This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.mft
File:                     OAsoOgUTlA1SCmgLiz0U28Nndw0.mft (raw, json)
Hash identifier:          NnaHyYrPXeXTHmfZ1OZB+ciAZyjH0PpR8rmQIdxbAek=
Subject key identifier:   06:1B:B8:F4:03:88:74:F3:1F:89:34:BE:75:82:BD:EB:A1:9C:E6:27
Authority key identifier: 38:0B:28:3A:05:13:94:0D:52:0A:68:0B:8B:3D:14:DB:C3:67:77:0D
Certificate issuer:       /CN=380b283a0513940d520a680b8b3d14dbc367770d
Certificate serial:       019B3A2227FA4DBA43C86419723C91F6CFEB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OAsoOgUTlA1SCmgLiz0U28Nndw0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.mft
Manifest number:          1793
Signing time:             Sat 20 Dec 2025 05:01:15 +0000
Manifest this update:     Sat 20 Dec 2025 05:01:15 +0000
Manifest next update:     Sun 21 Dec 2025 05:01:15 +0000
Files and hashes:         1: 3bo1_VmMil_ykLbPMkJbRag9ebw.roa (hash: 7RqP40Y7gY2KH0eL1Md3M9TCvHi+FVAYp4Z84nyqF5I=)
                          2: DHT86uq93soXgimlreq7l63TpDc.roa (hash: wHf/DMhPu6ocTE0CoJNwsMGJB1c1KuC84P7yMVgDFoQ=)
                          3: OAsoOgUTlA1SCmgLiz0U28Nndw0.crl (hash: jDf3+WAps3J4CPgKE9L6uJd5wKBRmWkCWTyqtN5ESoQ=)
                          4: PFZpLIhhyuxMIxoL3doX43uXr_0.roa (hash: vtL2UJAi6kU5TeC3dZFl0hJ0UyS0aR5hnJoB/XiExRo=)
                          5: SWMQOyTGATFbPpkUlNDEK9R_wf8.roa (hash: 7EyjDFKkXOO8nAJj/SWkoOh1Lc7HdnR9vXAWI1FbOGc=)
                          6: b5nAqkkbKBuuBF130kEHNP2qdVo.roa (hash: jUduPFl66e708dXNBc3a1/JM6+tcz9eKKz+qAjUZvhI=)
                          7: lbQJ2rq_BHyJF6s2vYGbT2GOaEI.roa (hash: aJ2Q0VP1V764a0H8xEOx6D+4ZkJqxXjOkmvFmOkcjng=)
                          8: u5j-w6koTI1w-MwveI_x0rT-ay0.roa (hash: gQTgZPcEOXTFI4ML0tCh67l8MTBl09iBxAa1VarPhx0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OAsoOgUTlA1SCmgLiz0U28Nndw0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 01:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3a:22:27:fa:4d:ba:43:c8:64:19:72:3c:91:f6:cf:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=380b283a0513940d520a680b8b3d14dbc367770d
        Validity
            Not Before: Dec 20 05:01:15 2025 GMT
            Not After : Dec 21 05:01:15 2025 GMT
        Subject: CN=061bb8f4038874f31f8934be7582bdeba19ce627
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:8e:7d:ba:d0:73:8a:ec:7b:eb:69:ee:27:2e:
                    57:2c:0f:f8:3f:b7:a1:47:c6:6c:fb:19:d5:9c:5e:
                    e9:9e:91:65:d9:e6:c9:83:36:92:69:5a:1a:ee:39:
                    a3:11:5f:65:47:3b:66:00:e8:1f:40:c3:85:3b:cb:
                    7b:fb:31:76:95:28:39:37:88:5e:47:74:e6:5b:01:
                    47:56:61:99:f7:9c:9d:eb:92:af:53:7e:1f:e4:ef:
                    84:a8:82:0f:60:66:0d:57:90:d0:0e:b0:00:1e:19:
                    82:79:75:46:ae:a2:76:d1:3d:20:9d:75:de:a3:73:
                    b0:60:6c:cf:99:36:bb:22:67:e3:92:38:af:0b:60:
                    9b:e2:96:c2:a0:0d:b9:23:1f:2c:58:e5:f1:58:53:
                    62:7e:59:9c:f9:6f:4e:a2:92:3c:ab:13:cb:4a:f2:
                    de:1f:01:71:3b:a6:74:2d:6f:a6:eb:f6:31:e4:25:
                    02:9e:23:0b:31:1f:ef:6f:a6:ce:c0:07:5b:06:44:
                    d0:aa:23:b6:08:eb:92:26:7b:dd:d9:95:95:44:e8:
