This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/e348f1-bb70-4b34-be12-219e79d84e43/1/xMwC-Pp0zw2oHozilD6n-e0qhfQ.mft
File:                     xMwC-Pp0zw2oHozilD6n-e0qhfQ.mft (raw, json)
Hash identifier:          3fotsmDsiadmhRa0waQ8kE5ZPf9L4z5NEpoaiuNkJWY=
Subject key identifier:   FB:B3:4D:E5:AE:27:9F:15:57:96:65:C0:07:AA:57:50:07:0F:66:84
Authority key identifier: C4:CC:02:F8:FA:74:CF:0D:A8:1E:8C:E2:94:3E:A7:F9:ED:2A:85:F4
Certificate issuer:       /CN=c4cc02f8fa74cf0da81e8ce2943ea7f9ed2a85f4
Certificate serial:       019B5FAF9B9FB38D191D8DC73B4493170B06
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xMwC-Pp0zw2oHozilD6n-e0qhfQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/e348f1-bb70-4b34-be12-219e79d84e43/1/xMwC-Pp0zw2oHozilD6n-e0qhfQ.mft
Manifest number:          0892
Signing time:             Sat 27 Dec 2025 12:01:42 +0000
Manifest this update:     Sat 27 Dec 2025 12:01:42 +0000
Manifest next update:     Sun 28 Dec 2025 12:01:42 +0000
Files and hashes:         1: Aoo5pP4SL3hcDLyAxdYyQ03odMQ.roa (hash: gnOrhL51cXDCcbQfIiGI9Yhz0bbwGaTW30bKBViHRo0=)
                          2: EEaNcgsaMR5H4thhS3cGx36KL_o.roa (hash: vkGJSlE6cWd0O4qs1ZUPczrNu5F/ToV9OcI6aqWoEJI=)
                          3: xMwC-Pp0zw2oHozilD6n-e0qhfQ.crl (hash: hm0aH/+86pzjPoP3VVBk+07O8Et9xyOmPEXwqYNZqFo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/e348f1-bb70-4b34-be12-219e79d84e43/1/xMwC-Pp0zw2oHozilD6n-e0qhfQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/e348f1-bb70-4b34-be12-219e79d84e43/1/xMwC-Pp0zw2oHozilD6n-e0qhfQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xMwC-Pp0zw2oHozilD6n-e0qhfQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 28 Dec 2025 09:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:5f:af:9b:9f:b3:8d:19:1d:8d:c7:3b:44:93:17:0b:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4cc02f8fa74cf0da81e8ce2943ea7f9ed2a85f4
        Validity
            Not Before: Dec 27 12:01:42 2025 GMT
            Not After : Dec 28 12:01:42 2025 GMT
        Subject: CN=fbb34de5ae279f15579665c007aa5750070f6684
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:83:27:27:ef:4f:23:93:bb:d1:7e:6f:1f:d0:
                    d6:3e:a6:49:9d:ca:cd:cf:06:18:a1:61:75:29:83:
                    67:ba:c3:94:df:ed:27:00:03:79:b9:9f:56:6a:09:
                    ca:51:fd:ba:24:86:a2:77:6b:71:74:60:d1:7a:c2:
                    82:57:80:8d:fb:bf:7e:fa:cb:46:b2:d6:83:b4:22:
                    a8:34:5a:a0:4d:09:14:f4:30:bd:c6:e9:f4:ab:f1:
                    fa:1d:51:b6:f7:bb:e5:87:9a:38:fc:f6:30:4b:c7:
                    a1:43:ea:cf:ae:8e:f3:29:44:a3:5f:0a:bf:eb:12:
                    37:b6:7d:8e:fc:0a:a4:14:0c:7c:67:89:f0:07:c0:
                    1d:0b:d9:67:da:23:34:3f:07:02:d5:b3:24:d1:a6:
                    5a:88:7f:ef:3a:0a:64:e1:c2:e1:e5:f2:51:02:43:
                    ad:46:19:d0:04:bd:7c:e5:74:40:b1:57:12:73:28:
                    5b:45:b1:26:c8:29:db:3c:63:e3:f0:ac:85:28:32:
                    ea:9b:2a:08:43:bb:c0:46:73:20:75:87:f1:94:3a:
                    c5:1a:d0:f6:45:dd:62:8c:3e:3c:40:11:47:6e:0f:
                    a1:3b:9a:3d:ba:c6:86:07:02:d0:61:0b:83:10:f1:
                    9b:c6:27:ff:8b:15:ab:ea:67:89:98:51:4f:73:e4:
                    73:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:B3:4D:E5:AE:27:9F:15:57:96:65:C0:07:AA:57:50:07:0F:66:84
            X509v3 Authority Key Identifier:
                keyid:C4:CC:02:F8:FA:74:CF:0D:A8:1E:8C:E2:94:3E:A7:F9:ED:2A:85:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xMwC-Pp0zw2oHozilD6n-e0qhfQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e348f1-bb70-4b34-be12-219e79d84e43/1/xMwC-Pp0zw2oHozilD6n-e0qhfQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e348f1-bb70-4b34-be12-219e79d84e43/1/xMwC-Pp0zw2oHozilD6n-e0qhfQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:98:d1:8f:1c:7a:5e:6d:03:05:da:51:19:49:16:0b:a5:22:
         6d:66:7a:8a:f9:5f:5c:ea:76:4d:d0:f7:f9:dc:50:48:23:c5:
         fc:42:67:09:72:31:b2:c4:79:4e:22:0a:90:62:24:7f:18:fb:
         39:7a:37:ab:5b:16:fe:8c:a3:6c:9b:dc:1c:aa:32:89:69:52:
         d4:ff:e2:6d:95:65:c9:97:f5:e0:ec:84:b9:ee:17:36:9a:7c:
         5c:20:ae:9c:08:54:82:01:ba:fb:64:cb:be:64:ab:da:ea:5c:
         d6:76:71:57:77:00:13:53:5e:1b:6e:15:b4:69:6d:26:40:8e:
         fd:35:47:f5:b8:aa:e2:16:3f:3e:92:95:48:d2:20:cd:9d:ce:
         f6:b2:bc:48:b7:84:18:da:74:c2:85:91:63:92:52:3b:9d:70:
         a8:4d:5a:b1:4d:a2:d0:73:83:b9:6b:fc:36:a1:b3:bd:d7:78:
         43:aa:c7:cd:d5:c7:fc:07:ba:f3:c8:4f:8b:b4:0a:d1:96:f5:
         f8:ff:ef:7d:3e:49:fa:f0:eb:9a:c0:40:10:60:0a:a6:14:73:
         ca:d1:d2:70:76:c0:84:81:ff:55:24:74:e7:aa:bf:ee:f9:3f:
         cf:2a:3b:df:0d:5c:fd:5a:18:1f:56:0c:59:59:50:3f:b2:7a:
         70:3a:60:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 27 17:37:01 2025 by rpki-client