This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/81d68a-536c-4442-b852-bbd311186950/1/o2mLAQU5EWB-2yp2CQpqztlaPtU.mft
File:                     o2mLAQU5EWB-2yp2CQpqztlaPtU.mft (raw, json)
Hash identifier:          /Of1UbUMBIm/oPSLumI/wLpE7SyTyEREWDx6618YUXY=
Subject key identifier:   F2:89:EB:98:5A:85:6D:98:71:CA:4B:62:D4:2C:85:D4:21:0A:1A:90
Authority key identifier: A3:69:8B:01:05:39:11:60:7E:DB:2A:76:09:0A:6A:CE:D9:5A:3E:D5
Certificate issuer:       /CN=a3698b01053911607edb2a76090a6aced95a3ed5
Certificate serial:       019AF19AA1DCA426929B448083F20AA782A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o2mLAQU5EWB-2yp2CQpqztlaPtU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/81d68a-536c-4442-b852-bbd311186950/1/o2mLAQU5EWB-2yp2CQpqztlaPtU.mft
Manifest number:          1761
Signing time:             Sat 06 Dec 2025 03:00:34 +0000
Manifest this update:     Sat 06 Dec 2025 03:00:34 +0000
Manifest next update:     Sun 07 Dec 2025 03:00:34 +0000
Files and hashes:         1: R8ht10VeSoVhydPFwGD77r1yDU0.roa (hash: ofWmsTQNmoPWiH0DZLija6UpuCRIgTv7LLQ8ZzQiLho=)
                          2: iJkNbGwAvDr3zDBvNNp3PJrPffk.roa (hash: oWcx7oCuY2xi/nWkXX5PcJkqGrpEdipcr6e/fE61Yrk=)
                          3: o2mLAQU5EWB-2yp2CQpqztlaPtU.crl (hash: ua57zDww+3ukutKH90T2OoTK9pn+UsVPmsr2EH2Zxaw=)
                          4: tWQ9cnFy3imrP2HUU-YNNesXz-M.roa (hash: keNfuumhLj0esV6ivUODGor64VRXrwZusUQrseCHziI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/81d68a-536c-4442-b852-bbd311186950/1/o2mLAQU5EWB-2yp2CQpqztlaPtU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/81d68a-536c-4442-b852-bbd311186950/1/o2mLAQU5EWB-2yp2CQpqztlaPtU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/o2mLAQU5EWB-2yp2CQpqztlaPtU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 03:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:9a:a1:dc:a4:26:92:9b:44:80:83:f2:0a:a7:82:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3698b01053911607edb2a76090a6aced95a3ed5
        Validity
            Not Before: Dec  6 03:00:34 2025 GMT
            Not After : Dec  7 03:00:34 2025 GMT
        Subject: CN=f289eb985a856d9871ca4b62d42c85d4210a1a90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:28:81:95:2e:38:81:46:bd:37:7f:12:fb:0c:
                    26:e6:77:3d:a0:76:49:51:b8:b9:e5:07:b8:bb:9a:
                    8d:d3:a5:ff:58:ea:e9:13:a2:89:fb:0e:e2:98:a2:
                    6f:3c:9f:c2:8f:5c:f0:26:c5:96:24:73:76:7b:c7:
                    ce:9e:0a:2e:a6:26:c5:d2:ca:06:0e:21:c7:07:25:
                    35:d1:f8:9c:68:b7:eb:2f:ba:1b:fd:3c:f1:c6:1d:
                    3a:1c:cd:f4:25:f3:0c:7b:88:51:eb:92:f6:0e:c5:
                    ed:c6:c9:0e:bc:75:b5:2a:b8:a7:81:21:f9:98:95:
                    cb:bd:f0:79:1e:76:c9:f1:3e:f0:d6:72:c6:f6:5a:
                    38:68:e1:36:12:49:b8:78:5b:66:cc:bd:08:23:e6:
                    f6:b1:59:92:bc:26:41:9c:75:3d:3b:bc:84:81:a9:
                    c8:93:1b:5d:e9:fa:72:d8:c0:f0:99:b9:5b:1b:35:
                    95:21:e2:b3:a5:b7:bb:73:0a:eb:a0:6f:f4:3e:79:
                    ef:9a:56:2f:be:ed:54:83:d7:d2:ec:46:8c:60:8f:
                    c5:2f:bc:fd:c9:a7:c8:cc:07:06:55:d1:e8:ef:4d:
                    c8:14:ea:d4:2e:81:24:6e:c9:37:16:bd:3f:48:1f:
                    fc:85:1d:a6:4e:b7:d4:cf:49:7a:1a:15:5b:0d:69:
                    38:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:89:EB:98:5A:85:6D:98:71:CA:4B:62:D4:2C:85:D4:21:0A:1A:90
            X509v3 Authority Key Identifier:
                keyid:A3:69:8B:01:05:39:11:60:7E:DB:2A:76:09:0A:6A:CE:D9:5A:3E:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o2mLAQU5EWB-2yp2CQpqztlaPtU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/81d68a-536c-4442-b852-bbd311186950/1/o2mLAQU5EWB-2yp2CQpqztlaPtU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/81d68a-536c-4442-b852-bbd311186950/1/o2mLAQU5EWB-2yp2CQpqztlaPtU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:37:f0:20:3f:5f:61:16:6a:9a:b3:73:27:f7:c7:67:8d:27:
         e7:05:86:50:82:d7:b7:42:6c:c6:3d:e6:f3:14:6e:ea:b0:83:
         26:72:da:19:af:ce:aa:38:6a:b0:d9:0e:a0:e9:bc:92:54:fd:
         16:b7:75:3b:d0:b7:e3:63:be:54:77:0c:22:79:e4:ba:7e:6c:
         ac:01:3e:61:26:96:d6:85:1a:02:c2:bf:08:6d:2f:37:b2:a3:
         cd:79:bf:33:07:b3:d1:48:37:53:ea:88:83:af:09:54:54:20:
         f1:5d:59:f0:b2:82:16:68:cc:ae:0a:04:0e:9e:a8:b0:07:1c:
         35:34:19:e5:54:5d:8c:3e:be:19:82:7e:c0:63:a6:ac:65:20:
         f0:2a:ae:2e:04:65:bb:18:03:23:70:f3:8c:59:03:49:18:06:
         7e:a0:3b:fd:b0:80:89:6b:b9:5a:a3:7e:2d:e5:28:6d:64:23:
         f4:5c:a5:fa:71:90:54:d3:3b:ac:e8:93:c9:d2:04:37:29:32:
         f6:8a:23:54:fe:4b:ae:41:c0:40:1f:ad:15:88:a6:09:08:61:
         d9:31:c6:54:39:13:06:32:59:11:f6:19:b9:86:f6:1b:42:62:
         09:99:83:0b:9f:2b:d1:9b:85:6e:32:44:59:be:83:e1:58:4a:
         a1:33:46:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 10:38:58 2025 by rpki-client