This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/xvU8A9L05_B6geqQPs7wHWjGgTc.mft
File:                     xvU8A9L05_B6geqQPs7wHWjGgTc.mft (raw, json)
Hash identifier:          81NrmXkDVNep2iqmGJhzyIMrwmXknJkzxdSPU3IuMU8=
Subject key identifier:   F3:B2:F1:69:F0:72:B3:FD:6F:3B:6C:14:BE:16:DE:C2:36:0B:4F:E3
Authority key identifier: C6:F5:3C:03:D2:F4:E7:F0:7A:81:EA:90:3E:CE:F0:1D:68:C6:81:37
Certificate issuer:       /CN=c6f53c03d2f4e7f07a81ea903ecef01d68c68137
Certificate serial:       019AF276B3514E389C158E8509066E7AC3D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xvU8A9L05_B6geqQPs7wHWjGgTc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/xvU8A9L05_B6geqQPs7wHWjGgTc.mft
Manifest number:          0892
Signing time:             Sat 06 Dec 2025 07:00:56 +0000
Manifest this update:     Sat 06 Dec 2025 07:00:56 +0000
Manifest next update:     Sun 07 Dec 2025 07:00:56 +0000
Files and hashes:         1: R8JsCaWwJlloIphsJ_SUQdItPT0.roa (hash: jdlAQ7N+wj+LUd6XKIUEeWcmdCEJH5KhrOrz0eN8lDM=)
                          2: V3wGcwOVhN0tAMoLaOO8eyDkTKY.roa (hash: LoyanmiphfJJ/rxmnZ49vq4eY1guWePbQk/rQBxZgok=)
                          3: c0033PUKHcK0RGnP2G-A-PBcvHI.roa (hash: 2Ou36KzazZ/RW5paKom4FLZjeLVkyhsmjYIVTfOC2XI=)
                          4: eqHQLvrEyFem_zOL2dGPtQbOrHE.roa (hash: xkijKwZrCJTocpD11ugimO21ZJdJ5XVb/oBsAvogKmM=)
                          5: kPNpqlKlXSRN44fbkT0lmJ0OXx0.roa (hash: FyhtVVwzpFsgGl1UF2q6lWuO2wd0bFbhXtZPTezLBtQ=)
                          6: xvU8A9L05_B6geqQPs7wHWjGgTc.crl (hash: V1vEsX3M55pC7tBdhTfd4XG6dFKlhugv843KoyeTvNA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/xvU8A9L05_B6geqQPs7wHWjGgTc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/xvU8A9L05_B6geqQPs7wHWjGgTc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xvU8A9L05_B6geqQPs7wHWjGgTc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:76:b3:51:4e:38:9c:15:8e:85:09:06:6e:7a:c3:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6f53c03d2f4e7f07a81ea903ecef01d68c68137
        Validity
            Not Before: Dec  6 07:00:56 2025 GMT
            Not After : Dec  7 07:00:56 2025 GMT
        Subject: CN=f3b2f169f072b3fd6f3b6c14be16dec2360b4fe3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:fc:14:ff:8c:e4:02:d1:20:64:b2:a0:ad:02:
                    e0:74:e4:36:5b:b0:49:ab:1a:50:d4:f6:81:f8:e8:
                    5f:a9:92:82:d4:11:01:8e:ed:87:fa:d7:0b:5f:73:
                    37:49:02:74:08:9e:4c:aa:f4:76:b5:34:1f:2c:cf:
                    bc:80:ab:98:df:19:10:65:10:99:47:f6:7e:7f:a0:
                    40:c6:8c:31:70:6a:9d:0d:47:ec:a5:c5:ab:79:38:
                    c3:19:03:a2:27:a7:03:0e:51:a6:a3:19:b9:37:1e:
                    b9:1b:ab:58:76:99:96:a6:95:be:e0:94:98:83:b3:
                    f1:39:8e:d0:87:63:2d:20:e3:70:94:91:cd:a3:81:
                    8e:3f:a5:c8:98:15:2a:f0:fc:e0:7d:fe:ca:46:3c:
                    7b:e8:0b:0c:83:02:10:c3:ce:37:83:a9:b3:f1:cd:
                    aa:37:2a:c0:40:11:6b:86:33:31:24:42:25:e4:ed:
                    1e:71:7e:fb:37:f7:a2:ed:2b:39:2e:ab:2e:60:39:
                    c6:f9:b7:3b:55:0c:f1:78:2c:5d:a4:48:c9:15:b2:
                    1c:a1:cd:9d:6a:73:2f:76:4f:8d:ee:38:eb:ad:5b:
                    18:b2:d9:ea:60:77:10:0b:90:79:5f:66:fa:a3:50:
                    83:27:a4:04:01:02:bb:5b:55:41:90:77:9e:c5:25:
                    17:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:B2:F1:69:F0:72:B3:FD:6F:3B:6C:14:BE:16:DE:C2:36:0B:4F:E3
            X509v3 Authority Key Identifier:
                keyid:C6:F5:3C:03:D2:F4:E7:F0:7A:81:EA:90:3E:CE:F0:1D:68:C6:81:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xvU8A9L05_B6geqQPs7wHWjGgTc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/xvU8A9L05_B6geqQPs7wHWjGgTc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/xvU8A9L05_B6geqQPs7wHWjGgTc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:50:e7:32:2c:35:a2:c8:91:ee:57:9d:af:36:b7:b0:90:3a:
         a0:bc:5c:db:39:c5:3b:8b:0d:62:ba:0a:83:98:d6:1f:1e:73:
         e6:0a:50:6f:3f:19:b3:69:40:36:e1:3f:0f:cb:2e:3a:9b:ab:
         eb:fb:9f:9d:53:0d:61:9c:45:e8:81:b4:34:04:75:86:09:b4:
         c6:77:ea:5f:4b:4c:e8:8f:64:c3:7c:12:71:77:6e:b0:2f:67:
         13:8f:1c:4c:1c:c1:d3:c4:5c:2f:f1:79:23:80:dc:31:1c:82:
         c8:d0:c7:28:41:4d:1d:f7:94:1b:7e:10:47:dd:1e:60:5d:24:
         78:35:48:6c:46:fc:92:09:90:2e:fb:da:16:c6:2a:41:d8:39:
         70:40:34:63:2e:81:5f:d8:01:cd:b3:b7:9a:8c:7d:2e:da:52:
         99:1a:76:04:05:a8:b4:72:91:71:01:cc:24:67:a6:ab:05:b4:
         7a:3a:cd:6e:d1:11:16:8b:03:82:b8:cc:5c:6a:23:2b:1f:88:
         03:52:55:77:2f:87:2e:31:86:8c:1c:79:82:d5:67:28:27:90:
         8c:fb:89:4e:04:11:19:48:1d:86:31:6b:47:7f:ef:91:ce:4e:
         5a:52:43:56:78:af:b4:83:1f:86:d3:34:32:ad:9d:25:f8:03:
         77:5e:a4:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZrydrNRTjicFY6FCQZuesPSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2ZjUzYzAzZDJmNGU3ZjA3YTgxZWE5MDNlY2VmMDFkNjhj
NjgxMzcwHhcNMjUxMjA2MDcwMDU2WhcNMjUxMjA3MDcwMDU2WjAzMTEwLwYDVQQD
EyhmM2IyZjE2OWYwNzJiM2ZkNmYzYjZjMTRiZTE2ZGVjMjM2MGI0ZmUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjvwU/4zkAtEgZLKgrQLgdOQ2W7BJ
qxpQ1PaB+OhfqZKC1BEBju2H+tcLX3M3SQJ0CJ5MqvR2tTQfLM+8gKuY3xkQZRCZ
R/Z+f6BAxowxcGqdDUfspcWreTjDGQOiJ6cDDlGmoxm5Nx65G6tYdpmWppW+4JSY
g7PxOY7Qh2MtIONwlJHNo4GOP6XImBUq8Pzgff7KRjx76AsMgwIQw843g6mz8c2q
NyrAQBFrhjMxJEIl5O0ecX77N/ei7Ss5LqsuYDnG+bc7VQzxeCxdpEjJFbIcoc2d
anMvdk+N7jjrrVsYstnqYHcQC5B5X2b6o1CDJ6QEAQK7W1VBkHeexSUXNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPOy8WnwcrP9bztsFL4W3sI2C0/jMB8GA1UdIwQY
MBaAFMb1PAPS9OfweoHqkD7O8B1oxoE3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveHZVOEE5TDA1X0I2Z2VxUVBzN3dIV2pHZ1RjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC8zYzIyN2MtNDcwNi00Nzg3LTlhMDct
OTBlYTM3MjljNTc0LzEveHZVOEE5TDA1X0I2Z2VxUVBzN3dIV2pHZ1RjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC8zYzIyN2MtNDcwNi00Nzg3LTlhMDctOTBlYTM3MjljNTc0
LzEveHZVOEE5TDA1X0I2Z2VxUVBzN3dIV2pHZ1RjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh1DnMiw1
osiR7ledrza3sJA6oLxc2znFO4sNYroKg5jWHx5z5gpQbz8Zs2lANuE/D8suOpur
6/ufnVMNYZxF6IG0NAR1hgm0xnfqX0tM6I9kw3wScXdusC9nE48cTBzB08RcL/F5
I4DcMRyCyNDHKEFNHfeUG34QR90eYF0keDVIbEb8kgmQLvvaFsYqQdg5cEA0Yy6B
X9gBzbO3mox9LtpSmRp2BAWotHKRcQHMJGemqwW0ejrNbtERFosDgrjMXGojKx+I
A1JVdy+HLjGGjBx5gtVnKCeQjPuJTgQRGUgdhjFrR3/vkc5OWlJDVnivtIMfhtM0
Mq2dJfgDd16kgA==
-----END CERTIFICATE-----
Generated at Sat Dec 6 11:31:05 2025 by rpki-client