmJaN2R3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnh17gTxY
CBgOdoT7clxCZ13lKnDynQQ8onx87E6Xx/tw5thBHjTs1dG3ESN8h1Z7sf2cpk1B
XTUFzokqpc3O1S1jqrKFL/7kYe0hzbdwjIcKNi8r19YoIEpBN1Sg6ZVDX3cnGBvL
PJJ9UlJaHBCeCr4spLX0m76Le4CCl5Jh2g21LVAf6dkyOrgfgkYeAJiw8352Dd0a
eW+/QVcadVrQpW36o+Hct37XWLZyJthCRym1AL6dlIDPC68Voet0kxbw+Tahn3dz
uw1VlYKlmxi8zmffqK9Yt7IG66tIZWkKkxhBmPaIbD2IknCEObgw3EosuxoPHe1T
gubs7/4e5DD6cQ==
-----END CERTIFICATE-----
Generated at Wed Dec 31 05:57:28 2025 by rpki-client