This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/b993ef-aaa7-400c-8db7-96d304c8db02/1/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.mft
File:                     uCB2l9C3wkGZ5t0SgrSbVs7wJE8.mft (raw, json)
Hash identifier:          +RYEgOLAtS2r/wekdAsSlG63ok3qClF8OzKVGmnAeVc=
Subject key identifier:   5D:65:A3:52:C0:E7:FB:33:B9:9F:17:B6:DC:0F:55:E2:34:D3:57:95
Authority key identifier: B8:20:76:97:D0:B7:C2:41:99:E6:DD:12:82:B4:9B:56:CE:F0:24:4F
Certificate issuer:       /CN=b8207697d0b7c24199e6dd1282b49b56cef0244f
Certificate serial:       019B601C7E3576F1FCBA25332D5C87811163
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/b993ef-aaa7-400c-8db7-96d304c8db02/1/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.mft
Manifest number:          10BD
Signing time:             Sat 27 Dec 2025 14:00:38 +0000
Manifest this update:     Sat 27 Dec 2025 14:00:38 +0000
Manifest next update:     Sun 28 Dec 2025 14:00:38 +0000
Files and hashes:         1: 007nvtWixZOugOaPC4TALuzRNpU.roa (hash: nb2ffToXl9QEO/9H4On/CDRfMFNOM0eyZbkaz2nxsO8=)
                          2: E6R94wdwkh-hvCHzRqeitSBB2O8.roa (hash: 1a2WMmmz+ouXlrOwjMj3BpLs/97+QuTmqE3PpY2RusU=)
                          3: gCO1ND9wcaBDHzN0352WZvu2OM8.roa (hash: vHCRaVMpRHFUNXZQ8voh/coatK6+6x9ToQmFjeDovrI=)
                          4: kpFxxzn5rxVSC7pUTip-34ePAH8.roa (hash: 2PbpsfTlZEwOXoeKMnWL66QR3WBkUd2nLs/ZQj9Tcq4=)
                          5: uCB2l9C3wkGZ5t0SgrSbVs7wJE8.crl (hash: TabDd3EDFU9rwACA+YRqGbaeCZywtSBlvw9U24YO6l0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/b993ef-aaa7-400c-8db7-96d304c8db02/1/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/b993ef-aaa7-400c-8db7-96d304c8db02/1/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 28 Dec 2025 08:42:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:60:1c:7e:35:76:f1:fc:ba:25:33:2d:5c:87:81:11:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8207697d0b7c24199e6dd1282b49b56cef0244f
        Validity
            Not Before: Dec 27 14:00:38 2025 GMT
            Not After : Dec 28 14:00:38 2025 GMT
        Subject: CN=5d65a352c0e7fb33b99f17b6dc0f55e234d35795
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:f0:49:70:53:10:37:2f:17:7c:00:9d:b3:fd:
                    e6:49:70:b9:3d:12:56:18:57:1e:06:34:c0:6d:e3:
                    79:ff:01:66:fa:65:08:f6:3b:6b:56:19:81:10:37:
                    0a:02:c4:19:95:b7:de:0e:c3:f4:6c:75:dd:1a:27:
                    59:ef:67:14:d4:8c:1b:2c:a1:3f:62:32:1f:b4:22:
                    1e:d2:ac:ba:38:ed:57:2e:ff:0a:13:8d:22:40:01:
                    70:2c:34:b1:1e:f7:f9:29:42:29:82:53:de:0d:0a:
                    2e:aa:fa:51:0d:aa:42:cd:92:f7:26:0b:29:09:bb:
                    0e:b1:8e:a2:ed:b8:29:ce:d5:d3:51:b8:6c:fc:7d:
                    9d:49:8b:17:3d:05:1b:28:cc:b4:50:1f:d5:3b:bb:
                    e6:28:9d:9c:4a:2f:75:01:e9:f9:44:b4:24:a9:2a:
                    a8:29:e4:e8:9c:e3:0d:39:e3:18:bf:a0:80:0e:55:
                    f3:73:94:02:e2:34:73:dd:e4:58:59:c5:0a:67:ed:
                    e7:ad:83:a4:c3:e0:43:d3:95:d6:cc:86:fc:a8:aa:
                    c8:1a:80:4e:cf:55:0e:49:d2:4c:6b:46:b7:f3:2a:
                    02:69:5b:dc:bc:a6:e3:bd:d9:e4:6a:21:f7:e0:c5:
                    08:fc:fc:28:98:95:14:48:1e:24:09:6d:54:fe:d1:
                    7d:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:65:A3:52:C0:E7:FB:33:B9:9F:17:B6:DC:0F:55:E2:34:D3:57:95
            X509v3 Authority Key Identifier:
                keyid:B8:20:76:97:D0:B7:C2:41:99:E6:DD:12:82:B4:9B:56:CE:F0:24:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/b993ef-aaa7-400c-8db7-96d304c8db02/1/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/b993ef-aaa7-400c-8db7-96d304c8db02/1/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:f2:36:72:82:f5:1e:1b:ef:72:6f:15:c3:f9:0e:9c:9a:49:
         1a:50:77:9c:cf:57:41:f5:aa:98:a3:5c:b1:18:cb:bb:b7:8d:
         bc:a9:9a:fa:ae:6c:72:1d:da:bb:ca:8a:8c:4c:92:8c:10:f7:
         1e:d8:8b:90:99:f5:b7:a8:2e:90:94:e2:a1:cc:48:d4:59:18:
         ef:8d:4d:77:aa:ba:b3:43:f3:34:21:ab:e8:b2:86:99:4e:43:
         36:ad:bd:b0:5e:d5:7d:5a:b2:6a:39:eb:c9:c3:d9:cf:b1:78:
         ab:3d:f0:2d:cf:cb:17:ff:60:bc:d5:95:1f:4a:41:95:80:e8:
         40:2a:a2:28:d2:19:85:17:b1:fa:3d:8b:80:08:37:8b:be:e6:
         f6:c3:c4:83:73:a8:8e:89:85:3d:89:12:9d:f1:7d:47:28:36:
         11:a9:c1:81:d1:db:38:4f:7b:b7:50:b4:c2:ef:65:a8:18:b9:
         81:f7:b3:a6:6e:0c:5a:df:61:be:f1:99:a9:f1:27:0c:a5:f5:
         1d:80:83:9c:29:b8:8c:67:bc:ed:cb:b3:03:06:15:28:e2:5d:
         51:ea:ac:db:a0:b0:f0:2c:de:25:07:57:73:bb:32:6e:eb:fb:
         e5:8d:d0:28:da:f0:86:80:04:70:32:d5:b9:32:de:9c:c9:c6:
         ae:ba:50:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 27 15:55:45 2025 by rpki-client