This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.mft
File:                     XGT50E79Wp_C4jtC1bUa79mlAlA.mft (raw, json)
Hash identifier:          T0ons32pSb4x79Clp6Hep7okR0Qeh/1pSCIb7MCLaqI=
Subject key identifier:   A4:3B:59:D8:64:DE:7A:AD:B3:E8:A7:BC:D8:AB:D4:25:EC:EB:27:35
Authority key identifier: 5C:64:F9:D0:4E:FD:5A:9F:C2:E2:3B:42:D5:B5:1A:EF:D9:A5:02:50
Certificate issuer:       /CN=5c64f9d04efd5a9fc2e23b42d5b51aefd9a50250
Certificate serial:       019B19F1F8CFD47C2D904F879B91E0773EEE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.mft
Manifest number:          17A5
Signing time:             Sat 13 Dec 2025 23:00:46 +0000
Manifest this update:     Sat 13 Dec 2025 23:00:46 +0000
Manifest next update:     Sun 14 Dec 2025 23:00:46 +0000
Files and hashes:         1: 0ttbnnDkszN5UUqiS_T4IajnBss.roa (hash: rpO8oEL9pD1qVz6CQpISXQ8FDsbjMnEXpxfBE5fz0uQ=)
                          2: 2TxyjhsmXIUBo8Zo1YorHOQd5m4.roa (hash: G16L4uDJVkxkt6HibPGk4SuOrzYueNtQRs61VLc/3UQ=)
                          3: 2Y0fe5cLscbhaPE-Pg8hTGXdau0.roa (hash: 3yUHCU4aXv7E9tDqIK2zNp9EHkspgMN6t6urNetfh4c=)
                          4: 5ILS55HX3ReMEJoaJvPiFDH9fYg.roa (hash: ITuUhFUEIAGYkscfI+hyhPLbGpan1cG71MkoXreG6tQ=)
                          5: 8qP_rwGfS_erDEkhd__wmflr3D0.roa (hash: uNhvabbwn1Xllj8TcYzhRoFxuzpR3wjSmmlIi7iHy/c=)
                          6: Gxw_WTtXXlB9ovzVsZ-LJ4z0v8Q.asa (hash: WH1dBt0aNelRDH5woRZUZpaGD5516U5Tlex+HGGo1Mg=)
                          7: QBYP5f0_ZKeoVqAGpUJXmu3czyA.roa (hash: uEMvExoNHA6VkjNgrlmvXEXtFQzBUe2OYCrsV1Yb4TI=)
                          8: QuvIHJ_zDp79PlKu2Sbh4NNdspg.roa (hash: hhfcVBSgfoghlGavFr1P4xcaklB4xBtbf4e22DxcY90=)
                          9: SvLmjlufJjf01xmQPY4f3HtfCg8.roa (hash: XEbonuFzJxZ4+EftqN0vtZCVnGeLB7zQWyz2HS4Uhts=)
                          10: XGT50E79Wp_C4jtC1bUa79mlAlA.crl (hash: KuvnC2s6ntb8775Zha0a/anoKEJnrcUNFR3e9LaaexQ=)
                          11: ZmCMretj_IKNhbhPW7MGGPPg6QY.roa (hash: 4kecTGFd/jV1xEOhbuwNVp/CnF9j4BLYU+5l4DsS6Q4=)
                          12: a2zXnZAHmh1NIwZ9fUmSeVc-vBI.roa (hash: Z/HZstAfRIWxIQG++DsdK1OrDaZy2rJY9S8trXlDxcg=)
                          13: hryCAnXILF_v7a6M_L6UbzP1x0E.roa (hash: KffgzjGeNv+fdBscER8L1iiMJC1SCTAbWKtpEJoIDmc=)
                          14: qP01jLg9AFTfk3wXCfbU7oR7qCw.roa (hash: /NVQZjV+scAZTm53Kdr7vM2mPxhoccQ1UNN8dQOASVg=)
                          15: sajSb_i1tx9tltMHBF6uWbYQpL8.roa (hash: EwHPsvt1NTQcBxJBnqTQxodt51gOWP8HXjJ45qFeCrw=)
                          16: tD3MiVLyx80jHHPgeigx6BWgpuQ.roa (hash: UHu7tvFq5WsP6rH5pg1qHyYUdE7g7HNJ6I8OyKr1nyw=)
                          17: tqcB3IDCxjadXrA6Ts7NqmHf1Lo.roa (hash: Wfp7RVYDKQPn5CU+Zk9mzBupBD5mIq/A37zszm0IaiQ=)
                          18: vNHiMEZdd8DjXf6FIPioGw_Nz8s.roa (hash: ZsaxU7fC3YaA3paCfQTFF+K5ZI93iI4NhTUJczYUy2E=)
                          19: vnDIFlpveB9QduKvbWhYvA-tAlY.roa (hash: A5Ig9zm93/ZaEcPyv1j7seH/R5vVgXPnGrSLQQGQYe0=)
                          20: wdmDU1FgaGs1uyj3K-dsWGNH688.roa (hash: 725uUHQDeUCWiCmMQj9675kxf7ty46STH4meZaz93cA=)
