This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.mft
File:                     x0xgresM1XaM91b1YrG1zFucGAo.mft (raw, json)
Hash identifier:          Gj+Qw5JOnXYbsZjfFIvI+FalMdUY0JJ22uKCsu1c18g=
Subject key identifier:   DA:44:81:AA:26:08:DF:CA:3D:D5:11:68:BD:41:49:AE:CD:05:1D:1C
Authority key identifier: C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A
Certificate issuer:       /CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a
Certificate serial:       019B2852287878649EAAEB603294A4ED17A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.mft
Manifest number:          12B3
Signing time:             Tue 16 Dec 2025 18:00:31 +0000
Manifest this update:     Tue 16 Dec 2025 18:00:31 +0000
Manifest next update:     Wed 17 Dec 2025 18:00:31 +0000
Files and hashes:         1: 1-5xwCbYkw6n3KjUjQqrpHNycjsw.roa (hash: xnmXPX7h0AhX7fCrQfBlW4AC7vVtbQB3crm/g5LQBZ8=)
                          2: 44nY8xo2_DC63JpeIryBFG4szdQ.roa (hash: efIE2v0XKUD30sbluIT7ZKbMSQuZbTeUS/u2oPtbj6o=)
                          3: 7A6Pl3U5uu7pNsrAyeGlxHIf1OU.roa (hash: dnscxtqTmkxtlMB3gelGkG+4KCL2QrOo2QVlxJroGE4=)
                          4: EtMkTWvI58D-qupiUEl0MY2JiGg.roa (hash: Uz/Ifsb2B9YKip4rb0sqaf9NKH2gpjgn6z0w/NesOiA=)
                          5: KSAJh59TBqB3nBc2swg-HhWD4HU.roa (hash: YuODHnc04OfbOoqG4f2goTKLkOcK+XMOJlxF0H5E6MU=)
                          6: MvwrdGGrm_TBTyOOfZJTIiIeWXw.roa (hash: Czfwbes361OZe+qWA/o1I6nT8cW6PcS0wLg8sWUe8LY=)
                          7: PMMRtrP5Zia_L993q-DTeiA0eMU.roa (hash: EDSJVdah5uVn4vudD7mvIJSeuN7pHg6lTwJI66X4+8U=)
                          8: Tgau0g9hd2TV9KJ2R8i9SL-urKE.roa (hash: YgQs04TbYGBp6z7hdUp7he/neEsxdPKRCp6qgTF++e4=)
                          9: aXl3woCDTFV8KOUCaI37GD38yqY.roa (hash: j3sOWjoASI5TGptHDgux4OEToltLJUpmg1hcSPVVS80=)
                          10: bJ8s7uGF8zV84bsoruoPN6w5eBc.roa (hash: tSNRGX8MiAjqATg2gnnV+WNgM9CkUv2i/cajQpTVHzQ=)
                          11: dAgwpgiRE2fhaRYA7R_57WtkW8s.roa (hash: 2UcKjGJubVOnE28cs0BJhOQ91W2EUDgFnVS+nrDVbZw=)
                          12: eTvI3fV2l6gXhWfOYGcPCndQ2W4.roa (hash: 4lXzTxLXjqfOX2HuxLyn4Q7cfie0cfVZXxLpWJH4PhY=)
                          13: gY6-jVr97TeobNKsJqEIsFCfx1Q.roa (hash: GWcQFDLCJqx2wbPwhuGTM6ZqJ7XlkbdeE9qf+VAI0SE=)
                          14: ndpwXQr0DFZEYAa1c0O-3LbE2d0.roa (hash: vPOmxM9kg1tTyYliwSKFemIpfx1XBUWworUDWjHCOrs=)
                          15: oF17FWGJTn6UIscGvTvJAT2bF9s.roa (hash: fwpfwyvA7EQCmsPepsKw3LosX8muYMblWDHxTAWFwOQ=)
                          16: p2vI0_PjYi8mnAQRBZG21gCvT7U.roa (hash: 31okJPnHq4SbgdiG4NvkIaYEEjg54d//5wBJpluxKCw=)
                          17: q13mGARa9r5QMtX1UkBNlLNiezo.roa (hash: EsDIM/kI3A6s/JVMlk0Lts4ZsihLHZ0jyyXXJqa6MdI=)
                          18: qu9muxyupj11J0vkCGd6UL4_YU8.asa (hash: ma8CUett5NKo6WA/WUa9lgNux61RUdveClhcObpC3iI=)
                          19: uiJCPf3ZYtfC8Ai59XFw_bFzUXs.roa (hash: ToV2fvQi+YWjL/E1w8mL3goa6Xi40QGLi0ZrnQOMuMs=)
                          20: vkFwwNqB_ICwNnQv_0c0BjXwhkc.roa (hash: a3rSSugcF/W8EnRna3Y5K0Q4cnP41HN2mioCgG5ku08=)
