This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.mft
File:                     OwmORe9LtdGNvIbFoTX1fry-AF0.mft (raw, json)
Hash identifier:          ikd4Y88J4qvSzyPLxQC+8RlYgsnQ5VGgZ4SY3YzDoD8=
Subject key identifier:   44:45:FC:F9:93:BF:C2:FE:F7:8A:1D:37:6E:1A:F6:60:C9:2C:96:18
Authority key identifier: 3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
Certificate issuer:       /CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Certificate serial:       019AF23FF633275BF3DD932962F271A69FE2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.mft
Manifest number:          0DD0
Signing time:             Sat 06 Dec 2025 06:01:09 +0000
Manifest this update:     Sat 06 Dec 2025 06:01:09 +0000
Manifest next update:     Sun 07 Dec 2025 06:01:09 +0000
Files and hashes:         1: 0CU8gK0M0FreSaI70cF5ooIUWnA.roa (hash: 3AhvcPwm/9eRzoLDWBdCRrt2ESsUhmDJGeKMEdO3cAk=)
                          2: 7P0xN1XPPXfzuJjXef42Iaxs40A.roa (hash: Szxnfn72VKymEKCytT1IJvnAxzM6hc3FKMvWmYVD1F0=)
                          3: GbOTYXVRE4nGIgwOQA6zBXlj2Xo.roa (hash: encqJVvBdRm6B6vTFCshfVj5JBcWptS0eKrTwjTdeJk=)
                          4: HyPgpAuvMsNI5L6SLPPAdnBnPdo.roa (hash: EVOBxrtD9ibYF2I1shFMN6eNa05ZrbHe+uhDMKiGbNk=)
                          5: IvvEQkJx_YQuA7WDKcWTwA6sjeM.roa (hash: TYlXh7A49R6hcyPJlA/asJPKwJrsxKdwQselHHTfu5Q=)
                          6: JY5i8EzBZBxEJHFfrehIcHiV5Ro.roa (hash: fb4DYVb7xf+ej8L7lVMYzB+36KaoNm7ycChtN8C1vqA=)
                          7: OwmORe9LtdGNvIbFoTX1fry-AF0.crl (hash: 7tVpWvoKw11lv603wa+rM31YlBoTOlMxl7xdrR+AMhA=)
                          8: RVDRQlrN44t-sHhv8uePpq3gIpQ.roa (hash: MUS+jPgR3ZDIgTXHg+S1rHojwuN1giKLoPE+nWa/5ho=)
                          9: S714ou8hYqjvmFB4nmghIWDuzT8.roa (hash: /BUpwNlFfWECuzcvwXarqFvS3D6dRZwllAWqKckM2JU=)
                          10: SlDcuXgMtJBGo8YlgFJf41C4kAo.roa (hash: SG0BWCyRtxyo4M02OYtmA2zjOWnb5KfeZ0pEnDDi914=)
                          11: VjGUvPYUWgp-0uedFQJC98v6fEo.roa (hash: jGCrku5NTRGndH4tqMN86FEJPJ73k9kCLkdTKB2wH5A=)
                          12: Z-Ur6Re147f49wwXtBgxnUTtQco.roa (hash: 6jMXEqLaJpiU5oHiEpHv2AWSooBvq9dmOPpZl+dAG7k=)
                          13: ZckxSPgStfBNqpf_bKZ5TlHqsiw.roa (hash: ylC4RavnbVZ7xL5LPnNCb6J3es9DShqfcjOt6FoGPyw=)
                          14: ediJMJBzETBra22Tko9jnlFnOYA.roa (hash: oCcIPCoFUy+fyzOqy+mhQqpOzf2wz/N+TlISESEMNNs=)
                          15: lLEblpGCJ2241r4W9Ji2hFVdc64.roa (hash: qNO4IJaXH6rwQAiMPs/rZElF0NQU3Bru/i89iBxAD+Y=)
                          16: q2sdLUq8oTKjFXabTIHjNujteO4.roa (hash: DmdPmf4rfc5GBaM+wuurYH2BFaBH9ELo6PMdUoe2Fiw=)
                          17: tzK7bQadc-X5ERcHUFRyrLjFAic.roa (hash: pH5a6hVvwpFpvLEU3OQ9naeDuYIybxvVLAzccWIRqYM=)
                          18: xY27QQkLnZ1CFYPkNRnlg2uzEHs.roa (hash: PQiNovy5zghm0pctHsesA3K/Z4xfX1dgnUxPsPukk5k=)
