This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/2f5931-05a8-436b-9273-cd7b6edbfcf5/1/UeK-E5rnec09T-68zTaCgaH156A.mft
File:                     UeK-E5rnec09T-68zTaCgaH156A.mft (raw, json)
Hash identifier:          exDJYu7nuO7rXTb7LAUn6H7zquPT4flNBMhoY6+eJrA=
Subject key identifier:   F6:7B:A0:16:01:E8:11:E5:AE:91:D9:90:F7:9D:8D:2A:99:3D:7C:99
Authority key identifier: 51:E2:BE:13:9A:E7:79:CD:3D:4F:EE:BC:CD:36:82:81:A1:F5:E7:A0
Certificate issuer:       /CN=51e2be139ae779cd3d4feebccd368281a1f5e7a0
Certificate serial:       019B3F47D84F7019E7E5916414A10E33079F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UeK-E5rnec09T-68zTaCgaH156A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/2f5931-05a8-436b-9273-cd7b6edbfcf5/1/UeK-E5rnec09T-68zTaCgaH156A.mft
Manifest number:          1788
Signing time:             Sun 21 Dec 2025 05:00:31 +0000
Manifest this update:     Sun 21 Dec 2025 05:00:31 +0000
Manifest next update:     Mon 22 Dec 2025 05:00:31 +0000
Files and hashes:         1: UeK-E5rnec09T-68zTaCgaH156A.crl (hash: qtnjt23OH04S6C8FAzNI4lYp6JPBzysbzbvn/ROp1/E=)
                          2: VSiusRPyIc9Tc8bThvks1NkGA7Q.roa (hash: uzDtGIiakPGkLOEGtmPHEX+erK/AAaDobyuB+l6q1NI=)
                          3: oEAOgGGkZaklYkgZV_R2RLLowJE.roa (hash: nmzYZ74qwgtxEwczkSmrHUbIJNO39YmkNHQC+ORU3+A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/2f5931-05a8-436b-9273-cd7b6edbfcf5/1/UeK-E5rnec09T-68zTaCgaH156A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/2f5931-05a8-436b-9273-cd7b6edbfcf5/1/UeK-E5rnec09T-68zTaCgaH156A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UeK-E5rnec09T-68zTaCgaH156A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 22 Dec 2025 00:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3f:47:d8:4f:70:19:e7:e5:91:64:14:a1:0e:33:07:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51e2be139ae779cd3d4feebccd368281a1f5e7a0
        Validity
            Not Before: Dec 21 05:00:31 2025 GMT
            Not After : Dec 22 05:00:31 2025 GMT
        Subject: CN=f67ba01601e811e5ae91d990f79d8d2a993d7c99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:9c:30:3b:2f:40:61:46:5b:5f:c8:6f:f0:71:
                    3e:0d:d1:7e:5d:06:cc:d6:31:5a:64:f9:71:09:a4:
                    a6:e6:90:e3:5a:2d:9d:03:e4:88:2b:9b:b6:5b:6f:
                    44:d2:81:d3:db:ea:15:c4:32:cf:1d:8e:46:3f:f0:
                    b4:69:82:4a:f3:18:fb:ce:28:ee:59:9a:0b:1d:b4:
                    ba:bd:8c:2b:1a:3d:5d:29:79:3a:bc:c9:23:fc:74:
                    c2:4e:4d:18:34:84:01:62:25:7b:fd:f0:f9:63:78:
                    dc:94:af:e8:62:44:2c:b4:dc:e8:c7:95:db:49:98:
                    6d:ca:22:dc:81:18:73:5e:4c:df:bc:d0:10:09:a9:
                    06:e2:9d:54:97:0d:d2:47:09:53:7b:40:f6:c5:4f:
                    4b:5a:bf:17:ec:eb:a1:76:73:eb:bf:92:dd:a3:33:
                    59:03:4e:18:b0:83:6f:00:bb:22:5f:34:0b:aa:f0:
                    4c:2e:eb:40:a7:76:61:e9:1b:fb:9f:4e:0a:74:37:
                    c7:ed:b7:fc:5f:45:94:39:01:aa:34:78:0e:dd:17:
                    e1:8b:e4:0f:1c:1e:a6:26:e9:b2:c7:fc:e4:94:81:
                    11:d1:4a:3d:3a:94:46:6f:b2:9b:b5:a8:88:7d:31:
                    b7:7b:47:ee:6f:a1:fb:e0:c0:11:cf:20:e8:48:8b:
                    4a:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:7B:A0:16:01:E8:11:E5:AE:91:D9:90:F7:9D:8D:2A:99:3D:7C:99
            X509v3 Authority Key Identifier:
                keyid:51:E2:BE:13:9A:E7:79:CD:3D:4F:EE:BC:CD:36:82:81:A1:F5:E7:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UeK-E5rnec09T-68zTaCgaH156A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/2f5931-05a8-436b-9273-cd7b6edbfcf5/1/UeK-E5rnec09T-68zTaCgaH156A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/2f5931-05a8-436b-9273-cd7b6edbfcf5/1/UeK-E5rnec09T-68zTaCgaH156A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:80:52:9b:ec:7b:4b:af:80:d0:45:41:28:55:dd:26:33:cc:
         0f:0a:73:dc:70:4b:5d:10:6e:da:81:5c:8a:df:da:16:1c:49:
         7e:d3:41:a8:a2:b9:5e:88:5f:f6:4a:e6:04:af:74:d8:2b:32:
         bc:44:89:2b:23:22:26:e9:c7:e5:ef:ad:87:0e:81:51:a3:80:
         84:1c:9a:8a:43:2c:61:76:24:be:86:f1:3c:d7:62:40:06:67:
         ad:56:2a:a8:8a:0c:15:a8:1b:82:ae:8a:e4:4b:d4:f9:aa:69:
         27:83:37:bc:5c:1c:b4:9d:a8:cc:28:2c:88:4a:7f:96:a4:1d:
         4d:19:13:8b:8b:d1:b4:89:03:d6:94:d5:f5:1a:75:a0:df:b5:
         79:4e:06:b3:2b:67:30:a6:c5:ae:12:44:1a:7e:47:9f:08:04:
         6b:db:8f:2f:7e:1a:8f:45:97:fd:09:7c:b1:5e:82:04:52:4d:
         b0:d7:2d:4c:4c:2f:79:3d:94:9a:e9:5c:61:49:86:67:b7:31:
         a6:bc:0c:2d:a1:99:81:13:69:c3:82:57:5a:bd:72:33:d7:74:
         58:90:b0:e3:f5:f7:34:97:3a:4f:b9:59:b3:4b:71:02:cb:f0:
         98:bb:89:3b:24:71:a0:ba:f7:2c:1b:cb:fe:9d:01:93:93:3b:
         11:75:7e:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 09:20:17 2025 by rpki-client