This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b8072f-f355-4dd6-9393-6a65d8041803/1/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.mft
File:                     XlHBk_t_8XRqIVxBgX9Q7LpaWBo.mft (raw, json)
Hash identifier:          nY1E9xYarfH/2i7w1BaTg4s3CCGGSqtIM3nDLScykSY=
Subject key identifier:   0C:13:CA:C6:96:05:A6:DE:75:BF:6F:60:CC:63:8D:A3:93:B8:AE:36
Authority key identifier: 5E:51:C1:93:FB:7F:F1:74:6A:21:5C:41:81:7F:50:EC:BA:5A:58:1A
Certificate issuer:       /CN=5e51c193fb7ff1746a215c41817f50ecba5a581a
Certificate serial:       019B378E6A30DD78DC11C987C137DC93354D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/b8072f-f355-4dd6-9393-6a65d8041803/1/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.mft
Manifest number:          11E9
Signing time:             Fri 19 Dec 2025 17:00:38 +0000
Manifest this update:     Fri 19 Dec 2025 17:00:38 +0000
Manifest next update:     Sat 20 Dec 2025 17:00:38 +0000
Files and hashes:         1: 5VZo9ps8QpZQVg7UKzMc-AqG1QE.roa (hash: TKaIjMaFIApeBa5ALjBN5UaQP2YQ3Ed/RXbYDHLeIEE=)
                          2: XlHBk_t_8XRqIVxBgX9Q7LpaWBo.crl (hash: mE7ztN6h/2U74ve5B6f1YnawcjxMV5VBnMoFxFuTFEA=)
                          3: yRPDQIAZVw5i0tWgAaueJZEEypk.roa (hash: GetSkeoUTrwODJqlM/GHRD8LuW8qqin0jorMiGWv6QI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/b8072f-f355-4dd6-9393-6a65d8041803/1/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/b8072f-f355-4dd6-9393-6a65d8041803/1/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Dec 2025 17:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:37:8e:6a:30:dd:78:dc:11:c9:87:c1:37:dc:93:35:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e51c193fb7ff1746a215c41817f50ecba5a581a
        Validity
            Not Before: Dec 19 17:00:38 2025 GMT
            Not After : Dec 20 17:00:38 2025 GMT
        Subject: CN=0c13cac69605a6de75bf6f60cc638da393b8ae36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:0f:e8:b6:85:fb:61:88:6a:b0:83:11:20:02:
                    86:f4:00:a0:fa:37:a5:b7:66:44:62:ef:1a:40:fb:
                    ab:8e:ed:f0:6c:4e:3d:e1:a9:76:a7:aa:09:39:b5:
                    bb:c0:a2:33:88:36:3b:a7:c0:fb:9e:f8:20:7b:d0:
                    86:08:04:72:ab:16:5f:74:0d:1e:a3:2e:6a:e1:14:
                    d5:f4:13:fb:a3:1c:c1:c7:d8:7d:d4:75:1c:f2:29:
                    61:1c:2a:e3:d1:44:bb:2c:4d:e9:5c:9b:91:f1:a9:
                    72:34:c6:87:c7:61:76:ff:2f:9d:19:41:f2:ba:40:
                    41:fa:65:c3:f8:39:f0:94:8b:a4:14:a3:b8:19:b1:
                    e9:8e:c9:96:4c:23:ca:80:d5:c9:7d:09:6f:6f:83:
                    b2:98:ac:37:af:25:0b:38:10:07:5d:b4:25:58:d9:
                    ca:6c:4a:cd:2a:a3:93:3c:2c:e3:11:de:1f:62:a2:
                    67:2d:09:ca:ba:4c:be:49:0d:7e:03:1b:2d:89:30:
                    50:3e:4b:fe:91:a9:0f:5e:e4:37:7a:cd:29:1d:9a:
                    45:14:0b:6f:30:fc:6b:7c:13:9d:88:7d:a7:8e:8c:
                    9a:64:82:74:cf:3e:67:e5:f5:59:68:3b:da:ab:c5:
                    13:2d:2b:f2:e2:51:98:4d:f2:b9:e3:b3:43:14:58:
                    4e:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:13:CA:C6:96:05:A6:DE:75:BF:6F:60:CC:63:8D:A3:93:B8:AE:36
            X509v3 Authority Key Identifier:
                keyid:5E:51:C1:93:FB:7F:F1:74:6A:21:5C:41:81:7F:50:EC:BA:5A:58:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b8072f-f355-4dd6-9393-6a65d8041803/1/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b8072f-f355-4dd6-9393-6a65d8041803/1/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:ae:b2:df:78:ef:4d:4c:fe:73:67:8d:b9:89:de:60:ca:42:
         53:b2:fb:6c:9b:26:ce:2a:34:e2:57:9f:51:2a:8b:f9:d8:df:
         04:70:7f:a6:d4:b9:fe:87:19:30:c0:a2:16:37:c0:64:c7:de:
         f5:23:e0:13:a1:e2:eb:37:e1:c1:f9:ea:0d:ea:49:d8:43:3f:
         73:1a:71:45:02:99:1b:f9:73:e6:f7:da:26:11:92:cb:01:fc:
         a6:bd:97:d9:30:c4:e9:ce:a2:39:02:8e:72:9f:92:26:a9:73:
         58:b0:fa:cd:8c:30:b9:82:fd:cc:8e:db:3a:e2:c5:46:7c:a1:
         eb:65:c1:f0:c8:d7:bd:f0:08:85:ba:c1:b0:c6:2d:83:b0:14:
         d5:36:7c:dc:98:75:e3:55:7b:f3:d9:0b:a3:09:fd:12:0f:88:
         38:ac:c7:4b:3f:8c:1d:90:65:f2:32:c1:a5:c4:b9:3f:47:b7:
         4d:20:3d:33:d1:54:1d:47:fb:5a:09:65:ef:d9:da:05:07:fe:
         1d:6c:e0:d2:80:1e:65:ba:97:02:a0:bf:44:50:09:0d:52:e8:
         14:7c:68:11:04:e7:fa:d1:51:4d:57:6d:a7:66:af:38:0d:91:
         eb:bc:b2:f9:a2:d1:7f:c8:b1:ee:ce:68:1a:af:ff:c6:47:a5:
         c7:11:cb:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 02:51:42 2025 by rpki-client