This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/39a022-faed-4376-8be6-2a5e98abd1f3/1/xv9UHPNkGToqAK2hQkSs00wUA4o.mft
File:                     xv9UHPNkGToqAK2hQkSs00wUA4o.mft (raw, json)
Hash identifier:          xstpuX26F2w+xkjo+sbtpEJD/+fNWQXbHFhEs9NwEsc=
Subject key identifier:   70:91:B5:A3:93:E0:56:E4:15:8D:72:FA:F0:02:B3:41:5B:C4:32:B7
Authority key identifier: C6:FF:54:1C:F3:64:19:3A:2A:00:AD:A1:42:44:AC:D3:4C:14:03:8A
Certificate issuer:       /CN=c6ff541cf364193a2a00ada14244acd34c14038a
Certificate serial:       019B3C103C93601818FD1C0EAB5ACE703CA9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xv9UHPNkGToqAK2hQkSs00wUA4o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/39a022-faed-4376-8be6-2a5e98abd1f3/1/xv9UHPNkGToqAK2hQkSs00wUA4o.mft
Manifest number:          03F6
Signing time:             Sat 20 Dec 2025 14:00:55 +0000
Manifest this update:     Sat 20 Dec 2025 14:00:55 +0000
Manifest next update:     Sun 21 Dec 2025 14:00:55 +0000
Files and hashes:         1: FMgcehrq11NYnach5jymNFMSCJo.roa (hash: 23485LoqiVIG63SHNB561yBglraAa3rXuSfMUv494ng=)
                          2: h0nRURZObDQGUY3lgCCRW5dgsdU.roa (hash: tHlLzC2mNo3zNr8LZV0r1UgQyBm2/nkWYYJopdfozpA=)
                          3: jPHsQlGx_ZTE4YgBiHZXwzUhhaA.roa (hash: qBF1JuuPaQkLpju5JJkqO3MhIuKn8gMr+bEddTrSCho=)
                          4: nvo5kYS5Gt5n8tNt2QdYcZApDBc.roa (hash: zlWPVIjJT4fAh1Xfi/EWmZKxdKql19zmnHIxNlxz2Ss=)
                          5: xv9UHPNkGToqAK2hQkSs00wUA4o.crl (hash: 6SKvj8kYI6b5kI7U2Bg8f2fi8KGleLDj12YtiFXotuE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/39a022-faed-4376-8be6-2a5e98abd1f3/1/xv9UHPNkGToqAK2hQkSs00wUA4o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/39a022-faed-4376-8be6-2a5e98abd1f3/1/xv9UHPNkGToqAK2hQkSs00wUA4o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xv9UHPNkGToqAK2hQkSs00wUA4o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 09:56:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3c:10:3c:93:60:18:18:fd:1c:0e:ab:5a:ce:70:3c:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6ff541cf364193a2a00ada14244acd34c14038a
        Validity
            Not Before: Dec 20 14:00:55 2025 GMT
            Not After : Dec 21 14:00:55 2025 GMT
        Subject: CN=7091b5a393e056e4158d72faf002b3415bc432b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f2:13:7c:7f:8b:43:66:c0:da:be:6d:97:df:
                    3f:52:b1:8b:2e:5f:8a:55:78:49:46:84:2d:72:0e:
                    fe:3b:bd:a5:3a:54:32:e7:1b:2f:43:ab:ff:11:6a:
                    ba:cf:77:f7:a8:37:0d:b9:1b:50:c1:a0:f4:a2:24:
                    63:58:21:32:f8:09:5d:50:d7:f3:04:61:5a:7f:ec:
                    17:61:6e:c0:de:fa:8a:3b:82:47:82:be:df:f2:76:
                    cb:b0:32:8b:44:73:2d:8b:d4:6c:74:24:94:88:fa:
                    20:bd:cb:ea:42:92:c9:58:6e:fd:85:f8:1a:5e:96:
                    88:50:94:3d:19:7a:20:be:aa:4c:da:0f:6d:80:38:
                    ee:f9:a8:01:a1:7e:f0:6d:94:af:a9:9d:3c:6f:a7:
                    38:c1:a0:2e:32:c1:18:97:38:f2:03:fb:32:76:8f:
                    21:af:99:84:66:9b:6e:5d:6f:19:d5:5e:50:25:da:
                    75:67:07:1d:f8:48:26:ff:7a:7b:1d:ce:ac:08:40:
                    c2:1f:b6:02:b3:76:6f:1e:86:70:72:03:06:41:1a:
                    55:fd:b0:03:15:84:64:8f:fb:dd:fc:5b:29:81:94:
                    32:e3:a5:88:2c:b6:14:83:6d:39:6d:ff:ba:5b:d9:
                    91:bc:7a:1b:d0:19:63:4b:79:6d:dd:c7:2c:85:b8:
                    6c:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:91:B5:A3:93:E0:56:E4:15:8D:72:FA:F0:02:B3:41:5B:C4:32:B7
            X509v3 Authority Key Identifier:
                keyid:C6:FF:54:1C:F3:64:19:3A:2A:00:AD:A1:42:44:AC:D3:4C:14:03:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xv9UHPNkGToqAK2hQkSs00wUA4o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/39a022-faed-4376-8be6-2a5e98abd1f3/1/xv9UHPNkGToqAK2hQkSs00wUA4o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/39a022-faed-4376-8be6-2a5e98abd1f3/1/xv9UHPNkGToqAK2hQkSs00wUA4o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:2f:2d:92:10:b2:67:9f:0d:43:63:5c:36:f4:7c:7b:28:37:
         08:0b:60:79:61:5e:bf:4b:11:64:87:a3:92:d2:9d:a9:77:cd:
         45:72:87:d9:a0:c6:ff:92:ec:f9:91:e6:57:05:42:fd:9c:73:
         7f:d2:77:a5:33:4d:24:15:bd:ec:4d:59:bb:70:c7:38:78:65:
         63:a4:55:3e:b5:29:d0:f2:76:36:63:e5:6d:cc:08:3c:7d:43:
         1d:77:9a:fe:15:bd:2f:82:c5:31:4a:90:0e:44:ca:67:89:8b:
         75:08:22:37:a0:28:0f:4e:2f:74:e1:6b:55:5b:b5:de:2c:8d:
         29:91:76:a9:4e:53:28:57:d8:33:46:4f:24:33:8f:64:a3:47:
         db:d6:9a:ad:13:0d:e3:b2:77:cb:20:46:af:49:b7:26:4e:97:
         35:49:02:c2:16:05:b7:d5:4a:79:d8:a9:a7:db:a4:81:30:77:
         d8:7d:4a:40:15:1a:23:fd:e1:84:ae:85:3c:e8:a6:6d:89:60:
         1d:af:73:63:89:40:9c:47:fb:f2:c0:a8:64:ea:fe:a0:78:f5:
         0e:63:e5:57:cd:09:cf:c3:20:2c:69:99:dc:0b:fa:09:e7:52:
         4f:fb:30:d1:89:3d:61:ae:8c:d1:6b:b7:4a:d6:d7:f5:e9:fb:
         ee:36:20:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZs8EDyTYBgY/RwOq1rOcDypMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2ZmY1NDFjZjM2NDE5M2EyYTAwYWRhMTQyNDRhY2QzNGMx
NDAzOGEwHhcNMjUxMjIwMTQwMDU1WhcNMjUxMjIxMTQwMDU1WjAzMTEwLwYDVQQD
Eyg3MDkxYjVhMzkzZTA1NmU0MTU4ZDcyZmFmMDAyYjM0MTViYzQzMmI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtvITfH+LQ2bA2r5tl98/UrGLLl+K
VXhJRoQtcg7+O72lOlQy5xsvQ6v/EWq6z3f3qDcNuRtQwaD0oiRjWCEy+AldUNfz
BGFaf+wXYW7A3vqKO4JHgr7f8nbLsDKLRHMti9RsdCSUiPogvcvqQpLJWG79hfga
XpaIUJQ9GXogvqpM2g9tgDju+agBoX7wbZSvqZ08b6c4waAuMsEYlzjyA/sydo8h
r5mEZptuXW8Z1V5QJdp1Zwcd+Egm/3p7Hc6sCEDCH7YCs3ZvHoZwcgMGQRpV/bAD
FYRkj/vd/FspgZQy46WILLYUg205bf+6W9mRvHob0BljS3lt3ccshbhskQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHCRtaOT4FbkFY1y+vACs0FbxDK3MB8GA1UdIwQY
MBaAFMb/VBzzZBk6KgCtoUJErNNMFAOKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveHY5VUhQTmtHVG9xQUsyaFFrU3MwMHdVQTRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC8zOWEwMjItZmFlZC00Mzc2LThiZTYt
MmE1ZTk4YWJkMWYzLzEveHY5VUhQTmtHVG9xQUsyaFFrU3MwMHdVQTRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC8zOWEwMjItZmFlZC00Mzc2LThiZTYtMmE1ZTk4YWJkMWYz
LzEveHY5VUhQTmtHVG9xQUsyaFFrU3MwMHdVQTRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHy8tkhCy
Z58NQ2NcNvR8eyg3CAtgeWFev0sRZIejktKdqXfNRXKH2aDG/5Ls+ZHmVwVC/Zxz
f9J3pTNNJBW97E1Zu3DHOHhlY6RVPrUp0PJ2NmPlbcwIPH1DHXea/hW9L4LFMUqQ
DkTKZ4mLdQgiN6AoD04vdOFrVVu13iyNKZF2qU5TKFfYM0ZPJDOPZKNH29aarRMN
47J3yyBGr0m3Jk6XNUkCwhYFt9VKedipp9ukgTB32H1KQBUaI/3hhK6FPOimbYlg
Ha9zY4lAnEf78sCoZOr+oHj1DmPlV80Jz8MgLGmZ3Av6CedST/sw0Yk9Ya6M0Wu3
StbX9en77jYghg==
-----END CERTIFICATE-----
Generated at Sat Dec 20 16:19:43 2025 by rpki-client