This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/8e6f08-30f0-46dd-a7a1-a9c384128d42/1/oOOBtudsuVIOjY9Wd27KD-F2zEA.mft
File:                     oOOBtudsuVIOjY9Wd27KD-F2zEA.mft (raw, json)
Hash identifier:          nsIAJ+8qKe3qwnAft8c9aVpT5D65+xwnwc2F1tlwueo=
Subject key identifier:   08:96:13:D9:59:DE:2A:92:01:02:7E:7A:94:20:2B:5E:8C:CE:88:A4
Authority key identifier: A0:E3:81:B6:E7:6C:B9:52:0E:8D:8F:56:77:6E:CA:0F:E1:76:CC:40
Certificate issuer:       /CN=a0e381b6e76cb9520e8d8f56776eca0fe176cc40
Certificate serial:       019AF276ECC73D0DC46EB0E23A91BA346EB3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oOOBtudsuVIOjY9Wd27KD-F2zEA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/8e6f08-30f0-46dd-a7a1-a9c384128d42/1/oOOBtudsuVIOjY9Wd27KD-F2zEA.mft
Manifest number:          1771
Signing time:             Sat 06 Dec 2025 07:01:11 +0000
Manifest this update:     Sat 06 Dec 2025 07:01:11 +0000
Manifest next update:     Sun 07 Dec 2025 07:01:11 +0000
Files and hashes:         1: 95FzUOf19GAUgH-NNap3guhoYwc.roa (hash: xIP1fB6Qn9UTZZo8HocsS+GRzZb3S08GTszP5U7/+78=)
                          2: MuDm6qOBJ8xkrh2L926I8rpU5do.roa (hash: LGlkBx/kOBt10H9SsN38yJ3HGznA6mZgmUvmJ/8iHgA=)
                          3: kKHhag8OTcKOXKL4tqRHrcy5NDY.roa (hash: 1hD0boi1MCMets6jW6GCgAElJ8cKDe4YcTao6OTBJnY=)
                          4: oOOBtudsuVIOjY9Wd27KD-F2zEA.crl (hash: agc1ygWOf3svd5GUpGdo7OzXaJUWDvki8dtTYQfYjq4=)
                          5: vA3DqyvNGHMDKHTEiVWXXGlC-Q4.roa (hash: I5VIDSXlYm0OjzIrYxH5a3fzHBdn2UCpIwB6Nwr4MjU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/8e6f08-30f0-46dd-a7a1-a9c384128d42/1/oOOBtudsuVIOjY9Wd27KD-F2zEA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/8e6f08-30f0-46dd-a7a1-a9c384128d42/1/oOOBtudsuVIOjY9Wd27KD-F2zEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oOOBtudsuVIOjY9Wd27KD-F2zEA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 07:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:76:ec:c7:3d:0d:c4:6e:b0:e2:3a:91:ba:34:6e:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0e381b6e76cb9520e8d8f56776eca0fe176cc40
        Validity
            Not Before: Dec  6 07:01:11 2025 GMT
            Not After : Dec  7 07:01:11 2025 GMT
        Subject: CN=089613d959de2a9201027e7a94202b5e8cce88a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:32:53:d7:f2:91:ca:7c:77:bb:30:fa:d8:c0:
                    4a:07:23:a9:ae:71:36:a7:be:56:b6:4c:c3:9e:2c:
                    4d:ed:98:cc:d4:c0:69:5a:cb:fc:11:45:9e:86:6c:
                    8c:c2:a4:f3:0d:af:bb:57:64:c9:97:c7:ee:df:7a:
                    6a:a5:1b:e6:f4:0a:53:12:66:6e:b1:42:85:b8:a1:
                    f2:1b:52:5d:11:8d:26:54:d1:eb:26:f0:c1:3a:6b:
                    42:e0:9e:af:dd:f2:89:07:78:1d:23:fa:fb:94:14:
                    b2:7c:fa:a4:b8:91:1c:ce:4b:b2:10:1f:6d:d7:15:
                    9a:fb:c8:2b:65:c1:ea:8b:c5:e8:02:40:7d:37:98:
                    27:fa:01:46:d8:a1:11:35:33:ac:9a:1b:40:1f:7d:
                    c6:82:19:0a:33:15:47:32:32:51:94:43:0e:6a:a5:
                    b6:48:f9:4e:9e:fb:0c:b4:2f:7d:b6:0b:20:39:86:
                    89:bd:27:38:9e:42:07:5d:52:a7:a3:8c:12:9f:27:
                    17:c4:aa:c7:b6:3e:80:0c:39:66:64:8b:ac:90:e7:
                    84:e4:c8:bf:ae:4e:0b:de:4b:e6:6a:38:f2:68:26:
                    0d:40:e3:33:4b:75:5f:63:43:66:bb:41:72:61:02:
                    55:3d:c2:03:97:ec:82:09:f9:eb:ca:01:82:9b:34:
                    45:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:96:13:D9:59:DE:2A:92:01:02:7E:7A:94:20:2B:5E:8C:CE:88:A4
            X509v3 Authority Key Identifier:
                keyid:A0:E3:81:B6:E7:6C:B9:52:0E:8D:8F:56:77:6E:CA:0F:E1:76:CC:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oOOBtudsuVIOjY9Wd27KD-F2zEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/8e6f08-30f0-46dd-a7a1-a9c384128d42/1/oOOBtudsuVIOjY9Wd27KD-F2zEA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/8e6f08-30f0-46dd-a7a1-a9c384128d42/1/oOOBtudsuVIOjY9Wd27KD-F2zEA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:c1:11:f9:3b:77:eb:12:d1:42:0e:b7:c1:f5:52:86:c3:3b:
         af:2a:d6:65:83:01:3a:7b:dc:00:cb:ac:31:13:7e:90:9d:e3:
         8a:27:ad:fd:8b:20:f2:19:fd:0e:57:4d:30:b6:a2:d8:69:1e:
         92:43:85:18:6c:d0:6e:cc:c3:f5:8c:44:62:2f:2d:37:62:5f:
         91:16:7f:aa:08:c7:d1:d8:a8:5f:ba:2e:b6:69:dc:d5:ff:f3:
         e4:13:4b:c9:c1:eb:1d:06:e3:0d:1e:8d:04:65:f2:76:a8:c1:
         74:b4:99:96:c7:be:e5:0f:a2:aa:a9:4a:90:3e:39:b6:4f:b1:
         5e:79:cf:b6:ec:94:8f:43:2a:8c:12:d0:99:5f:d0:be:c5:af:
         be:3e:9b:38:c0:d6:76:6e:f4:63:9e:20:16:a3:fc:9d:79:20:
         99:c9:66:10:35:e3:20:e2:f1:6d:af:bc:5b:78:e9:27:e7:37:
         c3:4d:d7:91:a6:03:0c:36:8a:3f:8a:38:1d:6c:77:1b:fd:da:
         fe:e3:19:48:c6:38:58:e6:7a:f2:7f:a5:64:0e:74:0e:e5:b3:
         91:55:5d:54:20:be:9f:ba:12:06:cb:5c:3f:6d:ac:82:6b:20:
         03:4e:43:a7:85:c5:0c:33:76:1f:4c:63:8a:8b:74:bb:e1:6b:
         53:eb:b1:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:29:41 2025 by rpki-client