This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/75ba72-d7b2-4283-9f0b-e3e5fa36bb2f/1/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.mft
File:                     UjAqRdBWhIYFGn7EZvAxCMMgtMQ.mft (raw, json)
Hash identifier:          jQhZLnznj17sMxaVs6pDJONVd4b5Y1RvqzIh2iS9n/U=
Subject key identifier:   B8:B2:F5:3D:85:C4:FC:7B:B8:28:6F:2F:A8:2B:C3:A4:92:66:27:FC
Authority key identifier: 52:30:2A:45:D0:56:84:86:05:1A:7E:C4:66:F0:31:08:C3:20:B4:C4
Certificate issuer:       /CN=52302a45d0568486051a7ec466f03108c320b4c4
Certificate serial:       019B3BD937AAC5D00039D7F726BFB8F1DC93
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/75ba72-d7b2-4283-9f0b-e3e5fa36bb2f/1/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.mft
Manifest number:          1638
Signing time:             Sat 20 Dec 2025 13:00:49 +0000
Manifest this update:     Sat 20 Dec 2025 13:00:49 +0000
Manifest next update:     Sun 21 Dec 2025 13:00:49 +0000
Files and hashes:         1: QT_SK_iR1CMR9onvZvmcZNC40rI.roa (hash: wS3+u+XyjIXltWoW0+plapBWAgUiuQD0ohiZyl3pRxo=)
                          2: U2CfkbTtx4yBkybUh2khtkvWGcw.roa (hash: 2JyqA2QMb2RljPRBnX+Xy8q+isyJqjDkSXr9/EJxr0I=)
                          3: UjAqRdBWhIYFGn7EZvAxCMMgtMQ.crl (hash: dyPOk9TZ2dOxUlNPS9pds/Zd88zk2qrFlKcA720bD/I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/75ba72-d7b2-4283-9f0b-e3e5fa36bb2f/1/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/75ba72-d7b2-4283-9f0b-e3e5fa36bb2f/1/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 10:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3b:d9:37:aa:c5:d0:00:39:d7:f7:26:bf:b8:f1:dc:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52302a45d0568486051a7ec466f03108c320b4c4
        Validity
            Not Before: Dec 20 13:00:49 2025 GMT
            Not After : Dec 21 13:00:49 2025 GMT
        Subject: CN=b8b2f53d85c4fc7bb8286f2fa82bc3a4926627fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:b5:39:f3:3c:0e:30:93:59:a0:fe:67:be:49:
                    82:33:32:c9:31:e3:87:96:1b:76:3c:0a:db:9a:99:
                    09:ed:72:69:5f:b2:47:b0:1f:ab:0f:8d:5e:cd:03:
                    b4:74:25:89:1b:7e:b8:23:20:83:cd:82:c0:35:7d:
                    5f:ea:da:99:89:2e:e2:41:b1:f0:66:9f:3b:8c:fe:
                    86:86:bb:5a:25:29:f5:cd:a6:e7:0f:22:87:27:90:
                    4d:fc:09:d9:b5:89:ac:d5:31:fa:94:66:1d:0f:55:
                    b1:e6:aa:ea:ee:fd:55:b5:6d:b4:0d:5c:74:d2:11:
                    bd:61:93:64:52:8c:0d:88:64:78:d9:f5:63:3b:db:
                    eb:a7:0b:5f:95:ad:4e:11:b1:40:75:5b:1b:f4:da:
                    b6:63:09:2e:fa:e8:f4:d9:67:05:40:c2:cd:be:e1:
                    fe:6c:2e:a9:80:f5:20:e0:ab:2c:c3:15:53:ab:99:
                    e7:8b:0f:1f:20:7e:c4:d5:42:70:3f:c9:71:a1:cc:
                    18:15:1b:14:cc:52:d4:b4:dd:34:d2:14:33:33:75:
                    1f:fa:69:36:c9:4e:35:9b:69:2e:37:c2:d3:cf:f4:
                    48:03:d2:90:81:e8:30:af:ee:43:6c:be:3a:de:ec:
                    ac:f5:56:21:91:7e:00:04:76:80:96:cc:9a:3b:13:
                    96:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:B2:F5:3D:85:C4:FC:7B:B8:28:6F:2F:A8:2B:C3:A4:92:66:27:FC
            X509v3 Authority Key Identifier:
                keyid:52:30:2A:45:D0:56:84:86:05:1A:7E:C4:66:F0:31:08:C3:20:B4:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/75ba72-d7b2-4283-9f0b-e3e5fa36bb2f/1/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/75ba72-d7b2-4283-9f0b-e3e5fa36bb2f/1/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:c8:3c:71:0f:4f:77:36:fd:a2:a1:79:78:e3:e5:1b:ac:99:
         fd:58:59:08:22:1e:69:3d:70:85:27:f7:f7:6a:bd:1b:48:c1:
         d5:ad:fc:50:d5:66:b7:57:c0:65:e2:e0:93:49:ed:a3:41:ec:
         3d:77:55:64:eb:54:b7:eb:ee:4c:29:aa:d3:6e:7a:e2:26:f9:
         2b:d4:28:51:d5:77:39:79:e2:1d:50:d6:c9:a7:a4:41:c4:10:
         b3:24:8e:4e:c8:e4:6c:ff:88:4f:e0:f1:e7:6a:fb:7e:c4:53:
         14:3e:72:30:d5:37:6b:04:d3:ea:ca:fb:c7:a5:75:ca:4d:40:
         b1:ea:f9:02:b4:73:6e:83:21:51:14:fb:b7:e1:7a:37:6d:42:
         c5:77:b3:93:65:1b:dc:90:e1:76:6a:98:e2:1f:de:bd:93:0c:
         3d:25:bb:4d:d8:a3:2d:71:23:2e:28:73:09:b1:c3:21:44:a8:
         a6:44:e3:86:7e:2b:25:d1:4b:dc:c5:47:5d:67:a9:f0:7d:7f:
         e2:be:3e:4d:14:29:c7:7c:5e:6b:1f:a7:fa:bb:61:3c:54:bd:
         0f:5b:08:15:12:48:7d:9e:f9:6d:7a:ac:a4:99:18:f5:b8:5f:
         17:67:0e:99:46:91:70:f3:ee:d5:6c:05:74:57:95:81:10:73:
         0c:55:72:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 18:50:06 2025 by rpki-client