                    2d:32:40:70:cc:99:94:60:71:00:69:59:c6:25:e2:
                    a5:5d:7c:fe:23:a7:9f:a6:52:4f:2d:13:e0:ce:93:
                    58:69:fb:02:00:53:c4:f1:fa:8b:59:3d:7d:c6:4d:
                    34:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:1B:B8:F4:03:88:74:F3:1F:89:34:BE:75:82:BD:EB:A1:9C:E6:27
            X509v3 Authority Key Identifier:
                keyid:38:0B:28:3A:05:13:94:0D:52:0A:68:0B:8B:3D:14:DB:C3:67:77:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OAsoOgUTlA1SCmgLiz0U28Nndw0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:6a:48:61:bb:8c:68:80:ee:89:70:ad:26:c5:1f:0e:04:d5:
         1d:0c:1c:72:38:61:9c:49:f1:e0:c8:ae:b6:61:ed:af:1d:8a:
         b4:29:dd:51:94:ee:cf:4c:50:69:f7:90:68:f3:1a:e1:be:79:
         10:1d:87:de:47:58:09:58:54:1d:63:b7:ac:9e:28:4b:bf:05:
         6d:1c:dc:e9:a6:f5:fd:c0:7a:9e:13:24:77:7d:76:f0:c6:8a:
         93:bb:1c:fc:e0:68:a7:5f:68:9e:8d:0a:28:23:b5:75:f4:e3:
         f3:a1:76:65:53:c3:e5:57:f7:02:0b:e0:36:cd:e4:dd:21:d2:
         db:9c:c2:47:da:93:55:f7:f8:19:6a:cf:c7:5e:a3:97:1d:e2:
         f2:f5:ac:57:c9:05:71:60:c0:2b:1c:4d:e1:cc:3c:cf:e1:d8:
         9e:37:31:15:47:98:b9:b3:7c:b8:a3:89:75:1b:6f:d6:b4:cf:
         fe:69:9a:3e:b8:0c:b4:5a:d7:77:24:1c:f2:8d:7b:77:69:71:
         9b:a7:7a:eb:e8:eb:01:3b:60:14:d0:b8:fa:54:5b:75:ff:2c:
         71:3f:b1:32:c4:d1:52:eb:34:97:e2:c7:ca:48:02:05:8b:3f:
         fa:e3:0c:e7:af:cd:e7:7f:05:51:30:97:18:f3:23:a9:1e:9e:
         8a:c0:9c:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZs6Iif6TbpDyGQZcjyR9s/rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4MGIyODNhMDUxMzk0MGQ1MjBhNjgwYjhiM2QxNGRiYzM2
Nzc3MGQwHhcNMjUxMjIwMDUwMTE1WhcNMjUxMjIxMDUwMTE1WjAzMTEwLwYDVQQD
EygwNjFiYjhmNDAzODg3NGYzMWY4OTM0YmU3NTgyYmRlYmExOWNlNjI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzo59utBziux762nuJy5XLA/4P7eh
R8Zs+xnVnF7pnpFl2ebJgzaSaVoa7jmjEV9lRztmAOgfQMOFO8t7+zF2lSg5N4he
R3TmWwFHVmGZ95yd65KvU34f5O+EqIIPYGYNV5DQDrAAHhmCeXVGrqJ20T0gnXXe
o3OwYGzPmTa7ImfjkjivC2Cb4pbCoA25Ix8sWOXxWFNiflmc+W9OopI8qxPLSvLe
HwFxO6Z0LW+m6/Yx5CUCniMLMR/vb6bOwAdbBkTQqiO2COuSJnvd2ZWVROgtMkBw
zJmUYHEAaVnGJeKlXXz+I6efplJPLRPgzpNYafsCAFPE8fqLWT19xk00GwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAYbuPQDiHTzH4k0vnWCveuhnOYnMB8GA1UdIwQY
MBaAFDgLKDoFE5QNUgpoC4s9FNvDZ3cNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0Fzb09nVVRsQTFTQ21nTGl6MFUyOE5uZHcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS9jMDhlMWUtZjViZC00YTFhLThhYmEt
Y2NmNjQ1NGJiMjRjLzEvT0Fzb09nVVRsQTFTQ21nTGl6MFUyOE5uZHcwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS9jMDhlMWUtZjViZC00YTFhLThhYmEtY2NmNjQ1NGJiMjRj
LzEvT0Fzb09nVVRsQTFTQ21nTGl6MFUyOE5uZHcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE2pIYbuM
aIDuiXCtJsUfDgTVHQwccjhhnEnx4MiutmHtrx2KtCndUZTuz0xQafeQaPMa4b55
EB2H3kdYCVhUHWO3rJ4oS78FbRzc6ab1/cB6nhMkd3128MaKk7sc/OBop19ono0K
KCO1dfTj86F2ZVPD5Vf3AgvgNs3k3SHS25zCR9qTVff4GWrPx16jlx3i8vWsV8kF
cWDAKxxN4cw8z+HYnjcxFUeYubN8uKOJdRtv1rTP/mmaPrgMtFrXdyQc8o17d2lx
m6d66+jrATtgFNC4+lRbdf8scT+xMsTRUus0l+LHykgCBYs/+uMM56/N538FUTCX
GPMjqR6eisCcvQ==
-----END CERTIFICATE-----
Generated at Sat Dec 20 06:51:07 2025 by rpki-client