This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/07fed6-00b3-4cea-a74e-beeebedffc95/1/xQyX65uvVCj1D0XTMDV2eLc-Bhw.mft
File:                     xQyX65uvVCj1D0XTMDV2eLc-Bhw.mft (raw, json)
Hash identifier:          Wm0zBHRJgihlO37sPwSIN2KEDcM3ONXXtk55/YM3K6Q=
Subject key identifier:   C2:70:83:2A:56:82:04:79:66:C7:70:2B:9F:8B:F8:0D:9E:2F:CC:60
Authority key identifier: C5:0C:97:EB:9B:AF:54:28:F5:0F:45:D3:30:35:76:78:B7:3E:06:1C
Certificate issuer:       /CN=c50c97eb9baf5428f50f45d330357678b73e061c
Certificate serial:       019B3CEBC7D71488E57D14EDEFBC2068378E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xQyX65uvVCj1D0XTMDV2eLc-Bhw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/07fed6-00b3-4cea-a74e-beeebedffc95/1/xQyX65uvVCj1D0XTMDV2eLc-Bhw.mft
Manifest number:          178C
Signing time:             Sat 20 Dec 2025 18:00:43 +0000
Manifest this update:     Sat 20 Dec 2025 18:00:43 +0000
Manifest next update:     Sun 21 Dec 2025 18:00:43 +0000
Files and hashes:         1: 8lw7rY_Ajlikule3WA_Zgmg5cis.roa (hash: uoCLZlitJLa4D0er3NIiIxLiXBDaARcafRxsb7h6IVY=)
                          2: UwWcIaqQRE1DQREqUyPP2KFZpkQ.roa (hash: HnBuQV/6MGAsdCkHVntRtFAvZeGR4LaMonjb9Ez79gg=)
                          3: Ymnq870-hTRbzxW7QHa4AoItEis.roa (hash: EVgp5rZ0myk3IS//+2PgncuHs2ECv2APPwVwVowLkug=)
                          4: xQyX65uvVCj1D0XTMDV2eLc-Bhw.crl (hash: a0TgKppqPWkqK6cD/v0RflSIVVnQhL7bbVH1yKQVRKc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/07fed6-00b3-4cea-a74e-beeebedffc95/1/xQyX65uvVCj1D0XTMDV2eLc-Bhw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/07fed6-00b3-4cea-a74e-beeebedffc95/1/xQyX65uvVCj1D0XTMDV2eLc-Bhw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xQyX65uvVCj1D0XTMDV2eLc-Bhw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 15:46:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3c:eb:c7:d7:14:88:e5:7d:14:ed:ef:bc:20:68:37:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c50c97eb9baf5428f50f45d330357678b73e061c
        Validity
            Not Before: Dec 20 18:00:43 2025 GMT
            Not After : Dec 21 18:00:43 2025 GMT
        Subject: CN=c270832a5682047966c7702b9f8bf80d9e2fcc60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:98:fd:16:90:47:fa:e1:6e:71:3a:ee:e0:1d:
                    33:a5:90:8e:35:7f:ba:0f:d2:47:a1:30:1f:70:a9:
                    84:c7:b8:6e:5f:e9:88:41:97:73:01:b7:22:f2:cc:
                    49:f2:48:02:22:5e:22:b7:c3:c5:19:44:8e:f3:60:
                    01:41:7b:c6:d6:f4:ed:de:9c:54:95:2b:9c:80:29:
                    e8:38:db:a6:90:a5:d8:21:77:6d:1a:7a:70:ac:40:
                    65:a9:83:d3:cd:3e:50:c8:23:95:8e:b1:f1:0e:92:
                    a7:84:3e:7f:cc:13:bf:ec:92:0d:da:6c:64:1f:7a:
                    cd:7f:af:e7:9c:2a:0b:d6:72:05:c2:57:14:aa:e6:
                    dd:ef:a7:21:ab:9d:9f:a9:7a:d0:26:82:6b:4f:5d:
                    e1:e9:38:0a:1e:9c:53:b6:73:0d:4e:2f:5a:a6:12:
                    e1:a4:0f:7a:f9:c6:de:90:09:1a:e2:3f:54:38:23:
                    94:b2:2d:82:15:a6:56:b5:1c:e7:ae:a5:a9:cf:6f:
                    9a:1e:50:11:77:a5:47:9c:de:1c:e1:e7:44:cd:3a:
                    09:20:84:f5:a2:93:61:56:aa:1c:c0:84:23:25:2b:
                    ed:ac:4b:37:f5:6e:28:3a:95:51:c8:68:1d:61:b6:
                    ef:86:0f:be:85:71:cf:81:25:00:5e:ab:1d:73:0e:
                    2d:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:70:83:2A:56:82:04:79:66:C7:70:2B:9F:8B:F8:0D:9E:2F:CC:60
            X509v3 Authority Key Identifier:
                keyid:C5:0C:97:EB:9B:AF:54:28:F5:0F:45:D3:30:35:76:78:B7:3E:06:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xQyX65uvVCj1D0XTMDV2eLc-Bhw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/07fed6-00b3-4cea-a74e-beeebedffc95/1/xQyX65uvVCj1D0XTMDV2eLc-Bhw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/07fed6-00b3-4cea-a74e-beeebedffc95/1/xQyX65uvVCj1D0XTMDV2eLc-Bhw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:95:27:38:76:63:28:7a:7d:cc:a3:82:ea:1d:b9:9e:61:e3:
         af:cf:78:e4:35:f2:5e:4f:eb:24:a7:79:a0:7b:1c:af:d8:07:
         bb:bb:03:51:5e:5f:26:f7:42:51:fe:0a:2b:b7:d7:3a:35:0e:
         ef:c1:6d:43:c1:67:fb:a1:9f:70:77:c0:e7:8c:d7:04:f4:0c:
         72:5c:9b:a1:84:7c:2b:52:23:47:23:18:1f:09:40:82:24:6b:
         26:a5:54:02:ef:5d:98:99:a5:ff:30:2c:6f:37:c6:02:e3:a6:
         ad:32:8b:d9:4f:26:e3:cb:29:05:84:a3:9b:ad:92:9c:43:87:
         07:d0:09:07:3e:23:c2:95:38:a7:b3:28:9e:79:c0:62:08:d0:
         6b:bd:2d:c8:47:f6:68:e6:b8:69:ed:70:14:26:13:e1:3f:03:
         38:5c:27:a7:70:16:2e:d3:52:02:a4:62:9e:1d:9b:b0:a9:60:
         c2:04:e3:ac:92:3e:c9:b8:7b:08:b3:3b:0e:dc:42:c5:8b:0e:
         0c:77:18:05:02:3a:60:d2:0d:93:7a:17:c9:0e:dc:94:f9:e9:
         09:f7:e0:62:fc:78:bd:ed:be:4a:c6:c1:87:a8:7e:13:2d:ae:
         aa:42:14:c9:e3:06:fd:1b:b1:63:29:92:c4:f6:78:d6:9e:59:
         2c:8f:8d:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 20:23:45 2025 by rpki-client