This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/d81745-658d-4a74-92f7-5d3a421a0f10/1/XwjcECGKxtt5QwrnxEUVWQQX1gU.mft
File:                     XwjcECGKxtt5QwrnxEUVWQQX1gU.mft (raw, json)
Hash identifier:          fbclxCpKnIKNWOSu5pojZVqC+mmgqWXEtVU23zHSf/g=
Subject key identifier:   AB:B0:75:72:8E:69:9D:0B:3F:D9:E9:EB:DE:24:1D:52:C6:A4:60:2E
Authority key identifier: 5F:08:DC:10:21:8A:C6:DB:79:43:0A:E7:C4:45:15:59:04:17:D6:05
Certificate issuer:       /CN=5f08dc10218ac6db79430ae7c44515590417d605
Certificate serial:       019AF2095F21278F1C7837B86E4A21322666
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XwjcECGKxtt5QwrnxEUVWQQX1gU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/d81745-658d-4a74-92f7-5d3a421a0f10/1/XwjcECGKxtt5QwrnxEUVWQQX1gU.mft
Manifest number:          0641
Signing time:             Sat 06 Dec 2025 05:01:31 +0000
Manifest this update:     Sat 06 Dec 2025 05:01:31 +0000
Manifest next update:     Sun 07 Dec 2025 05:01:31 +0000
Files and hashes:         1: 02wqSv6S3QfGQclsARr7QXNvdWI.roa (hash: blfoT2HbR+GD9/4BT0/OCiD+iemp7TQrPXABrjQFnJw=)
                          2: RSjMhTaGtuAfeDXOX3uwyAT1Eok.roa (hash: Y4/cSuW1UOGa89zMuz5QH1r95dZUNstGhg+JOqcELak=)
                          3: XwjcECGKxtt5QwrnxEUVWQQX1gU.crl (hash: AJpiMObVFZgnDwp6fa3vVwWJVNoY1vuQU5CBE6cP2cA=)
                          4: xJZ2Genlg6FZ5BYdZvsnK__KGuk.roa (hash: vX+ymzFaWBe0MgYWBkL1Ckb8oOlGEmiJb877SUGvYCI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/d81745-658d-4a74-92f7-5d3a421a0f10/1/XwjcECGKxtt5QwrnxEUVWQQX1gU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/d81745-658d-4a74-92f7-5d3a421a0f10/1/XwjcECGKxtt5QwrnxEUVWQQX1gU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XwjcECGKxtt5QwrnxEUVWQQX1gU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:09:5f:21:27:8f:1c:78:37:b8:6e:4a:21:32:26:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f08dc10218ac6db79430ae7c44515590417d605
        Validity
            Not Before: Dec  6 05:01:31 2025 GMT
            Not After : Dec  7 05:01:31 2025 GMT
        Subject: CN=abb075728e699d0b3fd9e9ebde241d52c6a4602e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:c0:68:be:c2:95:4a:7c:af:bb:d8:42:0c:40:
                    75:a5:7f:91:f7:d7:ee:68:03:64:c0:13:35:63:d6:
                    e5:32:d8:44:c7:4c:19:84:fc:5f:42:e1:46:fb:3e:
                    27:10:50:de:ee:1d:7a:6c:2e:d4:d8:18:95:e8:92:
                    e3:18:23:e7:95:47:15:fc:47:86:a3:0a:3f:fe:66:
                    96:cd:4f:fd:66:2e:90:bc:e8:34:3c:64:1d:14:7f:
                    5f:b5:85:3c:9d:6a:83:e5:ab:a9:8c:ac:a5:41:46:
                    56:85:0d:01:6d:78:ef:70:bc:7b:d0:e9:f4:cf:ec:
                    d9:cb:c0:8a:a4:4e:b8:62:8c:90:e4:4e:80:81:9f:
                    7e:85:97:72:17:47:c3:d6:4a:8f:4b:81:31:8c:12:
                    36:d1:97:09:7f:04:7e:84:0e:0c:a5:86:c9:12:f8:
                    e9:4a:f6:79:1b:53:c0:67:de:b4:00:28:e9:4f:d2:
                    aa:3e:6d:36:72:e6:a9:c6:d7:da:59:50:80:28:04:
                    8f:2e:d4:b1:02:d4:72:e3:a4:4c:11:c4:e1:94:67:
                    a1:b3:01:ef:c6:5e:be:25:5d:68:6c:1a:40:f6:31:
                    cc:44:84:c8:09:d5:9e:ea:ba:9a:4f:6f:6e:3c:90:
