This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/18a1bc-967c-4931-85b5-00f00af1c8d7/1/o-boI_bdpn0oOp9BpykJkGrJqDc.mft
File:                     o-boI_bdpn0oOp9BpykJkGrJqDc.mft (raw, json)
Hash identifier:          BzJqflo3ukmE3KcrCWLTB+nQzycHGdeJwdP9GALRoZs=
Subject key identifier:   01:D7:72:46:CE:D4:C7:75:69:4F:C1:E0:E0:61:84:B8:92:B0:32:B9
Authority key identifier: A3:E6:E8:23:F6:DD:A6:7D:28:3A:9F:41:A7:29:09:90:6A:C9:A8:37
Certificate issuer:       /CN=a3e6e823f6dda67d283a9f41a72909906ac9a837
Certificate serial:       019B3F48213FBF85608F228F6CA8F9466325
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o-boI_bdpn0oOp9BpykJkGrJqDc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/18a1bc-967c-4931-85b5-00f00af1c8d7/1/o-boI_bdpn0oOp9BpykJkGrJqDc.mft
Manifest number:          178F
Signing time:             Sun 21 Dec 2025 05:00:50 +0000
Manifest this update:     Sun 21 Dec 2025 05:00:50 +0000
Manifest next update:     Mon 22 Dec 2025 05:00:50 +0000
Files and hashes:         1: 6_a-aeOKvfIVcw7qcE2cQDyNLOY.roa (hash: WdgelCFy5E02aPpURS4UTgXi3wN5eWjkYjrBc+OZPSI=)
                          2: 8WHNdpvFKOcR1NYdd7sGV-5deCM.roa (hash: 1JOP6RuQiDJQnqR2UlsIBnEE2gJbfnp6EUOaKdVsJlw=)
                          3: aJfMXR0KgD85hp2B5m_o11nFhQY.roa (hash: KbbBuzotL/jgzy+EpOCalbhLtTBDf/lVI3VgkQVW38s=)
                          4: o-boI_bdpn0oOp9BpykJkGrJqDc.crl (hash: VkNZCmFFRAQ4Wojjwe8WhAslXt1xM6frHRvTDHtufX4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/18a1bc-967c-4931-85b5-00f00af1c8d7/1/o-boI_bdpn0oOp9BpykJkGrJqDc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/18a1bc-967c-4931-85b5-00f00af1c8d7/1/o-boI_bdpn0oOp9BpykJkGrJqDc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/o-boI_bdpn0oOp9BpykJkGrJqDc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 22 Dec 2025 00:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3f:48:21:3f:bf:85:60:8f:22:8f:6c:a8:f9:46:63:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3e6e823f6dda67d283a9f41a72909906ac9a837
        Validity
            Not Before: Dec 21 05:00:50 2025 GMT
            Not After : Dec 22 05:00:50 2025 GMT
        Subject: CN=01d77246ced4c775694fc1e0e06184b892b032b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:54:8f:c3:73:f3:e0:13:b5:8a:6e:46:4b:7d:
                    b9:55:07:85:f8:6a:76:a5:1d:cb:9e:46:bc:33:5a:
                    e0:63:6f:d4:6b:b5:c7:9a:b2:51:10:b7:6e:0d:c8:
                    c0:45:5a:f8:ca:e2:90:88:75:53:be:cf:00:4a:38:
                    19:59:bc:cc:14:48:f0:cf:ca:fe:0a:4c:c0:eb:a6:
                    46:9e:0c:1c:ac:75:53:03:18:85:54:e9:33:08:2d:
                    7e:b4:0f:7c:33:8c:61:35:2e:4c:8a:b6:a0:b1:14:
                    89:1b:61:0d:14:c8:da:4b:41:92:0b:49:d1:56:56:
                    a8:99:78:d6:1f:c7:9f:6b:12:a4:d2:e9:35:71:ed:
                    6f:bf:de:d5:6d:e1:e9:21:b6:0c:fa:84:a6:91:f9:
                    57:65:34:54:0c:ad:db:3e:f0:04:b9:47:8a:07:c3:
                    d6:36:75:d6:d2:12:f2:60:83:28:06:0a:bf:68:ee:
                    4a:37:94:4c:65:2a:a9:9c:97:63:d1:bb:87:55:b3:
                    ca:62:0a:69:6d:e6:a4:60:00:88:dc:ba:83:6a:c3:
                    44:77:39:8a:39:f1:d8:93:f7:32:73:4d:fa:e3:19:
                    b6:e2:b9:f3:97:6c:e5:09:95:9a:83:6f:48:07:98:
                    6e:e7:c8:d9:c1:5d:a7:77:c3:e4:80:9e:dd:bb:a9:
                    e9:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:D7:72:46:CE:D4:C7:75:69:4F:C1:E0:E0:61:84:B8:92:B0:32:B9
            X509v3 Authority Key Identifier:
                keyid:A3:E6:E8:23:F6:DD:A6:7D:28:3A:9F:41:A7:29:09:90:6A:C9:A8:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o-boI_bdpn0oOp9BpykJkGrJqDc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/18a1bc-967c-4931-85b5-00f00af1c8d7/1/o-boI_bdpn0oOp9BpykJkGrJqDc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/18a1bc-967c-4931-85b5-00f00af1c8d7/1/o-boI_bdpn0oOp9BpykJkGrJqDc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:22:37:93:9c:25:13:01:04:cf:b8:c2:6d:c1:60:19:60:b2:
         d4:06:02:b2:3d:62:6a:74:5d:b4:f3:c1:08:31:c1:6b:33:a6:
         ae:9b:6f:d0:a6:55:0e:2d:28:07:2e:ff:22:b3:cd:a3:95:9c:
         3b:a9:62:69:03:cf:94:19:f9:06:ca:3c:32:58:dc:62:cf:ed:
         41:f3:16:14:ea:2c:31:5a:78:94:12:92:31:7a:a5:02:14:f5:
         f5:9a:16:26:94:11:30:f6:fa:17:2e:ad:b6:1e:4b:9e:16:bd:
         d6:c2:e1:16:39:d2:35:dc:de:1d:c4:bb:fe:ad:ed:e2:34:98:
         62:df:e1:99:67:f1:7e:0c:d3:61:0f:e5:8f:f9:f6:23:d7:ed:
         90:f2:95:0b:38:4b:7e:25:3d:d3:ce:cc:76:54:a6:41:e5:0c:
         c7:75:52:6f:ec:b2:a0:b8:4a:c6:ee:a2:0a:2c:63:36:02:0a:
         46:df:66:e6:b0:d0:d2:a4:e4:f5:c3:7a:17:77:b2:7d:1d:63:
         2d:ac:ba:81:39:a9:e0:60:cc:fc:65:92:d0:a3:2d:c7:0d:70:
         7e:48:7d:90:49:e7:40:bb:f2:a1:58:fc:ae:de:ce:11:64:93:
         8b:54:ab:d2:87:b4:23:1c:75:fe:62:9c:de:a0:a1:5b:8c:43:
         3e:cf:1c:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 08:16:33 2025 by rpki-client