This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/xuHIxlyG6NJt2-toZYo5p6jieGY.mft
File:                     xuHIxlyG6NJt2-toZYo5p6jieGY.mft (raw, json)
Hash identifier:          YXWHCaqoTor0UgENes3alN8JM4KHASCmSFEFidmi2bQ=
Subject key identifier:   AD:A8:B0:6D:3A:3A:5F:6C:93:F2:EE:B4:A2:E2:7E:C7:64:71:29:90
Authority key identifier: C6:E1:C8:C6:5C:86:E8:D2:6D:DB:EB:68:65:8A:39:A7:A8:E2:78:66
Certificate issuer:       /CN=c6e1c8c65c86e8d26ddbeb68658a39a7a8e27866
Certificate serial:       019B20D019E5A4C54A0490BDE7B49010D0AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xuHIxlyG6NJt2-toZYo5p6jieGY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/xuHIxlyG6NJt2-toZYo5p6jieGY.mft
Manifest number:          17B0
Signing time:             Mon 15 Dec 2025 07:01:07 +0000
Manifest this update:     Mon 15 Dec 2025 07:01:07 +0000
Manifest next update:     Tue 16 Dec 2025 07:01:07 +0000
Files and hashes:         1: 0U3Gso3ODnWaRUyku2KbHXOd2nE.roa (hash: OjHUqZ7uYTApLthTiQNLejjbsCRnlAUYsAqNFNIG54g=)
                          2: 54ZmeVEdiSRDGRRG_DI6wWiUd7g.roa (hash: JFZc+GyxBOryjMHw3/n1I31IV2py6fuY1AjRNQU0bIg=)
                          3: Ku1m6fE7F4WFYNZ7f8RKK2-hH04.roa (hash: viKr0tF45sV0M1CowW9VfsNobYhpaxYTBfvzpT02dN0=)
                          4: wVptusVHIdbO2Rty9inFJlCpXfo.roa (hash: VLpPb0bMQpDYHBCAVfuSVFIISUNTNn9pYkADsImtNL0=)
                          5: xuHIxlyG6NJt2-toZYo5p6jieGY.crl (hash: TShhLE2uwH+ns4LDj0BEHwYdEdhhuWXDkiNL3Bj2HFI=)
                          6: zQ-KSJ7-TjaiG9uymKq9s3FHrzQ.roa (hash: FbTMvTLuTW6XcX7GqJJNJmaL2pjOC6IOrZv/ZrzS0Uo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/xuHIxlyG6NJt2-toZYo5p6jieGY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/xuHIxlyG6NJt2-toZYo5p6jieGY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xuHIxlyG6NJt2-toZYo5p6jieGY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 16 Dec 2025 07:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:20:d0:19:e5:a4:c5:4a:04:90:bd:e7:b4:90:10:d0:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6e1c8c65c86e8d26ddbeb68658a39a7a8e27866
        Validity
            Not Before: Dec 15 07:01:07 2025 GMT
            Not After : Dec 16 07:01:07 2025 GMT
        Subject: CN=ada8b06d3a3a5f6c93f2eeb4a2e27ec764712990
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:24:b1:11:a7:ef:70:50:58:ea:14:24:63:3f:
                    d1:65:32:fb:29:c8:f8:43:a7:9b:90:0a:cf:dc:1c:
                    8c:2b:1e:f3:cc:b4:bb:c4:43:9e:99:77:6f:29:2e:
                    fe:d0:16:28:21:51:8f:dd:90:15:c1:92:2e:f5:ed:
                    4a:be:3e:b2:87:da:70:da:51:40:6b:fc:00:11:bc:
                    36:e7:7d:da:18:b7:99:41:1e:26:f0:40:7a:8e:35:
                    aa:b6:33:5c:35:f2:ef:01:16:1c:51:f5:67:d9:65:
                    47:2e:79:59:a2:6f:b7:2e:78:09:90:24:ef:b4:94:
                    27:fe:c2:08:2c:a1:53:7e:d6:df:b2:e6:07:8a:69:
                    c7:c6:b4:74:2d:84:98:01:78:70:ab:53:bf:00:eb:
                    e8:b9:0f:e4:ee:d5:70:6c:dc:16:b1:61:c0:10:f8:
                    04:0f:8f:de:26:37:33:21:c2:63:70:c7:1f:ee:94:
                    05:7b:02:5c:03:8d:f6:f3:02:7d:7e:ab:bf:0a:30:
                    55:07:26:6e:19:9b:80:1b:87:53:cc:0d:3e:e2:09:
                    5b:c2:b3:f6:3d:6a:c6:30:9b:c9:c4:de:fe:e1:37:
                    20:b0:73:56:ea:93:92:aa:0f:d3:81:7b:f3:f1:64:
                    9e:b0:eb:1c:cb:9a:97:46:b4:88:78:ed:f9:57:c2:
                    bb:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:A8:B0:6D:3A:3A:5F:6C:93:F2:EE:B4:A2:E2:7E:C7:64:71:29:90
            X509v3 Authority Key Identifier:
                keyid:C6:E1:C8:C6:5C:86:E8:D2:6D:DB:EB:68:65:8A:39:A7:A8:E2:78:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xuHIxlyG6NJt2-toZYo5p6jieGY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/xuHIxlyG6NJt2-toZYo5p6jieGY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/xuHIxlyG6NJt2-toZYo5p6jieGY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:f8:2a:21:39:66:d1:e0:18:6b:95:e8:4b:bd:e0:1f:40:a1:
         29:d5:80:e3:f2:74:85:9f:a0:03:3a:63:2d:81:23:6c:d3:b2:
         b8:92:d9:f4:c9:c9:0c:3b:8f:de:6d:24:bb:87:3a:98:66:59:
         1b:f9:26:1b:1d:57:b0:33:dd:8f:a3:02:ef:c2:b7:c4:91:f7:
         dc:ab:71:3b:1c:55:3d:4e:41:2a:24:8f:0b:6e:38:8a:44:2d:
         7f:7d:bd:3f:7c:33:51:25:2f:50:63:bc:c5:d9:8a:34:19:58:
         d0:a6:99:d4:aa:fb:9d:29:3a:a8:2c:74:4d:0c:e8:12:36:57:
         5d:0c:e5:a6:72:01:f1:34:3a:44:0a:47:8c:57:e0:cd:ad:5e:
         f1:55:d1:d4:1e:15:fc:5d:39:0e:70:a8:4b:34:61:c6:1c:0e:
         31:4b:39:5b:63:a5:15:61:ac:90:48:fd:00:7d:b4:02:17:7a:
         f0:a4:31:b5:d7:48:96:ed:38:4c:ca:82:2b:9e:df:45:ef:70:
         59:c2:95:fb:c1:25:96:54:1b:ee:4c:58:20:9b:01:57:1f:49:
         33:f4:67:9f:fc:91:b2:5c:f6:9c:1e:c6:09:10:b6:ab:0e:8b:
         26:39:d7:ea:f7:b1:60:c1:fc:d3:87:b4:46:0a:12:67:0b:e0:
         e0:45:75:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZsg0BnlpMVKBJC957SQENCtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2ZTFjOGM2NWM4NmU4ZDI2ZGRiZWI2ODY1OGEzOWE3YThl
Mjc4NjYwHhcNMjUxMjE1MDcwMTA3WhcNMjUxMjE2MDcwMTA3WjAzMTEwLwYDVQQD
EyhhZGE4YjA2ZDNhM2E1ZjZjOTNmMmVlYjRhMmUyN2VjNzY0NzEyOTkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8SSxEafvcFBY6hQkYz/RZTL7Kcj4
Q6ebkArP3ByMKx7zzLS7xEOemXdvKS7+0BYoIVGP3ZAVwZIu9e1Kvj6yh9pw2lFA
a/wAEbw2533aGLeZQR4m8EB6jjWqtjNcNfLvARYcUfVn2WVHLnlZom+3LngJkCTv
tJQn/sIILKFTftbfsuYHimnHxrR0LYSYAXhwq1O/AOvouQ/k7tVwbNwWsWHAEPgE
D4/eJjczIcJjcMcf7pQFewJcA4328wJ9fqu/CjBVByZuGZuAG4dTzA0+4glbwrP2
PWrGMJvJxN7+4TcgsHNW6pOSqg/TgXvz8WSesOscy5qXRrSIeO35V8K7dwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK2osG06Ol9sk/LutKLifsdkcSmQMB8GA1UdIwQY
MBaAFMbhyMZchujSbdvraGWKOaeo4nhmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveHVISXhseUc2Tkp0Mi10b1pZbzVwNmppZUdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9hNDUzZmUtYTY2NC00N2EyLThiOGEt
Y2U1ZTAxZTcxYzkxLzEveHVISXhseUc2Tkp0Mi10b1pZbzVwNmppZUdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS9hNDUzZmUtYTY2NC00N2EyLThiOGEtY2U1ZTAxZTcxYzkx
LzEveHVISXhseUc2Tkp0Mi10b1pZbzVwNmppZUdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATfgqITlm
0eAYa5XoS73gH0ChKdWA4/J0hZ+gAzpjLYEjbNOyuJLZ9MnJDDuP3m0ku4c6mGZZ
G/kmGx1XsDPdj6MC78K3xJH33KtxOxxVPU5BKiSPC244ikQtf329P3wzUSUvUGO8
xdmKNBlY0KaZ1Kr7nSk6qCx0TQzoEjZXXQzlpnIB8TQ6RApHjFfgza1e8VXR1B4V
/F05DnCoSzRhxhwOMUs5W2OlFWGskEj9AH20Ahd68KQxtddIlu04TMqCK57fRe9w
WcKV+8ElllQb7kxYIJsBVx9JM/Rnn/yRslz2nB7GCRC2qw6LJjnX6vexYMH804e0
RgoSZwvg4EV1qA==
-----END CERTIFICATE-----
Generated at Mon Dec 15 16:48:35 2025 by rpki-client