This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/eed9ce-aef9-4fc9-8a4a-c442a18f1efc/1/OXJF0Eku7eWbBFtb4f1OuRYbxBc.mft
File:                     OXJF0Eku7eWbBFtb4f1OuRYbxBc.mft (raw, json)
Hash identifier:          KTroUjZsltz/9upJidi8sB+5X/EsdgemwOJkZxCWCvo=
Subject key identifier:   89:D9:73:E8:16:E8:CA:A2:FC:9D:EE:31:E9:ED:72:D1:E8:DD:D6:36
Authority key identifier: 39:72:45:D0:49:2E:ED:E5:9B:04:5B:5B:E1:FD:4E:B9:16:1B:C4:17
Certificate issuer:       /CN=397245d0492eede59b045b5be1fd4eb9161bc417
Certificate serial:       019B2BF82FFD1667C60E0646792825F8B089
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OXJF0Eku7eWbBFtb4f1OuRYbxBc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/eed9ce-aef9-4fc9-8a4a-c442a18f1efc/1/OXJF0Eku7eWbBFtb4f1OuRYbxBc.mft
Manifest number:          0D12
Signing time:             Wed 17 Dec 2025 11:00:44 +0000
Manifest this update:     Wed 17 Dec 2025 11:00:44 +0000
Manifest next update:     Thu 18 Dec 2025 11:00:44 +0000
Files and hashes:         1: LNlStrlsE14yRfjQBfv8pQze1bk.roa (hash: fki9Rg0dg7D8WnpYuMELeDNz6e2xoBE+PNmZRxJsR0U=)
                          2: OXJF0Eku7eWbBFtb4f1OuRYbxBc.crl (hash: 03XPEXJTv/mquKUxqPB4bBKR/YdLDbxkrbnDnK/ztGk=)
                          3: WainZrZS95pV_wUDdXdKx-4zd8w.roa (hash: qSjOELN6BypOnZ25i1Ntw/+kYsT/hMNWS9eAPB2j+R4=)
                          4: fkySyXgYloFA_rSIKapDu83z4nA.roa (hash: YRI59uMH17c60OUwKfHOzSVfz3vipSg0/ta9/6RebOI=)
                          5: pkIeBUajXZ5S1YZVqFsipYPnvYY.roa (hash: wuHKfe7KGoVciBLRMcdEQvhSLdH+Z4ihPv48EoUAWBA=)
                          6: uQUwmqsLj0U3KwuONWjPJwlPoM0.roa (hash: 80ykNf1aAgBCnkcsaylXJwlHdJfFAWwXxym4KxERtHk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/eed9ce-aef9-4fc9-8a4a-c442a18f1efc/1/OXJF0Eku7eWbBFtb4f1OuRYbxBc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/eed9ce-aef9-4fc9-8a4a-c442a18f1efc/1/OXJF0Eku7eWbBFtb4f1OuRYbxBc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OXJF0Eku7eWbBFtb4f1OuRYbxBc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 18 Dec 2025 10:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:2b:f8:2f:fd:16:67:c6:0e:06:46:79:28:25:f8:b0:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=397245d0492eede59b045b5be1fd4eb9161bc417
        Validity
            Not Before: Dec 17 11:00:44 2025 GMT
            Not After : Dec 18 11:00:44 2025 GMT
        Subject: CN=89d973e816e8caa2fc9dee31e9ed72d1e8ddd636
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:a3:06:f2:ff:ed:63:45:e2:5e:b2:d8:75:a6:
                    ec:2c:28:55:18:7d:86:a1:ff:47:ef:6c:55:6b:9a:
                    0f:33:8e:85:fa:36:75:0b:cb:03:2e:9e:40:dc:ee:
                    a0:4b:19:c4:97:4c:cc:d5:64:a3:bd:de:8f:8c:f8:
                    11:18:f7:34:03:a4:7a:b6:29:e7:a3:6b:f7:92:c5:
                    e5:0d:ae:74:95:2c:5f:58:1b:00:d7:a8:c1:d7:f2:
                    cd:82:5f:6a:0e:7f:7e:7d:5b:d3:fe:66:d1:af:bd:
                    4e:e0:79:28:1e:0d:d0:d2:30:3e:65:ed:c3:9f:a7:
                    4d:f0:60:b9:64:05:4e:2f:f9:4d:af:d7:d7:77:50:
                    c7:b2:60:8b:2a:51:f8:90:83:bf:b7:cc:9a:ad:9f:
                    af:53:7f:91:ff:a5:fb:77:59:e8:dc:c4:ad:94:9f:
                    28:12:80:6a:e5:84:51:6f:55:90:b2:83:f5:a8:83:
                    e4:9e:7a:65:0b:b2:58:bd:2a:96:e5:44:f6:86:8a:
                    1f:69:8d:29:b5:86:70:d9:d1:64:43:43:5d:9b:e7:
