This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/263044-c74f-4b67-b24b-e1352d5afa0a/1/mf-X9RWwg-MLxS2B4ZPYyLt_34w.mft
File:                     mf-X9RWwg-MLxS2B4ZPYyLt_34w.mft (raw, json)
Hash identifier:          XDdyjRXd0X/TwgD87tsT5BT9T58F8L/VDTXSeAzPBXs=
Subject key identifier:   34:98:56:95:FC:AB:98:3F:13:25:28:3B:F9:89:B3:31:51:53:D3:F3
Authority key identifier: 99:FF:97:F5:15:B0:83:E3:0B:C5:2D:81:E1:93:D8:C8:BB:7F:DF:8C
Certificate issuer:       /CN=99ff97f515b083e30bc52d81e193d8c8bb7fdf8c
Certificate serial:       019B3DFEF4237B197BDFC32757D2869CA006
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mf-X9RWwg-MLxS2B4ZPYyLt_34w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/263044-c74f-4b67-b24b-e1352d5afa0a/1/mf-X9RWwg-MLxS2B4ZPYyLt_34w.mft
Manifest number:          0758
Signing time:             Sat 20 Dec 2025 23:01:17 +0000
Manifest this update:     Sat 20 Dec 2025 23:01:17 +0000
Manifest next update:     Sun 21 Dec 2025 23:01:17 +0000
Files and hashes:         1: KKAdJZwlPOuvUmhtsSSfP_XfQ9w.roa (hash: Fim6YZSnH30vV92L/gdG+AOAxW50mQ7FyxjlaSpVQfU=)
                          2: mf-X9RWwg-MLxS2B4ZPYyLt_34w.crl (hash: izk6XxWfb7y9A0A2BrgEhX9VagTXxsDtulI4eibMqB0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/263044-c74f-4b67-b24b-e1352d5afa0a/1/mf-X9RWwg-MLxS2B4ZPYyLt_34w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/263044-c74f-4b67-b24b-e1352d5afa0a/1/mf-X9RWwg-MLxS2B4ZPYyLt_34w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mf-X9RWwg-MLxS2B4ZPYyLt_34w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 19:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3d:fe:f4:23:7b:19:7b:df:c3:27:57:d2:86:9c:a0:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99ff97f515b083e30bc52d81e193d8c8bb7fdf8c
        Validity
            Not Before: Dec 20 23:01:17 2025 GMT
            Not After : Dec 21 23:01:17 2025 GMT
        Subject: CN=34985695fcab983f1325283bf989b3315153d3f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:88:e5:b2:da:06:6f:70:2c:ed:10:6c:7d:08:
                    0b:9a:fc:4f:25:7e:26:bf:24:f3:a8:f2:ad:aa:17:
                    c1:12:f5:98:77:e4:88:47:23:df:ea:49:8f:e7:af:
                    c8:d4:22:41:95:2e:53:57:3d:1f:4a:2a:11:aa:a5:
                    12:a3:ec:21:e3:40:b7:75:e1:d5:ca:8b:1d:af:f8:
                    3b:8e:65:22:1e:8f:98:3c:e0:58:66:f1:6c:90:1d:
                    fc:15:08:c5:42:7d:f2:b1:63:ad:5f:d5:ee:38:12:
                    41:84:28:76:1f:1e:50:1b:56:32:a2:43:14:0f:0f:
                    7e:c1:6f:82:06:51:3d:79:d2:51:e8:ed:f5:be:df:
                    7b:e3:3d:53:16:a8:56:e2:e9:ea:52:c3:cb:50:c2:
                    e9:64:81:87:c3:d0:dc:dc:31:ea:cf:c3:60:67:9f:
                    4d:3a:e8:b9:96:fc:79:1f:64:e6:42:75:0f:0c:53:
                    d2:b4:d4:38:5f:8e:b6:96:77:f5:b1:32:d1:c7:a6:
                    67:37:da:82:ec:9d:f7:cc:45:dc:72:00:02:a8:01:
                    ef:c4:11:aa:45:c8:5a:ec:b3:06:1b:cd:5e:77:dd:
                    79:e2:79:6a:89:40:fb:7a:3f:11:a1:7f:1b:d5:24:
                    90:e5:72:44:08:aa:34:52:b9:ce:d3:8f:cf:6e:f2:
                    b5:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:98:56:95:FC:AB:98:3F:13:25:28:3B:F9:89:B3:31:51:53:D3:F3
            X509v3 Authority Key Identifier:
                keyid:99:FF:97:F5:15:B0:83:E3:0B:C5:2D:81:E1:93:D8:C8:BB:7F:DF:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mf-X9RWwg-MLxS2B4ZPYyLt_34w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/263044-c74f-4b67-b24b-e1352d5afa0a/1/mf-X9RWwg-MLxS2B4ZPYyLt_34w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/263044-c74f-4b67-b24b-e1352d5afa0a/1/mf-X9RWwg-MLxS2B4ZPYyLt_34w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:8a:2c:93:f7:2b:13:8e:49:6b:e3:90:45:e9:1d:04:86:c5:
         e3:1e:71:4f:66:65:fe:19:a6:c7:ab:21:ca:df:9e:59:3b:b0:
         e5:5e:30:6e:a0:8e:06:61:c1:27:b2:53:86:70:ee:92:6e:33:
         9a:94:fb:c0:22:cd:ec:ab:b3:1a:59:11:78:41:c1:70:d9:67:
         08:a0:b7:dd:83:25:e7:56:71:e4:82:6e:db:5e:e8:f3:de:7a:
         9c:4b:21:fc:42:55:1c:0b:bd:ca:88:4d:cb:ac:b9:12:01:9c:
         dd:41:ed:19:a0:8e:7a:07:d1:e6:85:c8:3b:33:ca:9e:75:fd:
         a8:48:fd:a3:5b:2d:b3:1f:04:62:25:02:60:0a:14:6f:2b:aa:
         27:ad:04:c3:e9:db:81:0f:88:aa:c3:b2:cc:d7:2b:c0:ca:de:
         1a:da:3d:7c:e5:f6:1f:1b:fa:e1:a9:d1:ba:b0:53:6d:f4:a2:
         98:24:0f:07:e6:58:c1:34:af:09:7c:9a:b5:46:af:21:0e:42:
         be:6d:60:9e:dd:ac:a4:7d:f2:56:2b:01:c2:88:02:83:29:62:
         0b:ce:9e:02:34:be:04:b0:a6:ee:60:7f:ee:5c:20:32:a1:73:
         c7:14:d6:36:5c:d4:c6:9a:9d:cb:a7:c6:76:c3:26:8a:cc:09:
         77:57:81:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZs9/vQjexl738MnV9KGnKAGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5ZmY5N2Y1MTViMDgzZTMwYmM1MmQ4MWUxOTNkOGM4YmI3
ZmRmOGMwHhcNMjUxMjIwMjMwMTE3WhcNMjUxMjIxMjMwMTE3WjAzMTEwLwYDVQQD
EygzNDk4NTY5NWZjYWI5ODNmMTMyNTI4M2JmOTg5YjMzMTUxNTNkM2YzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxYjlstoGb3As7RBsfQgLmvxPJX4m
vyTzqPKtqhfBEvWYd+SIRyPf6kmP56/I1CJBlS5TVz0fSioRqqUSo+wh40C3deHV
yosdr/g7jmUiHo+YPOBYZvFskB38FQjFQn3ysWOtX9XuOBJBhCh2Hx5QG1YyokMU
Dw9+wW+CBlE9edJR6O31vt974z1TFqhW4unqUsPLUMLpZIGHw9Dc3DHqz8NgZ59N
Oui5lvx5H2TmQnUPDFPStNQ4X462lnf1sTLRx6ZnN9qC7J33zEXccgACqAHvxBGq
Rcha7LMGG81ed9154nlqiUD7ej8RoX8b1SSQ5XJECKo0UrnO04/PbvK13QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDSYVpX8q5g/EyUoO/mJszFRU9PzMB8GA1UdIwQY
MBaAFJn/l/UVsIPjC8UtgeGT2Mi7f9+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWYtWDlSV3dnLU1MeFMyQjRaUFl5THRfMzR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8yNjMwNDQtYzc0Zi00YjY3LWIyNGIt
ZTEzNTJkNWFmYTBhLzEvbWYtWDlSV3dnLU1MeFMyQjRaUFl5THRfMzR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi8yNjMwNDQtYzc0Zi00YjY3LWIyNGItZTEzNTJkNWFmYTBh
LzEvbWYtWDlSV3dnLU1MeFMyQjRaUFl5THRfMzR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFIosk/cr
E45Ja+OQRekdBIbF4x5xT2Zl/hmmx6shyt+eWTuw5V4wbqCOBmHBJ7JThnDukm4z
mpT7wCLN7KuzGlkReEHBcNlnCKC33YMl51Zx5IJu217o8956nEsh/EJVHAu9yohN
y6y5EgGc3UHtGaCOegfR5oXIOzPKnnX9qEj9o1stsx8EYiUCYAoUbyuqJ60Ew+nb
gQ+IqsOyzNcrwMreGto9fOX2Hxv64anRurBTbfSimCQPB+ZYwTSvCXyatUavIQ5C
vm1gnt2spH3yVisBwogCgyliC86eAjS+BLCm7mB/7lwgMqFzxxTWNlzUxpqdy6fG
dsMmiswJd1eBXQ==
-----END CERTIFICATE-----
Generated at Sun Dec 21 03:51:47 2025 by rpki-client