This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.mft
File:                     OgsF9AppFjlHgjAtG1Zgc3JXpIs.mft (raw, json)
Hash identifier:          kewh3iMsoz3eq9HtglNwkQ+vQz54AgtfeoPowLIsiCc=
Subject key identifier:   96:FB:CD:DB:2B:FE:47:C4:F0:0D:D1:3E:50:14:F4:95:7B:96:61:A6
Authority key identifier: 3A:0B:05:F4:0A:69:16:39:47:82:30:2D:1B:56:60:73:72:57:A4:8B
Certificate issuer:       /CN=3a0b05f40a6916394782302d1b5660737257a48b
Certificate serial:       019AF31BE86D09A9175F85BCB726D11E47FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.mft
Manifest number:          1773
Signing time:             Sat 06 Dec 2025 10:01:23 +0000
Manifest this update:     Sat 06 Dec 2025 10:01:23 +0000
Manifest next update:     Sun 07 Dec 2025 10:01:23 +0000
Files and hashes:         1: DZz0HwqqARibmrSZa6SW5rPMqjw.roa (hash: RrKpz2JATQa7eOyKwCGmO2SKLZQ3cFfCVCyUkvbItu4=)
                          2: ExzZcEDDPK8coOGqZF_YdjfXfTY.roa (hash: tPyYsW2QgB+AcIghP1gBpSMfXHmZrllmzlo1OmzCBLM=)
                          3: Gn8W_5-ZNDFJsfiVCxmuucbwfKk.roa (hash: Rgg/jkarS1sTLeBLQCfZMMhxb1UIfrYeesbGBI5cJnk=)
                          4: MBTQXLr6vq1FguZXPQ1ZjnRLX0U.roa (hash: DiaDx8fvSFqfD/x6lAZDVyhLerP4wBkwuVRd6+tSH0s=)
                          5: OgsF9AppFjlHgjAtG1Zgc3JXpIs.crl (hash: FZCovuzW/wZvPfBSWbr0OhKjR4KfSq5URY+esKxSiMA=)
                          6: Qv7rTlC4gRPHfaKxpRdgaHHNVTA.roa (hash: XlEPB7O64MaJL4hcRAWkANJshOuG+WaN9ZFd6ghdbYU=)
                          7: TJKP__jRvYBXC3BBkXlRyzg2w0g.roa (hash: GHcOS4AOS4XcRUHap/0HcPOkV0jRHLBB5ZJ27pNCDaI=)
                          8: U5IWhBqG97b4K8O2J5yF8MO11Cg.roa (hash: 67On1isYc/HlpspA3CcCESox5lYQWgCrNwtUMTchIFw=)
                          9: XE56sg4j-KwhHyMOsf5OdQ2yPfQ.roa (hash: q5FJqkEGMGo0y2NyOEmtmUQTtcbbFoMSEXPs1Zzk/4s=)
                          10: gVbT8W2DuKQGSKyTYPlzijekpes.roa (hash: BySj2tLoj2ApXY6YZVgDXdpqUHFzskR55psIZFMLIGo=)
                          11: k8lkUNXkJfgLKxdnNkQeItf74mI.roa (hash: +7BizQyd5jBu8yV1kF9jWxW79lVh5H17r91ZJsNLG2M=)
                          12: lav_pheHCvxBgtCqNEbxkYM0umw.roa (hash: YW7brfjkvz7GVJXNTBMw1n/NGXj9Q6aDu3cCW6J9Jc0=)
                          13: mglBNgMdDuQJqu_ome6lp6hFg3A.roa (hash: ypf4NnUwoqhbRRy/+Y9ZZDsZslPk5UguTizNFGojpIg=)
                          14: mn4muSMtqf3dn_5yHyuMR1ZbTMQ.roa (hash: IK6XpF5Q2Tkc5Ny5fEX1eYhz0+eVTj1ZR6kmoLH/Zpg=)
                          15: p8DkltUHyoRPsRZ8wqS7HkhD_w4.roa (hash: WZ922M0yus1urQsDExc+JxOh5vKRfme8mJQQlGJgw6I=)
