This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/d348b5-151c-4aa5-bd09-ef5d5011ca77/1/UKBqRT_NXyb69IIsS0WQmNyv8Dk.mft
File:                     UKBqRT_NXyb69IIsS0WQmNyv8Dk.mft (raw, json)
Hash identifier:          V9j5cyFxp6cq4Dhqa7P/trPusRzXhcHdMhT/vhcm0QM=
Subject key identifier:   EE:29:0F:A4:0F:44:53:9F:74:ED:BA:50:85:C5:14:16:3C:D1:E9:1B
Authority key identifier: 50:A0:6A:45:3F:CD:5F:26:FA:F4:82:2C:4B:45:90:98:DC:AF:F0:39
Certificate issuer:       /CN=50a06a453fcd5f26faf4822c4b459098dcaff039
Certificate serial:       019B4091D48520BDE38A7320C14ED5769F3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UKBqRT_NXyb69IIsS0WQmNyv8Dk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/d348b5-151c-4aa5-bd09-ef5d5011ca77/1/UKBqRT_NXyb69IIsS0WQmNyv8Dk.mft
Manifest number:          178C
Signing time:             Sun 21 Dec 2025 11:00:57 +0000
Manifest this update:     Sun 21 Dec 2025 11:00:57 +0000
Manifest next update:     Mon 22 Dec 2025 11:00:57 +0000
Files and hashes:         1: UKBqRT_NXyb69IIsS0WQmNyv8Dk.crl (hash: WgHiAHeDdh//Mnb0pmabF1CqsViMRfK9r3ruTQXQ92A=)
                          2: XmJ8vYGbQYVnd8y-h4wRzi3J_pE.roa (hash: exnN1l7i5NuQ19i+bMh7iG0NXDBSnKZN8vpjyWS2vRc=)
                          3: XrhvNCYQn9v_ZtENdKVZ3VLduJc.roa (hash: aN/R4IVeQqrz28tH9akl71ra6TmpBihdrIjUuL23MYA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/d348b5-151c-4aa5-bd09-ef5d5011ca77/1/UKBqRT_NXyb69IIsS0WQmNyv8Dk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/d348b5-151c-4aa5-bd09-ef5d5011ca77/1/UKBqRT_NXyb69IIsS0WQmNyv8Dk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UKBqRT_NXyb69IIsS0WQmNyv8Dk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 22 Dec 2025 11:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:40:91:d4:85:20:bd:e3:8a:73:20:c1:4e:d5:76:9f:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50a06a453fcd5f26faf4822c4b459098dcaff039
        Validity
            Not Before: Dec 21 11:00:57 2025 GMT
            Not After : Dec 22 11:00:57 2025 GMT
        Subject: CN=ee290fa40f44539f74edba5085c514163cd1e91b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:19:d1:ad:b2:26:04:65:20:4f:40:3e:62:dd:
                    7a:3e:1f:50:d3:c5:6b:4f:f3:e8:cf:8a:ce:ce:b3:
                    a0:df:76:19:24:18:c1:64:ad:09:7c:8a:81:f8:04:
                    d9:3e:88:ee:f6:54:d3:39:d6:c8:37:28:8e:06:90:
                    c3:67:7f:a0:ed:f6:54:6e:b7:08:ff:14:de:f9:c9:
                    7b:e4:c4:9f:75:e8:0f:d4:da:91:41:13:1d:42:7a:
                    3c:8d:ac:4a:64:4e:e6:40:49:93:17:11:59:3c:3f:
                    0c:c6:e4:52:2e:b5:d4:8c:aa:cc:2c:f9:82:f7:c7:
                    74:b1:51:a0:31:73:e7:26:dc:1b:cd:fb:32:ee:e0:
                    2a:a2:2b:0e:c0:b9:7b:ce:41:d4:e1:78:5f:5e:47:
                    c4:a6:29:05:0a:5c:48:c0:7b:2a:72:a9:35:81:5b:
                    10:0e:4f:78:60:b6:0d:99:5a:24:3d:49:2f:9c:d4:
                    f4:f0:7a:d8:74:8b:d0:6a:77:52:6f:ac:10:04:80:
                    74:5a:88:27:8b:1d:93:ff:20:0e:8e:96:56:43:19:
                    9e:bb:8a:7d:32:2a:40:b0:47:f2:0b:60:7b:3f:4c:
                    61:47:f9:eb:e7:54:cf:d6:09:92:9a:62:c4:1e:15:
                    0e:82:0e:9a:82:41:e8:c9:d9:35:ae:0f:66:e3:56:
                    09:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:29:0F:A4:0F:44:53:9F:74:ED:BA:50:85:C5:14:16:3C:D1:E9:1B
            X509v3 Authority Key Identifier:
                keyid:50:A0:6A:45:3F:CD:5F:26:FA:F4:82:2C:4B:45:90:98:DC:AF:F0:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UKBqRT_NXyb69IIsS0WQmNyv8Dk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d348b5-151c-4aa5-bd09-ef5d5011ca77/1/UKBqRT_NXyb69IIsS0WQmNyv8Dk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d348b5-151c-4aa5-bd09-ef5d5011ca77/1/UKBqRT_NXyb69IIsS0WQmNyv8Dk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:a4:45:e3:9f:6a:dd:7e:97:b9:e0:b4:9f:80:e6:6e:4b:5d:
         8d:e0:f8:48:b9:87:79:7b:7d:96:ac:84:04:f5:e0:84:09:11:
         b4:32:f2:c4:cc:f5:73:2e:f7:1f:07:e5:de:46:01:2a:5e:37:
         33:c5:d0:95:52:b4:df:15:e0:28:3a:8c:c2:ce:62:30:93:7c:
         f8:5d:7b:07:6b:0a:14:6a:e6:9c:75:39:f0:ab:99:b1:36:af:
         a4:34:82:07:6b:2b:d7:e4:25:37:be:52:dc:a3:b8:08:40:95:
         f1:f9:81:d5:f1:1a:61:41:1a:ce:f4:f8:d5:ba:7f:6e:d2:0e:
         0b:42:d0:17:5e:05:ba:6e:6b:f0:7a:ad:16:8e:66:27:7a:6c:
         40:e7:1e:fc:ce:48:df:c0:40:9b:63:28:89:bf:5c:7d:f6:a1:
         1b:c3:73:5b:21:a8:46:b2:6b:a6:44:d8:59:af:01:fb:b9:d1:
         75:07:7f:66:94:04:87:a4:ec:09:d7:5e:07:7b:c1:ce:aa:e1:
         3b:0f:35:fe:2c:12:b4:01:f1:77:8c:7f:d6:da:2c:c0:58:6e:
         82:ec:78:87:37:a0:bc:f4:94:42:7b:36:bf:7c:0c:22:d3:e9:
         d4:7f:84:fe:59:be:86:cd:2f:83:b5:36:92:6f:77:0c:51:e8:
         af:49:01:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZtAkdSFIL3jinMgwU7Vdp8+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwYTA2YTQ1M2ZjZDVmMjZmYWY0ODIyYzRiNDU5MDk4ZGNh
ZmYwMzkwHhcNMjUxMjIxMTEwMDU3WhcNMjUxMjIyMTEwMDU3WjAzMTEwLwYDVQQD
EyhlZTI5MGZhNDBmNDQ1MzlmNzRlZGJhNTA4NWM1MTQxNjNjZDFlOTFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApRnRrbImBGUgT0A+Yt16Ph9Q08Vr
T/Poz4rOzrOg33YZJBjBZK0JfIqB+ATZPoju9lTTOdbINyiOBpDDZ3+g7fZUbrcI
/xTe+cl75MSfdegP1NqRQRMdQno8jaxKZE7mQEmTFxFZPD8MxuRSLrXUjKrMLPmC
98d0sVGgMXPnJtwbzfsy7uAqoisOwLl7zkHU4XhfXkfEpikFClxIwHsqcqk1gVsQ
Dk94YLYNmVokPUkvnNT08HrYdIvQandSb6wQBIB0Wognix2T/yAOjpZWQxmeu4p9
MipAsEfyC2B7P0xhR/nr51TP1gmSmmLEHhUOgg6agkHoydk1rg9m41YJ0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO4pD6QPRFOfdO26UIXFFBY80ekbMB8GA1UdIwQY
MBaAFFCgakU/zV8m+vSCLEtFkJjcr/A5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUtCcVJUX05YeWI2OUlJc1MwV1FtTnl2OERrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9kMzQ4YjUtMTUxYy00YWE1LWJkMDkt
ZWY1ZDUwMTFjYTc3LzEvVUtCcVJUX05YeWI2OUlJc1MwV1FtTnl2OERrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC9kMzQ4YjUtMTUxYy00YWE1LWJkMDktZWY1ZDUwMTFjYTc3
LzEvVUtCcVJUX05YeWI2OUlJc1MwV1FtTnl2OERrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABqRF459q
3X6XueC0n4DmbktdjeD4SLmHeXt9lqyEBPXghAkRtDLyxMz1cy73Hwfl3kYBKl43
M8XQlVK03xXgKDqMws5iMJN8+F17B2sKFGrmnHU58KuZsTavpDSCB2sr1+QlN75S
3KO4CECV8fmB1fEaYUEazvT41bp/btIOC0LQF14Fum5r8HqtFo5mJ3psQOce/M5I
38BAm2Moib9cffahG8NzWyGoRrJrpkTYWa8B+7nRdQd/ZpQEh6TsCddeB3vBzqrh
Ow81/iwStAHxd4x/1toswFhugux4hzegvPSUQns2v3wMItPp1H+E/lm+hs0vg7U2
km93DFHor0kB5g==
-----END CERTIFICATE-----
Generated at Sun Dec 21 18:55:14 2025 by rpki-client