This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cfed0d-0fb0-4598-b365-65096dbcac30/1/oythi1COwTZTcsKqZ182ASk8xiQ.mft
File:                     oythi1COwTZTcsKqZ182ASk8xiQ.mft (raw, json)
Hash identifier:          b+fPy8QacpX0YUDDZAETQeCJRQ54SA/Uruk3oQWWJDg=
Subject key identifier:   73:63:63:D4:3C:4F:B2:1A:84:1F:F1:7B:76:96:29:19:2F:8C:73:71
Authority key identifier: A3:2B:61:8B:50:8E:C1:36:53:72:C2:AA:67:5F:36:01:29:3C:C6:24
Certificate issuer:       /CN=a32b618b508ec1365372c2aa675f3601293cc624
Certificate serial:       019B5D52EDB79169B409DEA321CA65FE2580
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oythi1COwTZTcsKqZ182ASk8xiQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/cfed0d-0fb0-4598-b365-65096dbcac30/1/oythi1COwTZTcsKqZ182ASk8xiQ.mft
Manifest number:          0B82
Signing time:             Sat 27 Dec 2025 01:01:14 +0000
Manifest this update:     Sat 27 Dec 2025 01:01:14 +0000
Manifest next update:     Sun 28 Dec 2025 01:01:14 +0000
Files and hashes:         1: oythi1COwTZTcsKqZ182ASk8xiQ.crl (hash: 9TZ3kN8+KhOo7Yu9vMShJ6bWW8GOXN9+wmRQyp8isPI=)
                          2: tlRgtWShtf4NCRA8IRgcZrxGH5w.roa (hash: vWrq/qn4dImxorSwjmmV3lM2Zem99YCBAV/uApBQcww=)
                          3: xTZoaA-8TmHEI1jMFDvCwHtiXYE.roa (hash: T7GombXt78c9iIE0H6vcNPnQnS19iaCgMsQG50c822A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/cfed0d-0fb0-4598-b365-65096dbcac30/1/oythi1COwTZTcsKqZ182ASk8xiQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/cfed0d-0fb0-4598-b365-65096dbcac30/1/oythi1COwTZTcsKqZ182ASk8xiQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oythi1COwTZTcsKqZ182ASk8xiQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 27 Dec 2025 20:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:5d:52:ed:b7:91:69:b4:09:de:a3:21:ca:65:fe:25:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a32b618b508ec1365372c2aa675f3601293cc624
        Validity
            Not Before: Dec 27 01:01:14 2025 GMT
            Not After : Dec 28 01:01:14 2025 GMT
        Subject: CN=736363d43c4fb21a841ff17b769629192f8c7371
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:3e:ba:32:51:8d:45:08:1f:7e:e8:21:36:df:
                    ef:a8:eb:8b:37:ab:a9:aa:5a:cf:11:ed:08:fc:49:
                    60:bb:5d:02:b0:e5:80:cc:5f:95:a4:74:d8:f7:95:
                    af:cd:9a:3e:e0:8b:b5:28:a3:fe:11:35:39:d5:4a:
                    78:87:f7:18:ff:3e:a8:dd:b6:03:1b:d7:f2:7f:cc:
                    1f:69:21:02:fe:22:a3:c2:4e:86:a3:b5:54:59:55:
                    36:66:ae:09:8e:27:7e:25:2e:71:8a:8b:41:4b:58:
                    bd:7b:0f:f3:a3:8e:65:e6:c5:4d:63:86:86:ae:5c:
                    fe:e5:54:02:a0:b9:f0:32:0b:0a:ca:51:df:56:a7:
                    94:12:1f:aa:32:84:0c:0b:61:31:81:8e:6d:69:b3:
                    bb:21:02:cd:bd:89:1c:d0:82:0d:8a:7f:7b:04:1d:
                    9b:f6:5b:53:d0:69:02:27:4b:e6:55:c5:56:7c:a5:
                    28:68:aa:db:82:3f:02:18:bc:54:fc:67:80:10:38:
                    01:ea:9b:58:a8:a4:3a:9d:3a:d9:bc:e0:7d:aa:37:
                    f3:f9:04:9b:7e:9d:8b:87:99:24:a5:9c:a6:29:6c:
                    de:5f:ef:fc:5a:3e:83:5e:89:17:76:ff:fb:af:98:
                    9b:9e:30:79:ea:88:f9:9b:cf:f8:aa:29:c0:e3:2b:
                    71:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:63:63:D4:3C:4F:B2:1A:84:1F:F1:7B:76:96:29:19:2F:8C:73:71
            X509v3 Authority Key Identifier:
                keyid:A3:2B:61:8B:50:8E:C1:36:53:72:C2:AA:67:5F:36:01:29:3C:C6:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oythi1COwTZTcsKqZ182ASk8xiQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cfed0d-0fb0-4598-b365-65096dbcac30/1/oythi1COwTZTcsKqZ182ASk8xiQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cfed0d-0fb0-4598-b365-65096dbcac30/1/oythi1COwTZTcsKqZ182ASk8xiQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:8f:37:c1:91:0d:d4:2d:0e:91:ab:44:9f:35:a7:89:52:8a:
         09:37:b2:cc:a1:af:98:38:e6:fc:cd:3f:b3:88:47:1c:6c:c1:
         eb:71:00:36:00:1c:1a:eb:22:be:51:97:ca:79:c5:d4:e8:e6:
         d2:e2:86:8d:02:76:d8:eb:2e:04:21:dc:37:46:1d:f6:e2:59:
         b4:d9:8c:31:05:f3:be:f0:1a:de:bc:d6:8b:19:2f:41:a5:95:
         cf:e5:ea:16:e0:2f:51:6b:2a:38:69:67:25:4a:42:3f:34:07:
         2c:7b:91:6c:7c:29:82:99:d9:e6:26:d0:8a:fe:a1:5b:d0:64:
         f2:00:13:97:4c:5c:18:bb:26:a0:5e:46:05:dd:d8:b6:10:a0:
         2d:c5:cd:d8:be:d2:48:58:31:02:1a:76:99:9a:fe:64:8e:42:
         92:b4:01:e4:0e:6f:a6:e4:9a:2a:8d:32:13:70:7f:73:39:b5:
         36:50:79:8c:68:13:d8:03:7c:79:98:07:44:c5:eb:9c:7a:32:
         08:7b:de:17:b3:4e:48:e2:ff:98:57:a0:dc:41:0a:36:98:01:
         57:8b:ab:db:f1:c0:fe:41:78:3e:78:54:b5:41:75:56:4f:75:
         00:dd:54:39:0f:ce:fc:a4:5e:f5:8e:04:0d:1e:0f:25:97:1c:
         6d:fc:56:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 27 05:38:10 2025 by rpki-client