This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.mft
File:                     olSp86JmUT3caTXYvgIuflIw6hA.mft (raw, json)
Hash identifier:          boT5MidE3x2vVoTp8tcB6g/61B+JFL3FIZTH16Pki0k=
Subject key identifier:   17:03:52:5E:EE:2A:B2:CC:00:F9:B4:BC:12:60:8A:8B:B9:BB:DE:90
Authority key identifier: A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10
Certificate issuer:       /CN=a254a9f3a266513ddc6935d8be022e7e5230ea10
Certificate serial:       019AF2ADB1DCCFC357A98C259740ECD71D1C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.mft
Manifest number:          1797
Signing time:             Sat 06 Dec 2025 08:01:00 +0000
Manifest this update:     Sat 06 Dec 2025 08:01:00 +0000
Manifest next update:     Sun 07 Dec 2025 08:01:00 +0000
Files and hashes:         1: 4fOUGNAFWdnm9vrv4ZQhOu3Vid8.roa (hash: 18whJjpGFnu6ScIrQqgXZw68MDv5UwqOnT+my9pfd4w=)
                          2: 5BICsEwf39tSfyuR3Dxq7LQhNTs.roa (hash: F1ThVBGu9zXgcyXnsxcohjmknQWFIwIuRVmf9x9GU+Q=)
                          3: 5ze1ULUo6MKTm6UTJHKsimZIisc.roa (hash: m4eK9636nFzrqSVjZiSeU0LUQRr4vGSOV9cX5le6BzU=)
                          4: 6pgC2WmbvOwKxQdYhXcqJyv8gLI.roa (hash: YzcBdSuJXmc3F8XHuHfPgYGMrEVDV50rG3CcR70Lp9E=)
                          5: 8W6gEnbSbHB4zwWx578JWmNIZ9s.roa (hash: HhOmkvbfHuyLR8S9fvlNMW34CV2ZzM/vCu2LBQ3dRHc=)
                          6: 8eep6dVAmsZIpyTErh0SkPM8qXc.roa (hash: SD/qDWKDw7GpyuYdzNmymhVCtf1WfMbKlxVT2o4ptxo=)
                          7: A45T9JlIkLiT_DE0_6X5S8Fq0t0.roa (hash: 1LNt/xXPBnaerAH+uwhDYJHEIRMdA6RsiiUq2tdop/g=)
                          8: CcxaxD4EoKhnFbCvn7fGx4PHWlU.roa (hash: KZDH2XHLPt0marUxUQIkJLqgLsepcaWVX+BzF0QFh4g=)
                          9: GxlDQiNeRlshf53miAx19J4RPC0.roa (hash: OeiSyRpl3mLDjdlOEGBqomQ5rlxYiJaiIYb0ad2mSjQ=)
                          10: KAFqKDk9BCiu0n2y7Q0oKN9OUbo.roa (hash: iAsCXatV/rRYZjdzqnb2mrvtu4xhk01R8Z28UHFMbWk=)
                          11: MoWJzAK8yM2I9t1LTRcJGgWiL8I.roa (hash: wVfGqj4RePXTFHGr8qHdJS00EnHJkEaNtUvIvHlJWq0=)
                          12: Ni-Fp4_j67fDXsFhqeAtqlBDVMk.roa (hash: 9tgqY57FLat9I59Y+ts7KO1YugeEb5mFhO4VhQMSpuE=)
                          13: T30bJyS4tnukk0y5XcMB2tlA-sE.roa (hash: NB63nJlDN5bcZa8a7PZtrUJV2b4GBR3YB6Q88OfOLtU=)
                          14: TTdxccevD2zpMdfo6ZlWOXJ7tOc.roa (hash: a1MiLBNq+VPamgF26TNflFyPN1Bc2B+3ogJ/a+uCX2g=)
                          15: UrXy_LDsHx2iNrccJeDCBS_jIt8.roa (hash: TsZDwaHwD4vmvW8H5SOM5KIJanIsOqNbP0SQtQy4htA=)
                          16: cfdbmoaWdxVHIDhjILaSo4OtkDc.roa (hash: uQyWoeGxbLL+4u04+Lk0DJknoS3PSDcycZWpGGdkjbU=)
