This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/c166f8-633c-4b3b-9c70-4a65ae25c7db/1/0obDOarIjd8zQw5GvJ9eB-_Nrqg.mft
File:                     0obDOarIjd8zQw5GvJ9eB-_Nrqg.mft (raw, json)
Hash identifier:          pZiQGGek4kNuKkcFtB8HvtV9kTIy/Te7rFJ7rsQexWk=
Subject key identifier:   90:30:11:3C:A4:06:F9:42:E2:A1:D7:FD:88:E7:5F:A9:72:12:89:F8
Authority key identifier: D2:86:C3:39:AA:C8:8D:DF:33:43:0E:46:BC:9F:5E:07:EF:CD:AE:A8
Certificate issuer:       /CN=d286c339aac88ddf33430e46bc9f5e07efcdaea8
Certificate serial:       019AF6F9B034C734D8EF5E4BE1643E2187EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0obDOarIjd8zQw5GvJ9eB-_Nrqg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/c166f8-633c-4b3b-9c70-4a65ae25c7db/1/0obDOarIjd8zQw5GvJ9eB-_Nrqg.mft
Manifest number:          0E76
Signing time:             Sun 07 Dec 2025 04:02:29 +0000
Manifest this update:     Sun 07 Dec 2025 04:02:29 +0000
Manifest next update:     Mon 08 Dec 2025 04:02:29 +0000
Files and hashes:         1: 0obDOarIjd8zQw5GvJ9eB-_Nrqg.crl (hash: Luh4dXrS4SS6elXfiytVA3reJMOLhBpKE+E3pHbBKuk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/c166f8-633c-4b3b-9c70-4a65ae25c7db/1/0obDOarIjd8zQw5GvJ9eB-_Nrqg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/c166f8-633c-4b3b-9c70-4a65ae25c7db/1/0obDOarIjd8zQw5GvJ9eB-_Nrqg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0obDOarIjd8zQw5GvJ9eB-_Nrqg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:29:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f6:f9:b0:34:c7:34:d8:ef:5e:4b:e1:64:3e:21:87:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d286c339aac88ddf33430e46bc9f5e07efcdaea8
        Validity
            Not Before: Dec  7 04:02:29 2025 GMT
            Not After : Dec  8 04:02:29 2025 GMT
        Subject: CN=9030113ca406f942e2a1d7fd88e75fa9721289f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:43:a2:c6:74:5c:b5:0f:9d:4d:bb:2a:79:0f:
                    65:e0:67:96:89:e4:39:1e:e0:e4:ce:38:5f:2e:56:
                    78:80:4d:c7:f2:1b:fc:e1:12:5d:45:ea:f1:ed:76:
                    a2:0f:b8:42:d4:0c:76:d7:e7:f2:63:42:c1:ee:19:
                    1d:9a:75:d0:6e:b0:44:a0:da:6f:e9:77:e6:1a:1d:
                    e9:e5:5b:a7:92:4d:2c:67:44:f5:f0:a6:0f:db:6d:
                    e4:37:ae:20:2f:f0:50:c7:ff:67:b3:65:18:38:7b:
                    fb:94:4a:33:fd:eb:82:15:ac:4a:f4:db:3c:4d:7c:
                    30:ab:bd:78:46:97:21:e5:93:ed:e7:e4:a1:eb:a4:
                    40:54:da:a6:af:4d:2a:e8:55:0b:d2:e1:e8:8b:2f:
                    9c:3b:3d:69:61:9a:ae:c7:b2:d2:a6:5c:2e:6f:d4:
                    e5:93:7a:7b:d0:3f:9d:3f:96:d6:d1:54:06:bf:cb:
                    56:a5:3c:3d:36:72:6e:42:e5:42:0b:df:30:35:61:
                    b5:b8:53:26:8a:66:b0:fd:77:f7:c1:99:39:36:3b:
                    fc:cc:4d:71:9a:ad:b3:10:6e:a2:12:c1:c4:7e:28:
                    09:b0:8d:4c:51:8a:62:a7:05:b4:9b:ca:94:49:56:
                    06:59:2e:ca:fa:4f:db:02:24:fb:46:4e:a7:f3:d1:
                    9d:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:30:11:3C:A4:06:F9:42:E2:A1:D7:FD:88:E7:5F:A9:72:12:89:F8
            X509v3 Authority Key Identifier:
                keyid:D2:86:C3:39:AA:C8:8D:DF:33:43:0E:46:BC:9F:5E:07:EF:CD:AE:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0obDOarIjd8zQw5GvJ9eB-_Nrqg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/c166f8-633c-4b3b-9c70-4a65ae25c7db/1/0obDOarIjd8zQw5GvJ9eB-_Nrqg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/c166f8-633c-4b3b-9c70-4a65ae25c7db/1/0obDOarIjd8zQw5GvJ9eB-_Nrqg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:0a:a9:64:7d:19:91:43:5d:99:32:c4:d5:76:cd:74:72:2e:
         98:31:6f:04:5e:b4:2f:4a:15:f2:14:1a:d4:37:31:ca:b7:3c:
         b9:b7:02:6d:08:7c:2b:07:23:8e:9f:e6:4d:4a:ab:8c:40:d7:
         95:fe:8a:9c:be:cc:52:8f:f5:ff:65:d8:4a:d0:98:a8:72:52:
         07:62:c8:82:13:fd:e9:1d:d2:07:48:05:01:c5:88:2f:da:f5:
         d4:45:73:63:64:96:3f:56:89:a1:0e:4a:a0:5f:a7:9d:cb:f9:
         13:e8:95:37:3b:89:6d:0f:b8:82:9a:f9:95:01:80:3d:e4:f2:
         24:a9:b0:17:11:b6:1b:70:77:57:31:6b:f6:85:e4:26:08:df:
         58:a4:4f:37:8d:d6:21:d0:bf:81:ef:ce:11:d4:a6:a2:30:25:
         03:6b:25:2a:eb:da:52:ef:f4:ce:34:d0:1b:69:62:22:aa:15:
         9f:f2:72:74:b3:d4:ee:96:fd:06:b3:b8:bf:15:81:21:8e:0c:
         b8:19:93:00:b7:2b:f4:99:3e:1a:c3:4c:40:09:c1:f1:5b:2e:
         a2:0d:20:e9:40:69:e8:fc:59:4e:d7:7c:ad:37:84:e6:26:0a:
         80:53:09:85:4a:25:69:65:1f:58:49:c8:c4:55:c9:8c:31:af:
         d4:23:f8:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 07:24:37 2025 by rpki-client