This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/e5e53a-dfe8-4e99-85a8-1e0367c07d46/1/Xxdo4m_0-aKopW2k3Lfh7AwuSpM.mft
File:                     Xxdo4m_0-aKopW2k3Lfh7AwuSpM.mft (raw, json)
Hash identifier:          M+tsirx3EmbcZP2ZnV4D+/VQLuc6AKy4R2tjmHOFY5o=
Subject key identifier:   8E:CA:51:48:EB:B0:37:0E:31:64:4B:E8:79:21:A6:38:8A:4C:DB:E9
Authority key identifier: 5F:17:68:E2:6F:F4:F9:A2:A8:A5:6D:A4:DC:B7:E1:EC:0C:2E:4A:93
Certificate issuer:       /CN=5f1768e26ff4f9a2a8a56da4dcb7e1ec0c2e4a93
Certificate serial:       019B300C1E854D2B9B9B8A9EEBD9ECB404D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Xxdo4m_0-aKopW2k3Lfh7AwuSpM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/e5e53a-dfe8-4e99-85a8-1e0367c07d46/1/Xxdo4m_0-aKopW2k3Lfh7AwuSpM.mft
Manifest number:          1781
Signing time:             Thu 18 Dec 2025 06:00:59 +0000
Manifest this update:     Thu 18 Dec 2025 06:00:59 +0000
Manifest next update:     Fri 19 Dec 2025 06:00:59 +0000
Files and hashes:         1: Xxdo4m_0-aKopW2k3Lfh7AwuSpM.crl (hash: jW+m70IkerSJlzhDhwU75FWz4Ph9+f+fXk60FDWSH3U=)
                          2: pKpK0fpxNLfPfRjxRzWWa3fKR3w.roa (hash: 8dKtN3Slnvd8pwQgjMVGY+0Hoa2j4W49VOwrSD+22e4=)
                          3: pzab-y4S6g4DZwEwFQWsy3DRkOI.roa (hash: hKiOLND56jGXA2Q2u9O0L+DdBo1zxKBcuwX1QXw1GUc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/e5e53a-dfe8-4e99-85a8-1e0367c07d46/1/Xxdo4m_0-aKopW2k3Lfh7AwuSpM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/e5e53a-dfe8-4e99-85a8-1e0367c07d46/1/Xxdo4m_0-aKopW2k3Lfh7AwuSpM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Xxdo4m_0-aKopW2k3Lfh7AwuSpM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 19 Dec 2025 04:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:30:0c:1e:85:4d:2b:9b:9b:8a:9e:eb:d9:ec:b4:04:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f1768e26ff4f9a2a8a56da4dcb7e1ec0c2e4a93
        Validity
            Not Before: Dec 18 06:00:59 2025 GMT
            Not After : Dec 19 06:00:59 2025 GMT
        Subject: CN=8eca5148ebb0370e31644be87921a6388a4cdbe9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:55:bd:31:e3:fc:75:30:5f:f3:82:44:75:63:
                    9e:2f:66:ee:3d:2b:9d:8f:21:9c:f9:07:64:8d:ad:
                    98:1d:20:f9:99:e7:48:a2:3b:a8:97:4d:7a:d9:ea:
                    06:ef:0c:f9:a5:04:82:2d:76:69:8b:fc:90:4e:aa:
                    40:94:9a:fa:3c:72:ac:2b:ba:3b:fb:36:f4:af:a2:
                    79:6d:fc:79:db:73:c8:91:13:af:2f:af:44:f0:5c:
                    4e:aa:71:c3:b1:4a:a8:be:00:5a:1a:4f:a8:65:ca:
                    21:20:22:26:c5:c3:06:cd:58:6e:0d:a0:2b:97:1e:
                    d5:5e:63:73:e8:bd:99:04:9a:fa:14:d2:54:83:1b:
                    48:71:36:26:fd:6c:17:ab:45:f8:b4:f2:33:31:2e:
                    1e:f7:78:c7:1e:60:cd:be:e4:8e:dd:ba:03:28:0e:
                    a3:30:5c:8b:31:4e:5c:ad:9a:22:8d:99:ef:e7:eb:
                    8b:06:fc:5e:f0:3a:72:6f:a6:d0:6f:1a:11:3b:ca:
                    66:fc:80:5b:2c:e2:87:50:b4:ae:5c:ab:96:bd:85:
                    52:e9:d0:7e:7c:9c:f1:c6:52:8d:5f:0e:c2:c2:59:
                    8e:ac:9e:d2:34:ad:d1:6f:bb:e4:c4:c8:59:56:cb:
                    db:44:40:8a:c8:e4:c3:6a:23:74:74:6d:e5:e5:2b:
                    64:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:CA:51:48:EB:B0:37:0E:31:64:4B:E8:79:21:A6:38:8A:4C:DB:E9
            X509v3 Authority Key Identifier:
                keyid:5F:17:68:E2:6F:F4:F9:A2:A8:A5:6D:A4:DC:B7:E1:EC:0C:2E:4A:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xxdo4m_0-aKopW2k3Lfh7AwuSpM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/e5e53a-dfe8-4e99-85a8-1e0367c07d46/1/Xxdo4m_0-aKopW2k3Lfh7AwuSpM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/e5e53a-dfe8-4e99-85a8-1e0367c07d46/1/Xxdo4m_0-aKopW2k3Lfh7AwuSpM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:5c:5d:9c:d4:81:d3:79:d1:79:84:ff:cc:8a:93:7f:31:4f:
         50:79:a1:ab:e0:23:91:6e:f2:43:40:fc:63:4d:b3:9e:4d:15:
         6a:10:5a:4a:d1:8e:c3:4e:16:eb:a4:e3:2a:fc:4e:42:ed:49:
         08:8a:f2:45:61:14:9f:f0:51:1a:89:0c:01:5e:f1:88:b9:79:
         15:29:db:58:b3:16:4e:28:e5:f8:f0:a7:2a:91:2e:30:3d:f8:
         44:a2:68:bb:66:64:f7:44:3b:9f:eb:7f:d6:0e:91:a9:c1:48:
         52:c5:0a:1c:30:94:93:e8:7d:ba:cd:25:73:e2:91:5d:98:86:
         47:31:f6:bc:6e:42:68:be:27:dd:d8:0a:3b:43:6b:a9:86:fa:
         ec:c3:97:69:bd:25:14:04:4d:c0:4a:64:4c:5c:fa:8e:77:76:
         64:50:47:38:75:6b:9e:1e:fd:2f:b0:fd:32:d7:dd:1e:ba:52:
         02:99:4c:31:c4:3c:e5:f1:60:d9:d1:28:02:63:c1:75:f2:ef:
         c2:3c:a6:16:45:61:4a:9c:74:a2:09:12:2c:3c:13:be:f0:14:
         74:1b:b9:e9:a4:10:01:ce:9d:1c:1e:bf:2b:87:de:33:ad:5b:
         9f:64:3e:0a:12:66:e1:0d:5b:ea:fa:87:6f:52:57:f2:9c:9b:
         3d:6d:6b:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZswDB6FTSubm4qe69nstATRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmMTc2OGUyNmZmNGY5YTJhOGE1NmRhNGRjYjdlMWVjMGMy
ZTRhOTMwHhcNMjUxMjE4MDYwMDU5WhcNMjUxMjE5MDYwMDU5WjAzMTEwLwYDVQQD
Eyg4ZWNhNTE0OGViYjAzNzBlMzE2NDRiZTg3OTIxYTYzODhhNGNkYmU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1FW9MeP8dTBf84JEdWOeL2buPSud
jyGc+Qdkja2YHSD5medIojuol0162eoG7wz5pQSCLXZpi/yQTqpAlJr6PHKsK7o7
+zb0r6J5bfx523PIkROvL69E8FxOqnHDsUqovgBaGk+oZcohICImxcMGzVhuDaAr
lx7VXmNz6L2ZBJr6FNJUgxtIcTYm/WwXq0X4tPIzMS4e93jHHmDNvuSO3boDKA6j
MFyLMU5crZoijZnv5+uLBvxe8Dpyb6bQbxoRO8pm/IBbLOKHULSuXKuWvYVS6dB+
fJzxxlKNXw7CwlmOrJ7SNK3Rb7vkxMhZVsvbRECKyOTDaiN0dG3l5StkWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI7KUUjrsDcOMWRL6HkhpjiKTNvpMB8GA1UdIwQY
MBaAFF8XaOJv9PmiqKVtpNy34ewMLkqTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHhkbzRtXzAtYUtvcFcyazNMZmg3QXd1U3BNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9lNWU1M2EtZGZlOC00ZTk5LTg1YTgt
MWUwMzY3YzA3ZDQ2LzEvWHhkbzRtXzAtYUtvcFcyazNMZmg3QXd1U3BNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS9lNWU1M2EtZGZlOC00ZTk5LTg1YTgtMWUwMzY3YzA3ZDQ2
LzEvWHhkbzRtXzAtYUtvcFcyazNMZmg3QXd1U3BNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiFxdnNSB
03nReYT/zIqTfzFPUHmhq+AjkW7yQ0D8Y02znk0VahBaStGOw04W66TjKvxOQu1J
CIryRWEUn/BRGokMAV7xiLl5FSnbWLMWTijl+PCnKpEuMD34RKJou2Zk90Q7n+t/
1g6RqcFIUsUKHDCUk+h9us0lc+KRXZiGRzH2vG5CaL4n3dgKO0NrqYb67MOXab0l
FARNwEpkTFz6jnd2ZFBHOHVrnh79L7D9MtfdHrpSAplMMcQ85fFg2dEoAmPBdfLv
wjymFkVhSpx0ogkSLDwTvvAUdBu56aQQAc6dHB6/K4feM61bn2Q+ChJm4Q1b6vqH
b1JX8pybPW1r1A==
-----END CERTIFICATE-----
Generated at Thu Dec 18 09:52:02 2025 by rpki-client