This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/5c6745-768e-4d61-b604-835f4e37283c/1/OoOZNq7v8ohnjncmMwIPolm9nPI.mft
File:                     OoOZNq7v8ohnjncmMwIPolm9nPI.mft (raw, json)
Hash identifier:          7d7ECC8ClqYYlrihGK4VQ4P43PWIugeyBznLoOY0sfM=
Subject key identifier:   F5:6A:36:38:37:02:FA:3C:B0:58:F2:65:EF:CB:CB:A4:9D:8C:93:AE
Authority key identifier: 3A:83:99:36:AE:EF:F2:88:67:8E:77:26:33:02:0F:A2:59:BD:9C:F2
Certificate issuer:       /CN=3a839936aeeff288678e772633020fa259bd9cf2
Certificate serial:       019B409212A3CB404F5463631B9DA21EBAD2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OoOZNq7v8ohnjncmMwIPolm9nPI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/5c6745-768e-4d61-b604-835f4e37283c/1/OoOZNq7v8ohnjncmMwIPolm9nPI.mft
Manifest number:          0754
Signing time:             Sun 21 Dec 2025 11:01:13 +0000
Manifest this update:     Sun 21 Dec 2025 11:01:13 +0000
Manifest next update:     Mon 22 Dec 2025 11:01:13 +0000
Files and hashes:         1: 4sh0yYbT80cSrTPvdQEkGETfVo8.roa (hash: 7RnvvHQkkS8YaZiuCDpplhOJhAdwXKsdDZ03EF+NYdQ=)
                          2: OoOZNq7v8ohnjncmMwIPolm9nPI.crl (hash: qbeK4dfowlN2jJtPnyowcQkY0AFPw/D9pohc86YomFA=)
                          3: T3WVNDq5fB7durp2xzBnS3GvikA.roa (hash: yDIX+9j0VmuYreUTlBxWuulf2dZWF2rW9eLhkcZnsyo=)
                          4: UPULz0BbmOL6oB1Lvph6s81bIVc.roa (hash: KEGK8PJbSBsiHtUKaY1bLTWtxHt/0jD8x2QpGJMF8nk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/43/5c6745-768e-4d61-b604-835f4e37283c/1/OoOZNq7v8ohnjncmMwIPolm9nPI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/43/5c6745-768e-4d61-b604-835f4e37283c/1/OoOZNq7v8ohnjncmMwIPolm9nPI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OoOZNq7v8ohnjncmMwIPolm9nPI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 22 Dec 2025 04:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:40:92:12:a3:cb:40:4f:54:63:63:1b:9d:a2:1e:ba:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a839936aeeff288678e772633020fa259bd9cf2
        Validity
            Not Before: Dec 21 11:01:13 2025 GMT
            Not After : Dec 22 11:01:13 2025 GMT
        Subject: CN=f56a36383702fa3cb058f265efcbcba49d8c93ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:1b:61:9e:76:2d:43:18:3c:b8:1f:b5:cb:66:
                    e0:3c:2e:35:bd:07:42:ae:96:4d:83:0d:7b:12:0a:
                    30:61:8d:8f:f4:b8:e0:9f:d6:ef:c1:bb:a4:7e:2d:
                    07:c1:6d:f8:15:73:03:c4:55:bd:44:94:f3:88:2e:
                    31:6f:82:d3:b4:00:6f:c4:9c:31:cb:00:08:f0:86:
                    b3:f9:1f:0f:4e:76:15:2f:b5:67:92:a3:25:69:41:
                    41:26:fc:4f:8e:8e:9a:07:e5:11:78:3e:6d:30:e8:
                    a6:ad:95:6e:60:e7:e5:b8:8a:88:ac:21:f1:54:1a:
                    af:4d:5d:6a:8f:2f:ba:ce:17:dc:f4:a5:c3:03:13:
                    56:84:8a:55:ae:bf:a7:d3:58:ba:a6:d2:3f:1b:8f:
                    80:ce:31:71:c2:e6:c6:7a:ae:b3:cc:af:ef:6b:dd:
                    bf:3c:c6:16:46:90:c1:c4:8b:71:e6:52:85:4c:ee:
                    d5:ac:b7:80:75:5e:4c:ae:c6:b3:a8:df:b5:b2:4c:
                    b1:74:27:61:c0:21:de:99:3e:56:28:ce:85:95:19:
                    1e:95:99:29:2d:2d:b8:6e:1d:14:f9:b7:3a:96:f5:
                    cf:14:44:60:4a:9d:76:40:2a:e1:6e:20:37:ab:c1:
                    66:15:c3:43:24:48:dc:7f:ae:98:ef:43:6b:fd:05:
                    fa:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:6A:36:38:37:02:FA:3C:B0:58:F2:65:EF:CB:CB:A4:9D:8C:93:AE
            X509v3 Authority Key Identifier:
                keyid:3A:83:99:36:AE:EF:F2:88:67:8E:77:26:33:02:0F:A2:59:BD:9C:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OoOZNq7v8ohnjncmMwIPolm9nPI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/5c6745-768e-4d61-b604-835f4e37283c/1/OoOZNq7v8ohnjncmMwIPolm9nPI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/5c6745-768e-4d61-b604-835f4e37283c/1/OoOZNq7v8ohnjncmMwIPolm9nPI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:51:23:de:04:e6:37:7b:14:cc:1e:b0:e6:d9:99:b4:00:84:
         6e:30:34:51:54:78:6f:67:0f:3a:7d:5f:4f:e7:72:df:26:6a:
         b6:6e:aa:d5:24:73:57:e6:59:e4:95:d3:50:b2:3b:66:31:93:
         38:8a:cd:d8:4a:31:e6:3f:10:52:3e:f4:91:85:9f:67:95:43:
         11:96:ba:02:40:6f:8f:90:69:74:b3:de:e7:b3:81:e4:51:94:
         1e:77:b7:b8:41:b8:b0:ae:27:f1:0c:1b:70:09:dd:dc:a2:e2:
         08:10:47:b1:70:0c:cd:bd:50:a0:a5:8b:62:ea:41:82:b6:6a:
         4b:f2:32:52:40:5f:8f:0c:87:2b:fe:03:09:ce:2d:62:45:a4:
         a9:04:0c:67:c7:1d:b5:d0:d7:03:a9:9b:86:86:ac:15:28:97:
         5c:26:2e:52:ab:36:e6:a1:c4:0f:44:ed:4f:5b:71:4b:7d:47:
         87:ed:03:68:40:0c:3e:5c:8c:90:ec:86:d4:01:09:5e:34:39:
         28:0c:0c:1d:01:0d:49:bd:ff:63:34:a3:f0:47:f4:8b:9b:af:
         88:b9:90:63:6a:31:f1:3b:3f:e6:59:d5:7f:68:a5:9a:5e:e7:
         0e:2a:e9:2b:c7:30:be:49:df:34:40:f1:65:5f:0c:d3:6a:67:
         0d:b8:ca:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZtAkhKjy0BPVGNjG52iHrrSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhODM5OTM2YWVlZmYyODg2NzhlNzcyNjMzMDIwZmEyNTli
ZDljZjIwHhcNMjUxMjIxMTEwMTEzWhcNMjUxMjIyMTEwMTEzWjAzMTEwLwYDVQQD
EyhmNTZhMzYzODM3MDJmYTNjYjA1OGYyNjVlZmNiY2JhNDlkOGM5M2FlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApxthnnYtQxg8uB+1y2bgPC41vQdC
rpZNgw17EgowYY2P9Ljgn9bvwbukfi0HwW34FXMDxFW9RJTziC4xb4LTtABvxJwx
ywAI8Iaz+R8PTnYVL7VnkqMlaUFBJvxPjo6aB+UReD5tMOimrZVuYOfluIqIrCHx
VBqvTV1qjy+6zhfc9KXDAxNWhIpVrr+n01i6ptI/G4+AzjFxwubGeq6zzK/va92/
PMYWRpDBxItx5lKFTO7VrLeAdV5MrsazqN+1skyxdCdhwCHemT5WKM6FlRkelZkp
LS24bh0U+bc6lvXPFERgSp12QCrhbiA3q8FmFcNDJEjcf66Y70Nr/QX6cwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPVqNjg3Avo8sFjyZe/Ly6SdjJOuMB8GA1UdIwQY
MBaAFDqDmTau7/KIZ453JjMCD6JZvZzyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT29PWk5xN3Y4b2huam5jbU13SVBvbG05blBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My81YzY3NDUtNzY4ZS00ZDYxLWI2MDQt
ODM1ZjRlMzcyODNjLzEvT29PWk5xN3Y4b2huam5jbU13SVBvbG05blBJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My81YzY3NDUtNzY4ZS00ZDYxLWI2MDQtODM1ZjRlMzcyODNj
LzEvT29PWk5xN3Y4b2huam5jbU13SVBvbG05blBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW1Ej3gTm
N3sUzB6w5tmZtACEbjA0UVR4b2cPOn1fT+dy3yZqtm6q1SRzV+ZZ5JXTULI7ZjGT
OIrN2Eox5j8QUj70kYWfZ5VDEZa6AkBvj5BpdLPe57OB5FGUHne3uEG4sK4n8Qwb
cAnd3KLiCBBHsXAMzb1QoKWLYupBgrZqS/IyUkBfjwyHK/4DCc4tYkWkqQQMZ8cd
tdDXA6mbhoasFSiXXCYuUqs25qHED0TtT1txS31Hh+0DaEAMPlyMkOyG1AEJXjQ5
KAwMHQENSb3/YzSj8Ef0i5uviLmQY2ox8Ts/5lnVf2ilml7nDirpK8cwvknfNEDx
ZV8M02pnDbjKjg==
-----END CERTIFICATE-----
Generated at Sun Dec 21 13:55:03 2025 by rpki-client