This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f66b6b-cdde-40cb-a182-c5229863aeba/1/uytI9kNYARx4QtPOxcstRwaLg20.mft
File:                     uytI9kNYARx4QtPOxcstRwaLg20.mft (raw, json)
Hash identifier:          tbv5meIHHGE9GUjx2W+lYhB7VPEeScgMDDwGfa7LUQU=
Subject key identifier:   3D:F0:2D:79:3C:74:EA:B2:27:F2:56:7E:F8:75:3E:72:B8:E4:61:57
Authority key identifier: BB:2B:48:F6:43:58:01:1C:78:42:D3:CE:C5:CB:2D:47:06:8B:83:6D
Certificate issuer:       /CN=bb2b48f64358011c7842d3cec5cb2d47068b836d
Certificate serial:       019B3231FEBD24C245F91D60C588D4A28454
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uytI9kNYARx4QtPOxcstRwaLg20.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/f66b6b-cdde-40cb-a182-c5229863aeba/1/uytI9kNYARx4QtPOxcstRwaLg20.mft
Manifest number:          1795
Signing time:             Thu 18 Dec 2025 16:01:35 +0000
Manifest this update:     Thu 18 Dec 2025 16:01:35 +0000
Manifest next update:     Fri 19 Dec 2025 16:01:35 +0000
Files and hashes:         1: 1-K85qD4oivLUF1xQTVdq9r6NP7E.roa (hash: nx/kf+a12fPw7UIC5V6RoawXCPrhI9ndmVDlY4gQn1s=)
                          2: U-t-KYuIcMt9Lh-EEvDxBNSehA0.roa (hash: fNtqhAHoXJ8NAQIhvkEaB4dv9gnWdklcvBIBzltM3i4=)
                          3: uytI9kNYARx4QtPOxcstRwaLg20.crl (hash: n6UFV5xWCxrLtv8BBLsjrXMtbx+UFYkuu3U7sFw4nf0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/f66b6b-cdde-40cb-a182-c5229863aeba/1/uytI9kNYARx4QtPOxcstRwaLg20.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/f66b6b-cdde-40cb-a182-c5229863aeba/1/uytI9kNYARx4QtPOxcstRwaLg20.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uytI9kNYARx4QtPOxcstRwaLg20.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 19 Dec 2025 16:01:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:32:31:fe:bd:24:c2:45:f9:1d:60:c5:88:d4:a2:84:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb2b48f64358011c7842d3cec5cb2d47068b836d
        Validity
            Not Before: Dec 18 16:01:35 2025 GMT
            Not After : Dec 19 16:01:35 2025 GMT
        Subject: CN=3df02d793c74eab227f2567ef8753e72b8e46157
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:40:79:5a:9e:ae:f8:af:ba:d5:e1:90:8c:ac:
                    fb:ac:db:ad:69:ab:46:84:a5:b9:a7:d9:95:71:38:
                    c6:75:e4:26:0a:19:2d:37:dd:a1:f8:57:19:e2:37:
                    88:fe:1e:8e:e8:e0:62:73:59:4f:6d:fd:06:84:80:
                    88:2e:5f:60:26:52:0d:7d:e3:eb:40:f1:83:a3:3b:
                    05:3f:aa:3e:0a:d9:da:60:80:6e:b7:33:91:07:df:
                    98:74:76:3d:59:41:bf:95:31:62:16:d4:10:06:6b:
                    14:dd:21:4c:ff:c3:6b:80:a4:f2:79:71:9d:9b:92:
                    93:bd:7f:46:47:0c:40:e7:93:02:45:29:e7:b2:27:
                    0f:8c:e1:0f:af:4c:c4:1e:58:1e:f1:ff:92:ed:c1:
                    38:d9:20:95:4f:03:6f:bf:c9:1e:59:d5:3a:05:b9:
                    d8:8f:34:41:d8:36:9a:77:6e:1b:07:66:96:51:55:
                    1e:72:96:95:82:64:a6:15:d6:73:78:a5:a3:ad:18:
                    88:1f:13:a2:59:9f:31:94:14:6e:3c:35:ea:55:be:
                    96:f5:62:2b:2d:cf:3b:58:6f:dd:1c:44:42:a3:c1:
                    fb:95:96:df:f0:a7:62:8f:c3:e4:40:5a:82:ef:82:
                    07:d2:67:8b:01:87:d4:94:7a:91:50:57:98:06:4d:
                    5d:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:F0:2D:79:3C:74:EA:B2:27:F2:56:7E:F8:75:3E:72:B8:E4:61:57
            X509v3 Authority Key Identifier:
                keyid:BB:2B:48:F6:43:58:01:1C:78:42:D3:CE:C5:CB:2D:47:06:8B:83:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uytI9kNYARx4QtPOxcstRwaLg20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f66b6b-cdde-40cb-a182-c5229863aeba/1/uytI9kNYARx4QtPOxcstRwaLg20.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f66b6b-cdde-40cb-a182-c5229863aeba/1/uytI9kNYARx4QtPOxcstRwaLg20.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:7a:8b:0f:80:5e:13:6f:b7:46:69:25:34:f1:f0:28:8d:01:
         d1:f0:f5:60:27:79:fc:77:fd:e8:72:0a:c8:fd:0d:ff:22:e8:
         27:43:23:59:33:a7:80:02:cc:25:02:81:fd:b1:2b:85:66:e0:
         72:b3:b4:d7:27:a5:ff:32:eb:3b:06:5a:f4:72:64:48:42:12:
         62:fc:b4:4d:7c:65:47:63:0a:53:bf:3b:c9:41:80:4e:35:9b:
         46:45:5d:ae:01:a8:c2:78:ae:a7:0a:ee:9a:b6:a9:ff:f3:25:
         05:8d:70:1b:1c:25:33:bd:6f:90:e4:c9:92:14:3b:c4:b5:71:
         05:9e:de:90:49:74:c7:24:e5:52:e4:5b:7a:1e:bf:b7:04:c6:
         5a:ca:86:e8:21:48:60:a3:16:c5:64:6b:89:83:67:39:87:24:
         3f:1b:67:cc:e5:f5:cc:22:89:54:86:e7:b8:53:01:45:96:e7:
         5a:b8:5c:81:26:37:4b:3c:6a:71:5d:6b:d7:de:b3:98:c5:e4:
         91:8e:52:13:62:ff:11:7b:a9:c5:d5:0e:fd:e3:4f:dc:cb:d1:
         0d:58:b2:9e:3e:83:0e:4d:da:ba:a1:20:75:be:8c:a4:85:e9:
         31:aa:1f:d5:48:4c:79:db:b2:8f:61:cd:5c:eb:54:e7:50:54:
         92:c7:15:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 01:26:40 2025 by rpki-client