This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.mft
File:                     OH1t9-t1QuAzOu7dFK3_j1H4y9g.mft (raw, json)
Hash identifier:          u/uIS0FeRnwh1zwdGfU0wVP7hiXRZA014EeoTwZ8Tvk=
Subject key identifier:   09:25:CD:09:30:37:5B:14:59:B9:D0:40:F4:48:74:FB:2C:CB:DE:06
Authority key identifier: 38:7D:6D:F7:EB:75:42:E0:33:3A:EE:DD:14:AD:FF:8F:51:F8:CB:D8
Certificate issuer:       /CN=387d6df7eb7542e0333aeedd14adff8f51f8cbd8
Certificate serial:       019B3946AC515849CA7EA2AE12C2221FAA24
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OH1t9-t1QuAzOu7dFK3_j1H4y9g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.mft
Manifest number:          1795
Signing time:             Sat 20 Dec 2025 01:01:31 +0000
Manifest this update:     Sat 20 Dec 2025 01:01:31 +0000
Manifest next update:     Sun 21 Dec 2025 01:01:31 +0000
Files and hashes:         1: 3nAxOrqe3oi83iVjt7-kMzJ_imI.roa (hash: 0jNIl4uBhcm5LdIuubw+L/Ha2QMXka6zLLkNeAcF40c=)
                          2: 7B2j1343QblR9F6iTWiRinHn8x0.roa (hash: Bp/dbOZRIjunqnEsDuN3X0tRwg1SKVjgcGEA09U24Zc=)
                          3: B9dwnbBbiJenj05UDjyUy_TzXDg.roa (hash: s4Wv5YaGEZaX82N6dusRWR3tSJBVmvjmxniLSHfxYAE=)
                          4: E6umy5_OlHHb3NOgNKiaqTj372A.roa (hash: kmYIRPqCRch39x2r6WhmK+8aDVBlwYVLvzQIGAbOPps=)
                          5: GrCJk2XTvFQ1bFg3LeF86Dm0kMU.roa (hash: //aHWa+QTi3TqyDc0NocuZ54Ser38N49WnMxWn6LdwE=)
                          6: OH1t9-t1QuAzOu7dFK3_j1H4y9g.crl (hash: X5CAq3D/Rd3abBDdDsEUwD9GuhTfJLVusz7QGZD+jzI=)
                          7: P0hYRZk_epkkwrcDiaxk_ejd9pE.roa (hash: RbP7Hj7hNb6SHmHJtPw1bzOEo2w8Ign3eKIaXKeZWz8=)
                          8: SOBAES4j7h-D6nKfccoc2NpSr8A.roa (hash: vmAKmT6VUkF1cozh164hgKJKVk8BJXYwDbwibYkkVy4=)
                          9: WBa-OMWvS5R9EiWcpIqPa_m7lKo.roa (hash: JhWDx8KAw0uX/VJGQRKzvoZLcAnbsOAM+D0EwwgJJrs=)
                          10: _6ucnx77KQFalvj5yEE2wp5osls.roa (hash: Xw55WCSv/8tmiRj4/KKvZ6v3swmB6TKO4qL1Xw6aI30=)
                          11: hmNo0lfF6aVfLa7MkqmEKjtbdyQ.roa (hash: +xwhsq1RdvJOWfeJtHcoWSMc+U0UkSWEqMUWf9xz80w=)
                          12: jtw47htspCaZBqLn-szAwwLDgRI.roa (hash: 4ge4ZfZPpCPnlsJ6k5nbKp3z9nIWCai+fnrSIWJ/WUA=)
                          13: jzrvK-bgXnpFKZtkluSwDEQbp08.roa (hash: ZM3tthCJVaSjXclzoJDdeWjLh7O5ICpnIBuMTiMEL9g=)
                          14: nDB6bqiXy-rzhdku9Lj005kPHfA.roa (hash: 0AJR+PurXnO7T0pJNk8Tq3MFQx7X/cSxW3eCAXJvtLk=)
                          15: pvCC0r4LUt3fsl1VHVQdfXh8Y18.roa (hash: 7j0tvWV4dVH4uAAkH8k/IyIqfSMk5UZQp8CnBxjMpFY=)
                          16: u50dx3Lab1g7VZDVh4T56LPcn_0.roa (hash: jDquIHZmp2NFyWqEfhpXVj8qaJ2TUhubdI3kfdM2qms=)
                          17: z5q48ktpf1eARPpbmIGK9GsvsrQ.roa (hash: tmWASzkDn54AHUg2VFq+szTIlcEFXE4zmXDoc40cFbw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OH1t9-t1QuAzOu7dFK3_j1H4y9g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 01:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:39:46:ac:51:58:49:ca:7e:a2:ae:12:c2:22:1f:aa:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=387d6df7eb7542e0333aeedd14adff8f51f8cbd8