                          16: rZ9vAsmJNNOHqo4MI2omEwhOYCY.roa (hash: VzlpWQixiHZ9OCMkbuv/OS2n5wRiP2sqImjhqEZvNaE=)
                          17: uz7b7qFJVRiLSqWV--WgGVLTauQ.roa (hash: wpzxfmrcY85kS1F+ylqPRHNmG+YinHe9dDJOqmsBNC0=)
                          18: yPuhQgtDvz4rhwfbwpPAALIJ55o.roa (hash: I+ErOy+M7Yzs1SVwCt9jCXFOvf6k0f8yBGW1RCbKRIM=)
                          19: zyZ78bjjA4tIA3fv3utJmc55bbo.roa (hash: entrEKMQHYUvG/L8GyBbjw39lpFARYO30PpBBNqPFi4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f3:1b:e8:6d:09:a9:17:5f:85:bc:b7:26:d1:1e:47:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a0b05f40a6916394782302d1b5660737257a48b
        Validity
            Not Before: Dec  6 10:01:23 2025 GMT
            Not After : Dec  7 10:01:23 2025 GMT
        Subject: CN=96fbcddb2bfe47c4f00dd13e5014f4957b9661a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:61:8f:b7:8a:76:78:69:ee:63:97:17:ba:e3:
                    09:03:6e:e5:ef:ea:2a:41:5f:3b:6e:7f:e7:d7:20:
                    dc:26:da:db:7f:ff:28:41:d7:c1:d7:50:c0:2c:03:
                    26:83:40:0b:a7:05:8a:d0:78:b9:22:2a:5b:6d:f7:
                    e6:93:44:87:a3:c7:e1:6f:f8:a0:99:ac:e0:4c:5d:
                    a9:ea:88:99:1e:81:56:86:3b:b4:d3:ec:93:8e:02:
                    f5:4e:1a:80:ca:4b:9f:8c:ea:00:b2:0f:00:e1:16:
                    b8:ee:af:3f:62:35:bd:4e:f8:55:ad:4b:71:d2:55:
                    8c:73:67:f5:a5:86:e3:fd:06:97:69:92:d4:bd:e4:
                    ac:bd:5a:92:36:ba:1d:22:bd:93:f4:ed:b6:3c:94:
                    c5:31:88:9b:76:d1:82:cd:86:52:3c:49:9f:2d:3c:
                    09:e0:36:9a:97:11:f0:2b:2c:ea:0e:4b:67:dd:13:
                    da:75:24:01:49:89:b3:f2:5f:99:b6:4e:7b:ca:02:
                    e2:86:14:f8:a7:88:99:76:35:af:7f:3c:25:d1:b3:
                    30:42:a0:37:cc:8a:43:a5:7e:92:8d:88:81:17:c5:
                    0e:1a:aa:7a:ac:7b:69:48:8c:a1:2a:99:2f:11:2e:
                    1f:d1:b2:90:75:86:bf:e1:67:7e:ca:c3:2d:15:f7:
                    30:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:FB:CD:DB:2B:FE:47:C4:F0:0D:D1:3E:50:14:F4:95:7B:96:61:A6
            X509v3 Authority Key Identifier:
                keyid:3A:0B:05:F4:0A:69:16:39:47:82:30:2D:1B:56:60:73:72:57:A4:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:60:9e:59:74:c8:7d:cc:ac:14:9b:8b:3c:02:f1:b5:f3:4d:
         d6:d0:bd:2c:a0:35:b9:9c:ac:ba:62:51:c4:fb:62:ee:4e:bc:
         a1:44:1a:10:24:26:a4:be:6d:5a:3b:43:73:11:4a:37:9f:bc:
         2d:b7:76:88:ac:2e:fc:ee:d3:15:3d:4b:65:0b:63:da:53:78:
         82:c7:af:e4:2e:8c:1c:c5:be:90:01:ee:4e:80:5b:3f:44:d6:
         75:4f:74:db:c9:f1:84:46:1e:1a:23:bb:91:ee:de:9f:98:70:
         9d:62:e0:12:2b:a7:fa:96:e8:dc:c5:b8:4b:cf:34:59:6e:0f:
         43:5e:83:d5:8b:78:89:73:9d:46:cd:76:fc:d9:a6:b1:56:bb:
         33:0f:b5:46:c8:fa:1c:6e:ed:6b:c9:81:53:38:ab:1a:5e:d0:
         19:51:b4:5b:c2:2b:5f:9c:70:6a:95:74:14:c0:f0:84:67:53:
         ea:9b:18:16:8c:ac:e0:3d:24:06:a9:bf:05:64:c9:96:68:d8:
         c7:15:80:76:dd:8e:81:c0:60:74:14:b4:e9:46:47:bf:6b:67:
         d5:55:b8:5b:45:a7:ab:45:10:93:f2:ab:8d:a8:96:ab:d4:34:
         05:e4:28:22:63:1b:d0:1d:80:d6:27:c4:f8:43:5e:5d:1b:ef:
         0b:d7:ef:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZrzG+htCakXX4W8tybRHkf9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhMGIwNWY0MGE2OTE2Mzk0NzgyMzAyZDFiNTY2MDczNzI1
N2E0OGIwHhcNMjUxMjA2MTAwMTIzWhcNMjUxMjA3MTAwMTIzWjAzMTEwLwYDVQQD
Eyg5NmZiY2RkYjJiZmU0N2M0ZjAwZGQxM2U1MDE0ZjQ5NTdiOTY2MWE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2GPt4p2eGnuY5cXuuMJA27l7+oq
QV87bn/n1yDcJtrbf/8oQdfB11DALAMmg0ALpwWK0Hi5Iipbbffmk0SHo8fhb/ig
mazgTF2p6oiZHoFWhju00+yTjgL1ThqAykufjOoAsg8A4Ra47q8/YjW9TvhVrUtx
0lWMc2f1pYbj/QaXaZLUveSsvVqSNrodIr2T9O22PJTFMYibdtGCzYZSPEmfLTwJ
4DaalxHwKyzqDktn3RPadSQBSYmz8l+Ztk57ygLihhT4p4iZdjWvfzwl0bMwQqA3
zIpDpX6SjYiBF8UOGqp6rHtpSIyhKpkvES4f0bKQdYa/4Wd+ysMtFfcw8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJb7zdsr/kfE8A3RPlAU9JV7lmGmMB8GA1UdIwQY
MBaAFDoLBfQKaRY5R4IwLRtWYHNyV6SLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT2dzRjlBcHBGamxIZ2pBdEcxWmdjM0pYcElzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC83NTgzY2ItZDMxZS00ZTAzLWIxNGIt
YjIwZTI4ZjUxODhmLzEvT2dzRjlBcHBGamxIZ2pBdEcxWmdjM0pYcElzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC83NTgzY2ItZDMxZS00ZTAzLWIxNGItYjIwZTI4ZjUxODhm
LzEvT2dzRjlBcHBGamxIZ2pBdEcxWmdjM0pYcElzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR2CeWXTI
fcysFJuLPALxtfNN1tC9LKA1uZysumJRxPti7k68oUQaECQmpL5tWjtDcxFKN5+8
Lbd2iKwu/O7TFT1LZQtj2lN4gsev5C6MHMW+kAHuToBbP0TWdU9028nxhEYeGiO7
ke7en5hwnWLgEiun+pbo3MW4S880WW4PQ16D1Yt4iXOdRs12/NmmsVa7Mw+1Rsj6
HG7ta8mBUzirGl7QGVG0W8IrX5xwapV0FMDwhGdT6psYFoys4D0kBqm/BWTJlmjY
xxWAdt2OgcBgdBS06UZHv2tn1VW4W0Wnq0UQk/KrjaiWq9Q0BeQoImMb0B2A1ifE
+ENeXRvvC9fvRg==
-----END CERTIFICATE-----
Generated at Sat Dec 6 14:55:20 2025 by rpki-client