This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.mft
File:                     x0xgresM1XaM91b1YrG1zFucGAo.mft (raw, json)
Hash identifier:          f6hfFGKKLbsLfF2JBcYlfTeHmT+Qx2IBppOpVzrrAuI=
Subject key identifier:   D3:79:9A:A7:BE:28:F8:1C:03:BC:BA:CB:BA:CD:81:CF:27:6F:64:B3
Authority key identifier: C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A
Certificate issuer:       /CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a
Certificate serial:       019AF276D4A3C6C84D8EEBE22076A95954D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.mft
Manifest number:          1295
Signing time:             Sat 06 Dec 2025 07:01:05 +0000
Manifest this update:     Sat 06 Dec 2025 07:01:05 +0000
Manifest next update:     Sun 07 Dec 2025 07:01:05 +0000
Files and hashes:         1: 1-5xwCbYkw6n3KjUjQqrpHNycjsw.roa (hash: xnmXPX7h0AhX7fCrQfBlW4AC7vVtbQB3crm/g5LQBZ8=)
                          2: 44nY8xo2_DC63JpeIryBFG4szdQ.roa (hash: efIE2v0XKUD30sbluIT7ZKbMSQuZbTeUS/u2oPtbj6o=)
                          3: 7A6Pl3U5uu7pNsrAyeGlxHIf1OU.roa (hash: dnscxtqTmkxtlMB3gelGkG+4KCL2QrOo2QVlxJroGE4=)
                          4: 8I1eDtVP-BJjuty9df9iPdZO8og.roa (hash: ctlsY4aLIdOpF6HpRrpJUTdFYrFZ6RVeAqzfNRH3jQ4=)
                          5: EtMkTWvI58D-qupiUEl0MY2JiGg.roa (hash: Uz/Ifsb2B9YKip4rb0sqaf9NKH2gpjgn6z0w/NesOiA=)
                          6: KSAJh59TBqB3nBc2swg-HhWD4HU.roa (hash: YuODHnc04OfbOoqG4f2goTKLkOcK+XMOJlxF0H5E6MU=)
                          7: MvwrdGGrm_TBTyOOfZJTIiIeWXw.roa (hash: Czfwbes361OZe+qWA/o1I6nT8cW6PcS0wLg8sWUe8LY=)
                          8: PMMRtrP5Zia_L993q-DTeiA0eMU.roa (hash: EDSJVdah5uVn4vudD7mvIJSeuN7pHg6lTwJI66X4+8U=)
                          9: aXl3woCDTFV8KOUCaI37GD38yqY.roa (hash: j3sOWjoASI5TGptHDgux4OEToltLJUpmg1hcSPVVS80=)
                          10: bJ8s7uGF8zV84bsoruoPN6w5eBc.roa (hash: tSNRGX8MiAjqATg2gnnV+WNgM9CkUv2i/cajQpTVHzQ=)
                          11: dAgwpgiRE2fhaRYA7R_57WtkW8s.roa (hash: 2UcKjGJubVOnE28cs0BJhOQ91W2EUDgFnVS+nrDVbZw=)
                          12: eTvI3fV2l6gXhWfOYGcPCndQ2W4.roa (hash: 4lXzTxLXjqfOX2HuxLyn4Q7cfie0cfVZXxLpWJH4PhY=)
                          13: gY6-jVr97TeobNKsJqEIsFCfx1Q.roa (hash: GWcQFDLCJqx2wbPwhuGTM6ZqJ7XlkbdeE9qf+VAI0SE=)
                          14: jFA2rtAVBw_N1wvAZdDewkHHEJk.roa (hash: z1/fUeHvpi6n58b3xkn2+HMcpX9G3zKAfMExkbdSdio=)
                          15: ndpwXQr0DFZEYAa1c0O-3LbE2d0.roa (hash: vPOmxM9kg1tTyYliwSKFemIpfx1XBUWworUDWjHCOrs=)
                          16: p2vI0_PjYi8mnAQRBZG21gCvT7U.roa (hash: 31okJPnHq4SbgdiG4NvkIaYEEjg54d//5wBJpluxKCw=)
                          17: q13mGARa9r5QMtX1UkBNlLNiezo.roa (hash: EsDIM/kI3A6s/JVMlk0Lts4ZsihLHZ0jyyXXJqa6MdI=)
                          18: qu9muxyupj11J0vkCGd6UL4_YU8.asa (hash: ma8CUett5NKo6WA/WUa9lgNux61RUdveClhcObpC3iI=)
                          19: uiJCPf3ZYtfC8Ai59XFw_bFzUXs.roa (hash: ToV2fvQi+YWjL/E1w8mL3goa6Xi40QGLi0ZrnQOMuMs=)
