This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/668345-f5bc-4a3f-b6ff-10df49f65616/1/ovl077UOcpyeAVqLwrbCsGGd_IQ.mft
File:                     ovl077UOcpyeAVqLwrbCsGGd_IQ.mft (raw, json)
Hash identifier:          zOo0KuEvxv/Lx7knO5zoe68B+DmUmHeaF/rwXuyfA5k=
Subject key identifier:   E5:4F:BF:36:7B:B9:9A:B8:47:33:88:64:89:10:E7:00:93:D8:B4:58
Authority key identifier: A2:F9:74:EF:B5:0E:72:9C:9E:01:5A:8B:C2:B6:C2:B0:61:9D:FC:84
Certificate issuer:       /CN=a2f974efb50e729c9e015a8bc2b6c2b0619dfc84
Certificate serial:       019AF1D1E09C188CA9C5965F661562370AD9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ovl077UOcpyeAVqLwrbCsGGd_IQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/668345-f5bc-4a3f-b6ff-10df49f65616/1/ovl077UOcpyeAVqLwrbCsGGd_IQ.mft
Manifest number:          0C2C
Signing time:             Sat 06 Dec 2025 04:00:54 +0000
Manifest this update:     Sat 06 Dec 2025 04:00:54 +0000
Manifest next update:     Sun 07 Dec 2025 04:00:54 +0000
Files and hashes:         1: Uk_aanYMRxowJq16GMNyhbsFOEw.roa (hash: creuRsSl8nSakc/hCQHakSFNIaRZLii8X1gMM9BUYWY=)
                          2: ovl077UOcpyeAVqLwrbCsGGd_IQ.crl (hash: PyObqEEu5S3kfrCWKI9gg+BrjwmjUw9eXFSl93OMZfM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/668345-f5bc-4a3f-b6ff-10df49f65616/1/ovl077UOcpyeAVqLwrbCsGGd_IQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/668345-f5bc-4a3f-b6ff-10df49f65616/1/ovl077UOcpyeAVqLwrbCsGGd_IQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ovl077UOcpyeAVqLwrbCsGGd_IQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:d1:e0:9c:18:8c:a9:c5:96:5f:66:15:62:37:0a:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2f974efb50e729c9e015a8bc2b6c2b0619dfc84
        Validity
            Not Before: Dec  6 04:00:54 2025 GMT
            Not After : Dec  7 04:00:54 2025 GMT
        Subject: CN=e54fbf367bb99ab8473388648910e70093d8b458
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:e3:59:39:da:c2:de:d4:57:33:9e:92:4c:78:
                    66:ab:36:85:68:a2:2f:9e:4e:5c:3d:a0:a2:2f:56:
                    2e:30:d3:7c:90:bc:56:65:06:37:a0:ab:20:8d:16:
                    7f:49:c2:95:f0:e0:2f:ed:25:81:ec:6d:3b:79:fb:
                    18:ca:97:05:c9:ca:d2:b1:20:63:e4:36:4d:9b:f2:
                    be:ef:69:91:79:c6:74:37:09:8a:c8:4d:38:f3:72:
                    60:75:94:76:d9:27:a4:64:b2:e4:a6:5e:e6:32:b4:
                    04:60:2a:cf:74:ab:29:3b:4b:82:67:37:cd:28:4c:
                    fd:58:7c:43:99:23:eb:d1:dd:af:93:19:1b:fc:db:
                    b2:d1:f8:e1:98:c1:a4:a3:6e:83:3b:3a:f5:1f:fa:
                    82:28:2c:24:fc:45:50:45:6e:7a:fa:4f:4b:41:6e:
                    27:89:01:a6:7e:0f:45:d9:d6:58:41:38:64:6b:25:
                    c9:8c:35:95:0d:f0:7f:bc:63:bf:b2:0e:69:c5:12:
                    58:f9:4e:79:df:81:74:23:20:85:5a:40:20:78:c7:
                    b5:98:2d:bf:61:c8:8f:c2:dc:67:bf:56:64:47:7a:
                    04:5f:d5:72:1e:c0:68:3e:85:f4:92:0e:8d:2f:e0:
                    84:14:71:0b:82:ca:c3:45:00:e1:8f:0a:64:d0:aa:
                    df:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:4F:BF:36:7B:B9:9A:B8:47:33:88:64:89:10:E7:00:93:D8:B4:58
            X509v3 Authority Key Identifier:
                keyid:A2:F9:74:EF:B5:0E:72:9C:9E:01:5A:8B:C2:B6:C2:B0:61:9D:FC:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ovl077UOcpyeAVqLwrbCsGGd_IQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/668345-f5bc-4a3f-b6ff-10df49f65616/1/ovl077UOcpyeAVqLwrbCsGGd_IQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/668345-f5bc-4a3f-b6ff-10df49f65616/1/ovl077UOcpyeAVqLwrbCsGGd_IQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:0c:58:53:cb:a2:f8:10:07:9a:2d:8a:b8:29:56:be:bc:af:
         7b:d7:43:8a:31:d4:77:cf:0a:56:bc:24:6f:23:4c:4b:c5:8a:
         b2:90:de:26:da:74:64:4f:18:94:62:ac:e4:9e:00:1f:e0:29:
         cf:92:a6:5f:54:a6:31:26:e2:04:27:5b:f3:f7:e7:e6:ee:37:
         22:9f:d6:3f:de:a5:77:40:89:7c:09:64:ca:d3:7d:12:9e:cb:
         ce:2e:e4:43:cc:78:1f:7b:c4:22:26:63:e9:a0:ef:86:51:77:
         44:11:5c:0a:02:33:56:c2:f5:87:3d:1f:07:d2:4f:10:6a:c6:
         40:5c:fa:fa:e6:66:a7:d8:17:db:9b:be:bd:46:bd:50:7d:0b:
         af:51:f3:c2:7c:1d:60:a5:d9:3d:00:5e:08:fd:23:4e:ca:6d:
         56:4d:5a:f1:5e:5e:62:06:65:00:cf:af:dc:52:62:2c:4a:b8:
         af:2d:55:a5:e1:f7:10:49:d3:58:e2:af:19:2d:75:0e:39:f4:
         42:43:eb:6c:e2:44:db:86:e6:34:05:52:c3:dc:b5:14:7f:ab:
         96:35:74:d1:5b:fc:53:db:39:95:cc:68:1a:f7:16:20:a8:2b:
         e8:2a:b7:54:69:2d:b0:77:ea:6a:59:80:ca:7b:84:81:36:53:
         8f:ca:77:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 08:08:32 2025 by rpki-client