This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/571b34-acf9-4ebf-988b-0feb66e7f28a/1/ogdDObsha4W9yD1hd4ghrfkUnVY.mft
File:                     ogdDObsha4W9yD1hd4ghrfkUnVY.mft (raw, json)
Hash identifier:          snb1VghfUnrhpcm9M1blDUUxRoHT7ZI3mH5XflJPiug=
Subject key identifier:   07:34:B4:47:4A:17:30:B0:F9:F9:58:78:31:8C:CA:B1:7E:D9:ED:F7
Authority key identifier: A2:07:43:39:BB:21:6B:85:BD:C8:3D:61:77:88:21:AD:F9:14:9D:56
Certificate issuer:       /CN=a2074339bb216b85bdc83d61778821adf9149d56
Certificate serial:       019AF2097B9D41B90113E70A05F62E90E01D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ogdDObsha4W9yD1hd4ghrfkUnVY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/571b34-acf9-4ebf-988b-0feb66e7f28a/1/ogdDObsha4W9yD1hd4ghrfkUnVY.mft
Manifest number:          1766
Signing time:             Sat 06 Dec 2025 05:01:38 +0000
Manifest this update:     Sat 06 Dec 2025 05:01:38 +0000
Manifest next update:     Sun 07 Dec 2025 05:01:38 +0000
Files and hashes:         1: 1xcc1SYILBbx3rhR6psLH4-mx1k.roa (hash: YY5s2ur+NPzr2i2PTIla4YnYnzjA2lNDUiBFlQTWU6s=)
                          2: DzgRwer0SyfEiMUBymVa3GjZBhc.roa (hash: H6oc5ilH3tnHz0hpCDXzWc1+BWJ5xndGPAgz0hIghPU=)
                          3: KSs1jOl2vQ2T9aBxS53muqbkeek.roa (hash: k6xoKkAhl7uyLISVfEu/5MO1xlAN4gAUOxN8werJasI=)
                          4: MOUd9P1Za8GRPdMhCv16TQcZqEA.roa (hash: 8oyYfQSDjCb57ReEl42i/Xt+XFMdZ0eQkDpTIRHnmxA=)
                          5: TCJElgSSWTdNPCx4HtGVjoR5OHE.roa (hash: qYI1zk90mfrJGyeYZUA0ZHtzOK7fZWd1alNZdeo0gHI=)
                          6: hzVSMi0KPzevpyomB4cUEWfY6i0.roa (hash: g4+WSmI6cNmxYSAsnD6CO/MARE1+j6J4yksR/5LsuhM=)
                          7: ogdDObsha4W9yD1hd4ghrfkUnVY.crl (hash: UQRsuaRYm+tpvlFFpoqbF2JFjA4lk6yBA7ohHRKUqiA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/571b34-acf9-4ebf-988b-0feb66e7f28a/1/ogdDObsha4W9yD1hd4ghrfkUnVY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/571b34-acf9-4ebf-988b-0feb66e7f28a/1/ogdDObsha4W9yD1hd4ghrfkUnVY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ogdDObsha4W9yD1hd4ghrfkUnVY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:09:7b:9d:41:b9:01:13:e7:0a:05:f6:2e:90:e0:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2074339bb216b85bdc83d61778821adf9149d56
        Validity
            Not Before: Dec  6 05:01:38 2025 GMT
            Not After : Dec  7 05:01:38 2025 GMT
        Subject: CN=0734b4474a1730b0f9f95878318ccab17ed9edf7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:3f:0e:74:48:3c:33:5b:da:e0:f7:af:4d:c9:
                    ea:12:db:80:52:8c:32:ed:85:a9:1d:9e:ed:c1:b5:
                    23:66:f3:fc:43:89:67:ab:d7:9c:e2:ac:a3:d0:af:
                    df:6b:f8:29:75:3f:02:9c:d4:76:64:12:e3:52:43:
                    26:e6:a0:33:d4:d3:a8:64:e5:37:18:c6:7c:48:15:
                    21:b8:53:19:aa:a3:d8:26:fd:80:aa:3c:39:90:95:
                    e4:91:0a:0e:8e:6f:54:d8:db:de:68:f1:24:1f:9a:
                    40:5f:6b:c7:d5:6a:b2:6c:d5:e6:38:e0:76:0b:45:
                    d4:57:95:32:99:77:ce:7f:17:cf:a0:93:ef:52:01:
                    bd:a3:3a:15:17:b3:3e:d8:d3:b9:76:4c:8f:b0:31:
                    00:d7:bd:ed:39:1b:66:9d:d1:d1:1b:17:6c:06:8f:
                    6a:8e:e7:29:ff:64:0d:ad:84:69:c6:8f:a0:bb:b6:
                    59:fe:b0:9f:1b:af:a5:0e:b6:f8:17:ff:0a:05:d9:
                    b5:4c:d2:44:73:78:c0:79:0b:d5:e2:13:f0:41:97:
                    ca:4c:ab:fb:ae:05:f2:62:4d:d8:8e:98:6f:9c:cc:
                    06:0a:e4:a9:de:05:13:0e:2a:57:1e:71:dc:ef:5a:
                    26:19:d6:c5:8d:b1:66:a3:de:aa:6a:f3:0d:f2:55:
                    53:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:34:B4:47:4A:17:30:B0:F9:F9:58:78:31:8C:CA:B1:7E:D9:ED:F7
            X509v3 Authority Key Identifier:
                keyid:A2:07:43:39:BB:21:6B:85:BD:C8:3D:61:77:88:21:AD:F9:14:9D:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogdDObsha4W9yD1hd4ghrfkUnVY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/571b34-acf9-4ebf-988b-0feb66e7f28a/1/ogdDObsha4W9yD1hd4ghrfkUnVY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/571b34-acf9-4ebf-988b-0feb66e7f28a/1/ogdDObsha4W9yD1hd4ghrfkUnVY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:26:d0:9a:34:a2:11:b1:30:d5:dc:d9:92:5b:50:b3:54:3a:
         26:64:35:66:3b:f9:4a:68:3b:a5:91:39:9b:b6:ec:ae:18:25:
         ab:ae:54:20:d3:df:7e:da:c8:96:0b:b7:2d:15:f5:66:30:a0:
         a7:b7:3e:7f:ae:02:a2:eb:66:35:ec:bb:11:98:6c:bd:77:9c:
         5f:0e:14:8b:0d:06:f7:d0:2d:f4:14:2a:93:df:5c:a2:e7:e5:
         24:93:92:fd:4e:1c:ab:87:7c:85:99:55:40:24:dd:a8:cb:26:
         28:1e:43:57:ba:af:7e:db:fc:d9:7b:dd:ae:e1:b3:f3:8d:52:
         6a:8e:3f:9e:0c:d8:47:51:4a:18:ce:d7:06:50:54:a7:b9:77:
         b8:8c:a2:70:bf:94:e9:4e:da:fd:55:93:bc:d9:c3:bd:be:4f:
         0e:59:ff:03:37:6d:d9:47:93:fd:ca:4e:b0:b5:d7:73:b6:95:
         58:9e:59:57:2b:cf:32:9e:67:7e:0d:c8:be:20:08:bc:fa:7d:
         31:a2:50:48:30:cf:67:b7:e0:ca:e9:b2:cf:0f:7f:a2:ec:a9:
         72:d2:3d:a7:8d:8f:31:c1:ac:11:c5:c9:d6:eb:b1:91:87:65:
         16:86:d8:49:e7:da:4b:7c:de:66:c1:e5:ce:30:b6:02:b5:b5:
         27:06:57:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:10:06 2025 by rpki-client