                          19: xymeMR66aDWDmDhIlx2JEKPGuQ4.roa (hash: FDOGD9cmw7d0tSGevYfgks8MljnMa/gRurSZQ7spuUQ=)
                          20: yGG8haOhseC4wLjAMMMPhHZTXjA.roa (hash: lNJuGf7SRWFqIxTMR/qz5nkSoM2R54KFa9KdvNjHl+M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:3f:f6:33:27:5b:f3:dd:93:29:62:f2:71:a6:9f:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
        Validity
            Not Before: Dec  6 06:01:09 2025 GMT
            Not After : Dec  7 06:01:09 2025 GMT
        Subject: CN=4445fcf993bfc2fef78a1d376e1af660c92c9618
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:f0:ee:31:83:77:dd:40:3d:e5:d5:26:41:13:
                    c4:57:65:83:29:c3:6d:50:f5:9b:42:6e:8a:40:0c:
                    ba:50:0d:e3:ef:fd:f4:0f:c1:e3:72:4b:d2:77:97:
                    4d:04:c0:74:18:67:bd:7c:b2:92:16:82:ca:74:09:
                    f9:bd:fc:44:d2:dd:ea:b7:13:92:44:05:ae:b5:2d:
                    fd:73:61:75:21:db:e1:c0:41:cd:44:10:d9:b9:89:
                    74:98:04:c5:bc:ad:2f:dd:2a:7e:c0:4d:32:16:31:
                    12:68:b5:ce:3d:d9:b3:24:f6:50:d2:b8:23:1d:91:
                    fc:d7:b7:2f:b4:fc:c0:65:1e:12:97:a0:92:36:39:
                    86:9d:78:62:5b:1d:0d:e2:20:77:6e:e2:41:b6:cc:
                    e1:d1:8f:e4:ba:ee:15:c2:3b:95:da:35:ba:28:2a:
                    3e:fa:bd:c7:72:b4:9d:ae:0b:f2:93:e0:e8:ba:fc:
                    1d:2e:49:d1:60:ed:a0:72:8e:2d:35:4e:25:9d:70:
                    85:b6:67:e3:fb:f3:9b:63:99:84:18:23:1f:e2:f4:
                    cd:46:d8:a1:f7:ca:c4:b7:38:dd:0a:84:df:95:3a:
                    5b:9a:d6:ff:57:39:0f:32:65:bc:66:db:9d:4e:48:
                    e4:19:70:0e:a4:e3:96:63:0f:73:26:2b:7d:11:52:
                    a3:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:45:FC:F9:93:BF:C2:FE:F7:8A:1D:37:6E:1A:F6:60:C9:2C:96:18
            X509v3 Authority Key Identifier:
                keyid:3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:a6:59:bf:45:d1:52:8b:b7:04:53:20:4a:04:9e:5a:9b:20:
         a0:bb:1d:81:ed:6a:f7:9b:df:07:27:21:60:14:60:f7:a3:bf:
         fa:ea:0e:73:6c:8e:30:11:5e:a6:41:fd:fc:b8:4d:88:71:c5:
         38:14:30:14:ae:7b:d9:75:6f:b0:af:cb:f5:c1:ed:c8:4e:78:
         40:74:4a:ab:c9:e4:77:ad:20:1b:10:39:9d:fd:f3:99:f0:e3:
         4e:23:23:8b:2a:0e:05:e0:4d:f5:79:00:ff:39:3b:44:d7:16:
         02:af:cf:df:9f:14:2d:21:32:6c:7d:06:83:c1:f8:72:d2:53:
         02:1c:c8:9a:39:75:c4:8a:fb:36:5f:16:89:10:ef:fb:e9:fd:
         8a:a0:06:ca:d6:9e:13:8c:13:77:08:e8:09:f2:87:01:39:d3:
         83:85:cf:18:86:28:60:6e:1c:26:c8:17:49:e5:61:45:23:c0:
         ea:0a:6f:8e:88:a6:09:3c:dd:b7:95:c5:1c:57:1f:c2:a4:c6:
         82:d8:64:a4:b9:9d:80:d1:f4:fa:47:f9:4e:37:e2:36:84:b0:
         5e:7f:4c:99:d8:64:2d:bd:f5:a0:d3:11:f4:d4:7f:4e:4b:ab:
         36:71:11:72:11:c9:06:54:24:fc:8e:69:77:78:77:80:79:5b:
         91:46:8a:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:48:56 2025 by rpki-client