This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/oGOa3x4LhLn_ZOT46-Y4679dJ7k.mft
File:                     oGOa3x4LhLn_ZOT46-Y4679dJ7k.mft (raw, json)
Hash identifier:          Unl7pZyxRYKAIngqMx7QHUOnw+06km61qx7u6vK5Y3s=
Subject key identifier:   59:5A:4E:9C:46:DE:EB:53:1D:50:94:47:63:98:AA:2A:59:69:7B:77
Authority key identifier: A0:63:9A:DF:1E:0B:84:B9:FF:64:E4:F8:EB:E6:38:EB:BF:5D:27:B9
Certificate issuer:       /CN=a0639adf1e0b84b9ff64e4f8ebe638ebbf5d27b9
Certificate serial:       019AF2E43B833F22E95C1E603F4456D44249
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oGOa3x4LhLn_ZOT46-Y4679dJ7k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/oGOa3x4LhLn_ZOT46-Y4679dJ7k.mft
Manifest number:          1763
Signing time:             Sat 06 Dec 2025 09:00:34 +0000
Manifest this update:     Sat 06 Dec 2025 09:00:34 +0000
Manifest next update:     Sun 07 Dec 2025 09:00:34 +0000
Files and hashes:         1: 7C0eLiHaSivPjWvCeJI7OYyeX0w.roa (hash: QECF5Dw9n/dUuIXbwLPUz1r2SDqHk19ywfPN3IJ1Bjo=)
                          2: iALFaO66XR7bzKvgq4B-T0dt4x4.roa (hash: PA5b0zcAe+bx03MLbtIWhk9SgkBfHIkZikFyxJSWiS8=)
                          3: oGOa3x4LhLn_ZOT46-Y4679dJ7k.crl (hash: +UZLF0rHt7h6PBtUp5jKRUm12vrE326Xc1sxMFCNYVw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/oGOa3x4LhLn_ZOT46-Y4679dJ7k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/oGOa3x4LhLn_ZOT46-Y4679dJ7k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oGOa3x4LhLn_ZOT46-Y4679dJ7k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 09:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:e4:3b:83:3f:22:e9:5c:1e:60:3f:44:56:d4:42:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0639adf1e0b84b9ff64e4f8ebe638ebbf5d27b9
        Validity
            Not Before: Dec  6 09:00:34 2025 GMT
            Not After : Dec  7 09:00:34 2025 GMT
        Subject: CN=595a4e9c46deeb531d5094476398aa2a59697b77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:c2:14:8a:d3:7f:22:14:f8:0f:a8:4a:3e:d3:
                    5d:31:d7:4c:f2:76:ae:d4:b2:ed:67:68:67:76:55:
                    fd:c0:e7:68:b0:83:d2:77:11:a5:76:0e:d5:5f:b0:
                    2b:fa:15:de:57:72:e7:fa:e0:39:d4:45:8a:a5:62:
                    40:fa:69:0b:1c:cb:30:3f:01:e5:f8:d0:0f:37:5c:
                    53:a9:e8:75:dd:d9:dd:77:7a:fc:bf:7b:88:7e:9f:
                    2b:c6:64:a4:23:47:eb:a6:97:85:4b:68:fe:80:51:
                    66:9d:5f:d9:78:5c:c1:ec:4a:c0:44:56:d8:73:de:
                    e4:06:3a:40:f2:09:11:70:a7:47:04:2f:69:c1:d7:
                    22:8d:1a:44:5a:5d:b1:ec:ea:c5:84:eb:bc:a1:80:
                    2b:03:ab:33:f0:cb:19:8c:b3:1a:eb:47:f6:5a:25:
                    a2:28:24:07:76:80:85:96:97:f6:31:b2:cd:b3:f3:
                    a7:ca:c9:3b:c5:25:43:57:aa:3d:8f:d8:03:2c:fc:
                    b9:2c:66:13:6a:c7:42:f0:5b:ab:47:aa:81:71:16:
                    c5:f8:3d:e8:5b:6f:1c:15:ad:0e:5a:c4:bb:59:bf:
                    5a:05:37:0e:fa:8f:be:a4:f0:5b:86:47:e6:a2:d7:
                    9c:1b:c1:38:66:74:97:9d:9f:f1:7a:0d:bd:59:c5:
