This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.mft
File:                     OaPOu4EQRqCWbpVU0H5dFrNtvwQ.mft (raw, json)
Hash identifier:          tOLt+y+apcC4CzFkvuq8KBGdmJH07yCdUOpcnbF9tzE=
Subject key identifier:   E7:06:0A:6C:1E:E2:67:E1:A7:5C:C6:05:8A:6D:D4:A9:62:2C:6C:2E
Authority key identifier: 39:A3:CE:BB:81:10:46:A0:96:6E:95:54:D0:7E:5D:16:B3:6D:BF:04
Certificate issuer:       /CN=39a3cebb811046a0966e9554d07e5d16b36dbf04
Certificate serial:       019AF31C8F467156945DF2F0077C6B5FAE36
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.mft
Manifest number:          0C85
Signing time:             Sat 06 Dec 2025 10:02:06 +0000
Manifest this update:     Sat 06 Dec 2025 10:02:06 +0000
Manifest next update:     Sun 07 Dec 2025 10:02:06 +0000
Files and hashes:         1: OaPOu4EQRqCWbpVU0H5dFrNtvwQ.crl (hash: BkpkkM9ciT7F0l/Wg+Tvwo8C4emTKmlp/dvIpdNPYX4=)
                          2: cAytH-HDjgmoQUIxFhiNXUzaQk0.roa (hash: WrCK/gy3OkunpeHSieq4WLNSBfAWRn5dFSNNGUA3mvQ=)
                          3: zlltM2nOjh81UxcytVZozmvMUKM.roa (hash: xAPvFxFilxhJOjDq/sl/DoT41X3vws8/d3NLTmKyCmU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 10:02:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f3:1c:8f:46:71:56:94:5d:f2:f0:07:7c:6b:5f:ae:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39a3cebb811046a0966e9554d07e5d16b36dbf04
        Validity
            Not Before: Dec  6 10:02:06 2025 GMT
            Not After : Dec  7 10:02:06 2025 GMT
        Subject: CN=e7060a6c1ee267e1a75cc6058a6dd4a9622c6c2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:c1:f7:a6:89:85:65:3c:53:9c:41:84:18:33:
                    5e:c2:44:4d:a3:26:03:fd:a6:9c:30:c9:54:a0:2f:
                    6b:0f:b7:6c:76:7f:6e:ba:35:7c:cb:25:a0:7b:a3:
                    85:aa:14:43:cd:15:d7:74:12:5b:3c:ff:d7:ae:10:
                    af:53:65:78:97:63:7a:f2:c3:2a:6b:50:0a:ff:29:
                    b2:8a:5f:c1:39:5b:98:0c:e9:5d:1e:04:1c:24:2d:
                    1a:8d:d3:27:65:89:d0:42:4c:99:1e:47:76:4d:74:
                    0c:c4:81:48:2e:69:fc:2d:02:a1:d6:41:73:eb:41:
                    72:39:9a:15:2f:6b:4a:8d:01:1c:38:ba:ba:b3:8d:
                    9e:3e:af:91:af:8a:b5:20:6d:ae:f0:3f:1d:76:6f:
                    e4:25:04:c9:fb:fc:a4:f0:4a:aa:c8:80:07:4d:68:
                    9c:de:f1:a5:4f:f6:4d:f7:36:97:68:2c:9c:9d:6b:
                    9e:a2:42:dd:38:2b:11:7f:d9:19:ab:68:3d:ce:ea:
                    ca:28:52:63:0b:c6:44:be:d1:79:66:11:f4:9f:17:
                    09:28:35:95:13:9d:be:de:d3:20:af:61:fe:9f:6c:
                    11:c0:70:a4:9f:61:9c:2b:7d:b7:a2:38:d0:b4:f1:
                    1e:d2:93:82:f4:19:9d:93:26:e9:3c:ba:bf:3c:80:
                    79:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:06:0A:6C:1E:E2:67:E1:A7:5C:C6:05:8A:6D:D4:A9:62:2C:6C:2E