        Validity
            Not Before: Dec 20 01:01:31 2025 GMT
            Not After : Dec 21 01:01:31 2025 GMT
        Subject: CN=0925cd0930375b1459b9d040f44874fb2ccbde06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:16:57:19:32:1a:17:67:5b:79:b8:38:ad:bd:
                    fd:72:44:4e:06:af:ce:b3:a4:66:8b:83:e7:75:20:
                    3e:8f:84:7f:78:90:0f:a0:c0:26:e0:35:c1:3b:a4:
                    f1:1d:76:4d:ae:08:83:1a:5a:f0:b5:db:80:42:08:
                    4a:85:21:e5:10:36:bb:e4:ab:ba:9a:fa:68:b7:6d:
                    10:55:a0:7a:49:55:56:da:ac:43:54:3f:ae:6c:97:
                    38:3c:e8:f0:88:a7:20:bc:da:6a:d1:6d:2d:bc:bd:
                    8b:d7:62:65:af:53:98:a6:91:6f:ee:d1:b9:5a:f8:
                    8b:c3:12:bb:21:99:a8:61:9d:b1:fc:c0:c0:2d:62:
                    69:fb:46:b9:91:d8:c3:cf:4f:1b:8d:34:39:2d:f3:
                    57:e2:e5:0b:04:0a:d3:ab:2a:c4:be:2d:bb:db:e3:
                    da:49:4f:7d:2e:5e:91:40:3b:c9:8c:f2:b8:8e:b5:
                    57:53:b6:38:e9:02:12:ab:e6:b1:b0:78:92:cd:9c:
                    6d:d6:fb:58:a0:cf:8e:26:c8:fd:a8:2a:5d:36:37:
                    93:32:aa:17:97:de:3e:6d:01:88:d8:16:31:10:56:
                    30:4a:5a:3e:5c:ae:02:b4:b1:f3:fb:96:39:d9:e6:
                    ce:9a:1b:3a:15:d4:b2:2f:2f:a7:7d:cd:f5:61:b8:
                    d4:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:25:CD:09:30:37:5B:14:59:B9:D0:40:F4:48:74:FB:2C:CB:DE:06
            X509v3 Authority Key Identifier:
                keyid:38:7D:6D:F7:EB:75:42:E0:33:3A:EE:DD:14:AD:FF:8F:51:F8:CB:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OH1t9-t1QuAzOu7dFK3_j1H4y9g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:96:bb:de:c1:6b:cc:cc:af:d3:54:06:32:d1:f3:d8:f4:94:
         af:fa:d4:b1:d3:7e:ae:aa:bd:b1:f4:1f:9b:97:f5:9a:ca:83:
         14:a4:a3:f2:75:2f:34:f8:93:c0:b9:dc:09:ed:56:c1:d8:33:
         a8:e1:84:7b:21:3f:11:27:f9:f0:41:ab:3b:6a:76:26:6d:a7:
         c8:d0:12:72:1d:53:ae:d5:46:c4:a1:e4:f3:af:5a:c8:c8:f4:
         96:36:2e:e9:9d:38:51:27:38:d2:2e:65:88:2b:9d:cf:f3:96:
         20:5f:2e:b2:32:9d:b3:d6:5b:9f:9a:c1:33:81:f0:a5:b2:0d:
         65:23:07:16:75:0e:9c:c4:d3:5c:f3:ce:2f:c5:79:fd:37:a0:
         7d:81:3f:4f:89:1e:03:2e:b7:3b:5b:67:fa:66:03:3c:6e:d5:
         06:58:9c:0d:19:39:ab:13:6f:e1:bf:8b:aa:8d:4f:15:8f:cc:
         b2:63:0d:10:82:4d:3b:b5:8f:b0:73:67:61:a4:3c:c4:94:b2:
         06:14:c0:c4:76:77:05:8e:58:7b:13:f6:5f:f9:58:ed:8c:0a:
         d9:58:89:62:e1:99:0e:6d:2f:5a:fa:17:66:ca:30:1b:74:b5:
         ad:48:86:0a:f1:d5:5a:a2:0b:70:8e:e1:7b:19:bd:71:6a:8e:
         ef:97:bd:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 06:02:10 2025 by rpki-client