                          17: dKlv3q5W0ZkPs-fHNGVzVPehrhk.roa (hash: P0BUXs0HjfUZHQTfdJ+247g73zbdUO2l0SQMdBs7h04=)
                          18: oBER7XWnZgdSbj3Czv9uaUFR2sQ.roa (hash: M0t0U5rqpdmYFg7skq2cv8yVVYTvEMFedcezsIR5ZSA=)
                          19: oF-ZKm-LG7Iu63mJDsCWuLFkY4M.roa (hash: xR0FwkohVFgDTpppB9NlKBMFWMVay8ZCu79sDc8DKiI=)
                          20: olSp86JmUT3caTXYvgIuflIw6hA.crl (hash: g6OlpcJHvdRt/remVPUZJnUz1ybEt5omea9A47E8pvk=)
                          21: s2dvs87g7mYk_o56Wn0SDYYnNL4.roa (hash: a599Jm7G6hEm8AkMoi92fe7la5Wnmj78p+F/nlpnTCM=)
                          22: yCRPZTKKwyn7Dh1bpIRLO3VF08w.roa (hash: j8CzkpxZ0irSvwe8kG2OgPs54FXnomRGROilLkPqjF8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:ad:b1:dc:cf:c3:57:a9:8c:25:97:40:ec:d7:1d:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a254a9f3a266513ddc6935d8be022e7e5230ea10
        Validity
            Not Before: Dec  6 08:01:00 2025 GMT
            Not After : Dec  7 08:01:00 2025 GMT
        Subject: CN=1703525eee2ab2cc00f9b4bc12608a8bb9bbde90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:3a:fe:c8:35:5a:ef:ba:90:e0:da:ae:1d:dc:
                    6b:a0:94:7d:de:7f:1f:e8:1e:a9:db:34:97:55:a1:
                    ce:91:3e:9c:f9:3d:18:31:07:be:16:b8:74:c8:10:
                    1e:28:ac:7a:b0:82:10:f3:23:21:fb:e1:62:63:62:
                    2b:d7:a7:8e:e7:49:70:4a:96:bb:ba:b2:80:fc:f7:
                    f4:4a:02:55:6a:0d:40:50:35:8b:4a:93:dd:4e:4e:
                    bd:81:6a:da:92:2b:18:14:c1:ff:0d:96:92:19:9b:
                    cb:c3:85:83:55:ff:ad:e1:b4:ac:0d:d3:87:92:f2:
                    72:f9:51:5f:2b:d9:f9:02:1f:32:a3:14:67:c5:d5:
                    05:05:fe:c6:75:7b:23:ef:02:08:10:4a:8b:a2:f5:
                    01:77:62:ce:e1:ae:f0:f4:6d:03:17:8a:6f:d7:70:
                    b7:3c:b0:15:6b:da:ab:30:dd:2f:24:94:72:2b:75:
                    3b:0c:f0:29:ac:d0:d1:a7:90:87:29:2b:27:69:60:
                    9c:5d:7e:04:84:32:32:3e:61:83:d1:63:60:5f:60:
                    dd:6c:78:08:d1:3b:7b:1f:79:87:73:7b:e4:1e:b2:
                    c5:d4:76:30:3f:1f:9d:68:35:0b:24:70:72:4e:63:
                    b8:53:78:03:ae:96:56:c9:4e:65:5c:99:21:65:3a:
                    9b:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:03:52:5E:EE:2A:B2:CC:00:F9:B4:BC:12:60:8A:8B:B9:BB:DE:90
            X509v3 Authority Key Identifier:
                keyid:A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:52:f2:0b:5d:5b:be:17:46:21:f7:d2:4e:21:9c:28:bc:59:
         fa:2c:64:fc:8e:79:8b:15:20:25:f4:e6:14:7a:e4:31:88:d1:
         c5:a5:ea:9c:59:1d:92:71:ba:63:34:b2:ce:42:36:7c:a0:a4:
         74:0b:19:9f:ea:39:62:62:e3:c7:b0:11:8c:1e:65:8d:b5:42:
         17:6e:84:3f:4d:70:25:35:27:50:d2:d7:82:9b:b0:ad:87:f2:
         c1:f6:54:b9:cc:de:42:24:0d:67:7c:c1:3d:b8:9c:4e:8f:bf:
         27:71:9d:ff:bf:44:1f:fe:98:1b:20:8b:a9:c9:b0:07:7a:18:
         e9:30:a5:4f:8b:8c:8f:18:a3:47:0b:62:4e:9c:69:4d:bb:97:
         b8:ac:46:df:bb:d4:a8:0e:73:87:87:74:20:31:7d:8d:9b:14:
         6a:1e:82:38:b1:e8:7c:c4:b1:0d:30:d2:76:b6:9f:70:a7:e5:
         ab:fb:46:fe:a4:fe:58:3a:4e:c1:f1:30:93:5a:57:18:bc:8f:
         d8:ba:7b:3b:bf:39:ca:78:35:90:c5:56:52:c0:d6:12:c8:a6:
         25:38:67:0d:ea:b1:c7:0f:ec:30:c9:5d:b9:af:48:e3:bc:20:
         a0:36:ab:e5:30:39:82:38:cd:55:e9:5f:17:9f:91:da:de:6f:
         79:7b:05:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZryrbHcz8NXqYwll0Ds1x0cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyNTRhOWYzYTI2NjUxM2RkYzY5MzVkOGJlMDIyZTdlNTIz
MGVhMTAwHhcNMjUxMjA2MDgwMTAwWhcNMjUxMjA3MDgwMTAwWjAzMTEwLwYDVQQD
EygxNzAzNTI1ZWVlMmFiMmNjMDBmOWI0YmMxMjYwOGE4YmI5YmJkZTkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArDr+yDVa77qQ4NquHdxroJR93n8f
6B6p2zSXVaHOkT6c+T0YMQe+Frh0yBAeKKx6sIIQ8yMh++FiY2Ir16eO50lwSpa7
urKA/Pf0SgJVag1AUDWLSpPdTk69gWrakisYFMH/DZaSGZvLw4WDVf+t4bSsDdOH
kvJy+VFfK9n5Ah8yoxRnxdUFBf7GdXsj7wIIEEqLovUBd2LO4a7w9G0DF4pv13C3
PLAVa9qrMN0vJJRyK3U7DPAprNDRp5CHKSsnaWCcXX4EhDIyPmGD0WNgX2DdbHgI
0Tt7H3mHc3vkHrLF1HYwPx+daDULJHByTmO4U3gDrpZWyU5lXJkhZTqbNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBcDUl7uKrLMAPm0vBJgiou5u96QMB8GA1UdIwQY
MBaAFKJUqfOiZlE93Gk12L4CLn5SMOoQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2xTcDg2Sm1VVDNjYVRYWXZnSXVmbEl3NmhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9iNjAzNzMtODE4ZS00MGE5LTkzMTkt
YWRkZjBlMTg0OWViLzEvb2xTcDg2Sm1VVDNjYVRYWXZnSXVmbEl3NmhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC9iNjAzNzMtODE4ZS00MGE5LTkzMTktYWRkZjBlMTg0OWVi
LzEvb2xTcDg2Sm1VVDNjYVRYWXZnSXVmbEl3NmhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArFLyC11b
vhdGIffSTiGcKLxZ+ixk/I55ixUgJfTmFHrkMYjRxaXqnFkdknG6YzSyzkI2fKCk
dAsZn+o5YmLjx7ARjB5ljbVCF26EP01wJTUnUNLXgpuwrYfywfZUuczeQiQNZ3zB
PbicTo+/J3Gd/79EH/6YGyCLqcmwB3oY6TClT4uMjxijRwtiTpxpTbuXuKxG37vU
qA5zh4d0IDF9jZsUah6COLHofMSxDTDSdrafcKflq/tG/qT+WDpOwfEwk1pXGLyP
2Lp7O785yng1kMVWUsDWEsimJThnDeqxxw/sMMldua9I47wgoDar5TA5gjjNVelf
F5+R2t5veXsF+Q==
-----END CERTIFICATE-----
Generated at Sat Dec 6 10:18:16 2025 by rpki-client