This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/816b8a-eccc-4789-a1f3-3570d9bf5679/1/ojtxv9dRwM8_cUN4b9pEMufM7Cw.mft
File:                     ojtxv9dRwM8_cUN4b9pEMufM7Cw.mft (raw, json)
Hash identifier:          wrYwHKHHGHnJ2p/76wd/uJi+4RGmyzeXfPwLJ4GYjj0=
Subject key identifier:   71:9B:1D:F7:61:AF:A1:B2:BD:15:A2:3B:72:29:00:F8:CC:9C:24:00
Authority key identifier: A2:3B:71:BF:D7:51:C0:CF:3F:71:43:78:6F:DA:44:32:E7:CC:EC:2C
Certificate issuer:       /CN=a23b71bfd751c0cf3f7143786fda4432e7ccec2c
Certificate serial:       019B3BA290627EBDF6FE17F38AC215F70804
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ojtxv9dRwM8_cUN4b9pEMufM7Cw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/816b8a-eccc-4789-a1f3-3570d9bf5679/1/ojtxv9dRwM8_cUN4b9pEMufM7Cw.mft
Manifest number:          1788
Signing time:             Sat 20 Dec 2025 12:01:08 +0000
Manifest this update:     Sat 20 Dec 2025 12:01:08 +0000
Manifest next update:     Sun 21 Dec 2025 12:01:08 +0000
Files and hashes:         1: e-gDJNXzm0Ybkz_ors_9mzoknFc.roa (hash: EmVgkp+dxUqbi6FSU/qMEIRuJJb2TeTwsYYhWoEauko=)
                          2: ghlEwsQZQs2UcsGEnGv2GYmqozE.roa (hash: IupvEzCg2+AgoEqXLEZo9g4xmShB4z81Opbof+wzS0A=)
                          3: mEEdwwEWwRFuOQjXEE0GqAJtD6g.roa (hash: 9OEXXQKo0v2yF8ajNKcSoh8Qu8qa2iGEylM4hM3dSfo=)
                          4: ojtxv9dRwM8_cUN4b9pEMufM7Cw.crl (hash: d3U9TxvlLaiuqTLSVnspHTwDF1skXSUuRo+pteDYQPE=)
                          5: tqmucHZ-pG1XVssJsj5NHaCO3QA.roa (hash: AsOtQxy2X2EvyvLCvGZtq2rARAmeWCtTobK54XK2EB8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/816b8a-eccc-4789-a1f3-3570d9bf5679/1/ojtxv9dRwM8_cUN4b9pEMufM7Cw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/816b8a-eccc-4789-a1f3-3570d9bf5679/1/ojtxv9dRwM8_cUN4b9pEMufM7Cw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ojtxv9dRwM8_cUN4b9pEMufM7Cw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 10:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3b:a2:90:62:7e:bd:f6:fe:17:f3:8a:c2:15:f7:08:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a23b71bfd751c0cf3f7143786fda4432e7ccec2c
        Validity
            Not Before: Dec 20 12:01:08 2025 GMT
            Not After : Dec 21 12:01:08 2025 GMT
        Subject: CN=719b1df761afa1b2bd15a23b722900f8cc9c2400
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:f4:93:ea:dc:27:75:5e:d1:8b:a8:75:d4:1e:
                    ba:9b:7a:8e:2a:b3:ab:c3:e1:6b:15:05:2b:e7:8a:
                    38:c5:0a:e2:b1:40:a8:2c:bf:43:32:b8:7b:7d:f5:
                    87:ec:37:1c:8e:d2:75:b4:2c:6f:0d:7a:27:5f:5c:
                    0e:e4:06:fb:03:1b:5b:f1:29:47:c0:fd:91:96:e2:
                    3b:f7:e8:6d:45:fd:9b:42:93:77:44:4c:84:4b:27:
                    e1:d6:df:01:6a:9d:20:63:27:b0:b1:d2:fc:ba:c7:
                    96:d6:35:ff:ec:fd:25:16:6f:05:3e:58:6e:39:aa:
                    64:4f:e0:73:ef:6f:95:40:f9:3e:21:46:c4:81:03:
                    7c:be:71:35:d8:1e:b5:ec:ba:4f:14:c6:18:f7:b7:
                    a3:45:8b:69:86:33:fc:91:ac:5f:1c:81:77:57:f0:
                    e1:fb:6b:59:1f:0e:ab:3e:4b:0d:0b:ba:9f:11:dd:
                    5f:99:f1:9d:0f:25:b0:87:29:2d:6d:f8:b5:62:ed:
                    61:ad:0f:3d:e9:f3:12:e2:74:21:8b:15:fb:d8:c6:
                    1a:26:aa:21:ed:30:3b:b6:45:1f:db:02:91:0e:fa:
                    37:da:6c:56:1e:86:dd:87:44:87:1d:5b:a1:c3:0a:
                    f9:64:22:87:d1:91:b8:0f:76:7d:4d:59:90:ad:63:
                    45:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:9B:1D:F7:61:AF:A1:B2:BD:15:A2:3B:72:29:00:F8:CC:9C:24:00
            X509v3 Authority Key Identifier:
                keyid:A2:3B:71:BF:D7:51:C0:CF:3F:71:43:78:6F:DA:44:32:E7:CC:EC:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ojtxv9dRwM8_cUN4b9pEMufM7Cw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/816b8a-eccc-4789-a1f3-3570d9bf5679/1/ojtxv9dRwM8_cUN4b9pEMufM7Cw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/816b8a-eccc-4789-a1f3-3570d9bf5679/1/ojtxv9dRwM8_cUN4b9pEMufM7Cw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:ec:c1:2b:7e:ef:2c:41:8d:2d:6c:b0:59:8a:8b:8a:f9:8f:
         14:9c:fa:73:08:8c:23:c9:55:15:04:04:9b:10:9f:04:35:ca:
         ed:15:48:24:dc:d7:f9:14:0c:58:e1:94:1e:96:f9:c0:22:aa:
         54:11:08:7c:45:63:18:44:39:bd:ce:b2:a1:67:5e:c4:0f:3c:
         e2:67:e1:51:25:54:0d:21:b3:5b:2f:b5:16:37:43:5e:de:ed:
         3c:27:7f:d7:e5:b3:05:b1:31:ea:37:c5:b1:1e:f0:22:99:c6:
         16:51:4c:47:15:a4:8f:3f:ea:31:b3:d4:f7:fc:44:63:4c:c5:
         f1:3f:c5:10:e9:72:91:79:02:d3:82:70:b5:6c:31:10:ed:d2:
         a7:2c:59:59:bc:3e:f6:3d:c7:ea:3d:ed:b6:65:a5:df:92:c4:
         fa:a9:68:fe:1f:1a:ed:b8:bc:43:72:95:e4:b2:5f:05:02:46:
         23:e8:db:22:cf:68:9a:50:f9:11:f8:7f:5f:12:32:c8:09:65:
         ca:d8:d8:1f:4c:2d:07:e3:cc:2b:14:c9:c5:d4:8d:7e:cb:6c:
         e3:8b:e6:89:92:da:15:33:6e:fa:f1:48:a6:17:9b:1c:c5:b9:
         e6:fe:f8:fe:4a:a5:03:7f:7d:20:f2:86:51:c9:52:9c:35:52:
         6c:14:6a:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZs7opBifr32/hfzisIV9wgEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyM2I3MWJmZDc1MWMwY2YzZjcxNDM3ODZmZGE0NDMyZTdj
Y2VjMmMwHhcNMjUxMjIwMTIwMTA4WhcNMjUxMjIxMTIwMTA4WjAzMTEwLwYDVQQD
Eyg3MTliMWRmNzYxYWZhMWIyYmQxNWEyM2I3MjI5MDBmOGNjOWMyNDAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/ST6twndV7Ri6h11B66m3qOKrOr
w+FrFQUr54o4xQrisUCoLL9DMrh7ffWH7DccjtJ1tCxvDXonX1wO5Ab7Axtb8SlH
wP2RluI79+htRf2bQpN3REyESyfh1t8Bap0gYyewsdL8useW1jX/7P0lFm8FPlhu
OapkT+Bz72+VQPk+IUbEgQN8vnE12B617LpPFMYY97ejRYtphjP8kaxfHIF3V/Dh
+2tZHw6rPksNC7qfEd1fmfGdDyWwhyktbfi1Yu1hrQ896fMS4nQhixX72MYaJqoh
7TA7tkUf2wKRDvo32mxWHobdh0SHHVuhwwr5ZCKH0ZG4D3Z9TVmQrWNFywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHGbHfdhr6GyvRWiO3IpAPjMnCQAMB8GA1UdIwQY
MBaAFKI7cb/XUcDPP3FDeG/aRDLnzOwsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2p0eHY5ZFJ3TThfY1VONGI5cEVNdWZNN0N3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni84MTZiOGEtZWNjYy00Nzg5LWExZjMt
MzU3MGQ5YmY1Njc5LzEvb2p0eHY5ZFJ3TThfY1VONGI5cEVNdWZNN0N3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni84MTZiOGEtZWNjYy00Nzg5LWExZjMtMzU3MGQ5YmY1Njc5
LzEvb2p0eHY5ZFJ3TThfY1VONGI5cEVNdWZNN0N3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL+zBK37v
LEGNLWywWYqLivmPFJz6cwiMI8lVFQQEmxCfBDXK7RVIJNzX+RQMWOGUHpb5wCKq
VBEIfEVjGEQ5vc6yoWdexA884mfhUSVUDSGzWy+1FjdDXt7tPCd/1+WzBbEx6jfF
sR7wIpnGFlFMRxWkjz/qMbPU9/xEY0zF8T/FEOlykXkC04JwtWwxEO3SpyxZWbw+
9j3H6j3ttmWl35LE+qlo/h8a7bi8Q3KV5LJfBQJGI+jbIs9omlD5Efh/XxIyyAll
ytjYH0wtB+PMKxTJxdSNfsts44vmiZLaFTNu+vFIphebHMW55v74/kqlA399IPKG
UclSnDVSbBRq/Q==
-----END CERTIFICATE-----
Generated at Sat Dec 20 17:52:33 2025 by rpki-client