This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/Rro_gAObnnhM-yS_LH3bJOGQCnY.mft
File:                     Rro_gAObnnhM-yS_LH3bJOGQCnY.mft (raw, json)
Hash identifier:          zE1inPz2KTAzl2ClQnhK8qtknRgE/3CvJCI7wFsN1Ms=
Subject key identifier:   0A:7E:45:5E:E1:C2:2D:38:35:1B:69:67:0E:75:AC:0A:F6:80:16:D3
Authority key identifier: 46:BA:3F:80:03:9B:9E:78:4C:FB:24:BF:2C:7D:DB:24:E1:90:0A:76
Certificate issuer:       /CN=46ba3f80039b9e784cfb24bf2c7ddb24e1900a76
Certificate serial:       019AF50B9FD2669EE70F6186901E945A7BD0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rro_gAObnnhM-yS_LH3bJOGQCnY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/Rro_gAObnnhM-yS_LH3bJOGQCnY.mft
Manifest number:          176F
Signing time:             Sat 06 Dec 2025 19:02:50 +0000
Manifest this update:     Sat 06 Dec 2025 19:02:50 +0000
Manifest next update:     Sun 07 Dec 2025 19:02:50 +0000
Files and hashes:         1: 8Zj24jfn9S8WI4ttBUHVoIAXMMo.roa (hash: cTf4aMsPBbGTihgOeG5/giseUSW7pXyGx7wJeH1Zs1U=)
                          2: H0ohXS9X5CuNmdABAZo7QVngevg.roa (hash: AyyjXDae21dR+HrIf+wOHMkNqlVzHUDtXhdzOaCJinw=)
                          3: Rro_gAObnnhM-yS_LH3bJOGQCnY.crl (hash: bjEsKemthxWQCFo6UUYm9z5Nk/Mv+bRSNf5BGMlR7yY=)
                          4: SkAOEDeuA2PQ-A10S9FavkFhiAE.roa (hash: kVOuXVUzFINGvVbrPdqSgnfvVUvQgBv0NhdbBuvyTSo=)
                          5: TrNuqWdgLhGTxn5VxoYeyfzOKkg.roa (hash: Rqi2Sn0fAAAxy2y3ILi9hXub3082liYhSLIo32eP1Fg=)
                          6: _npBPU_qU8Q1a65hoUMHOBSefXQ.roa (hash: e8tqm7dxs7+LcvLZgwgmWSIzqUCH5DxQZJAY7CIpCfc=)
                          7: mSAOwTsVaHd8118WnS4cvGYvNUE.roa (hash: M5exegiwCD9wq+6OVWAn+L9v8TUuNlEDvaTanUNJsnw=)
                          8: zsAzizQNzq-nU7DBqjyFfFYYJlY.roa (hash: lPKM4UQ81kuyk83v9B3QSeG105m6Qhy3mK0i/rPSzW8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/Rro_gAObnnhM-yS_LH3bJOGQCnY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/Rro_gAObnnhM-yS_LH3bJOGQCnY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Rro_gAObnnhM-yS_LH3bJOGQCnY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 19:02:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f5:0b:9f:d2:66:9e:e7:0f:61:86:90:1e:94:5a:7b:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46ba3f80039b9e784cfb24bf2c7ddb24e1900a76
        Validity
            Not Before: Dec  6 19:02:50 2025 GMT
            Not After : Dec  7 19:02:50 2025 GMT
        Subject: CN=0a7e455ee1c22d38351b69670e75ac0af68016d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:b6:5f:dd:f5:33:0e:69:c1:9d:2e:3d:da:92:
                    2e:20:67:68:5f:a1:7d:d0:9c:1c:52:75:f6:7f:92:
                    95:d7:9e:87:d9:d4:a9:0b:93:cd:50:1d:08:79:ac:
                    f2:b5:b3:a7:82:95:e4:bd:64:8b:ad:64:76:80:67:
                    5f:0e:18:0a:a5:1c:74:52:58:ff:b3:1f:5a:0c:03:
                    11:57:ad:07:00:3a:a0:eb:63:34:fa:cb:7c:6e:1c:
                    78:79:5f:b3:d2:74:86:60:59:37:4e:c2:98:77:f5:
                    12:dd:38:c2:16:e2:0b:d3:c3:c2:d4:cc:52:90:f9:
                    d4:99:d0:53:80:fd:94:eb:a9:b5:ff:7b:21:a6:d2:
                    3e:b8:df:62:b4:0d:90:0e:2d:5c:9d:3c:68:3b:cd:
                    f9:11:7d:68:f3:c6:c7:ac:e2:62:61:59:d4:50:9d:
                    cf:71:d4:f8:ae:a9:a0:09:8d:7d:e0:34:15:cc:cb:
                    48:97:5a:74:1c:66:e0:86:79:82:db:eb:e8:92:69:
                    13:b1:42:2a:53:0a:20:f5:5b:48:5c:22:f2:a5:d3:
                    52:19:5d:04:aa:eb:17:55:2e:27:c8:33:2d:3d:cc:
                    cf:d9:53:18:95:20:5e:36:b9:12:ef:fd:f4:a6:4d:
                    d5:a9:a5:48:27:1d:4c:b2:cd:42:a9:24:71:8e:0a:
                    56:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:7E:45:5E:E1:C2:2D:38:35:1B:69:67:0E:75:AC:0A:F6:80:16:D3
            X509v3 Authority Key Identifier:
                keyid:46:BA:3F:80:03:9B:9E:78:4C:FB:24:BF:2C:7D:DB:24:E1:90:0A:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rro_gAObnnhM-yS_LH3bJOGQCnY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/Rro_gAObnnhM-yS_LH3bJOGQCnY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/Rro_gAObnnhM-yS_LH3bJOGQCnY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:f4:98:5c:d8:0f:67:21:63:49:7e:11:2c:1d:b9:a6:0d:0b:
         50:03:00:f7:2c:78:31:dd:6e:3a:1c:ff:b8:a5:08:b1:af:fd:
         f7:8f:71:bf:bd:a9:4c:2c:37:18:48:6d:3f:0c:39:59:ba:9d:
         46:47:f7:74:2c:e2:54:d2:92:66:69:6a:bc:d2:3b:6c:84:13:
         82:a7:af:f5:05:bc:46:73:80:34:fc:77:e8:55:fd:2c:5b:94:
         8a:7a:17:e8:a4:e9:1f:2e:a3:56:fd:83:72:71:d2:54:f6:a1:
         66:28:02:79:c3:eb:f8:b0:07:85:ab:a1:88:7a:c3:2e:be:29:
         a5:66:13:49:04:32:85:63:c5:f5:8a:45:61:a4:f0:4a:89:16:
         d3:64:a6:e9:22:67:e3:cd:bf:ab:75:fc:1b:b6:88:98:68:0f:
         56:d9:91:67:fa:2e:ef:05:a9:dc:6b:c1:47:c1:92:af:90:41:
         41:08:28:cf:db:43:45:a5:a3:ca:b0:4e:d0:c5:69:65:47:53:
         70:a7:ff:de:bf:02:80:6c:19:d0:c4:d8:f9:2c:cc:79:39:e8:
         e1:fd:70:f3:ed:20:53:24:e4:36:c9:4f:f6:28:e2:9b:f7:94:
         df:3b:04:7d:83:69:ed:32:10:92:82:0c:21:06:f5:af:f2:e6:
         18:6c:d6:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 00:57:11 2025 by rpki-client