This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.mft
File:                     xlodocsckgri-bdIJw_e2HN6kYQ.mft (raw, json)
Hash identifier:          YtZtk/5HQAuEdBkWvlhsHDxgOHbzDyH31iheGgfgT/8=
Subject key identifier:   C6:EF:C7:5D:61:B3:88:E4:D2:27:80:A7:49:1D:02:0D:58:F9:B9:4F
Authority key identifier: C6:5A:1D:A1:CB:1C:92:0A:E2:F9:B7:48:27:0F:DE:D8:73:7A:91:84
Certificate issuer:       /CN=c65a1da1cb1c920ae2f9b748270fded8737a9184
Certificate serial:       019AF209A2D385735859245902FF15915690
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.mft
Manifest number:          B9
Signing time:             Sat 06 Dec 2025 05:01:48 +0000
Manifest this update:     Sat 06 Dec 2025 05:01:48 +0000
Manifest next update:     Sun 07 Dec 2025 05:01:48 +0000
Files and hashes:         1: 1RmyaRsZXJPfoBlY2E0l9Y54_ZE.roa (hash: whorgJaT5hcUDFPDkYQ9eOt8h5cYDwAEftEPphvS28w=)
                          2: 2EC-H7VkPWi86CQBdfT-ccJ70gs.roa (hash: uRkyuU1j5BoKPUyqyJVVVXMT4xxmtGQMXPAOX+G1tgA=)
                          3: 6posoPXsPfdouDKLy145i8ANfKA.roa (hash: NU4GuqMh1vLiMyOmJa+XaD8bTTXs/eW9FEQvrEdIOTI=)
                          4: 8IbY418lGCc-3Moz0-nHHKuh4LA.roa (hash: WZ59TYG9fVS7gQMAnCKCSShz/vEQxOQYrZNnjsR3v8c=)
                          5: BhhaVZH_zLgw-7V5KrucZChwwhw.roa (hash: SXHDmlGIby8EBzXCdDnMzBEiNJv0FwbWBrNb1gd2xxM=)
                          6: E3BF9qCuTjkDJHi7Un7qQPL-vLw.roa (hash: FG5kEU8xILi0ZymFCPhW2otQY+i3ggNhpgiTX1Ta3o4=)
                          7: Eyl6D1p4n0VHPUyhqtf9q1r7P-U.roa (hash: AJljk4RDZMGUwTiNJjyxL7FYd8yG0UHEsMYJD6D2QC4=)
                          8: OL7bdyUVEQ9n74sRfjL-q6YMa-A.roa (hash: 6ACUpv6Ry/cr+OGcfoflzNUyyCZ1Fe7hIcPBGSoFNQI=)
                          9: ON9oJk-G7vGxcsUv8cq5LVs7MV0.roa (hash: ifavu6O7cNZknOzLI2bfFtyPKDxeUxAmdy+zZOwFV+U=)
                          10: ROsXNePylLUlvq2qZOm58Y0ayN0.roa (hash: SxIuezIqYo8ZloMUFGcUDY2o5JpRNOwLF2WY4gvLvzM=)
                          11: Va_brvnCMoUbz2GT2ZGvQQW66JM.roa (hash: vuqtEPuRh9TElgPQvR/bhHGqA4JQRphVL6kQTwCzViw=)
                          12: ZeIEHartq1R0GkkGrxvb5PkAMj8.roa (hash: TfsCvICUSIpt9OVTvUrF6OVsZKt7DLmusohzrsRT1kU=)
                          13: _qyyRLxurgk6rJD6W1RlRxCToGY.roa (hash: mR70pAUlQ+v2tBDIObfNMRRXZIhEUqOChrzj0zRocgg=)
                          14: e42_tssaIVLe2qU03gpJJ9WmZ-8.roa (hash: HsoX3a0PGn4DQ5Zy9q0FAnJ8le9CP1y1Mv/TnESepXg=)
                          15: eYCHRLuZHohv9_elQZkZEDwTIFE.roa (hash: Xu2j6PwYPuvRMnBVmkW9EJGXUdgFDzkW8W0KTcLIrpM=)
                          16: hX9odDsGFuFnnKSS_HPeYf8nifQ.roa (hash: tCvwmyh4f6LBYZDRogZaV5mJIRegnLHVdecpsvY0yfA=)
                          17: lqkoAhBHnz4PnaeZdfQuwjH84dI.roa (hash: 2HvqZsQNc03tvWHYsADUafvvFzDg/zqZnTmsgSmZAX8=)
                          18: nv5NXC0iSgOFubAs0kRpHi5dONQ.roa (hash: 8CHCvQtpT4uuc2prqbNwS7XX6gimw81CfcWs1XTVJdQ=)
                          19: ol-Y_0fg28kXv6MSMcfAQCiCt_g.roa (hash: aHvInmconhYR4tqWGenbPeXLmp/lZiFzwklIQitBMss=)