                    9a:8d:81:4f:92:50:7a:79:58:14:61:98:29:41:89:
                    9a:02:53:6e:67:3b:8c:4c:28:2c:e8:6c:87:84:3f:
                    98:bc:7c:2c:a2:8b:2b:03:2c:58:bd:9d:b5:80:da:
                    e6:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:D9:73:E8:16:E8:CA:A2:FC:9D:EE:31:E9:ED:72:D1:E8:DD:D6:36
            X509v3 Authority Key Identifier:
                keyid:39:72:45:D0:49:2E:ED:E5:9B:04:5B:5B:E1:FD:4E:B9:16:1B:C4:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OXJF0Eku7eWbBFtb4f1OuRYbxBc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/eed9ce-aef9-4fc9-8a4a-c442a18f1efc/1/OXJF0Eku7eWbBFtb4f1OuRYbxBc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/eed9ce-aef9-4fc9-8a4a-c442a18f1efc/1/OXJF0Eku7eWbBFtb4f1OuRYbxBc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:0f:8d:3f:0a:04:cb:e2:45:57:98:b5:de:52:2e:1d:7b:c2:
         e3:75:4b:1c:fc:f1:a2:e9:38:94:d9:a3:27:1b:c6:21:18:cf:
         98:57:9b:c5:5b:67:0c:f7:a8:a5:e7:e3:07:a5:03:31:81:ea:
         04:92:74:78:46:85:e5:cb:b2:6a:e2:32:ea:ce:90:cd:cb:c2:
         95:54:7a:7c:33:99:3e:32:79:39:37:52:f4:3f:12:90:e5:84:
         25:da:88:fb:7b:2c:ea:6a:cd:63:7d:51:5a:6f:37:70:a0:33:
         09:00:e1:18:77:2d:e8:86:5f:d8:98:23:18:9a:af:f8:e7:19:
         1a:5f:b2:89:1a:f4:62:d0:c4:59:78:ab:71:5e:73:23:8a:a9:
         32:b8:a2:72:e7:31:fc:0c:d1:63:2c:20:c0:f9:07:76:db:e5:
         dd:da:ec:f0:7a:06:cf:0d:c2:5c:cd:be:0d:db:33:9b:7f:be:
         9e:0b:94:a6:16:3e:97:48:28:a0:b7:cd:af:a9:e2:9c:6f:70:
         a3:32:ef:db:68:cc:36:19:31:e6:e7:95:6b:7f:15:39:b5:e8:
         d9:2e:c1:0d:d3:3a:89:00:fc:8d:32:b0:41:e4:51:e5:00:25:
         97:6a:62:45:5b:58:2b:98:dc:2b:b7:aa:9d:d5:85:18:ec:38:
         67:12:cf:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZsr+C/9FmfGDgZGeSgl+LCJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5NzI0NWQwNDkyZWVkZTU5YjA0NWI1YmUxZmQ0ZWI5MTYx
YmM0MTcwHhcNMjUxMjE3MTEwMDQ0WhcNMjUxMjE4MTEwMDQ0WjAzMTEwLwYDVQQD
Eyg4OWQ5NzNlODE2ZThjYWEyZmM5ZGVlMzFlOWVkNzJkMWU4ZGRkNjM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp6MG8v/tY0XiXrLYdabsLChVGH2G
of9H72xVa5oPM46F+jZ1C8sDLp5A3O6gSxnEl0zM1WSjvd6PjPgRGPc0A6R6tinn
o2v3ksXlDa50lSxfWBsA16jB1/LNgl9qDn9+fVvT/mbRr71O4HkoHg3Q0jA+Ze3D
n6dN8GC5ZAVOL/lNr9fXd1DHsmCLKlH4kIO/t8yarZ+vU3+R/6X7d1no3MStlJ8o
EoBq5YRRb1WQsoP1qIPknnplC7JYvSqW5UT2hoofaY0ptYZw2dFkQ0Ndm+eajYFP
klB6eVgUYZgpQYmaAlNuZzuMTCgs6GyHhD+YvHwsoosrAyxYvZ21gNrmSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFInZc+gW6Mqi/J3uMentctHo3dY2MB8GA1UdIwQY
MBaAFDlyRdBJLu3lmwRbW+H9TrkWG8QXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1hKRjBFa3U3ZVdiQkZ0YjRmMU91UllieEJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9lZWQ5Y2UtYWVmOS00ZmM5LThhNGEt
YzQ0MmExOGYxZWZjLzEvT1hKRjBFa3U3ZVdiQkZ0YjRmMU91UllieEJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS9lZWQ5Y2UtYWVmOS00ZmM5LThhNGEtYzQ0MmExOGYxZWZj
LzEvT1hKRjBFa3U3ZVdiQkZ0YjRmMU91UllieEJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADg+NPwoE
y+JFV5i13lIuHXvC43VLHPzxouk4lNmjJxvGIRjPmFebxVtnDPeopefjB6UDMYHq
BJJ0eEaF5cuyauIy6s6QzcvClVR6fDOZPjJ5OTdS9D8SkOWEJdqI+3ss6mrNY31R
Wm83cKAzCQDhGHct6IZf2JgjGJqv+OcZGl+yiRr0YtDEWXircV5zI4qpMriicucx
/AzRYywgwPkHdtvl3drs8HoGzw3CXM2+Ddszm3++nguUphY+l0gooLfNr6ninG9w
ozLv22jMNhkx5ueVa38VObXo2S7BDdM6iQD8jTKwQeRR5QAll2piRVtYK5jcK7eq
ndWFGOw4ZxLPXg==
-----END CERTIFICATE-----
Generated at Wed Dec 17 16:38:13 2025 by rpki-client