This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/xuHIxlyG6NJt2-toZYo5p6jieGY.mft
File:                     xuHIxlyG6NJt2-toZYo5p6jieGY.mft (raw, json)
Hash identifier:          T2dcgxKj6f1V5OaYhNq+ZBg8kZPHIWiAe2OxkGz2wEE=
Subject key identifier:   41:34:8E:37:DA:5B:02:43:8D:8B:E1:2C:27:78:73:14:13:E3:A4:36
Authority key identifier: C6:E1:C8:C6:5C:86:E8:D2:6D:DB:EB:68:65:8A:39:A7:A8:E2:78:66
Certificate issuer:       /CN=c6e1c8c65c86e8d26ddbeb68658a39a7a8e27866
Certificate serial:       019AF276A0EF6D02B87B16A57B7E1D2C1C35
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xuHIxlyG6NJt2-toZYo5p6jieGY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/xuHIxlyG6NJt2-toZYo5p6jieGY.mft
Manifest number:          1798
Signing time:             Sat 06 Dec 2025 07:00:51 +0000
Manifest this update:     Sat 06 Dec 2025 07:00:51 +0000
Manifest next update:     Sun 07 Dec 2025 07:00:51 +0000
Files and hashes:         1: 0U3Gso3ODnWaRUyku2KbHXOd2nE.roa (hash: OjHUqZ7uYTApLthTiQNLejjbsCRnlAUYsAqNFNIG54g=)
                          2: 54ZmeVEdiSRDGRRG_DI6wWiUd7g.roa (hash: JFZc+GyxBOryjMHw3/n1I31IV2py6fuY1AjRNQU0bIg=)
                          3: Ku1m6fE7F4WFYNZ7f8RKK2-hH04.roa (hash: viKr0tF45sV0M1CowW9VfsNobYhpaxYTBfvzpT02dN0=)
                          4: wVptusVHIdbO2Rty9inFJlCpXfo.roa (hash: VLpPb0bMQpDYHBCAVfuSVFIISUNTNn9pYkADsImtNL0=)
                          5: xuHIxlyG6NJt2-toZYo5p6jieGY.crl (hash: ZuDxS1R3jGGV260sbO/350/AgAhUpMGmLG8Zf2EPQfc=)
                          6: zQ-KSJ7-TjaiG9uymKq9s3FHrzQ.roa (hash: FbTMvTLuTW6XcX7GqJJNJmaL2pjOC6IOrZv/ZrzS0Uo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/xuHIxlyG6NJt2-toZYo5p6jieGY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/xuHIxlyG6NJt2-toZYo5p6jieGY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xuHIxlyG6NJt2-toZYo5p6jieGY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:76:a0:ef:6d:02:b8:7b:16:a5:7b:7e:1d:2c:1c:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6e1c8c65c86e8d26ddbeb68658a39a7a8e27866
        Validity
            Not Before: Dec  6 07:00:51 2025 GMT
            Not After : Dec  7 07:00:51 2025 GMT
        Subject: CN=41348e37da5b02438d8be12c2778731413e3a436
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:79:26:f4:dd:68:db:93:b5:62:c2:23:6e:5e:
                    22:66:79:2a:d1:a8:b2:a5:2d:e1:98:46:f9:87:1f:
                    4b:46:06:ff:6b:91:bb:e8:94:cf:82:81:a1:63:eb:
                    8f:f1:f0:50:53:eb:cc:aa:d7:39:64:a5:d9:c2:6b:
                    43:92:28:97:68:cc:5f:67:5a:d4:5d:19:16:3b:3a:
                    25:b8:ed:35:4c:14:cd:62:10:9d:a1:69:d9:97:0b:
                    be:79:62:b1:02:cb:2d:04:81:cb:71:9d:25:6f:dc:
                    cd:37:94:93:a1:be:69:2f:e2:a3:5f:a1:17:8b:96:
                    88:26:89:55:85:40:fd:54:d4:af:e3:ca:6c:01:67:
                    6c:c6:e1:3d:38:1d:cd:3a:41:a3:bb:65:d5:e1:89:
                    19:68:43:39:fe:07:6b:2a:d2:70:9b:01:4a:46:d7:
                    db:95:5b:98:10:e6:43:1b:34:05:0d:40:35:52:9b:
                    66:22:db:08:b2:9b:a1:97:b5:c4:25:68:96:d6:5a:
                    75:b2:6c:cf:b0:74:01:ab:a2:01:2d:25:d4:53:44:
                    2d:11:19:ff:65:21:f1:c3:9a:83:02:c8:bd:51:bb:
                    7f:85:d7:0f:d1:80:cd:b7:d3:d6:77:e9:a2:1e:1c:
                    53:9c:ae:a3:30:9b:8c:fc:84:01:e3:ac:95:06:f3:
                    fa:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:34:8E:37:DA:5B:02:43:8D:8B:E1:2C:27:78:73:14:13:E3:A4:36
            X509v3 Authority Key Identifier:
                keyid:C6:E1:C8:C6:5C:86:E8:D2:6D:DB:EB:68:65:8A:39:A7:A8:E2:78:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xuHIxlyG6NJt2-toZYo5p6jieGY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/xuHIxlyG6NJt2-toZYo5p6jieGY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/xuHIxlyG6NJt2-toZYo5p6jieGY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:f5:93:6f:b0:73:43:65:e7:27:59:83:52:1b:a8:18:9e:65:
         9a:e8:9d:57:bf:aa:c8:aa:72:b2:e0:05:1c:86:b9:fd:f7:1e:
         68:55:6d:c3:fc:a9:d5:58:19:2b:59:a5:ad:51:84:14:1f:4c:
         1d:08:a8:0a:5f:50:45:b2:46:66:68:a4:76:6b:b5:af:74:ec:
         83:3e:e1:c7:f5:00:be:9f:e3:b2:32:1d:2b:b3:2a:c1:5f:4c:
         5b:e6:5c:45:05:78:2c:43:d0:1b:50:c2:60:e8:cf:46:d6:8a:
         9b:f9:fb:1e:35:7f:58:2b:70:de:19:73:6b:d0:f0:d8:98:00:
         59:c2:a1:30:47:fa:f4:07:eb:a7:41:7c:09:4a:60:38:cd:c4:
         39:d6:06:14:79:ae:d2:6c:2d:79:65:af:16:4f:f7:56:12:be:
         24:21:6d:76:39:13:8f:99:42:c6:62:60:a3:4a:c9:7a:d4:50:
         ce:3f:c1:5a:46:15:74:d9:de:87:1f:9b:ba:9c:bf:d3:e2:d6:
         ad:44:82:66:c2:34:56:3f:a8:7a:99:e9:4e:e5:3a:00:3e:df:
         51:3b:b9:ef:f9:d2:1f:d4:28:28:7c:62:b5:1e:ed:6a:bd:0b:
         09:f3:21:1e:e7:92:4e:eb:a9:9b:e2:f6:c0:8c:ae:9f:19:db:
         d0:54:18:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:00:10 2025 by rpki-client