This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/873dd0-af88-4be5-9861-fea5eff37724/1/xrr44wiCF-S3wMIxcY-rkJsYgeQ.mft
File:                     xrr44wiCF-S3wMIxcY-rkJsYgeQ.mft (raw, json)
Hash identifier:          tZ+a8TKmGsYmOLwpTpW0wt6gSGa4OfdJ9jqAahGTYvE=
Subject key identifier:   A5:95:25:B4:B4:6F:D1:51:E4:C5:C5:50:83:B7:E8:B3:4C:AF:DE:D4
Authority key identifier: C6:BA:F8:E3:08:82:17:E4:B7:C0:C2:31:71:8F:AB:90:9B:18:81:E4
Certificate issuer:       /CN=c6baf8e3088217e4b7c0c231718fab909b1881e4
Certificate serial:       019B5ABFD2EB57D32AF757E1DE45D5AA7055
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xrr44wiCF-S3wMIxcY-rkJsYgeQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/873dd0-af88-4be5-9861-fea5eff37724/1/xrr44wiCF-S3wMIxcY-rkJsYgeQ.mft
Manifest number:          0C
Signing time:             Fri 26 Dec 2025 13:01:19 +0000
Manifest this update:     Fri 26 Dec 2025 13:01:19 +0000
Manifest next update:     Sat 27 Dec 2025 13:01:19 +0000
Files and hashes:         1: cfwDDgU0VXlqDlZ7nqhniKeG3U8.asa (hash: SiTquxMiNkR26hu+hk9hwsuht0hbOHCfqXuGNIDTcE0=)
                          2: wLZ0om1eYNLk8iWLT7545pgbjxE.roa (hash: TXnCxZRiHoJiBAQHrsXiscr2ci35Zx8pHJgDDr7XC4o=)
                          3: xrr44wiCF-S3wMIxcY-rkJsYgeQ.crl (hash: 5pQCzIqemPWuRTjl+DoK0d8CaURaC3w/plOfVJicpFA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/873dd0-af88-4be5-9861-fea5eff37724/1/xrr44wiCF-S3wMIxcY-rkJsYgeQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/873dd0-af88-4be5-9861-fea5eff37724/1/xrr44wiCF-S3wMIxcY-rkJsYgeQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xrr44wiCF-S3wMIxcY-rkJsYgeQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 27 Dec 2025 06:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:5a:bf:d2:eb:57:d3:2a:f7:57:e1:de:45:d5:aa:70:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6baf8e3088217e4b7c0c231718fab909b1881e4
        Validity
            Not Before: Dec 26 13:01:19 2025 GMT
            Not After : Dec 27 13:01:19 2025 GMT
        Subject: CN=a59525b4b46fd151e4c5c55083b7e8b34cafded4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:df:39:73:f8:98:72:5d:2f:3c:6e:5a:5e:0f:
                    79:3d:ec:c0:10:aa:bf:76:fe:85:55:13:81:b6:81:
                    5e:be:7a:26:f4:0a:f9:b4:5c:9b:e2:c5:3f:99:4a:
                    21:6b:51:af:2f:bf:b8:f7:93:7c:f9:d6:8a:6c:bb:
                    ed:58:28:2c:38:1c:46:a9:78:70:83:d4:ab:ba:08:
                    33:b1:f8:8f:2a:c4:ff:8a:4b:bc:19:1d:a7:b5:b4:
                    bc:bc:6f:9f:74:1f:d9:16:80:42:7a:f7:b8:05:48:
                    83:e8:2d:f9:ad:7f:f5:19:8e:56:d0:4a:0a:6a:8b:
                    34:25:45:c7:86:a1:67:98:52:50:0f:3b:6f:8c:a4:
                    d5:3c:ae:bf:02:fd:c5:9b:54:97:0b:0f:c2:48:c5:
                    38:6b:5a:72:c5:7a:5f:4d:fe:c3:6e:dd:d6:ab:42:
                    f8:d3:a4:35:73:4d:b0:4f:7c:24:00:c3:60:2d:2e:
                    82:1d:ae:7a:b5:5a:18:12:49:d8:ec:86:60:f7:b9:
                    5c:48:0a:ac:31:94:30:15:33:99:67:30:48:db:a9:
                    74:04:b7:a4:8b:95:65:f1:c2:9c:4b:24:f2:69:ab:
                    ab:f9:b0:43:39:0e:f7:5a:8f:db:8c:04:41:5f:40:
                    03:14:62:a9:fd:e1:30:b0:40:9f:d0:30:21:f4:05:
