This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/f8314e-a3bc-45e9-a9f5-4c98d9a51405/1/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.mft
File:                     xEFzi6q5iLHWhpO7BeKb-7Tw9nE.mft (raw, json)
Hash identifier:          ++Um0uOpp9glebCug0x5O3uznFV+D2Svyp9NE/rbDDU=
Subject key identifier:   75:C8:A8:BB:A4:4A:C1:DB:55:92:92:08:2C:7F:0C:16:06:4B:17:67
Authority key identifier: C4:41:73:8B:AA:B9:88:B1:D6:86:93:BB:05:E2:9B:FB:B4:F0:F6:71
Certificate issuer:       /CN=c441738baab988b1d68693bb05e29bfbb4f0f671
Certificate serial:       019B1BAAAC51602F8BDE0468355302EDDBFA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/f8314e-a3bc-45e9-a9f5-4c98d9a51405/1/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.mft
Manifest number:          177A
Signing time:             Sun 14 Dec 2025 07:02:08 +0000
Manifest this update:     Sun 14 Dec 2025 07:02:08 +0000
Manifest next update:     Mon 15 Dec 2025 07:02:08 +0000
Files and hashes:         1: 31Tgo6hkUgGEDxpcJDek08Avr_U.roa (hash: kmmgYbNt9oWzUWS0e88Ufjcw3KVy4vM/TBImZVi6icQ=)
                          2: BVA-ewMKFfhNlaM9uEKeCRcxb44.roa (hash: p6Ztck3uBhR0bzcjLWO0QVdiIOvuYAXPjQqrSbEcptQ=)
                          3: HqPvNlx7UZiRVbk5_3PH9NhbC6A.roa (hash: +/Uf0WY1OyHo7LRFa5WaahOPnbyyowzO8Q8lBC3l8kM=)
                          4: RowHyzmbIUhwLNzP2aGdUq-bTxw.roa (hash: BWNoFSha19ToKG1Hm+elPv4NQAdo5EC6p+W2DfujBas=)
                          5: dcug0fKg-KsGzBpKENJINtdS5vw.roa (hash: 4mmQ47qSm1UkTR696jh82p3nO+ZrpORkySuxILnJi4I=)
                          6: kXFsWv63EX5LzlpEXl1PFUMjMlU.roa (hash: 55+NcYoCAfsxn/1QTku+M6mFFv7l9njuKzUccasgI84=)
                          7: qBz1hjzykMH_ZcIwvTn0SDyhgfs.roa (hash: W/hp3H2l3tBtLyOj1Fa5/YEuC/XubK4WM06Ks3Q9e/8=)
                          8: xEFzi6q5iLHWhpO7BeKb-7Tw9nE.crl (hash: x8F+mEi8XUg0nZLSMIrHPmKeheF79R6zJc8hLnA8gQY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/f8314e-a3bc-45e9-a9f5-4c98d9a51405/1/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/f8314e-a3bc-45e9-a9f5-4c98d9a51405/1/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 15 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:1b:aa:ac:51:60:2f:8b:de:04:68:35:53:02:ed:db:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c441738baab988b1d68693bb05e29bfbb4f0f671
        Validity
            Not Before: Dec 14 07:02:08 2025 GMT
            Not After : Dec 15 07:02:08 2025 GMT
        Subject: CN=75c8a8bba44ac1db559292082c7f0c16064b1767
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:65:bb:04:3c:57:3b:2a:bb:55:63:c0:01:9d:
                    8b:4f:ff:0f:59:10:41:48:19:68:af:08:2c:d5:95:
                    3b:9a:ca:21:4e:16:b2:d0:c8:2a:b0:4c:2b:68:e8:
                    75:1e:53:81:31:8b:b9:be:8f:5e:17:8b:e5:dc:a0:
                    15:9c:f7:d2:de:3b:31:4b:fe:61:70:56:d1:c7:fa:
                    b1:2c:28:16:26:f4:24:e6:9b:cb:67:20:5f:53:b9:
                    37:cf:da:a2:14:a7:a4:84:85:e6:05:5c:3e:8e:3d:
                    1d:eb:d5:f6:2b:84:29:62:cb:d7:7d:bb:b4:4b:45:
                    de:79:48:fb:9f:c8:de:71:9f:89:c2:39:15:e6:54:
                    70:11:16:57:db:79:cf:3b:64:37:e7:ea:fb:80:4e:
                    b7:49:62:8d:e2:47:92:f5:11:af:af:a9:b7:18:ce:
                    6b:01:9e:09:dc:1f:99:5c:58:1b:4e:c8:a2:c7:62:
                    42:56:31:80:df:63:87:4d:81:f9:8b:b8:0e:e2:26:
                    9c:b3:ba:80:11:29:2f:ee:86:6c:4e:57:c4:b0:ee:
                    23:88:00:22:7d:29:33:f1:1b:ae:f2:d9:c2:03:a2:
                    9a:08:79:c8:8c:93:f8:0a:97:80:8e:10:5d:fe:a8:
                    16:5d:50:bd:f5:ab:b4:e9:4e:36:c9:1b:6a:7d:03:
                    37:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:C8:A8:BB:A4:4A:C1:DB:55:92:92:08:2C:7F:0C:16:06:4B:17:67
            X509v3 Authority Key Identifier:
                keyid:C4:41:73:8B:AA:B9:88:B1:D6:86:93:BB:05:E2:9B:FB:B4:F0:F6:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/f8314e-a3bc-45e9-a9f5-4c98d9a51405/1/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/f8314e-a3bc-45e9-a9f5-4c98d9a51405/1/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:62:af:f2:01:f4:b3:2d:b2:1d:5b:45:8c:7a:c3:fc:c0:e6:
         8c:4a:0e:cb:2d:2c:fa:15:e5:1d:39:5a:33:9a:c1:e6:7b:e9:
         95:d6:d7:4a:56:29:ae:b4:17:09:af:05:8c:da:c3:ce:cf:e1:
         85:ce:de:d7:a2:12:e0:7c:e5:3f:58:95:95:bb:65:6a:c8:1f:
         ed:47:0f:36:93:20:f4:19:5d:78:7f:bd:89:0a:0c:9f:83:83:
         e4:00:29:47:41:1e:c3:2d:18:c7:3e:33:47:c0:fb:44:0c:9b:
         6c:b7:f2:b3:a8:61:ba:82:93:a7:82:9e:b2:d3:62:ab:91:d4:
         cb:5e:98:35:37:f1:6b:10:f0:36:ed:a1:95:7c:61:43:63:48:
         6c:6f:25:2c:de:60:5f:0b:36:18:88:72:e0:a2:c4:02:b3:b2:
         38:98:cc:da:79:73:a2:ba:de:8f:50:43:49:d7:b8:74:34:98:
         a5:1e:d5:ca:78:34:4f:ce:74:de:a4:83:23:81:73:4d:f7:a4:
         2b:91:04:ec:87:48:f3:9f:a8:69:44:ef:49:92:07:cd:bf:9a:
         0d:48:63:d7:1e:c4:55:6e:b6:82:31:cf:54:f6:f3:11:4a:a0:
         6f:ae:50:c5:8f:40:28:06:69:fe:e7:5f:1e:a8:08:6e:e4:c7:
         0e:72:f4:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZsbqqxRYC+L3gRoNVMC7dv6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0NDE3MzhiYWFiOTg4YjFkNjg2OTNiYjA1ZTI5YmZiYjRm
MGY2NzEwHhcNMjUxMjE0MDcwMjA4WhcNMjUxMjE1MDcwMjA4WjAzMTEwLwYDVQQD
Eyg3NWM4YThiYmE0NGFjMWRiNTU5MjkyMDgyYzdmMGMxNjA2NGIxNzY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA02W7BDxXOyq7VWPAAZ2LT/8PWRBB
SBlorwgs1ZU7msohThay0MgqsEwraOh1HlOBMYu5vo9eF4vl3KAVnPfS3jsxS/5h
cFbRx/qxLCgWJvQk5pvLZyBfU7k3z9qiFKekhIXmBVw+jj0d69X2K4QpYsvXfbu0
S0XeeUj7n8jecZ+JwjkV5lRwERZX23nPO2Q35+r7gE63SWKN4keS9RGvr6m3GM5r
AZ4J3B+ZXFgbTsiix2JCVjGA32OHTYH5i7gO4iacs7qAESkv7oZsTlfEsO4jiAAi
fSkz8Ruu8tnCA6KaCHnIjJP4CpeAjhBd/qgWXVC99au06U42yRtqfQM33wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHXIqLukSsHbVZKSCCx/DBYGSxdnMB8GA1UdIwQY
MBaAFMRBc4uquYix1oaTuwXim/u08PZxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEVGemk2cTVpTEhXaHBPN0JlS2ItN1R3OW5FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My9mODMxNGUtYTNiYy00NWU5LWE5ZjUt
NGM5OGQ5YTUxNDA1LzEveEVGemk2cTVpTEhXaHBPN0JlS2ItN1R3OW5FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My9mODMxNGUtYTNiYy00NWU5LWE5ZjUtNGM5OGQ5YTUxNDA1
LzEveEVGemk2cTVpTEhXaHBPN0JlS2ItN1R3OW5FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeWKv8gH0
sy2yHVtFjHrD/MDmjEoOyy0s+hXlHTlaM5rB5nvpldbXSlYprrQXCa8FjNrDzs/h
hc7e16IS4HzlP1iVlbtlasgf7UcPNpMg9BldeH+9iQoMn4OD5AApR0Eewy0Yxz4z
R8D7RAybbLfys6hhuoKTp4KestNiq5HUy16YNTfxaxDwNu2hlXxhQ2NIbG8lLN5g
Xws2GIhy4KLEArOyOJjM2nlzorrej1BDSde4dDSYpR7Vyng0T8503qSDI4FzTfek
K5EE7IdI85+oaUTvSZIHzb+aDUhj1x7EVW62gjHPVPbzEUqgb65QxY9AKAZp/udf
HqgIbuTHDnL0kw==
-----END CERTIFICATE-----
Generated at Sun Dec 14 08:41:14 2025 by rpki-client