This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/9d3f15-47d0-4069-b596-51a0f6bde4f6/1/UVWFrKQjaXxiI24rX5G0Hkvnrlg.mft
File:                     UVWFrKQjaXxiI24rX5G0Hkvnrlg.mft (raw, json)
Hash identifier:          byo+0c0LL8x35pVTYnCh6/xoQnCPuKhOKGQSgan3dKY=
Subject key identifier:   84:52:41:EF:3E:86:3E:71:69:AD:9C:2E:26:AE:94:58:05:CE:BB:C9
Authority key identifier: 51:55:85:AC:A4:23:69:7C:62:23:6E:2B:5F:91:B4:1E:4B:E7:AE:58
Certificate issuer:       /CN=515585aca423697c62236e2b5f91b41e4be7ae58
Certificate serial:       019B2F6761BB08FEF6745FEA80B1119847E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UVWFrKQjaXxiI24rX5G0Hkvnrlg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/9d3f15-47d0-4069-b596-51a0f6bde4f6/1/UVWFrKQjaXxiI24rX5G0Hkvnrlg.mft
Manifest number:          10B5
Signing time:             Thu 18 Dec 2025 03:01:02 +0000
Manifest this update:     Thu 18 Dec 2025 03:01:02 +0000
Manifest next update:     Fri 19 Dec 2025 03:01:02 +0000
Files and hashes:         1: EmZGnE3cUctL2ReH5qcX6e_cHZA.roa (hash: /paSeXdGSN8xOjhTUDVjgnMls/gfanO98AsFxJF7eNA=)
                          2: UVWFrKQjaXxiI24rX5G0Hkvnrlg.crl (hash: nQioqEy7zLG49K2l58Z2NRKSxkOVk8wHRPhG1si7dbY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/9d3f15-47d0-4069-b596-51a0f6bde4f6/1/UVWFrKQjaXxiI24rX5G0Hkvnrlg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/9d3f15-47d0-4069-b596-51a0f6bde4f6/1/UVWFrKQjaXxiI24rX5G0Hkvnrlg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UVWFrKQjaXxiI24rX5G0Hkvnrlg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 19 Dec 2025 03:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:2f:67:61:bb:08:fe:f6:74:5f:ea:80:b1:11:98:47:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=515585aca423697c62236e2b5f91b41e4be7ae58
        Validity
            Not Before: Dec 18 03:01:02 2025 GMT
            Not After : Dec 19 03:01:02 2025 GMT
        Subject: CN=845241ef3e863e7169ad9c2e26ae945805cebbc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:e8:18:ba:47:25:80:27:bc:9c:cb:f6:19:6c:
                    12:e8:d4:6f:58:08:1e:d1:2e:d9:7d:2d:00:ba:74:
                    49:7e:58:0d:d4:7d:3b:b7:27:a4:5f:93:34:43:64:
                    34:dc:0f:2b:35:4f:61:14:9e:27:f0:82:64:2b:f3:
                    4a:eb:4b:56:15:ec:41:ca:08:46:f8:96:e1:ad:a2:
                    43:03:12:4e:2a:14:5f:4a:10:31:be:0c:45:34:bf:
                    96:79:b2:54:99:00:fa:88:67:81:02:44:15:13:f8:
                    aa:cd:67:e7:c5:54:79:41:29:c9:73:bc:5c:f5:37:
                    38:1c:1e:10:84:a3:93:d4:70:64:05:6d:eb:63:42:
                    90:70:32:20:07:66:1e:3f:03:9c:62:4a:c1:99:1d:
                    4c:12:ac:61:aa:33:53:e6:2f:b6:e5:8d:a8:d0:3f:
                    2b:e7:98:4e:7d:c7:54:78:f5:7c:db:2e:cb:22:52:
                    5a:81:33:54:b1:3f:8d:e7:18:25:29:ee:42:20:cc:
                    92:be:dc:91:23:76:26:11:40:dc:af:ca:b0:b3:b5:
                    fe:31:a6:df:f7:fb:4f:c1:aa:61:b1:f1:bf:7c:fc:
                    37:14:d1:f4:90:99:cb:99:2a:b8:03:2f:a2:db:6a:
                    d6:92:8b:99:1d:25:6a:21:19:a8:9f:b1:52:ca:b9:
                    aa:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:52:41:EF:3E:86:3E:71:69:AD:9C:2E:26:AE:94:58:05:CE:BB:C9
            X509v3 Authority Key Identifier:
                keyid:51:55:85:AC:A4:23:69:7C:62:23:6E:2B:5F:91:B4:1E:4B:E7:AE:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UVWFrKQjaXxiI24rX5G0Hkvnrlg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/9d3f15-47d0-4069-b596-51a0f6bde4f6/1/UVWFrKQjaXxiI24rX5G0Hkvnrlg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/9d3f15-47d0-4069-b596-51a0f6bde4f6/1/UVWFrKQjaXxiI24rX5G0Hkvnrlg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:84:ae:2b:38:11:95:13:ee:97:ce:ed:65:ec:d0:91:3d:7c:
         95:c1:12:37:9a:e4:6b:13:58:09:65:53:50:7c:e5:ea:65:f8:
         2f:4f:cd:97:71:b6:a3:52:2c:4a:3d:93:d1:09:80:b5:4a:cd:
         77:d9:fe:f5:d8:0e:93:0f:9b:bd:5a:a5:3c:7a:1c:7e:24:21:
         0f:b2:ea:16:d0:b2:75:04:79:06:6a:f0:25:0e:4c:08:33:fc:
         1f:a8:09:64:15:00:34:d6:89:17:c4:59:da:37:c4:63:58:90:
         39:26:f5:19:44:6a:c6:6c:64:b0:0c:fb:9d:99:a9:72:df:88:
         3e:b8:b4:2e:1a:01:fd:f6:fd:40:ce:98:d2:fb:38:0f:a7:7a:
         c3:b1:fe:b5:c8:90:5b:18:e5:d9:63:5f:a0:05:a2:08:d9:3b:
         ec:c0:0f:1f:77:f0:c9:20:45:e3:65:96:11:fc:2d:5e:06:01:
         fa:69:41:10:f4:1a:6e:85:89:6f:2d:c1:2a:0e:b4:d5:1d:b5:
         ae:b4:8a:2a:3d:69:08:48:81:c9:17:8c:06:17:19:8a:ac:08:
         8c:d4:12:ab:13:4f:b0:cb:c7:39:2d:62:6a:a5:96:f8:94:29:
         70:5b:4c:25:ce:4a:fd:cd:57:96:0e:70:ff:bd:63:b8:93:58:
         78:87:ba:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZsvZ2G7CP72dF/qgLERmEfiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxNTU4NWFjYTQyMzY5N2M2MjIzNmUyYjVmOTFiNDFlNGJl
N2FlNTgwHhcNMjUxMjE4MDMwMTAyWhcNMjUxMjE5MDMwMTAyWjAzMTEwLwYDVQQD
Eyg4NDUyNDFlZjNlODYzZTcxNjlhZDljMmUyNmFlOTQ1ODA1Y2ViYmM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnugYukclgCe8nMv2GWwS6NRvWAge
0S7ZfS0AunRJflgN1H07tyekX5M0Q2Q03A8rNU9hFJ4n8IJkK/NK60tWFexByghG
+JbhraJDAxJOKhRfShAxvgxFNL+WebJUmQD6iGeBAkQVE/iqzWfnxVR5QSnJc7xc
9Tc4HB4QhKOT1HBkBW3rY0KQcDIgB2YePwOcYkrBmR1MEqxhqjNT5i+25Y2o0D8r
55hOfcdUePV82y7LIlJagTNUsT+N5xglKe5CIMySvtyRI3YmEUDcr8qws7X+Mabf
9/tPwaphsfG/fPw3FNH0kJnLmSq4Ay+i22rWkouZHSVqIRmon7FSyrmqiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIRSQe8+hj5xaa2cLiaulFgFzrvJMB8GA1UdIwQY
MBaAFFFVhaykI2l8YiNuK1+RtB5L565YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVVZXRnJLUWphWHhpSTI0clg1RzBIa3ZucmxnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS85ZDNmMTUtNDdkMC00MDY5LWI1OTYt
NTFhMGY2YmRlNGY2LzEvVVZXRnJLUWphWHhpSTI0clg1RzBIa3ZucmxnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS85ZDNmMTUtNDdkMC00MDY5LWI1OTYtNTFhMGY2YmRlNGY2
LzEvVVZXRnJLUWphWHhpSTI0clg1RzBIa3ZucmxnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGYSuKzgR
lRPul87tZezQkT18lcESN5rkaxNYCWVTUHzl6mX4L0/Nl3G2o1IsSj2T0QmAtUrN
d9n+9dgOkw+bvVqlPHocfiQhD7LqFtCydQR5BmrwJQ5MCDP8H6gJZBUANNaJF8RZ
2jfEY1iQOSb1GURqxmxksAz7nZmpct+IPri0LhoB/fb9QM6Y0vs4D6d6w7H+tciQ
Wxjl2WNfoAWiCNk77MAPH3fwySBF42WWEfwtXgYB+mlBEPQaboWJby3BKg601R21
rrSKKj1pCEiByReMBhcZiqwIjNQSqxNPsMvHOS1iaqWW+JQpcFtMJc5K/c1Xlg5w
/71juJNYeIe6/Q==
-----END CERTIFICATE-----
Generated at Thu Dec 18 10:31:16 2025 by rpki-client