                    7a:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:95:25:B4:B4:6F:D1:51:E4:C5:C5:50:83:B7:E8:B3:4C:AF:DE:D4
            X509v3 Authority Key Identifier:
                keyid:C6:BA:F8:E3:08:82:17:E4:B7:C0:C2:31:71:8F:AB:90:9B:18:81:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xrr44wiCF-S3wMIxcY-rkJsYgeQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/873dd0-af88-4be5-9861-fea5eff37724/1/xrr44wiCF-S3wMIxcY-rkJsYgeQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/873dd0-af88-4be5-9861-fea5eff37724/1/xrr44wiCF-S3wMIxcY-rkJsYgeQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:b6:a0:76:99:1c:d8:55:8c:21:8a:ae:d8:2c:c8:a2:df:fe:
         7c:45:e2:a4:0f:77:06:d0:0d:c0:64:5a:a2:22:03:12:c6:d1:
         c4:9d:a8:a1:a0:cb:71:ad:c3:c1:99:3d:30:16:60:23:00:8b:
         b1:c5:66:c8:2a:45:48:09:62:9a:e3:44:2b:79:18:70:37:0f:
         95:fc:4a:cb:8b:b5:25:2e:cf:78:8f:51:e1:c6:65:8a:b6:77:
         6e:da:16:10:dd:46:36:f5:1f:42:9f:e4:cc:1e:41:9f:4b:ca:
         38:e9:2f:86:e1:c0:63:fd:27:29:af:04:7e:1f:14:b3:02:f0:
         32:93:af:8c:a8:b0:c9:75:e7:10:94:0b:52:b3:a1:40:9c:e4:
         1c:12:20:d8:88:58:4a:f6:4c:23:1f:f1:3b:e9:ab:29:5b:10:
         a7:9c:24:fc:b3:de:57:49:3e:6c:40:56:2a:30:2d:e7:81:4d:
         b1:64:b2:5b:a2:45:eb:5b:26:91:7f:ed:7a:68:f5:b2:b2:be:
         b6:8c:82:07:8f:4e:82:3e:0e:cf:ad:94:b9:53:cc:16:d5:a5:
         d0:e8:50:62:28:88:62:7e:2f:ae:6d:fe:bc:7a:ea:fa:f0:77:
         62:47:a6:a0:a5:6a:cd:4b:46:7c:6e:28:27:02:8c:dd:e0:be:
         85:e2:90:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZtav9LrV9Mq91fh3kXVqnBVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2YmFmOGUzMDg4MjE3ZTRiN2MwYzIzMTcxOGZhYjkwOWIx
ODgxZTQwHhcNMjUxMjI2MTMwMTE5WhcNMjUxMjI3MTMwMTE5WjAzMTEwLwYDVQQD
EyhhNTk1MjViNGI0NmZkMTUxZTRjNWM1NTA4M2I3ZThiMzRjYWZkZWQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwt85c/iYcl0vPG5aXg95PezAEKq/
dv6FVROBtoFevnom9Ar5tFyb4sU/mUoha1GvL7+495N8+daKbLvtWCgsOBxGqXhw
g9SruggzsfiPKsT/iku8GR2ntbS8vG+fdB/ZFoBCeve4BUiD6C35rX/1GY5W0EoK
aos0JUXHhqFnmFJQDztvjKTVPK6/Av3Fm1SXCw/CSMU4a1pyxXpfTf7Dbt3Wq0L4
06Q1c02wT3wkAMNgLS6CHa56tVoYEknY7IZg97lcSAqsMZQwFTOZZzBI26l0BLek
i5Vl8cKcSyTyaaur+bBDOQ73Wo/bjARBX0ADFGKp/eEwsECf0DAh9AV6HQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKWVJbS0b9FR5MXFUIO36LNMr97UMB8GA1UdIwQY
MBaAFMa6+OMIghfkt8DCMXGPq5CbGIHkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveHJyNDR3aUNGLVMzd01JeGNZLXJrSnNZZ2VRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS84NzNkZDAtYWY4OC00YmU1LTk4NjEt
ZmVhNWVmZjM3NzI0LzEveHJyNDR3aUNGLVMzd01JeGNZLXJrSnNZZ2VRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS84NzNkZDAtYWY4OC00YmU1LTk4NjEtZmVhNWVmZjM3NzI0
LzEveHJyNDR3aUNGLVMzd01JeGNZLXJrSnNZZ2VRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAObagdpkc
2FWMIYqu2CzIot/+fEXipA93BtANwGRaoiIDEsbRxJ2ooaDLca3DwZk9MBZgIwCL
scVmyCpFSAlimuNEK3kYcDcPlfxKy4u1JS7PeI9R4cZlirZ3btoWEN1GNvUfQp/k
zB5Bn0vKOOkvhuHAY/0nKa8Efh8UswLwMpOvjKiwyXXnEJQLUrOhQJzkHBIg2IhY
SvZMIx/xO+mrKVsQp5wk/LPeV0k+bEBWKjAt54FNsWSyW6JF61smkX/temj1srK+
toyCB49Ogj4Oz62UuVPMFtWl0OhQYiiIYn4vrm3+vHrq+vB3YkemoKVqzUtGfG4o
JwKM3eC+heKQFA==
-----END CERTIFICATE-----
Generated at Fri Dec 26 15:43:35 2025 by rpki-client