                    a7:1e:f1:56:47:11:b2:66:aa:bd:63:05:38:82:cf:
                    02:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:B0:75:72:8E:69:9D:0B:3F:D9:E9:EB:DE:24:1D:52:C6:A4:60:2E
            X509v3 Authority Key Identifier:
                keyid:5F:08:DC:10:21:8A:C6:DB:79:43:0A:E7:C4:45:15:59:04:17:D6:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XwjcECGKxtt5QwrnxEUVWQQX1gU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/d81745-658d-4a74-92f7-5d3a421a0f10/1/XwjcECGKxtt5QwrnxEUVWQQX1gU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/d81745-658d-4a74-92f7-5d3a421a0f10/1/XwjcECGKxtt5QwrnxEUVWQQX1gU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:ca:7e:66:23:ea:4b:26:a2:8d:91:ff:91:1a:fd:b0:a3:8d:
         f2:b3:19:26:ad:42:67:cf:9a:5f:b3:5d:4f:6c:06:83:2b:20:
         37:2a:83:81:63:3c:02:29:40:2c:c1:49:d8:d1:08:1c:97:45:
         30:60:8d:a5:a4:cf:9b:16:f7:d6:a7:ad:44:28:ed:0d:6d:c3:
         fd:f7:d3:64:c1:ae:a2:88:43:4c:a8:48:b3:36:b2:dc:77:fc:
         a8:4e:b9:eb:6a:4b:fd:8e:2e:df:0a:de:89:76:f3:6f:3c:57:
         93:84:7a:f2:7b:d1:b7:1e:45:58:2f:c2:1c:19:27:5e:59:75:
         cb:bc:2f:3a:24:66:a4:47:e0:b4:10:84:ad:69:ec:76:94:75:
         1f:40:35:a9:b3:10:33:14:1f:91:6e:e1:d2:b3:c3:90:a4:7c:
         60:9c:d2:ea:06:9d:f3:54:06:83:12:97:58:d8:c7:cd:85:24:
         67:c0:d0:de:97:08:73:94:61:24:eb:a9:20:ec:d8:06:20:a0:
         76:12:61:f5:13:aa:dc:bf:93:e8:85:98:68:3a:0a:30:63:c6:
         44:ec:86:34:15:d1:42:1b:c1:ea:86:2f:c8:c0:a4:1c:f6:d5:
         31:a6:7a:fc:1a:c1:98:64:81:83:ae:2d:e8:f3:ce:06:3e:b9:
         1c:2e:99:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZryCV8hJ48ceDe4bkohMiZmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmMDhkYzEwMjE4YWM2ZGI3OTQzMGFlN2M0NDUxNTU5MDQx
N2Q2MDUwHhcNMjUxMjA2MDUwMTMxWhcNMjUxMjA3MDUwMTMxWjAzMTEwLwYDVQQD
EyhhYmIwNzU3MjhlNjk5ZDBiM2ZkOWU5ZWJkZTI0MWQ1MmM2YTQ2MDJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmcBovsKVSnyvu9hCDEB1pX+R99fu
aANkwBM1Y9blMthEx0wZhPxfQuFG+z4nEFDe7h16bC7U2BiV6JLjGCPnlUcV/EeG
owo//maWzU/9Zi6QvOg0PGQdFH9ftYU8nWqD5aupjKylQUZWhQ0BbXjvcLx70On0
z+zZy8CKpE64YoyQ5E6AgZ9+hZdyF0fD1kqPS4ExjBI20ZcJfwR+hA4MpYbJEvjp
SvZ5G1PAZ960ACjpT9KqPm02cuapxtfaWVCAKASPLtSxAtRy46RMEcThlGehswHv
xl6+JV1obBpA9jHMRITICdWe6rqaT29uPJCnHvFWRxGyZqq9YwU4gs8CGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKuwdXKOaZ0LP9np694kHVLGpGAuMB8GA1UdIwQY
MBaAFF8I3BAhisbbeUMK58RFFVkEF9YFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHdqY0VDR0t4dHQ1UXdybnhFVVZXUVFYMWdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9kODE3NDUtNjU4ZC00YTc0LTkyZjct
NWQzYTQyMWEwZjEwLzEvWHdqY0VDR0t4dHQ1UXdybnhFVVZXUVFYMWdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy9kODE3NDUtNjU4ZC00YTc0LTkyZjctNWQzYTQyMWEwZjEw
LzEvWHdqY0VDR0t4dHQ1UXdybnhFVVZXUVFYMWdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZcp+ZiPq
SyaijZH/kRr9sKON8rMZJq1CZ8+aX7NdT2wGgysgNyqDgWM8AilALMFJ2NEIHJdF
MGCNpaTPmxb31qetRCjtDW3D/ffTZMGuoohDTKhIszay3Hf8qE6562pL/Y4u3wre
iXbzbzxXk4R68nvRtx5FWC/CHBknXll1y7wvOiRmpEfgtBCErWnsdpR1H0A1qbMQ
MxQfkW7h0rPDkKR8YJzS6gad81QGgxKXWNjHzYUkZ8DQ3pcIc5RhJOupIOzYBiCg
dhJh9ROq3L+T6IWYaDoKMGPGROyGNBXRQhvB6oYvyMCkHPbVMaZ6/BrBmGSBg64t
6PPOBj65HC6ZbQ==
-----END CERTIFICATE-----
Generated at Sat Dec 6 12:41:43 2025 by rpki-client