                          21: xb3vyIEtuTHF1sdQebrEb3z28Q4.roa (hash: 1xi/Jh3IEnrX/jjKazAV/ViHmezAQHHlu2yeCxiDRno=)
                          22: xqiEKTyhKuNrl68GGGDu_QWOqaQ.roa (hash: ZLUbmXuAQc0QVjTQUIs5lv1W0eJjT/BryddjMTmQqOc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Dec 2025 20:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:19:f1:f8:cf:d4:7c:2d:90:4f:87:9b:91:e0:77:3e:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c64f9d04efd5a9fc2e23b42d5b51aefd9a50250
        Validity
            Not Before: Dec 13 23:00:46 2025 GMT
            Not After : Dec 14 23:00:46 2025 GMT
        Subject: CN=a43b59d864de7aadb3e8a7bcd8abd425eceb2735
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:c7:d2:fd:f6:2c:cc:2c:8b:17:1e:c6:8c:ea:
                    6c:cc:16:cd:1c:41:c4:40:50:9e:8b:8c:65:1c:c9:
                    18:1e:ab:be:64:89:ea:18:a3:21:f8:1e:de:e9:22:
                    e9:71:0c:c9:80:ce:fc:8a:7c:d9:1d:e4:00:ad:5e:
                    f8:52:6b:d2:ee:d9:cf:64:07:18:a2:cd:84:ee:97:
                    13:1c:f6:41:28:61:45:e5:01:61:bc:e2:09:54:a6:
                    cc:c5:4c:a7:7d:f7:ed:4f:f1:98:a1:46:14:ac:4a:
                    15:9b:71:8c:de:e1:59:69:1d:0f:22:7a:2b:3b:a1:
                    af:a2:9f:58:40:d2:48:e2:42:e2:7c:68:fd:fc:97:
                    b2:56:9b:8e:42:ac:c1:ff:87:c3:2f:7e:3b:1c:3c:
                    37:77:51:7a:3b:ea:1e:3d:9c:91:bd:17:bb:e3:43:
                    d7:31:5c:e7:2b:9a:73:91:69:26:30:ab:14:f7:3c:
                    6b:b6:b5:2f:1e:45:ee:dd:a2:24:0e:6d:13:99:8f:
                    d4:73:6a:fb:a2:07:8c:bf:3d:f2:86:17:10:64:da:
                    7a:51:b1:f0:e8:b7:7e:be:30:8c:d6:9d:89:99:a8:
                    b3:b2:b4:e6:4e:e8:62:52:22:e7:da:5b:3a:16:c0:
                    4e:48:91:22:c5:3a:09:6e:30:00:a3:04:ea:5e:86:
                    7f:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:3B:59:D8:64:DE:7A:AD:B3:E8:A7:BC:D8:AB:D4:25:EC:EB:27:35
            X509v3 Authority Key Identifier:
                keyid:5C:64:F9:D0:4E:FD:5A:9F:C2:E2:3B:42:D5:B5:1A:EF:D9:A5:02:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:57:bf:b3:86:64:4b:5b:27:6a:bd:ff:85:61:e8:2d:69:f8:
         3e:2f:4e:d1:23:6e:0c:5e:c1:29:89:b3:7f:c0:d5:80:6c:51:
         bb:e5:5a:db:12:6c:8e:e1:b0:cd:77:99:17:46:41:3a:f3:80:
         52:17:30:02:1a:fc:30:7a:22:0d:29:2e:c0:f5:e2:45:39:12:
         5c:6e:65:d2:3d:ff:6f:6c:06:d1:0c:7c:55:0e:d8:d7:92:8a:
         b3:e7:6c:13:fc:9a:2c:a3:13:7a:37:db:9b:de:13:86:e9:f7:
         cb:ae:6a:ed:76:8c:9e:f1:0e:e5:41:db:c1:5f:1f:08:99:dd:
         ff:57:70:e0:6c:4d:7c:df:b7:84:92:c7:e8:14:e1:d1:df:25:
         51:70:d8:6a:74:42:e5:13:46:90:da:52:4e:e7:82:37:11:c1:
         1c:1c:9e:63:f6:ec:e1:6e:4a:dd:59:e6:4f:04:13:af:9b:4e:
         e8:17:b1:72:02:f2:b3:b0:34:01:f4:6d:c4:a6:6d:04:f8:48:
         9f:d0:5d:4e:45:3c:2d:8c:9b:1a:23:c8:ec:9c:c6:9c:1f:72:
         91:50:e3:67:a4:11:19:40:52:2e:b2:b3:99:29:0c:d8:0c:9a:
         34:bf:bb:eb:97:ab:cc:fa:33:d4:d8:c1:fb:bf:46:fc:9e:e8:
         33:76:b7:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 14 05:32:41 2025 by rpki-client