This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/2f5931-05a8-436b-9273-cd7b6edbfcf5/1/UeK-E5rnec09T-68zTaCgaH156A.mft
File:                     UeK-E5rnec09T-68zTaCgaH156A.mft (raw, json)
Hash identifier:          0AJSo4UhGcdWFfgsw4o+6RmIuQ3h9luXNLmcKEYwDjM=
Subject key identifier:   F7:70:51:13:44:BC:C0:FF:CF:72:42:16:DA:68:25:85:BE:D3:DE:10
Authority key identifier: 51:E2:BE:13:9A:E7:79:CD:3D:4F:EE:BC:CD:36:82:81:A1:F5:E7:A0
Certificate issuer:       /CN=51e2be139ae779cd3d4feebccd368281a1f5e7a0
Certificate serial:       019B5C40B426B0B4A684D02815AE0B43D139
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UeK-E5rnec09T-68zTaCgaH156A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/2f5931-05a8-436b-9273-cd7b6edbfcf5/1/UeK-E5rnec09T-68zTaCgaH156A.mft
Manifest number:          1797
Signing time:             Fri 26 Dec 2025 20:01:42 +0000
Manifest this update:     Fri 26 Dec 2025 20:01:42 +0000
Manifest next update:     Sat 27 Dec 2025 20:01:42 +0000
Files and hashes:         1: UeK-E5rnec09T-68zTaCgaH156A.crl (hash: OLW0frCEMm8vaDyI+5pXN+mQ6WGoO+RQ3jVmA91YNKM=)
                          2: VSiusRPyIc9Tc8bThvks1NkGA7Q.roa (hash: uzDtGIiakPGkLOEGtmPHEX+erK/AAaDobyuB+l6q1NI=)
                          3: oEAOgGGkZaklYkgZV_R2RLLowJE.roa (hash: nmzYZ74qwgtxEwczkSmrHUbIJNO39YmkNHQC+ORU3+A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/2f5931-05a8-436b-9273-cd7b6edbfcf5/1/UeK-E5rnec09T-68zTaCgaH156A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/2f5931-05a8-436b-9273-cd7b6edbfcf5/1/UeK-E5rnec09T-68zTaCgaH156A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UeK-E5rnec09T-68zTaCgaH156A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 27 Dec 2025 20:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:5c:40:b4:26:b0:b4:a6:84:d0:28:15:ae:0b:43:d1:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51e2be139ae779cd3d4feebccd368281a1f5e7a0
        Validity
            Not Before: Dec 26 20:01:42 2025 GMT
            Not After : Dec 27 20:01:42 2025 GMT
        Subject: CN=f770511344bcc0ffcf724216da682585bed3de10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:fb:3e:1d:fa:68:9b:15:13:12:fc:80:88:34:
                    bb:ab:8a:a5:06:e2:f8:c3:89:df:80:56:99:22:b7:
                    1c:20:d2:05:bb:4e:ff:96:b9:6f:d3:0d:5f:25:8b:
                    43:f8:d9:b3:66:96:a1:8e:d2:8f:a9:e3:5d:7d:c6:
                    43:a1:49:e0:bf:ae:44:af:70:24:8e:74:08:b9:60:
                    d5:ca:3d:db:c2:98:90:52:6f:b2:21:35:ff:3a:5b:
                    1e:5a:2c:a3:ae:0b:54:56:bf:6e:d4:87:4c:6a:7b:
                    31:8f:4c:83:d1:6f:0e:06:9a:44:8e:48:6d:54:02:
                    d6:a9:df:a9:d7:3a:f4:c6:b0:8c:d9:9f:93:72:6d:
                    20:ed:4c:d7:f0:79:56:01:25:07:cd:59:c1:b6:ac:
                    4d:83:9e:fa:04:d0:8b:6b:2a:2a:0c:f9:5b:38:89:
                    69:a5:14:4b:f8:ad:25:9b:ba:7f:72:ac:17:bd:0a:
                    3c:c4:11:02:ab:de:d6:42:2c:e0:89:0f:62:07:4a:
                    5f:a5:f4:fd:1d:4a:dc:83:5d:f9:09:95:2c:de:34:
                    13:8e:9e:66:0d:11:ea:1b:a8:cb:f5:ae:5c:20:dd:
                    87:b4:21:08:65:a3:7e:e5:60:76:59:ea:68:9d:a2:
                    23:af:82:ac:e6:1f:bf:f8:ed:7f:60:ad:8b:76:d6:
                    d8:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:70:51:13:44:BC:C0:FF:CF:72:42:16:DA:68:25:85:BE:D3:DE:10
            X509v3 Authority Key Identifier:
                keyid:51:E2:BE:13:9A:E7:79:CD:3D:4F:EE:BC:CD:36:82:81:A1:F5:E7:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UeK-E5rnec09T-68zTaCgaH156A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/2f5931-05a8-436b-9273-cd7b6edbfcf5/1/UeK-E5rnec09T-68zTaCgaH156A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/2f5931-05a8-436b-9273-cd7b6edbfcf5/1/UeK-E5rnec09T-68zTaCgaH156A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:38:5d:4b:73:0f:0f:dd:03:9e:46:91:70:63:02:4e:f4:1c:
         55:59:2a:f2:03:4f:41:83:ae:f3:cc:1a:d5:7d:ac:87:ab:05:
         3e:46:55:1d:60:87:02:a2:51:f8:ec:7f:db:20:42:2b:4b:6c:
         9d:80:61:7c:a6:36:95:44:a3:1d:ec:66:7e:88:70:56:5e:e6:
         62:19:9f:b9:13:1b:53:e7:85:13:ed:d9:de:f9:c3:da:72:4b:
         27:43:9e:44:06:18:4b:d4:6a:2a:61:4a:6e:3c:75:71:35:3d:
         72:ce:a5:d5:ed:78:3e:7e:0b:9f:d5:74:cc:ef:c9:ba:3e:f5:
         2b:03:d2:6b:3c:49:a0:77:b4:c4:a3:15:30:f6:ba:ef:0c:c6:
         e2:5e:17:4a:60:80:68:a3:94:7b:77:7f:aa:c5:b8:0a:fc:bb:
         8a:7d:f6:bf:41:7f:44:25:c0:20:06:09:65:1f:97:9f:58:1a:
         3f:ab:67:53:47:9b:40:bd:62:b8:82:2a:eb:2f:59:64:f5:c3:
         52:15:cf:47:37:ec:46:31:ce:7c:60:21:a7:ca:54:a5:67:00:
         05:64:61:7a:54:dc:1c:7c:74:0b:95:e1:da:45:84:46:98:31:
         f1:6d:24:76:6f:62:5d:8e:26:db:48:db:42:29:28:a9:44:4a:
         c0:1d:58:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 27 04:47:57 2025 by rpki-client