                          20: woqB-lp41jPnWfABUhjX5NctLxQ.asa (hash: v3DbKFdxADYHJQ3DIANngq+EbQulpWmrtEktO22gNc8=)
                          21: x0xgresM1XaM91b1YrG1zFucGAo.crl (hash: QBQfrvjghGVn21BrUr8U4h5rCAKYhhPH0mkbz+1pNeI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:76:d4:a3:c6:c8:4d:8e:eb:e2:20:76:a9:59:54:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a
        Validity
            Not Before: Dec  6 07:01:05 2025 GMT
            Not After : Dec  7 07:01:05 2025 GMT
        Subject: CN=d3799aa7be28f81c03bcbacbbacd81cf276f64b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:cb:3e:83:a8:75:0f:c4:7c:86:c8:be:1f:09:
                    21:e6:2d:a6:a0:48:a4:20:03:bc:41:01:db:14:5a:
                    8d:c1:5a:c3:d6:5f:02:00:b8:4a:bb:56:f3:05:98:
                    02:8f:d7:91:f2:17:4b:5a:58:8b:e4:ed:a1:6a:e5:
                    78:45:c7:fc:1e:f1:5d:46:05:f4:a0:33:54:7e:99:
                    c7:4c:ce:4b:49:ed:87:c4:f9:bd:5e:eb:47:61:31:
                    de:ab:1b:2c:ac:f1:d3:6e:a5:c2:ef:a2:8e:95:d6:
                    28:58:cf:b7:1c:f2:36:ba:92:46:d9:54:76:d3:a2:
                    da:41:ef:db:17:a4:ae:a8:4f:48:71:2d:f8:fc:4d:
                    36:73:0d:b8:85:e2:16:c5:14:f0:77:ff:73:02:11:
                    48:38:1d:51:fd:c6:bd:88:a3:c5:e0:10:b2:6f:30:
                    aa:f1:cc:65:95:cf:54:12:cf:8e:aa:f1:a0:31:d9:
                    cb:99:10:6c:7f:b9:06:26:08:e7:44:f4:9a:9a:99:
                    78:88:61:91:c6:70:06:25:a9:e4:4e:41:6c:17:84:
                    51:db:5f:0b:a8:5e:62:ce:37:40:a0:ff:fc:50:b1:
                    c1:ea:3e:f7:c6:2e:2e:16:18:63:ab:08:20:80:d1:
                    b2:58:d2:26:cd:54:ad:51:7d:60:37:4f:93:56:e7:
                    c7:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:79:9A:A7:BE:28:F8:1C:03:BC:BA:CB:BA:CD:81:CF:27:6F:64:B3
            X509v3 Authority Key Identifier:
                keyid:C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:5c:dd:34:71:4f:f3:f2:22:eb:1a:6c:8a:ec:8a:4c:2b:92:
         7d:6a:58:2b:bc:4b:60:5f:06:d2:dc:1f:76:b0:de:2a:7f:0e:
         bf:96:59:cc:47:e9:75:64:4f:41:98:42:f3:dd:b2:2a:2c:d6:
         20:6a:c1:14:ed:1f:c0:8e:c7:64:a4:e2:17:03:b9:fa:60:23:
         30:58:c6:17:d0:58:32:42:3e:a3:90:e0:9d:c9:62:d9:f8:26:
         36:26:56:c6:2e:2c:86:62:b1:22:1d:45:af:f6:f1:e1:94:ff:
         c6:5d:4d:27:1e:ff:90:60:81:5c:cc:ed:89:65:e1:aa:0b:e5:
         ed:bb:37:ce:02:0a:22:0b:f9:5b:f5:6e:ed:82:9c:cd:b3:87:
         0d:52:71:6a:fb:03:35:06:02:c3:6f:fe:f5:27:00:c0:46:6d:
         21:fc:a1:53:0a:d5:df:eb:9c:8e:99:60:45:b9:0e:15:be:3f:
         24:82:10:63:46:07:47:e8:46:87:bd:83:9c:70:10:f4:ea:e3:
         1c:97:49:63:84:27:3f:7f:60:c4:92:f6:68:be:90:ce:48:1c:
         27:a9:53:50:51:60:8f:e1:e7:eb:6b:de:0d:aa:7f:90:e2:df:
         62:62:5c:6f:7c:81:81:04:71:88:4c:2f:17:46:95:48:7f:c5:
         17:f7:b4:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 10:54:02 2025 by rpki-client