This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/1d5ee1-accf-474f-a589-cd1fa484411b/1/uGnuZhZNPLQdvS31QXgXwy9M6gU.mft
File:                     uGnuZhZNPLQdvS31QXgXwy9M6gU.mft (raw, json)
Hash identifier:          OWycIhKoE0lZcjsz0WhUopIkI+Ml2lYdT1qcZ7K8jD4=
Subject key identifier:   65:2E:1E:6A:48:39:BE:A4:4A:58:7A:E6:DA:34:B2:97:D6:A8:27:C6
Authority key identifier: B8:69:EE:66:16:4D:3C:B4:1D:BD:2D:F5:41:78:17:C3:2F:4C:EA:05
Certificate issuer:       /CN=b869ee66164d3cb41dbd2df5417817c32f4cea05
Certificate serial:       019B397DB86B8BAFE2ABB913EEFEA74B690E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uGnuZhZNPLQdvS31QXgXwy9M6gU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/1d5ee1-accf-474f-a589-cd1fa484411b/1/uGnuZhZNPLQdvS31QXgXwy9M6gU.mft
Manifest number:          1786
Signing time:             Sat 20 Dec 2025 02:01:39 +0000
Manifest this update:     Sat 20 Dec 2025 02:01:39 +0000
Manifest next update:     Sun 21 Dec 2025 02:01:39 +0000
Files and hashes:         1: 2hZweGDLaTOG9__dBEdUkTtfsSw.roa (hash: x2mvxEnLHZTwd7sK9WWW9RrPHq1tkRpvzUBh9hY6j6E=)
                          2: YKs5bmFUVAk0U3c65JyA-yx_ru8.roa (hash: /iSRIEZxHR2KYrSfKlv13GZuPtZZ9il7XqwpwVFRwXE=)
                          3: uGnuZhZNPLQdvS31QXgXwy9M6gU.crl (hash: vvl89IhDetA6a8KnujYavT3FED70JKQyE0xepKwOGNU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/1d5ee1-accf-474f-a589-cd1fa484411b/1/uGnuZhZNPLQdvS31QXgXwy9M6gU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/1d5ee1-accf-474f-a589-cd1fa484411b/1/uGnuZhZNPLQdvS31QXgXwy9M6gU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uGnuZhZNPLQdvS31QXgXwy9M6gU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 01:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:39:7d:b8:6b:8b:af:e2:ab:b9:13:ee:fe:a7:4b:69:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b869ee66164d3cb41dbd2df5417817c32f4cea05
        Validity
            Not Before: Dec 20 02:01:39 2025 GMT
            Not After : Dec 21 02:01:39 2025 GMT
        Subject: CN=652e1e6a4839bea44a587ae6da34b297d6a827c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:96:e0:9c:15:e4:ac:af:4d:07:39:be:02:fb:
                    bd:9b:03:ef:f8:a7:6f:27:68:91:00:f5:6d:75:b5:
                    73:e6:71:4b:b7:6b:23:d3:3c:65:c2:1f:f8:e4:84:
                    6e:9d:94:2c:20:73:73:da:6f:01:01:43:6b:dc:95:
                    4d:80:bb:48:19:cd:1f:68:a6:cd:b6:d3:84:87:66:
                    2a:82:69:41:7a:de:69:7f:75:d1:b9:65:7d:a0:58:
                    66:85:ee:22:73:4b:93:0a:54:d4:06:6a:78:ac:d9:
                    9d:59:3b:6b:dd:30:89:f2:2f:ca:7b:3e:ad:82:60:
                    c0:c7:9f:a9:6a:d7:9a:31:c0:8d:a5:79:c3:8d:e3:
                    22:00:78:cf:99:b5:9b:c8:ef:35:9c:6a:0f:0d:ee:
                    a3:2b:51:4b:ef:2f:2e:a8:44:ff:e2:bb:f7:6a:94:
                    f3:be:9a:72:97:42:4c:09:e1:74:ab:70:01:16:f9:
                    f2:d6:17:16:8d:dd:4d:fd:0f:76:ac:dd:1e:03:89:
                    8d:f9:17:5f:cb:a7:cd:9c:a4:5a:dc:84:99:ed:f3:
                    fb:d7:bc:cd:c0:12:87:3c:74:60:a7:e0:d7:dc:81:
                    08:d2:19:61:58:1f:42:cd:62:03:d4:ba:72:10:84:
                    81:17:90:85:1f:ad:e3:80:7d:49:17:54:77:b4:10:
                    f9:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:2E:1E:6A:48:39:BE:A4:4A:58:7A:E6:DA:34:B2:97:D6:A8:27:C6
            X509v3 Authority Key Identifier:
                keyid:B8:69:EE:66:16:4D:3C:B4:1D:BD:2D:F5:41:78:17:C3:2F:4C:EA:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uGnuZhZNPLQdvS31QXgXwy9M6gU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/1d5ee1-accf-474f-a589-cd1fa484411b/1/uGnuZhZNPLQdvS31QXgXwy9M6gU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/1d5ee1-accf-474f-a589-cd1fa484411b/1/uGnuZhZNPLQdvS31QXgXwy9M6gU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d5:e0:08:d0:d9:8a:88:52:72:75:42:d8:45:7f:16:9b:70:d5:
         4a:a9:43:53:2d:93:ed:f9:89:7d:7d:a8:3c:de:dc:45:14:2b:
         bd:c0:03:f6:57:14:16:69:8e:41:c8:a3:0d:bb:00:2c:6b:6d:
         27:96:d9:f5:ad:8a:18:fe:a4:90:fe:62:66:d9:3a:fd:a9:e5:
         6e:a4:fb:00:15:bb:3c:25:1b:29:ab:64:24:fb:36:78:1c:c8:
         69:c0:78:e5:be:de:ba:22:00:73:ce:8e:e9:ee:99:79:69:b3:
         1b:8c:39:a7:b1:95:4a:87:4e:05:cf:7a:3c:7b:45:5f:08:e7:
         b3:5c:51:0f:f4:a6:01:0d:b4:fc:95:5e:fd:d0:7f:ca:b7:69:
         40:79:c1:73:96:5a:ae:b2:ad:8e:d5:d4:2d:ba:a1:a8:29:10:
         e4:38:dd:ea:e8:a2:0d:ee:cc:d4:bc:57:0b:04:87:ef:36:26:
         6a:b5:27:a5:b2:7d:4f:ac:e1:fe:42:1d:a0:bc:c6:26:d6:f9:
         40:80:09:3b:d3:90:be:02:07:60:f1:df:16:8e:6c:f8:5b:0d:
         17:5a:65:80:b0:6a:a6:2a:87:36:28:cb:89:e2:d1:de:ac:ab:
         02:30:a4:cf:38:83:47:6f:7a:3a:38:02:b1:11:83:2d:24:30:
         d6:c0:32:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZs5fbhri6/iq7kT7v6nS2kOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4NjllZTY2MTY0ZDNjYjQxZGJkMmRmNTQxNzgxN2MzMmY0
Y2VhMDUwHhcNMjUxMjIwMDIwMTM5WhcNMjUxMjIxMDIwMTM5WjAzMTEwLwYDVQQD
Eyg2NTJlMWU2YTQ4MzliZWE0NGE1ODdhZTZkYTM0YjI5N2Q2YTgyN2M2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp5bgnBXkrK9NBzm+Avu9mwPv+Kdv
J2iRAPVtdbVz5nFLt2sj0zxlwh/45IRunZQsIHNz2m8BAUNr3JVNgLtIGc0faKbN
ttOEh2YqgmlBet5pf3XRuWV9oFhmhe4ic0uTClTUBmp4rNmdWTtr3TCJ8i/Kez6t
gmDAx5+pateaMcCNpXnDjeMiAHjPmbWbyO81nGoPDe6jK1FL7y8uqET/4rv3apTz
vppyl0JMCeF0q3ABFvny1hcWjd1N/Q92rN0eA4mN+Rdfy6fNnKRa3ISZ7fP717zN
wBKHPHRgp+DX3IEI0hlhWB9CzWID1LpyEISBF5CFH63jgH1JF1R3tBD56QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGUuHmpIOb6kSlh65to0spfWqCfGMB8GA1UdIwQY
MBaAFLhp7mYWTTy0Hb0t9UF4F8MvTOoFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdUdudVpoWk5QTFFkdlMzMVFYZ1h3eTlNNmdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi8xZDVlZTEtYWNjZi00NzRmLWE1ODkt
Y2QxZmE0ODQ0MTFiLzEvdUdudVpoWk5QTFFkdlMzMVFYZ1h3eTlNNmdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi8xZDVlZTEtYWNjZi00NzRmLWE1ODktY2QxZmE0ODQ0MTFi
LzEvdUdudVpoWk5QTFFkdlMzMVFYZ1h3eTlNNmdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1eAI0NmK
iFJydULYRX8Wm3DVSqlDUy2T7fmJfX2oPN7cRRQrvcAD9lcUFmmOQcijDbsALGtt
J5bZ9a2KGP6kkP5iZtk6/anlbqT7ABW7PCUbKatkJPs2eBzIacB45b7euiIAc86O
6e6ZeWmzG4w5p7GVSodOBc96PHtFXwjns1xRD/SmAQ20/JVe/dB/yrdpQHnBc5Za
rrKtjtXULbqhqCkQ5Djd6uiiDe7M1LxXCwSH7zYmarUnpbJ9T6zh/kIdoLzGJtb5
QIAJO9OQvgIHYPHfFo5s+FsNF1plgLBqpiqHNijLieLR3qyrAjCkzziDR296OjgC
sRGDLSQw1sAyNQ==
-----END CERTIFICATE-----
Generated at Sat Dec 20 06:55:43 2025 by rpki-client