            X509v3 Authority Key Identifier:
                keyid:39:A3:CE:BB:81:10:46:A0:96:6E:95:54:D0:7E:5D:16:B3:6D:BF:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:39:d7:ce:c9:08:48:34:c9:66:43:f9:f3:70:6b:10:31:31:
         2f:cd:3c:57:dd:62:58:b2:a9:8e:ec:32:5e:cc:03:5c:d5:e5:
         32:a0:d7:a8:53:fd:73:10:1b:94:f1:a8:48:c2:d7:a8:00:c9:
         aa:7c:4a:f5:2c:94:6b:92:f7:94:80:a9:fd:32:3f:bf:f7:8f:
         f9:4b:dd:cd:d6:5b:a8:84:f0:ee:92:73:c6:a6:22:30:0b:22:
         70:ae:5d:88:5f:59:f8:59:41:41:b1:c8:72:1d:54:1a:8b:c7:
         14:35:c5:8e:38:27:2d:53:68:91:8d:cd:57:af:98:0d:6e:a9:
         e0:29:6e:fd:1e:1b:e3:ea:62:e5:14:24:a1:ad:c2:f6:58:32:
         66:d9:d2:3c:6e:85:c7:2b:9a:8d:47:35:57:e8:a1:93:d7:41:
         3b:2f:51:3d:58:dc:90:46:2d:8d:61:c7:51:1f:12:8c:c1:f1:
         ef:97:49:36:2d:be:5d:ce:af:5c:ce:63:52:7d:47:2b:d7:9b:
         67:4a:30:9e:bc:bf:66:de:aa:1c:7f:16:5d:d5:85:12:97:e6:
         74:93:e3:2c:16:63:61:e6:d3:6d:a2:42:3b:51:35:e7:78:50:
         d2:9c:0e:52:d9:61:e7:b6:44:ac:40:2d:09:ed:3a:95:a5:0b:
         94:8d:21:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZrzHI9GcVaUXfLwB3xrX642MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5YTNjZWJiODExMDQ2YTA5NjZlOTU1NGQwN2U1ZDE2YjM2
ZGJmMDQwHhcNMjUxMjA2MTAwMjA2WhcNMjUxMjA3MTAwMjA2WjAzMTEwLwYDVQQD
EyhlNzA2MGE2YzFlZTI2N2UxYTc1Y2M2MDU4YTZkZDRhOTYyMmM2YzJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArcH3pomFZTxTnEGEGDNewkRNoyYD
/aacMMlUoC9rD7dsdn9uujV8yyWge6OFqhRDzRXXdBJbPP/XrhCvU2V4l2N68sMq
a1AK/ymyil/BOVuYDOldHgQcJC0ajdMnZYnQQkyZHkd2TXQMxIFILmn8LQKh1kFz
60FyOZoVL2tKjQEcOLq6s42ePq+Rr4q1IG2u8D8ddm/kJQTJ+/yk8EqqyIAHTWic
3vGlT/ZN9zaXaCycnWueokLdOCsRf9kZq2g9zurKKFJjC8ZEvtF5ZhH0nxcJKDWV
E52+3tMgr2H+n2wRwHCkn2GcK323ojjQtPEe0pOC9BmdkybpPLq/PIB5UQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOcGCmwe4mfhp1zGBYpt1KliLGwuMB8GA1UdIwQY
MBaAFDmjzruBEEaglm6VVNB+XRazbb8EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT2FQT3U0RVFScUNXYnBWVTBINWRGck50dndRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9kODRhNTQtMTg4Zi00ZmFmLTlkNDUt
NmYyMWY0Yzc1MWYzLzEvT2FQT3U0RVFScUNXYnBWVTBINWRGck50dndRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS9kODRhNTQtMTg4Zi00ZmFmLTlkNDUtNmYyMWY0Yzc1MWYz
LzEvT2FQT3U0RVFScUNXYnBWVTBINWRGck50dndRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALznXzskI
SDTJZkP583BrEDExL808V91iWLKpjuwyXswDXNXlMqDXqFP9cxAblPGoSMLXqADJ
qnxK9SyUa5L3lICp/TI/v/eP+UvdzdZbqITw7pJzxqYiMAsicK5diF9Z+FlBQbHI
ch1UGovHFDXFjjgnLVNokY3NV6+YDW6p4Clu/R4b4+pi5RQkoa3C9lgyZtnSPG6F
xyuajUc1V+ihk9dBOy9RPVjckEYtjWHHUR8SjMHx75dJNi2+Xc6vXM5jUn1HK9eb
Z0ownry/Zt6qHH8WXdWFEpfmdJPjLBZjYebTbaJCO1E153hQ0pwOUtlh57ZErEAt
Ce06laULlI0hOw==
-----END CERTIFICATE-----
Generated at Sat Dec 6 18:15:58 2025 by rpki-client