This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/48ebf4-9722-45d6-ac75-553cb7769ca9/1/uUVnTwH-xWWXHJUPNRIWXEP_37Y.mft
File:                     uUVnTwH-xWWXHJUPNRIWXEP_37Y.mft (raw, json)
Hash identifier:          yc//pGkBbvTIJVXs9CrRGehbaPL4GaN6apObJA3XDs8=
Subject key identifier:   D9:C6:EB:12:D5:AD:7D:60:4D:2C:78:24:C9:D6:0E:47:1F:8D:A5:DC
Authority key identifier: B9:45:67:4F:01:FE:C5:65:97:1C:95:0F:35:12:16:5C:43:FF:DF:B6
Certificate issuer:       /CN=b945674f01fec565971c950f3512165c43ffdfb6
Certificate serial:       019B650CA8B91CD6FF61F3B820762C5D5C87
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uUVnTwH-xWWXHJUPNRIWXEP_37Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/48ebf4-9722-45d6-ac75-553cb7769ca9/1/uUVnTwH-xWWXHJUPNRIWXEP_37Y.mft
Manifest number:          082C
Signing time:             Sun 28 Dec 2025 13:01:26 +0000
Manifest this update:     Sun 28 Dec 2025 13:01:26 +0000
Manifest next update:     Mon 29 Dec 2025 13:01:26 +0000
Files and hashes:         1: 7OYINGfsZGRwmGiFBkte0bEqDWY.roa (hash: dfyzTywSCPRXETBeGtH7CmV1lDhC/PZ6zR8WT3NCcxg=)
                          2: uUVnTwH-xWWXHJUPNRIWXEP_37Y.crl (hash: c2rfqBqcBlG/HQOmjK5ggyZ5Zg5XEGi8A0LvJWdR7uo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/48ebf4-9722-45d6-ac75-553cb7769ca9/1/uUVnTwH-xWWXHJUPNRIWXEP_37Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/48ebf4-9722-45d6-ac75-553cb7769ca9/1/uUVnTwH-xWWXHJUPNRIWXEP_37Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uUVnTwH-xWWXHJUPNRIWXEP_37Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 29 Dec 2025 10:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:65:0c:a8:b9:1c:d6:ff:61:f3:b8:20:76:2c:5d:5c:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b945674f01fec565971c950f3512165c43ffdfb6
        Validity
            Not Before: Dec 28 13:01:26 2025 GMT
            Not After : Dec 29 13:01:26 2025 GMT
        Subject: CN=d9c6eb12d5ad7d604d2c7824c9d60e471f8da5dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:eb:03:cc:00:e1:c4:ee:d2:4d:c2:d0:47:5f:
                    d2:b9:c4:80:a3:3e:59:27:ac:d4:a6:66:d5:9a:77:
                    6a:e1:09:81:84:99:7e:ef:b3:47:63:77:11:55:6a:
                    66:56:eb:b7:d4:bd:58:0a:3f:64:72:97:d1:79:7e:
                    3c:3f:07:f3:7b:36:03:1c:07:01:9f:f7:40:45:0e:
                    af:44:be:d8:4b:b9:96:c0:14:09:65:87:ae:a3:e7:
                    88:24:79:fa:2f:af:b3:96:b9:6c:68:ba:5e:2c:e4:
                    43:37:ae:75:49:b5:90:5b:b2:59:4d:ef:18:f0:56:
                    28:e6:7e:9e:14:21:36:9d:e3:ae:e4:98:15:5e:9b:
                    3e:d1:8b:04:0a:54:c8:97:05:5d:9e:40:2d:1f:56:
                    6b:11:01:ac:26:66:b4:c9:b9:d1:2a:c1:f7:d4:e7:
                    b8:c4:da:e2:90:ee:9b:36:10:8c:25:27:02:d7:b6:
                    e9:db:a9:36:40:fe:7d:b2:12:fa:78:6f:56:78:36:
                    6f:32:72:16:8f:4a:8e:82:1f:a0:53:65:0e:c3:8d:
                    73:ab:b9:ce:d0:a4:54:97:ac:44:27:f2:fb:52:76:
                    18:41:9e:d3:18:87:12:b4:b4:a4:05:2a:29:fd:63:
                    b7:36:e8:8e:2d:89:7c:be:e8:c7:87:72:a7:60:e6:
                    a2:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:C6:EB:12:D5:AD:7D:60:4D:2C:78:24:C9:D6:0E:47:1F:8D:A5:DC
            X509v3 Authority Key Identifier:
                keyid:B9:45:67:4F:01:FE:C5:65:97:1C:95:0F:35:12:16:5C:43:FF:DF:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUVnTwH-xWWXHJUPNRIWXEP_37Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/48ebf4-9722-45d6-ac75-553cb7769ca9/1/uUVnTwH-xWWXHJUPNRIWXEP_37Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/48ebf4-9722-45d6-ac75-553cb7769ca9/1/uUVnTwH-xWWXHJUPNRIWXEP_37Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:b5:d4:2b:07:18:5d:23:d5:a7:e4:d6:ff:12:d4:6b:4f:c3:
         5f:8e:3a:6f:6a:c2:0b:a2:4e:19:aa:b1:de:3f:0a:4b:03:f3:
         bc:90:d0:3d:26:9b:c4:bc:a7:e6:8f:e3:3c:d2:f9:49:49:95:
         e9:23:25:a0:5e:4e:8c:28:4e:8f:1e:ab:7a:19:ae:36:82:53:
         1e:e0:48:f6:38:f9:33:41:73:8f:8e:37:b1:39:04:a4:db:0a:
         5b:97:9f:e0:d4:d6:24:48:22:2d:bd:65:d1:63:a9:e7:59:4e:
         cc:8b:ad:28:76:5f:d9:be:19:fe:ca:07:1d:03:90:8c:96:dc:
         9e:33:39:4f:b0:11:65:dd:3e:84:0b:04:57:8d:48:92:a1:49:
         3a:c8:5b:8c:79:2d:43:e9:68:32:d6:fb:10:df:f4:62:9b:be:
         49:e7:62:05:5e:44:92:d6:61:94:83:10:84:46:37:be:81:92:
         e3:a8:04:7a:53:50:c3:ef:f1:32:4b:7d:ca:bb:23:80:4b:44:
         5d:3a:35:19:d1:e5:52:1a:1a:89:2a:1c:7f:f7:52:7e:c6:20:
         34:31:b0:7c:2c:2f:47:09:16:af:fe:73:e5:a1:b2:d9:8d:0e:
         ba:e7:39:3c:65:e5:f6:79:43:df:60:65:f1:37:03:89:b0:24:
         e9:04:33:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZtlDKi5HNb/YfO4IHYsXVyHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5NDU2NzRmMDFmZWM1NjU5NzFjOTUwZjM1MTIxNjVjNDNm
ZmRmYjYwHhcNMjUxMjI4MTMwMTI2WhcNMjUxMjI5MTMwMTI2WjAzMTEwLwYDVQQD
EyhkOWM2ZWIxMmQ1YWQ3ZDYwNGQyYzc4MjRjOWQ2MGU0NzFmOGRhNWRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuesDzADhxO7STcLQR1/SucSAoz5Z
J6zUpmbVmndq4QmBhJl+77NHY3cRVWpmVuu31L1YCj9kcpfReX48PwfzezYDHAcB
n/dARQ6vRL7YS7mWwBQJZYeuo+eIJHn6L6+zlrlsaLpeLORDN651SbWQW7JZTe8Y
8FYo5n6eFCE2neOu5JgVXps+0YsEClTIlwVdnkAtH1ZrEQGsJma0ybnRKsH31Oe4
xNrikO6bNhCMJScC17bp26k2QP59shL6eG9WeDZvMnIWj0qOgh+gU2UOw41zq7nO
0KRUl6xEJ/L7UnYYQZ7TGIcStLSkBSop/WO3NuiOLYl8vujHh3KnYOaiyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNnG6xLVrX1gTSx4JMnWDkcfjaXcMB8GA1UdIwQY
MBaAFLlFZ08B/sVllxyVDzUSFlxD/9+2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVVWblR3SC14V1dYSEpVUE5SSVdYRVBfMzdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC80OGViZjQtOTcyMi00NWQ2LWFjNzUt
NTUzY2I3NzY5Y2E5LzEvdVVWblR3SC14V1dYSEpVUE5SSVdYRVBfMzdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC80OGViZjQtOTcyMi00NWQ2LWFjNzUtNTUzY2I3NzY5Y2E5
LzEvdVVWblR3SC14V1dYSEpVUE5SSVdYRVBfMzdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi7XUKwcY
XSPVp+TW/xLUa0/DX446b2rCC6JOGaqx3j8KSwPzvJDQPSabxLyn5o/jPNL5SUmV
6SMloF5OjChOjx6rehmuNoJTHuBI9jj5M0Fzj443sTkEpNsKW5ef4NTWJEgiLb1l
0WOp51lOzIutKHZf2b4Z/soHHQOQjJbcnjM5T7ARZd0+hAsEV41IkqFJOshbjHkt
Q+loMtb7EN/0Ypu+SediBV5EktZhlIMQhEY3voGS46gEelNQw+/xMkt9yrsjgEtE
XTo1GdHlUhoaiSocf/dSfsYgNDGwfCwvRwkWr/5z5aGy2Y0Ouuc5PGXl9nlD32Bl
8TcDibAk6QQzWw==
-----END CERTIFICATE-----
Generated at Sun Dec 28 18:52:55 2025 by rpki-client