This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/2369b8-8d82-4157-b65f-163cd8bbf431/1/XNTi_CtB6FbbpbpiI1umQaDYG0g.mft
File:                     XNTi_CtB6FbbpbpiI1umQaDYG0g.mft (raw, json)
Hash identifier:          +2k03PbUryvtPVPLZCHgK16ieeip+D2YDxI6lmsblt4=
Subject key identifier:   18:BA:FA:46:BA:8C:7B:DB:2E:EB:04:86:79:CC:F7:A8:3D:75:A2:75
Authority key identifier: 5C:D4:E2:FC:2B:41:E8:56:DB:A5:BA:62:23:5B:A6:41:A0:D8:1B:48
Certificate issuer:       /CN=5cd4e2fc2b41e856dba5ba62235ba641a0d81b48
Certificate serial:       019B657A464ECBFBB5D1CABD37ACB6AF2AE6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XNTi_CtB6FbbpbpiI1umQaDYG0g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/2369b8-8d82-4157-b65f-163cd8bbf431/1/XNTi_CtB6FbbpbpiI1umQaDYG0g.mft
Manifest number:          1730
Signing time:             Sun 28 Dec 2025 15:01:10 +0000
Manifest this update:     Sun 28 Dec 2025 15:01:10 +0000
Manifest next update:     Mon 29 Dec 2025 15:01:10 +0000
Files and hashes:         1: FxBrUL7_KSfQrfruqQVZqRk7Rmk.roa (hash: 59wCR4yUkK5BTHNqIvhVY4CfjGm6wMEpZNvkPe7ynN4=)
                          2: XNTi_CtB6FbbpbpiI1umQaDYG0g.crl (hash: K/FlVheHCwM4RQPODZAPAB6sYWy0i3yTOKWVwFSAN0w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/2369b8-8d82-4157-b65f-163cd8bbf431/1/XNTi_CtB6FbbpbpiI1umQaDYG0g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/2369b8-8d82-4157-b65f-163cd8bbf431/1/XNTi_CtB6FbbpbpiI1umQaDYG0g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XNTi_CtB6FbbpbpiI1umQaDYG0g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 29 Dec 2025 15:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:65:7a:46:4e:cb:fb:b5:d1:ca:bd:37:ac:b6:af:2a:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5cd4e2fc2b41e856dba5ba62235ba641a0d81b48
        Validity
            Not Before: Dec 28 15:01:10 2025 GMT
            Not After : Dec 29 15:01:10 2025 GMT
        Subject: CN=18bafa46ba8c7bdb2eeb048679ccf7a83d75a275
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:23:c8:80:9b:77:8f:25:07:71:49:8b:87:b0:
                    c8:fa:be:93:da:19:48:a9:b4:3b:4e:9e:38:95:06:
                    9d:fe:ac:d7:2a:1a:4e:02:10:98:0c:46:bf:10:5d:
                    77:ed:fa:f5:25:fe:ac:5e:62:5f:ca:32:8d:1b:7b:
                    92:83:99:21:51:ec:cb:44:76:00:dd:50:04:6a:10:
                    8f:e3:01:7a:db:9b:3e:70:49:c4:27:8d:95:c9:b8:
                    78:40:e1:7d:e5:4e:e1:2f:35:5a:39:c7:53:2c:29:
                    d0:e2:47:6c:39:f4:0e:15:60:46:ce:fb:81:2a:00:
                    29:5f:35:5a:95:38:9c:2f:75:f6:fc:e7:96:77:90:
                    ab:17:a5:a4:73:15:56:55:fd:a2:6e:a5:d0:41:c9:
                    27:2b:62:38:a6:81:f9:b0:5c:1e:9e:19:11:ea:ba:
                    81:a3:dc:02:9e:c7:16:81:8c:50:0f:e7:03:af:99:
                    31:ed:0a:1a:75:c5:29:55:29:b1:8a:79:42:97:5a:
                    49:d6:66:da:6f:2b:c2:85:82:46:1f:ff:a0:94:e4:
                    88:5a:b0:d5:21:f9:5d:19:2b:d4:9f:dd:16:b6:43:
                    d5:2d:59:14:fb:8b:23:cd:31:65:c1:d0:53:ae:56:
                    17:31:72:06:f0:c8:ba:45:fa:aa:ac:bf:e9:56:94:
                    25:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:BA:FA:46:BA:8C:7B:DB:2E:EB:04:86:79:CC:F7:A8:3D:75:A2:75
            X509v3 Authority Key Identifier:
                keyid:5C:D4:E2:FC:2B:41:E8:56:DB:A5:BA:62:23:5B:A6:41:A0:D8:1B:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XNTi_CtB6FbbpbpiI1umQaDYG0g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/2369b8-8d82-4157-b65f-163cd8bbf431/1/XNTi_CtB6FbbpbpiI1umQaDYG0g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/2369b8-8d82-4157-b65f-163cd8bbf431/1/XNTi_CtB6FbbpbpiI1umQaDYG0g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:66:d3:a6:0c:1c:99:1d:e6:8c:5f:ed:c4:a0:ed:64:19:d7:
         e8:d4:f8:75:5d:f8:82:e7:af:2f:70:13:89:db:22:7d:ab:c7:
         15:9c:57:3a:e0:39:18:54:2d:f8:96:91:42:7a:87:58:5b:29:
         71:5b:56:08:4a:de:c2:07:0e:1a:71:fe:6a:49:6b:cf:06:dc:
         d9:09:83:85:4f:dd:73:4a:db:0a:78:b8:f5:a9:6d:54:93:31:
         69:a2:b7:25:c6:fe:5b:14:23:22:09:54:9f:2e:35:30:34:b6:
         cd:3b:c1:64:d2:83:66:b6:e6:36:e9:e7:c0:27:52:e2:53:86:
         f7:5d:33:27:66:b7:54:9e:e6:f7:d2:dd:71:77:65:a1:7f:48:
         73:98:35:ec:6c:a2:78:d1:ec:5d:00:87:60:f8:40:2e:ac:60:
         7a:29:34:0f:68:29:8c:9a:9d:16:81:54:42:82:2f:b7:72:9c:
         d4:4a:e3:61:cc:f3:38:b9:53:d4:34:fd:70:9e:35:c5:7f:d8:
         4a:0b:7e:b9:3d:37:9d:99:8f:2e:9b:5f:6f:64:2e:e3:92:0b:
         c5:07:af:b7:0f:1a:47:ea:cb:72:ee:8f:d5:21:85:05:96:58:
         e0:4a:93:00:ee:94:0b:d5:38:61:53:bf:cc:f6:20:17:f2:5b:
         4f:25:22:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 29 00:53:29 2025 by rpki-client