This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/ee09f1-7d0b-431f-aaee-bb8debc00388/1/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.mft
File:                     xhhQFzyNKNWvv5EJHKY-XaPHXtQ.mft (raw, json)
Hash identifier:          2TEajX0s9prkL2u3VfnKdf+TF4TGq38NbklWzU+FFZY=
Subject key identifier:   91:69:AD:1F:88:23:9B:65:B2:05:61:3F:84:8A:71:22:A2:B7:DC:10
Authority key identifier: C6:18:50:17:3C:8D:28:D5:AF:BF:91:09:1C:A6:3E:5D:A3:C7:5E:D4
Certificate issuer:       /CN=c61850173c8d28d5afbf91091ca63e5da3c75ed4
Certificate serial:       019AF19AADBE8D25A367388D9866A32AA829
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/ee09f1-7d0b-431f-aaee-bb8debc00388/1/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.mft
Manifest number:          07B1
Signing time:             Sat 06 Dec 2025 03:00:37 +0000
Manifest this update:     Sat 06 Dec 2025 03:00:37 +0000
Manifest next update:     Sun 07 Dec 2025 03:00:37 +0000
Files and hashes:         1: gO1QQzQ8EJSK1sz9QVMIVflw4Is.roa (hash: XHDVuSMRNZ8ZK68EQ/rZiQRsF4JaubC5jLA4NaC8LBM=)
                          2: xhhQFzyNKNWvv5EJHKY-XaPHXtQ.crl (hash: jQMYmXkkEdz8P8mw3J/fyXrswQ2NlvOWeU4XeraYdas=)
                          3: z5AaUIsCUfsHWnAtqAIr_d8n8do.roa (hash: rmzyF9COLH0iNSyMo0DleMzCkcEN6+9Om4xVkdPkL6s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/ee09f1-7d0b-431f-aaee-bb8debc00388/1/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/ee09f1-7d0b-431f-aaee-bb8debc00388/1/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:9a:ad:be:8d:25:a3:67:38:8d:98:66:a3:2a:a8:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c61850173c8d28d5afbf91091ca63e5da3c75ed4
        Validity
            Not Before: Dec  6 03:00:37 2025 GMT
            Not After : Dec  7 03:00:37 2025 GMT
        Subject: CN=9169ad1f88239b65b205613f848a7122a2b7dc10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:db:78:c9:15:3e:9d:25:0e:7b:3a:81:01:0e:
                    bb:97:3c:4f:0a:a2:fc:9d:9b:31:b5:ef:81:03:fe:
                    9c:2b:5c:1f:82:2f:21:da:11:6b:36:76:46:eb:1f:
                    bb:39:ef:67:67:a5:00:6c:2f:6c:d9:88:97:9e:e3:
                    f0:bf:7e:19:59:8a:18:77:8b:a9:1c:d4:0b:0b:4a:
                    73:0b:b1:1e:44:c1:e5:62:25:2a:84:90:e0:1d:b5:
                    21:e8:1c:25:02:70:ef:49:b9:66:09:52:35:8d:ba:
                    85:84:f3:f6:67:5d:b6:b1:4a:5c:7d:f1:36:df:79:
                    c9:5c:bf:5a:8d:f0:c2:e2:40:01:96:7b:cc:49:01:
                    8a:b4:fd:0f:f7:d0:3e:e5:82:48:8a:c0:75:10:ee:
                    b4:a6:2a:81:09:83:45:41:c9:bd:a4:0e:5d:f2:15:
                    4a:a0:1e:e5:ed:80:59:3d:70:5d:8a:d1:44:f8:2f:
                    36:b6:c8:4e:91:64:c9:96:d2:59:c1:32:68:09:db:
                    d4:14:07:d9:49:94:4f:3e:a9:93:b2:7b:85:01:fb:
                    37:6e:68:51:01:e3:f6:aa:f2:f2:2a:9b:84:cb:a3:
                    f7:d8:51:4e:6c:9c:63:41:b5:6c:c7:f6:1c:89:ec:
                    62:e0:2b:50:ab:33:d8:8c:f7:f7:7d:d0:b0:b7:06:
                    3a:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:69:AD:1F:88:23:9B:65:B2:05:61:3F:84:8A:71:22:A2:B7:DC:10
            X509v3 Authority Key Identifier:
                keyid:C6:18:50:17:3C:8D:28:D5:AF:BF:91:09:1C:A6:3E:5D:A3:C7:5E:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/ee09f1-7d0b-431f-aaee-bb8debc00388/1/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/ee09f1-7d0b-431f-aaee-bb8debc00388/1/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:20:4a:78:27:25:d9:08:99:b0:5d:ef:1a:c6:fa:31:72:5b:
         09:c7:4c:de:4c:39:3a:38:c0:29:9f:3b:fc:f2:26:85:90:f1:
         56:2b:0b:d9:07:cd:92:85:8e:9c:1a:10:b8:6c:8a:bf:02:5f:
         a2:08:e4:79:82:e6:d2:a4:66:80:ac:d5:8b:2f:6a:b5:19:7f:
         6e:9f:5f:27:4c:d2:57:a8:dd:86:17:1f:f2:e3:7a:f8:80:88:
         7c:14:08:a5:6f:89:13:d8:41:dd:f9:6e:e9:86:bf:bb:bf:a5:
         7b:da:f8:37:ac:8a:06:89:1a:03:b0:4c:90:58:b3:8b:55:08:
         30:ab:2d:48:80:60:c1:27:94:4b:21:be:91:7d:cf:01:67:84:
         b4:17:02:c3:2e:a6:fc:7c:2a:fd:fd:84:ab:71:ff:9f:06:97:
         8c:c0:6a:59:ac:2e:67:ba:97:53:c0:16:b0:c0:bc:b9:55:e8:
         72:e9:71:c5:87:9b:1c:fa:d5:f8:cd:bd:81:f8:b0:a5:6a:0a:
         81:bf:ab:cc:9a:00:c8:6d:24:1a:9e:18:cb:f1:34:28:d7:ec:
         42:6b:80:a2:1d:03:62:46:ab:f9:08:06:74:4f:d3:b3:87:0c:
         33:d3:71:ad:0a:b8:b0:34:e9:3c:a6:dc:f6:71:6e:f1:c7:28:
         de:5d:0a:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 10:10:15 2025 by rpki-client