This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/18a1bc-967c-4931-85b5-00f00af1c8d7/1/o-boI_bdpn0oOp9BpykJkGrJqDc.mft
File:                     o-boI_bdpn0oOp9BpykJkGrJqDc.mft (raw, json)
Hash identifier:          vzJw1+nigVPe8CnvNwrPDm0n1bUo0iW79mcmsHuFY78=
Subject key identifier:   28:78:28:4B:43:F9:5A:D6:1B:BA:BC:01:0F:97:F3:19:72:41:10:7F
Authority key identifier: A3:E6:E8:23:F6:DD:A6:7D:28:3A:9F:41:A7:29:09:90:6A:C9:A8:37
Certificate issuer:       /CN=a3e6e823f6dda67d283a9f41a72909906ac9a837
Certificate serial:       019AF209A072C760E563B2B2C69BC6E6B45F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o-boI_bdpn0oOp9BpykJkGrJqDc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/18a1bc-967c-4931-85b5-00f00af1c8d7/1/o-boI_bdpn0oOp9BpykJkGrJqDc.mft
Manifest number:          1767
Signing time:             Sat 06 Dec 2025 05:01:48 +0000
Manifest this update:     Sat 06 Dec 2025 05:01:48 +0000
Manifest next update:     Sun 07 Dec 2025 05:01:48 +0000
Files and hashes:         1: 6_a-aeOKvfIVcw7qcE2cQDyNLOY.roa (hash: WdgelCFy5E02aPpURS4UTgXi3wN5eWjkYjrBc+OZPSI=)
                          2: 8WHNdpvFKOcR1NYdd7sGV-5deCM.roa (hash: 1JOP6RuQiDJQnqR2UlsIBnEE2gJbfnp6EUOaKdVsJlw=)
                          3: aJfMXR0KgD85hp2B5m_o11nFhQY.roa (hash: KbbBuzotL/jgzy+EpOCalbhLtTBDf/lVI3VgkQVW38s=)
                          4: o-boI_bdpn0oOp9BpykJkGrJqDc.crl (hash: hNp9q3j7kbOc85za1FNWrMmiNKQDrOVYk0cLNdGWR0A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/18a1bc-967c-4931-85b5-00f00af1c8d7/1/o-boI_bdpn0oOp9BpykJkGrJqDc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/18a1bc-967c-4931-85b5-00f00af1c8d7/1/o-boI_bdpn0oOp9BpykJkGrJqDc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/o-boI_bdpn0oOp9BpykJkGrJqDc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:09:a0:72:c7:60:e5:63:b2:b2:c6:9b:c6:e6:b4:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3e6e823f6dda67d283a9f41a72909906ac9a837
        Validity
            Not Before: Dec  6 05:01:48 2025 GMT
            Not After : Dec  7 05:01:48 2025 GMT
        Subject: CN=2878284b43f95ad61bbabc010f97f3197241107f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:b0:a8:e1:07:b3:2c:84:0d:d5:18:13:03:d0:
                    62:8b:e7:0c:b9:d0:60:0e:d3:cc:95:eb:91:b3:47:
                    8e:11:61:53:da:f7:42:cb:3a:04:3a:bb:f3:dd:59:
                    72:b9:09:bd:ee:ce:ca:b8:8b:f4:8e:15:d2:cd:b8:
                    e7:5d:2b:56:9d:fa:3a:07:fc:93:35:e6:5e:4f:68:
                    7c:e1:65:04:bb:a1:c2:d9:e4:93:1e:38:32:22:5e:
                    7a:5e:3a:42:e9:5f:50:98:32:a9:02:b8:ba:d5:17:
                    0b:b5:68:d9:db:9f:0e:4e:7f:96:61:6e:ab:60:1f:
                    e9:fd:8a:f8:bd:5a:03:c6:c6:18:6e:88:ff:7d:e7:
                    5b:67:c8:36:0d:97:8c:5d:cf:69:c2:b8:31:92:1f:
                    fc:bf:01:44:84:b0:ee:29:bf:1c:e3:66:86:13:42:
                    28:55:18:22:67:54:38:07:b3:e5:63:a9:29:7b:ae:
                    e0:35:ba:c6:98:24:6e:e1:f4:a2:10:2d:c5:ee:e5:
                    3f:d0:d2:da:b6:cb:34:22:26:67:eb:32:08:77:d6:
                    3d:47:f7:d4:72:ce:3f:44:18:1d:36:83:60:9e:ab:
                    fd:ab:89:37:95:59:88:c5:82:0c:3a:46:91:cf:dd:
                    2a:65:3d:7d:91:4c:2d:f8:e8:59:9a:ce:87:9e:99:
                    6d:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:78:28:4B:43:F9:5A:D6:1B:BA:BC:01:0F:97:F3:19:72:41:10:7F
            X509v3 Authority Key Identifier:
                keyid:A3:E6:E8:23:F6:DD:A6:7D:28:3A:9F:41:A7:29:09:90:6A:C9:A8:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o-boI_bdpn0oOp9BpykJkGrJqDc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/18a1bc-967c-4931-85b5-00f00af1c8d7/1/o-boI_bdpn0oOp9BpykJkGrJqDc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/18a1bc-967c-4931-85b5-00f00af1c8d7/1/o-boI_bdpn0oOp9BpykJkGrJqDc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:62:1a:8c:01:9b:c1:b3:94:43:d5:32:87:ed:10:66:be:f5:
         22:dd:0b:1c:93:c4:c6:1d:08:4b:79:16:02:6a:f7:64:40:16:
         3c:e6:fb:07:77:e3:8b:90:40:5e:e3:de:42:19:62:7d:ab:26:
         d5:17:05:17:82:81:d2:4a:3c:7c:03:01:35:56:a6:00:11:77:
         a1:c2:5b:9d:c5:8e:e9:be:a3:76:bc:c2:4e:fd:9f:97:fa:a7:
         fa:46:3a:e0:44:17:ed:e5:43:66:df:1c:56:20:0a:09:8e:06:
         9f:2c:23:64:24:d7:6d:dd:9d:1f:01:9e:04:85:0a:45:87:a6:
         7c:31:06:6e:f7:40:b0:c2:cf:3d:c5:53:62:b3:28:08:70:d6:
         65:97:a8:51:c7:55:c2:d3:26:1c:57:64:e5:fa:19:21:13:bf:
         d1:a6:35:3f:4a:04:df:72:51:d0:15:3d:b2:59:28:c4:0d:49:
         61:6e:0e:1c:a5:a2:c7:01:4c:3a:f4:af:cc:cd:7e:6a:86:98:
         7a:48:35:90:77:45:79:69:e8:eb:d4:ed:56:24:fe:68:fa:12:
         ef:27:c1:d6:f8:43:b0:ef:61:4b:72:5b:b7:5e:5d:84:77:42:
         a4:83:7c:b6:d8:c9:f7:3b:86:36:21:a4:0e:14:f2:d9:17:e4:
         69:f9:c9:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZryCaByx2DlY7KyxpvG5rRfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzZTZlODIzZjZkZGE2N2QyODNhOWY0MWE3MjkwOTkwNmFj
OWE4MzcwHhcNMjUxMjA2MDUwMTQ4WhcNMjUxMjA3MDUwMTQ4WjAzMTEwLwYDVQQD
EygyODc4Mjg0YjQzZjk1YWQ2MWJiYWJjMDEwZjk3ZjMxOTcyNDExMDdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyrCo4QezLIQN1RgTA9Bii+cMudBg
DtPMleuRs0eOEWFT2vdCyzoEOrvz3VlyuQm97s7KuIv0jhXSzbjnXStWnfo6B/yT
NeZeT2h84WUEu6HC2eSTHjgyIl56XjpC6V9QmDKpAri61RcLtWjZ258OTn+WYW6r
YB/p/Yr4vVoDxsYYboj/fedbZ8g2DZeMXc9pwrgxkh/8vwFEhLDuKb8c42aGE0Io
VRgiZ1Q4B7PlY6kpe67gNbrGmCRu4fSiEC3F7uU/0NLatss0IiZn6zIId9Y9R/fU
cs4/RBgdNoNgnqv9q4k3lVmIxYIMOkaRz90qZT19kUwt+OhZms6Hnplt7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCh4KEtD+VrWG7q8AQ+X8xlyQRB/MB8GA1UdIwQY
MBaAFKPm6CP23aZ9KDqfQacpCZBqyag3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvby1ib0lfYmRwbjBvT3A5QnB5a0prR3JKcURjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni8xOGExYmMtOTY3Yy00OTMxLTg1YjUt
MDBmMDBhZjFjOGQ3LzEvby1ib0lfYmRwbjBvT3A5QnB5a0prR3JKcURjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni8xOGExYmMtOTY3Yy00OTMxLTg1YjUtMDBmMDBhZjFjOGQ3
LzEvby1ib0lfYmRwbjBvT3A5QnB5a0prR3JKcURjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALGIajAGb
wbOUQ9Uyh+0QZr71It0LHJPExh0IS3kWAmr3ZEAWPOb7B3fji5BAXuPeQhlifasm
1RcFF4KB0ko8fAMBNVamABF3ocJbncWO6b6jdrzCTv2fl/qn+kY64EQX7eVDZt8c
ViAKCY4GnywjZCTXbd2dHwGeBIUKRYemfDEGbvdAsMLPPcVTYrMoCHDWZZeoUcdV
wtMmHFdk5foZIRO/0aY1P0oE33JR0BU9slkoxA1JYW4OHKWixwFMOvSvzM1+aoaY
ekg1kHdFeWno69TtViT+aPoS7yfB1vhDsO9hS3Jbt15dhHdCpIN8ttjJ9zuGNiGk
DhTy2RfkafnJTw==
-----END CERTIFICATE-----
Generated at Sat Dec 6 14:47:27 2025 by rpki-client