This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/e5e53a-dfe8-4e99-85a8-1e0367c07d46/1/Xxdo4m_0-aKopW2k3Lfh7AwuSpM.mft
File:                     Xxdo4m_0-aKopW2k3Lfh7AwuSpM.mft (raw, json)
Hash identifier:          G8JytUwD7fuceippHHw+kMFMb9ITjtoyz5/yvdoJ3Ns=
Subject key identifier:   7E:AE:B0:AF:60:67:AD:CE:2B:5B:E0:3B:D7:89:78:48:E4:BC:3C:27
Authority key identifier: 5F:17:68:E2:6F:F4:F9:A2:A8:A5:6D:A4:DC:B7:E1:EC:0C:2E:4A:93
Certificate issuer:       /CN=5f1768e26ff4f9a2a8a56da4dcb7e1ec0c2e4a93
Certificate serial:       019AF23F7ED2E230D325DC4A671696134188
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Xxdo4m_0-aKopW2k3Lfh7AwuSpM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/e5e53a-dfe8-4e99-85a8-1e0367c07d46/1/Xxdo4m_0-aKopW2k3Lfh7AwuSpM.mft
Manifest number:          1761
Signing time:             Sat 06 Dec 2025 06:00:38 +0000
Manifest this update:     Sat 06 Dec 2025 06:00:38 +0000
Manifest next update:     Sun 07 Dec 2025 06:00:38 +0000
Files and hashes:         1: Xxdo4m_0-aKopW2k3Lfh7AwuSpM.crl (hash: BcHpPWZNmiYZbK6vJj3Ula83QLlsidZXByFw8k4J70M=)
                          2: pKpK0fpxNLfPfRjxRzWWa3fKR3w.roa (hash: 8dKtN3Slnvd8pwQgjMVGY+0Hoa2j4W49VOwrSD+22e4=)
                          3: pzab-y4S6g4DZwEwFQWsy3DRkOI.roa (hash: hKiOLND56jGXA2Q2u9O0L+DdBo1zxKBcuwX1QXw1GUc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/e5e53a-dfe8-4e99-85a8-1e0367c07d46/1/Xxdo4m_0-aKopW2k3Lfh7AwuSpM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/e5e53a-dfe8-4e99-85a8-1e0367c07d46/1/Xxdo4m_0-aKopW2k3Lfh7AwuSpM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Xxdo4m_0-aKopW2k3Lfh7AwuSpM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:3f:7e:d2:e2:30:d3:25:dc:4a:67:16:96:13:41:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f1768e26ff4f9a2a8a56da4dcb7e1ec0c2e4a93
        Validity
            Not Before: Dec  6 06:00:38 2025 GMT
            Not After : Dec  7 06:00:38 2025 GMT
        Subject: CN=7eaeb0af6067adce2b5be03bd7897848e4bc3c27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:27:e2:96:66:b6:e9:21:76:02:5e:46:d3:45:
                    86:99:d2:0e:19:b7:2b:f2:20:f9:40:f4:ee:f0:5b:
                    03:ee:5b:a9:f9:a5:13:08:ce:63:3d:ab:be:5e:e4:
                    71:97:6e:95:f3:1c:a7:29:be:b2:ea:1b:e9:83:e7:
                    39:6f:d2:77:25:4d:07:4d:bf:87:0a:b9:1d:d2:a7:
                    0b:12:e7:5f:43:c2:25:76:4d:a6:95:ac:1c:6e:90:
                    48:77:72:d8:74:63:e9:19:7d:2a:d2:75:c7:25:87:
                    1c:b7:90:46:bf:34:5e:b0:69:f0:19:c0:b9:3f:58:
                    5a:04:58:ee:3b:6a:a0:6f:a4:0b:a5:74:32:66:74:
                    1d:96:d7:77:85:76:f7:2e:4c:45:fa:0b:47:5b:3e:
                    3d:5f:96:47:f7:d3:3a:1c:23:5d:fd:60:fe:77:9f:
                    18:9a:43:05:8d:50:da:9f:98:08:66:74:d1:e8:be:
                    83:ce:8b:a0:99:89:6d:49:83:2f:f3:21:4e:e7:ff:
                    7c:63:6a:9e:af:55:74:8d:91:4d:34:a3:a1:94:e3:
                    af:70:62:25:16:17:02:de:61:3b:44:e2:62:fc:39:
                    a1:cd:71:51:90:ca:98:22:28:18:13:72:c4:ea:14:
                    46:20:51:cc:3a:34:d0:1f:d3:43:36:b4:8c:1a:d3:
                    8f:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:AE:B0:AF:60:67:AD:CE:2B:5B:E0:3B:D7:89:78:48:E4:BC:3C:27
            X509v3 Authority Key Identifier:
                keyid:5F:17:68:E2:6F:F4:F9:A2:A8:A5:6D:A4:DC:B7:E1:EC:0C:2E:4A:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xxdo4m_0-aKopW2k3Lfh7AwuSpM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/e5e53a-dfe8-4e99-85a8-1e0367c07d46/1/Xxdo4m_0-aKopW2k3Lfh7AwuSpM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/e5e53a-dfe8-4e99-85a8-1e0367c07d46/1/Xxdo4m_0-aKopW2k3Lfh7AwuSpM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:e1:ab:27:be:0d:15:0c:23:67:80:0a:e9:e1:17:60:66:4f:
         21:85:a7:58:d1:37:21:81:a1:8f:a3:95:cb:b2:83:77:a1:51:
         31:17:f6:13:ff:78:9d:f1:0b:9a:d4:f6:c5:e0:92:0c:91:e6:
         ef:f5:8a:18:aa:32:fd:df:e7:b0:7e:85:22:0b:32:7c:be:12:
         a3:71:83:49:cb:d0:a0:03:6b:ff:f6:19:5f:66:85:81:22:99:
         48:1a:04:ea:0f:6a:16:c5:31:8c:95:c5:b7:da:a4:92:04:5e:
         d7:4b:f5:2d:6b:32:74:69:b5:5b:f4:9c:4a:ef:d8:c9:f9:48:
         ca:2d:e5:d3:65:fe:35:8c:6b:bb:34:f8:29:3e:a5:bf:93:37:
         2b:ad:e7:43:c3:be:78:dd:a6:6d:ff:87:2e:e9:37:85:37:17:
         df:bf:fd:14:ac:a9:d2:63:49:7a:ec:0d:0d:e6:17:f1:cf:98:
         86:4f:15:91:c8:71:1b:1a:e8:17:5e:d8:be:d0:ec:9b:2b:66:
         df:f0:a0:db:e6:60:f6:61:78:75:e8:38:41:a2:43:66:fd:b5:
         9e:62:5c:26:6f:42:1d:c2:d8:c4:a0:3e:9f:a5:c5:e1:38:e9:
         15:a3:17:17:75:bc:72:0e:71:9f:46:bd:6d:64:2b:42:c9:22:
         5a:b1:37:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZryP37S4jDTJdxKZxaWE0GIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmMTc2OGUyNmZmNGY5YTJhOGE1NmRhNGRjYjdlMWVjMGMy
ZTRhOTMwHhcNMjUxMjA2MDYwMDM4WhcNMjUxMjA3MDYwMDM4WjAzMTEwLwYDVQQD
Eyg3ZWFlYjBhZjYwNjdhZGNlMmI1YmUwM2JkNzg5Nzg0OGU0YmMzYzI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlSfilma26SF2Al5G00WGmdIOGbcr
8iD5QPTu8FsD7lup+aUTCM5jPau+XuRxl26V8xynKb6y6hvpg+c5b9J3JU0HTb+H
Crkd0qcLEudfQ8Ildk2mlawcbpBId3LYdGPpGX0q0nXHJYcct5BGvzResGnwGcC5
P1haBFjuO2qgb6QLpXQyZnQdltd3hXb3LkxF+gtHWz49X5ZH99M6HCNd/WD+d58Y
mkMFjVDan5gIZnTR6L6DzougmYltSYMv8yFO5/98Y2qer1V0jZFNNKOhlOOvcGIl
FhcC3mE7ROJi/DmhzXFRkMqYIigYE3LE6hRGIFHMOjTQH9NDNrSMGtOPNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH6usK9gZ63OK1vgO9eJeEjkvDwnMB8GA1UdIwQY
MBaAFF8XaOJv9PmiqKVtpNy34ewMLkqTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHhkbzRtXzAtYUtvcFcyazNMZmg3QXd1U3BNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9lNWU1M2EtZGZlOC00ZTk5LTg1YTgt
MWUwMzY3YzA3ZDQ2LzEvWHhkbzRtXzAtYUtvcFcyazNMZmg3QXd1U3BNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS9lNWU1M2EtZGZlOC00ZTk5LTg1YTgtMWUwMzY3YzA3ZDQ2
LzEvWHhkbzRtXzAtYUtvcFcyazNMZmg3QXd1U3BNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAruGrJ74N
FQwjZ4AK6eEXYGZPIYWnWNE3IYGhj6OVy7KDd6FRMRf2E/94nfELmtT2xeCSDJHm
7/WKGKoy/d/nsH6FIgsyfL4So3GDScvQoANr//YZX2aFgSKZSBoE6g9qFsUxjJXF
t9qkkgRe10v1LWsydGm1W/ScSu/YyflIyi3l02X+NYxruzT4KT6lv5M3K63nQ8O+
eN2mbf+HLuk3hTcX37/9FKyp0mNJeuwNDeYX8c+Yhk8VkchxGxroF17YvtDsmytm
3/Cg2+Zg9mF4deg4QaJDZv21nmJcJm9CHcLYxKA+n6XF4TjpFaMXF3W8cg5xn0a9
bWQrQskiWrE31w==
-----END CERTIFICATE-----
Generated at Sat Dec 6 08:26:55 2025 by rpki-client