This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/UqXJDKkoMTvHDSaDuw9k1jKyc6E.mft
File:                     UqXJDKkoMTvHDSaDuw9k1jKyc6E.mft (raw, json)
Hash identifier:          U7dc8n4Ma5WAzyvCsOV4J19XQa3+mYZZ3l4m3N3cBHc=
Subject key identifier:   FF:7F:B2:C8:D7:57:AF:4C:F1:E2:9D:7A:50:14:DB:87:D0:F4:3D:53
Authority key identifier: 52:A5:C9:0C:A9:28:31:3B:C7:0D:26:83:BB:0F:64:D6:32:B2:73:A1
Certificate issuer:       /CN=52a5c90ca928313bc70d2683bb0f64d632b273a1
Certificate serial:       019B3EDACA7D7DF88778B5AD12D1AC2F9454
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UqXJDKkoMTvHDSaDuw9k1jKyc6E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/UqXJDKkoMTvHDSaDuw9k1jKyc6E.mft
Manifest number:          1796
Signing time:             Sun 21 Dec 2025 03:01:24 +0000
Manifest this update:     Sun 21 Dec 2025 03:01:24 +0000
Manifest next update:     Mon 22 Dec 2025 03:01:24 +0000
Files and hashes:         1: Tfr-7D7j2lNNHKqg1wf4wAWyKLs.roa (hash: TDIng4XMMUv1oCQo74mZWI08OWTpEbwfzmj+Yz7Mcjs=)
                          2: UqXJDKkoMTvHDSaDuw9k1jKyc6E.crl (hash: 0DuRCWXADdgA8OIfWH1pjXM/RXmj8F/qdRPkTc+cWbI=)
                          3: V30JXSTwCvMQbqRFqhemlITS5yI.roa (hash: MiIdeWVjQ/VodXANph+J9yQekOJ2MrUPBDNctMB5WZg=)
                          4: fvX9lVCmVkwxFN8HZnxPO7cbKOc.roa (hash: 0YH2vuu49gx5SRz7HwNFAksVufD7yu4WlEj1/zzH+14=)
                          5: g2Tr9uvyLm_vlwkGo6cp6yBSgPk.roa (hash: FXX+7zvwl+jhFJ/RqVEU3TMW14QBwo/9W7IU9URXq7s=)
                          6: g4mdoMQ7AxJUDrtz_UzKcq2BGGE.roa (hash: 4DUzhU0iuTSUQunYJIMnvSS7wKLl3zF9lIYPHqPkajo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/UqXJDKkoMTvHDSaDuw9k1jKyc6E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/UqXJDKkoMTvHDSaDuw9k1jKyc6E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UqXJDKkoMTvHDSaDuw9k1jKyc6E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 22 Dec 2025 00:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3e:da:ca:7d:7d:f8:87:78:b5:ad:12:d1:ac:2f:94:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52a5c90ca928313bc70d2683bb0f64d632b273a1
        Validity
            Not Before: Dec 21 03:01:24 2025 GMT
            Not After : Dec 22 03:01:24 2025 GMT
        Subject: CN=ff7fb2c8d757af4cf1e29d7a5014db87d0f43d53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:04:78:a2:c2:9e:79:4e:34:1a:6b:25:97:4e:
                    d8:ab:ee:f1:3d:8b:9a:bb:0d:b5:53:4a:89:de:dc:
                    9b:23:51:71:76:a7:3f:58:75:54:a1:6e:fe:74:14:
                    50:fc:f0:fb:3f:f6:4e:d8:71:c1:61:34:ed:87:7f:
                    6b:6e:4b:f5:9c:e5:99:00:85:bd:38:cd:59:ec:35:
                    f8:c9:e5:28:90:dc:1d:45:39:9a:6f:00:da:ac:cf:
                    02:4c:be:b0:58:dc:d0:91:66:7b:19:ca:d3:cd:a3:
                    3a:a3:6e:a4:29:9c:72:bb:cf:ae:63:b2:87:99:2a:
                    9e:8e:fb:8a:9c:15:f6:58:80:1a:95:78:17:3b:0a:
                    6d:f6:ac:0d:53:1d:fe:6e:44:1a:66:29:16:f2:07:
                    66:cc:1a:0b:6a:ff:1b:c3:fd:a4:23:af:17:12:91:
                    b0:3e:9d:34:48:c5:0a:af:c0:a8:a0:9e:09:f2:14:
                    69:6a:47:4b:62:b4:37:a8:f0:b4:ba:84:51:24:12:
                    56:35:3b:87:14:32:05:2f:c5:71:a7:2b:04:8f:29:
                    ba:02:27:39:00:12:ce:72:93:d1:ad:dd:3b:6d:fe:
                    4c:f0:44:dd:67:67:2b:ce:03:40:0e:cf:a3:20:63:
                    f9:46:16:78:13:a4:2d:6e:aa:e3:6d:83:9b:00:e8:
                    c1:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:7F:B2:C8:D7:57:AF:4C:F1:E2:9D:7A:50:14:DB:87:D0:F4:3D:53
            X509v3 Authority Key Identifier:
                keyid:52:A5:C9:0C:A9:28:31:3B:C7:0D:26:83:BB:0F:64:D6:32:B2:73:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UqXJDKkoMTvHDSaDuw9k1jKyc6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/UqXJDKkoMTvHDSaDuw9k1jKyc6E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/UqXJDKkoMTvHDSaDuw9k1jKyc6E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:8b:67:0c:6b:69:a9:4f:5b:e0:7f:b3:5b:cd:60:b4:fe:5c:
         da:c1:2c:e9:54:a6:5f:b9:47:1a:bd:ef:26:b1:9d:7f:b9:62:
         b0:e3:97:b1:c3:fc:ab:b8:90:1a:35:6d:7f:38:6d:5f:61:7f:
         88:69:26:49:d7:a1:9b:9c:61:be:96:0a:f8:f5:bc:cb:1b:46:
         10:d5:1a:53:86:42:49:f4:71:6e:50:d3:dc:53:4f:91:9e:c2:
         59:31:6a:78:09:da:f6:df:92:72:6b:20:9d:0e:7e:30:c1:f5:
         db:52:9b:3d:fa:ab:52:59:44:61:a5:f2:c4:d8:cb:6a:3a:cc:
         e2:e4:67:d5:30:f6:c1:d2:fc:47:e5:3e:bf:62:36:86:55:31:
         fb:dd:95:fd:a1:b1:ae:75:49:41:10:fb:42:6b:55:c7:b2:f5:
         4b:64:f0:8a:2b:e7:df:0c:20:7d:5e:bc:38:4f:c0:7a:81:fd:
         75:d0:58:ac:7b:fa:63:75:d0:2d:00:05:47:f8:0d:70:46:7f:
         f8:1f:06:4c:04:e6:96:16:07:d8:a8:5a:c7:4e:49:33:e6:64:
         07:e3:e7:4a:5c:74:b5:89:b6:72:88:4b:d3:4a:27:75:c7:38:
         25:ac:06:91:4c:5c:a2:92:af:02:7f:24:bc:78:dd:39:33:a5:
         9d:e9:80:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 07:07:10 2025 by rpki-client