                          20: t-enIXOteL4Tb6ASAqLBu_uGOqg.roa (hash: jCzlshzN/llUBvM2NR0fW5pjqVj+NHh+jZvBOT5NQjE=)
                          21: xlodocsckgri-bdIJw_e2HN6kYQ.crl (hash: YGH+0OtdiKRt9E2EltqLemLtbU3hodCPZhxeqMocH6Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:09:a2:d3:85:73:58:59:24:59:02:ff:15:91:56:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c65a1da1cb1c920ae2f9b748270fded8737a9184
        Validity
            Not Before: Dec  6 05:01:48 2025 GMT
            Not After : Dec  7 05:01:48 2025 GMT
        Subject: CN=c6efc75d61b388e4d22780a7491d020d58f9b94f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:1f:f5:17:1f:ba:dd:e8:71:9d:c8:62:ab:7e:
                    76:8a:e7:93:57:6f:54:94:eb:83:da:0d:0b:a9:cf:
                    68:56:3f:4a:51:a8:31:14:3d:46:10:17:7a:68:cf:
                    0c:b6:b5:9d:75:af:c3:6a:b0:63:9b:fb:a8:b9:4d:
                    3b:ae:d5:25:6c:4e:81:75:08:c0:f7:c5:6c:e6:5e:
                    03:91:46:e2:37:f5:60:0c:0f:18:af:fe:f7:3e:9d:
                    67:a4:3f:5c:64:ce:4d:b8:a1:8b:da:ea:c1:52:76:
                    59:f1:5a:fe:88:4b:6c:fc:db:44:3d:25:b0:33:9d:
                    66:8b:cd:b1:d1:0d:6e:a4:f1:90:4a:e1:99:77:39:
                    e4:e9:80:a2:97:e8:e6:48:25:a6:37:84:4a:ce:92:
                    4c:4b:54:db:14:00:5b:ea:ab:76:c0:03:b1:6d:91:
                    f0:81:ff:b9:fa:50:40:68:8e:de:96:95:d7:47:38:
                    db:e9:4d:dc:f5:7e:7f:d2:1d:9f:5e:44:9e:28:b8:
                    98:45:6b:54:05:88:1b:18:8c:69:4a:e9:d2:f1:ca:
                    41:b6:e2:d0:1a:a6:c4:32:80:94:d3:91:9b:ba:65:
                    da:60:af:b5:45:39:24:ef:6a:a1:fb:4d:5c:89:45:
                    ab:2b:c7:58:36:92:f3:40:ae:b4:5a:04:1a:d4:c6:
                    ea:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:EF:C7:5D:61:B3:88:E4:D2:27:80:A7:49:1D:02:0D:58:F9:B9:4F
            X509v3 Authority Key Identifier:
                keyid:C6:5A:1D:A1:CB:1C:92:0A:E2:F9:B7:48:27:0F:DE:D8:73:7A:91:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:d5:dc:b1:f4:f9:d8:e2:5e:54:1a:1d:14:7c:a5:79:be:93:
         e2:8c:53:24:f0:3c:33:9a:05:74:7b:f9:85:b2:91:13:31:91:
         6f:e1:b0:7f:cd:97:61:07:e9:db:84:df:7f:a4:ba:12:16:9b:
         0a:a4:16:8a:77:66:82:74:6b:b7:15:57:99:2c:8e:d6:a7:4b:
         5d:ee:12:2f:85:7e:ef:10:76:79:a4:3f:00:b4:61:d6:b9:a6:
         13:96:4e:25:c5:34:f3:2b:63:66:3d:c0:7c:c6:1d:54:37:b9:
         ab:3c:27:9a:6a:28:aa:16:af:c0:da:43:67:44:5f:ee:34:bb:
         7f:29:5d:15:a9:e0:f4:6f:c7:19:b7:0d:af:a7:33:52:35:35:
         85:19:ca:a0:5f:2d:4e:c4:21:fb:dc:84:07:fd:4f:a9:98:a8:
         85:ba:05:ee:fa:b6:af:c0:27:91:66:a7:09:7b:9d:07:58:c4:
         0e:c4:20:4a:fd:c0:18:b6:9d:06:72:69:bd:09:7d:80:9c:c0:
         8c:41:a1:95:27:ba:5d:9e:61:2b:93:4f:36:4a:9d:80:6d:38:
         47:71:08:94:2b:95:19:b2:b7:69:10:20:1a:58:77:24:11:21:
         47:1e:97:ac:01:42:5e:0b:94:ae:c7:25:f4:69:6c:3d:51:b3:
         8d:55:9c:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:44:05 2025 by rpki-client