                          21: woqB-lp41jPnWfABUhjX5NctLxQ.asa (hash: v3DbKFdxADYHJQ3DIANngq+EbQulpWmrtEktO22gNc8=)
                          22: x0xgresM1XaM91b1YrG1zFucGAo.crl (hash: pZnATk6kHUBZibmj8vJNqTbUAAXPUsQyPdqWWWdtK3E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 17 Dec 2025 14:45:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:28:52:28:78:78:64:9e:aa:eb:60:32:94:a4:ed:17:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a
        Validity
            Not Before: Dec 16 18:00:31 2025 GMT
            Not After : Dec 17 18:00:31 2025 GMT
        Subject: CN=da4481aa2608dfca3dd51168bd4149aecd051d1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:44:5b:9b:7c:77:02:4c:8d:d2:f2:5b:97:d9:
                    82:d2:f3:41:9d:34:0f:97:6d:e0:44:b8:23:46:39:
                    1e:34:aa:e1:95:fb:79:62:8f:6d:24:fc:59:7c:0e:
                    70:1c:a1:4b:b4:b5:4f:c5:e4:80:cb:cb:2b:47:d1:
                    9f:5b:55:7b:95:31:e5:55:2a:46:ea:95:5d:6c:b2:
                    c6:92:8d:30:90:f1:60:b4:ef:6d:bf:c4:ad:7f:9d:
                    28:e7:9f:1b:28:83:4d:c3:18:46:f1:44:52:ca:51:
                    29:42:20:5c:e8:d5:d4:6c:7e:06:ca:c1:89:b4:1f:
                    a3:5d:46:8c:eb:15:e1:24:e2:23:65:1b:6e:14:87:
                    f5:bb:d9:8d:9b:1b:ea:86:30:32:d3:91:d4:ed:61:
                    7c:2b:c1:af:34:99:18:5d:59:d3:76:f4:1c:21:1e:
                    51:6b:c4:df:b4:e0:ec:b5:1c:d6:cc:b1:c0:c9:5a:
                    2c:f4:9f:30:d9:a2:a3:c9:73:7c:98:e0:94:a6:4b:
                    8c:dc:8e:c4:86:ea:43:4d:d9:54:bf:5b:5a:09:b9:
                    33:fe:89:4b:d0:6b:c2:27:e6:19:e0:78:d8:ca:f9:
                    26:0b:aa:54:7e:8f:03:a3:79:9c:ef:71:f0:ac:70:
                    6f:df:1b:88:24:d4:6a:c6:cd:cd:13:c3:1d:35:d9:
                    d3:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:44:81:AA:26:08:DF:CA:3D:D5:11:68:BD:41:49:AE:CD:05:1D:1C
            X509v3 Authority Key Identifier:
                keyid:C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:91:ff:07:92:c5:ed:cb:65:50:bd:b4:78:d6:58:3d:8a:93:
         bc:0d:49:5b:3b:c7:5d:71:db:e7:ce:16:05:93:d1:7a:aa:a3:
         36:4c:f3:31:23:c0:9f:77:98:f1:65:70:23:7c:ed:c1:69:6d:
         65:34:dd:5b:00:f4:9d:0f:ff:55:28:0c:bd:6a:aa:41:ff:d7:
         15:21:72:4c:5f:64:f9:e9:bd:5c:4b:0d:66:66:a6:ef:ca:be:
         f1:58:67:3e:db:c0:3f:c1:28:ce:03:f9:78:92:ec:83:a5:eb:
         3a:1b:2c:f5:b6:6c:7d:64:e9:b6:4d:72:7e:5a:ad:b0:fd:f3:
         3a:0c:d3:0d:57:e0:95:77:e8:ab:d9:50:9d:bd:98:11:94:06:
         ff:fc:b3:4f:c6:d1:38:ca:97:1d:a6:9b:57:72:35:04:26:c1:
         0e:c7:59:e1:71:9d:f8:63:4f:29:ec:31:1a:c4:52:57:3c:c3:
         8c:67:cb:3b:30:2c:f3:ee:ab:63:d0:da:63:5c:be:eb:34:0c:
         9a:05:02:63:5f:db:c4:fc:ee:ca:37:be:1c:4e:a1:e5:d2:99:
         e3:ae:b9:b3:ab:c0:22:af:bc:77:45:0f:cb:be:b2:7f:e1:9d:
         43:d1:1e:af:93:2b:2f:a2:09:ae:ad:50:2e:3c:b5:61:a3:de:
         ce:6a:da:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 23:14:18 2025 by rpki-client