This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.mft
File:                     x0xgresM1XaM91b1YrG1zFucGAo.mft (raw, json)
Hash identifier:          xMJ546h/3IcJIpq3Foa5S5CaGvhDRru6LRdLamffL98=
Subject key identifier:   C1:FD:C0:2A:04:D1:C9:8C:3E:A3:4D:FF:59:8F:6B:E9:67:E0:DC:0D
Authority key identifier: C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A
Certificate issuer:       /CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a
Certificate serial:       019AF653CE4E59A5C04D0FF957CB7D083CAB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.mft
Manifest number:          1297
Signing time:             Sun 07 Dec 2025 01:01:18 +0000
Manifest this update:     Sun 07 Dec 2025 01:01:18 +0000
Manifest next update:     Mon 08 Dec 2025 01:01:18 +0000
Files and hashes:         1: 1-5xwCbYkw6n3KjUjQqrpHNycjsw.roa (hash: xnmXPX7h0AhX7fCrQfBlW4AC7vVtbQB3crm/g5LQBZ8=)
                          2: 44nY8xo2_DC63JpeIryBFG4szdQ.roa (hash: efIE2v0XKUD30sbluIT7ZKbMSQuZbTeUS/u2oPtbj6o=)
                          3: 7A6Pl3U5uu7pNsrAyeGlxHIf1OU.roa (hash: dnscxtqTmkxtlMB3gelGkG+4KCL2QrOo2QVlxJroGE4=)
                          4: 8I1eDtVP-BJjuty9df9iPdZO8og.roa (hash: ctlsY4aLIdOpF6HpRrpJUTdFYrFZ6RVeAqzfNRH3jQ4=)
                          5: EtMkTWvI58D-qupiUEl0MY2JiGg.roa (hash: Uz/Ifsb2B9YKip4rb0sqaf9NKH2gpjgn6z0w/NesOiA=)
                          6: KSAJh59TBqB3nBc2swg-HhWD4HU.roa (hash: YuODHnc04OfbOoqG4f2goTKLkOcK+XMOJlxF0H5E6MU=)
                          7: MvwrdGGrm_TBTyOOfZJTIiIeWXw.roa (hash: Czfwbes361OZe+qWA/o1I6nT8cW6PcS0wLg8sWUe8LY=)
                          8: PMMRtrP5Zia_L993q-DTeiA0eMU.roa (hash: EDSJVdah5uVn4vudD7mvIJSeuN7pHg6lTwJI66X4+8U=)
                          9: aXl3woCDTFV8KOUCaI37GD38yqY.roa (hash: j3sOWjoASI5TGptHDgux4OEToltLJUpmg1hcSPVVS80=)
                          10: bJ8s7uGF8zV84bsoruoPN6w5eBc.roa (hash: tSNRGX8MiAjqATg2gnnV+WNgM9CkUv2i/cajQpTVHzQ=)
                          11: dAgwpgiRE2fhaRYA7R_57WtkW8s.roa (hash: 2UcKjGJubVOnE28cs0BJhOQ91W2EUDgFnVS+nrDVbZw=)
                          12: eTvI3fV2l6gXhWfOYGcPCndQ2W4.roa (hash: 4lXzTxLXjqfOX2HuxLyn4Q7cfie0cfVZXxLpWJH4PhY=)
                          13: gY6-jVr97TeobNKsJqEIsFCfx1Q.roa (hash: GWcQFDLCJqx2wbPwhuGTM6ZqJ7XlkbdeE9qf+VAI0SE=)
                          14: jFA2rtAVBw_N1wvAZdDewkHHEJk.roa (hash: z1/fUeHvpi6n58b3xkn2+HMcpX9G3zKAfMExkbdSdio=)
                          15: ndpwXQr0DFZEYAa1c0O-3LbE2d0.roa (hash: vPOmxM9kg1tTyYliwSKFemIpfx1XBUWworUDWjHCOrs=)
