This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/oGOa3x4LhLn_ZOT46-Y4679dJ7k.mft
File:                     oGOa3x4LhLn_ZOT46-Y4679dJ7k.mft (raw, json)
Hash identifier:          IHSImJEBtm8QOjIHH8PjtPtSLjf70aiM53+TYR68WMY=
Subject key identifier:   51:69:39:81:4C:CD:C3:FE:22:FA:52:02:49:63:47:A3:D8:DC:7F:D4
Authority key identifier: A0:63:9A:DF:1E:0B:84:B9:FF:64:E4:F8:EB:E6:38:EB:BF:5D:27:B9
Certificate issuer:       /CN=a0639adf1e0b84b9ff64e4f8ebe638ebbf5d27b9
Certificate serial:       019B3C1075C2FA124C2805BF17A8EC5D8B3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oGOa3x4LhLn_ZOT46-Y4679dJ7k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/oGOa3x4LhLn_ZOT46-Y4679dJ7k.mft
Manifest number:          1789
Signing time:             Sat 20 Dec 2025 14:01:10 +0000
Manifest this update:     Sat 20 Dec 2025 14:01:10 +0000
Manifest next update:     Sun 21 Dec 2025 14:01:10 +0000
Files and hashes:         1: 7C0eLiHaSivPjWvCeJI7OYyeX0w.roa (hash: QECF5Dw9n/dUuIXbwLPUz1r2SDqHk19ywfPN3IJ1Bjo=)
                          2: O8JzFk1PWBgx-tr4EXZtg8jcmlQ.asa (hash: NgGatJmK3hx1VDzLByDMsWijy7WzJx6KU+I3UEmcdSE=)
                          3: hJFP2avKadTDPFPMJQaJFx_oBVM.asa (hash: dhlUGncVsS/oIu2NFJWeAVpNxmOKf3ZyjrL032se6N8=)
                          4: iALFaO66XR7bzKvgq4B-T0dt4x4.roa (hash: PA5b0zcAe+bx03MLbtIWhk9SgkBfHIkZikFyxJSWiS8=)
                          5: oGOa3x4LhLn_ZOT46-Y4679dJ7k.crl (hash: E6TUvF5yzwTucPui+SzDFCyxv5kBWvl1AJLKq+maRrE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/oGOa3x4LhLn_ZOT46-Y4679dJ7k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/oGOa3x4LhLn_ZOT46-Y4679dJ7k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oGOa3x4LhLn_ZOT46-Y4679dJ7k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 14:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3c:10:75:c2:fa:12:4c:28:05:bf:17:a8:ec:5d:8b:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0639adf1e0b84b9ff64e4f8ebe638ebbf5d27b9
        Validity
            Not Before: Dec 20 14:01:10 2025 GMT
            Not After : Dec 21 14:01:10 2025 GMT
        Subject: CN=516939814ccdc3fe22fa5202496347a3d8dc7fd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:aa:e7:82:fe:da:e7:3a:43:95:85:39:a3:d5:
                    95:56:b1:07:16:5c:be:f2:44:47:fc:7c:16:71:4b:
                    65:7e:5b:c3:f3:07:81:bc:86:82:3d:a0:d2:28:01:
                    93:04:09:3f:af:ff:b6:0b:bc:52:0a:cb:a1:23:10:
                    a4:67:2e:08:50:3e:a2:0b:56:1e:f9:65:d4:4c:47:
                    1c:c0:30:9d:ba:ba:7b:dc:59:ce:c4:34:dc:eb:fe:
                    f0:d9:b9:49:9a:4c:a1:e3:e3:4a:08:cd:69:32:0c:
                    2c:ff:13:c1:60:c3:bc:ab:23:d7:91:2a:46:ad:7e:
                    5a:5a:19:95:de:79:52:0b:15:4b:12:8a:a7:ab:52:
                    33:b1:f9:42:95:d7:05:3d:e9:1c:52:6e:08:4c:ee:
                    58:30:7f:29:4c:22:59:35:fd:42:2c:1b:fd:3e:d6:
                    77:a3:b9:39:06:5f:cb:0c:e6:b2:8f:32:03:af:05:
                    02:4a:dc:3b:07:7d:1b:9a:bb:90:b5:56:4f:2c:0b:
                    6d:e8:73:2c:35:e5:67:f1:3f:f1:bb:ac:9b:14:7a:
                    b2:6c:97:c5:45:27:4c:1e:bb:46:60:7d:24:64:59:
                    1f:92:18:5d:30:e9:ae:12:c7:9a:6b:83:26:11:fe:
                    d4:52:d9:d4:c3:b8:dc:95:1c:a4:da:17:e8:57:82:
                    e0:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:69:39:81:4C:CD:C3:FE:22:FA:52:02:49:63:47:A3:D8:DC:7F:D4
            X509v3 Authority Key Identifier:
                keyid:A0:63:9A:DF:1E:0B:84:B9:FF:64:E4:F8:EB:E6:38:EB:BF:5D:27:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oGOa3x4LhLn_ZOT46-Y4679dJ7k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/oGOa3x4LhLn_ZOT46-Y4679dJ7k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/oGOa3x4LhLn_ZOT46-Y4679dJ7k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:e8:56:ca:f7:cd:8e:b5:18:e3:d2:31:7c:10:be:2e:ef:01:
         89:be:10:08:76:6d:c2:1e:21:2b:87:6d:12:a2:0a:0d:92:17:
         8b:8b:84:f9:6b:ef:3c:8d:86:02:1b:cf:8c:d2:6e:bd:d9:09:
         01:15:9d:14:5e:cf:cc:e5:1c:3c:b8:a0:a9:88:ea:0d:b6:8b:
         c8:43:17:f9:64:6f:63:47:6d:cc:14:1e:a3:0b:9d:53:70:39:
         8b:15:6b:64:a5:f4:ee:96:2a:54:7a:da:da:d6:de:89:fd:96:
         06:fb:a0:cb:a5:83:c5:6f:86:ae:02:09:3d:3e:c5:e6:da:99:
         1e:b5:5c:de:fc:85:25:f1:57:5a:6d:ee:3f:06:92:17:ef:31:
         0e:49:bd:06:1f:59:4b:af:7a:11:bc:2f:cc:e0:cf:3d:72:c2:
         9f:0f:74:f0:ae:75:64:69:94:fe:cd:53:80:0c:68:34:5c:ca:
         67:85:c7:6b:41:64:f5:97:7f:ae:5d:61:ba:61:ff:3c:86:9f:
         4a:e6:cf:f7:fa:70:0f:f0:29:5e:aa:4b:7e:01:bf:32:7e:6f:
         4e:b1:5e:01:68:09:21:fb:d6:ff:de:24:34:32:1d:22:21:0f:
         15:93:19:f8:18:ad:99:d6:9a:da:b0:8d:67:94:14:3d:b9:99:
         c4:83:46:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 22:52:54 2025 by rpki-client