                          16: p2vI0_PjYi8mnAQRBZG21gCvT7U.roa (hash: 31okJPnHq4SbgdiG4NvkIaYEEjg54d//5wBJpluxKCw=)
                          17: q13mGARa9r5QMtX1UkBNlLNiezo.roa (hash: EsDIM/kI3A6s/JVMlk0Lts4ZsihLHZ0jyyXXJqa6MdI=)
                          18: qu9muxyupj11J0vkCGd6UL4_YU8.asa (hash: ma8CUett5NKo6WA/WUa9lgNux61RUdveClhcObpC3iI=)
                          19: uiJCPf3ZYtfC8Ai59XFw_bFzUXs.roa (hash: ToV2fvQi+YWjL/E1w8mL3goa6Xi40QGLi0ZrnQOMuMs=)
                          20: woqB-lp41jPnWfABUhjX5NctLxQ.asa (hash: v3DbKFdxADYHJQ3DIANngq+EbQulpWmrtEktO22gNc8=)
                          21: x0xgresM1XaM91b1YrG1zFucGAo.crl (hash: GBsYPbwNiMq3QJM9ilF3JRYyJkfeZs2hdbdXG4EIDMg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:29:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f6:53:ce:4e:59:a5:c0:4d:0f:f9:57:cb:7d:08:3c:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a
        Validity
            Not Before: Dec  7 01:01:18 2025 GMT
            Not After : Dec  8 01:01:18 2025 GMT
        Subject: CN=c1fdc02a04d1c98c3ea34dff598f6be967e0dc0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:00:d0:4f:55:b1:36:39:5e:4b:bc:2f:f6:54:
                    91:ed:ae:b0:b1:f1:f8:76:c3:5c:90:d0:40:4c:e8:
                    8b:3e:88:0f:79:87:5e:d1:15:86:5e:9c:c0:9c:ec:
                    66:84:9f:39:b6:d0:ee:f5:01:b1:9e:a7:a2:e2:a7:
                    02:b8:d4:80:a4:a0:24:da:5f:09:40:d5:12:de:0a:
                    ce:af:08:31:21:50:c6:df:8d:83:2d:24:3a:65:5c:
                    24:24:35:af:d5:f8:0d:37:71:69:e6:22:02:4b:a3:
                    0b:93:d7:b5:68:4d:d3:0a:ff:1d:b0:0f:dd:fd:2f:
                    14:65:67:2e:fd:6a:ae:96:38:35:66:27:7c:c6:25:
                    d5:1a:fe:45:0e:43:6e:0d:6c:ec:7f:a8:8b:34:fb:
                    78:f1:f4:66:e4:34:8b:ae:ac:a1:98:bd:fb:eb:bb:
                    61:08:5f:b2:17:66:08:1c:cd:9e:a3:d9:ec:b9:c2:
                    87:eb:30:26:e7:3e:ca:9e:b2:7d:20:a2:89:54:64:
                    e5:16:38:b4:46:58:d5:76:85:88:90:3c:27:9c:14:
                    cb:7f:4b:b5:cd:5e:d5:94:e0:df:f8:55:e6:c1:64:
                    38:52:a7:c0:51:bc:5d:b1:ad:c9:57:5d:d1:59:75:
                    05:66:0c:96:f0:d1:0a:52:20:e1:a7:60:2f:56:54:
                    54:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:FD:C0:2A:04:D1:C9:8C:3E:A3:4D:FF:59:8F:6B:E9:67:E0:DC:0D
            X509v3 Authority Key Identifier:
                keyid:C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:70:d5:81:85:f6:5f:51:72:6a:88:98:c6:10:26:f4:ba:36:
         1e:c3:b5:fc:d7:58:1f:3e:a8:f4:d5:15:bf:a6:38:e5:22:11:
         1d:3c:de:85:70:17:b6:24:72:48:0e:9c:1c:fa:b3:53:8f:2a:
         d3:14:5d:7e:83:2f:1d:e7:4f:b4:6b:e6:50:e0:c8:79:52:68:
         97:cd:bf:fa:e0:57:dd:77:28:ed:77:be:06:55:a6:9d:17:0d:
         3a:e5:4b:19:30:6e:2c:3a:b9:9c:27:07:43:54:47:70:61:be:
         00:ea:95:9a:c9:2d:19:ff:07:47:77:31:3a:15:19:46:54:24:
         ab:96:c4:d8:d4:eb:73:ca:b7:df:48:53:3d:fa:f1:90:f9:99:
         78:f8:3e:02:d5:0c:89:f2:1a:16:b4:ff:58:1b:81:80:da:b7:
         fb:95:32:bd:d8:cb:06:c6:2e:7f:b6:bd:99:b8:e4:12:83:a8:
         5f:f7:24:7b:c0:16:91:16:52:f4:c7:b3:9f:ca:9c:98:b8:9b:
         eb:be:04:a4:0a:5b:7a:01:30:72:61:64:95:72:a1:c5:36:df:
         d0:07:e2:cf:d3:ba:9f:05:cf:43:4b:aa:13:4a:4e:d5:5a:91:
         6c:10:ab:7b:2e:f6:b8:79:f1:04:70:58:62:8c:66:30:e7:4b:
         d3:8b:ee:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZr2U85OWaXATQ/5V8t9CDyrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3NGM2MGFkZWIwY2Q1NzY4Y2Y3NTZmNTYyYjFiNWNjNWI5
YzE4MGEwHhcNMjUxMjA3MDEwMTE4WhcNMjUxMjA4MDEwMTE4WjAzMTEwLwYDVQQD
EyhjMWZkYzAyYTA0ZDFjOThjM2VhMzRkZmY1OThmNmJlOTY3ZTBkYzBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8gDQT1WxNjleS7wv9lSR7a6wsfH4
dsNckNBATOiLPogPeYde0RWGXpzAnOxmhJ85ttDu9QGxnqei4qcCuNSApKAk2l8J
QNUS3grOrwgxIVDG342DLSQ6ZVwkJDWv1fgNN3Fp5iICS6MLk9e1aE3TCv8dsA/d
/S8UZWcu/Wquljg1Zid8xiXVGv5FDkNuDWzsf6iLNPt48fRm5DSLrqyhmL3767th
CF+yF2YIHM2eo9nsucKH6zAm5z7KnrJ9IKKJVGTlFji0RljVdoWIkDwnnBTLf0u1
zV7VlODf+FXmwWQ4UqfAUbxdsa3JV13RWXUFZgyW8NEKUiDhp2AvVlRUOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMH9wCoE0cmMPqNN/1mPa+ln4NwNMB8GA1UdIwQY
MBaAFMdMYK3rDNV2jPdW9WKxtcxbnBgKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDB4Z3Jlc00xWGFNOTFiMVlyRzF6RnVjR0FvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi9hZGI2NWMtZjZmNy00NDk1LWJhMjMt
ODg1ZTg0ZTc1MTJlLzEveDB4Z3Jlc00xWGFNOTFiMVlyRzF6RnVjR0FvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZi9hZGI2NWMtZjZmNy00NDk1LWJhMjMtODg1ZTg0ZTc1MTJl
LzEveDB4Z3Jlc00xWGFNOTFiMVlyRzF6RnVjR0FvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX3DVgYX2
X1FyaoiYxhAm9Lo2HsO1/NdYHz6o9NUVv6Y45SIRHTzehXAXtiRySA6cHPqzU48q
0xRdfoMvHedPtGvmUODIeVJol82/+uBX3Xco7Xe+BlWmnRcNOuVLGTBuLDq5nCcH
Q1RHcGG+AOqVmsktGf8HR3cxOhUZRlQkq5bE2NTrc8q330hTPfrxkPmZePg+AtUM
ifIaFrT/WBuBgNq3+5UyvdjLBsYuf7a9mbjkEoOoX/cke8AWkRZS9Mezn8qcmLib
674EpApbegEwcmFklXKhxTbf0Afiz9O6nwXPQ0uqE0pO1VqRbBCrey72uHnxBHBY
YoxmMOdL04vuMg==
-----END CERTIFICATE-----
Generated at Sun Dec 7 04:34:19 2025 by rpki-client