                    b2:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:5A:4E:9C:46:DE:EB:53:1D:50:94:47:63:98:AA:2A:59:69:7B:77
            X509v3 Authority Key Identifier:
                keyid:A0:63:9A:DF:1E:0B:84:B9:FF:64:E4:F8:EB:E6:38:EB:BF:5D:27:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oGOa3x4LhLn_ZOT46-Y4679dJ7k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/oGOa3x4LhLn_ZOT46-Y4679dJ7k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/oGOa3x4LhLn_ZOT46-Y4679dJ7k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:d5:44:44:d2:98:2c:aa:ca:45:7c:b6:23:e7:c9:1e:2e:7b:
         bc:5d:93:61:47:c5:3c:73:5b:b6:1f:60:da:58:13:5d:36:92:
         27:b8:9b:af:33:ea:8f:60:a8:2b:28:a0:54:3c:98:b1:f5:a0:
         6f:04:38:05:70:02:18:dd:c6:8b:b1:37:6d:0c:83:41:e0:3e:
         82:92:c4:e3:60:77:bd:78:0f:b4:82:82:14:f5:a0:86:56:2e:
         7b:57:dd:a6:82:41:14:10:ff:5b:1c:26:fb:ef:3d:d3:0f:68:
         53:90:35:83:54:b3:7f:a6:6e:7c:36:25:41:5e:42:39:96:f7:
         58:97:9d:2a:bb:35:29:f2:aa:f5:ef:4e:69:02:12:8f:a7:9f:
         d4:e5:73:ad:88:ff:2a:62:45:28:61:0a:6f:2f:12:af:19:33:
         a7:f1:f3:78:d5:06:a2:84:ff:2f:b8:87:28:f8:42:f7:46:90:
         33:08:99:93:81:a9:e3:fb:47:c7:a5:91:dc:b0:88:fe:cf:d6:
         c0:bc:d1:38:0b:ac:9c:b0:6c:d7:91:b2:d8:d1:9f:35:80:15:
         59:f7:96:71:66:dc:c2:7a:f0:bc:76:0c:7c:63:60:b9:bc:8d:
         65:71:08:0e:62:1d:04:94:1f:e0:fa:6b:55:65:9b:cd:e3:6f:
         3b:8c:83:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZry5DuDPyLpXB5gP0RW1EJJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwNjM5YWRmMWUwYjg0YjlmZjY0ZTRmOGViZTYzOGViYmY1
ZDI3YjkwHhcNMjUxMjA2MDkwMDM0WhcNMjUxMjA3MDkwMDM0WjAzMTEwLwYDVQQD
Eyg1OTVhNGU5YzQ2ZGVlYjUzMWQ1MDk0NDc2Mzk4YWEyYTU5Njk3Yjc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA08IUitN/IhT4D6hKPtNdMddM8nau
1LLtZ2hndlX9wOdosIPSdxGldg7VX7Ar+hXeV3Ln+uA51EWKpWJA+mkLHMswPwHl
+NAPN1xTqeh13dndd3r8v3uIfp8rxmSkI0frppeFS2j+gFFmnV/ZeFzB7ErARFbY
c97kBjpA8gkRcKdHBC9pwdcijRpEWl2x7OrFhOu8oYArA6sz8MsZjLMa60f2WiWi
KCQHdoCFlpf2MbLNs/Onysk7xSVDV6o9j9gDLPy5LGYTasdC8FurR6qBcRbF+D3o
W28cFa0OWsS7Wb9aBTcO+o++pPBbhkfmotecG8E4ZnSXnZ/xeg29WcWyZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFlaTpxG3utTHVCUR2OYqipZaXt3MB8GA1UdIwQY
MBaAFKBjmt8eC4S5/2Tk+OvmOOu/XSe5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0dPYTN4NExoTG5fWk9UNDYtWTQ2NzlkSjdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC8wYzM2M2MtMmQwZS00YmNhLWE5ZjIt
ODEzYzVhYWI3ODNlLzEvb0dPYTN4NExoTG5fWk9UNDYtWTQ2NzlkSjdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC8wYzM2M2MtMmQwZS00YmNhLWE5ZjItODEzYzVhYWI3ODNl
LzEvb0dPYTN4NExoTG5fWk9UNDYtWTQ2NzlkSjdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF9VERNKY
LKrKRXy2I+fJHi57vF2TYUfFPHNbth9g2lgTXTaSJ7ibrzPqj2CoKyigVDyYsfWg
bwQ4BXACGN3Gi7E3bQyDQeA+gpLE42B3vXgPtIKCFPWghlYue1fdpoJBFBD/Wxwm
++890w9oU5A1g1Szf6ZufDYlQV5COZb3WJedKrs1KfKq9e9OaQISj6ef1OVzrYj/
KmJFKGEKby8Srxkzp/HzeNUGooT/L7iHKPhC90aQMwiZk4Gp4/tHx6WR3LCI/s/W
wLzROAusnLBs15Gy2NGfNYAVWfeWcWbcwnrwvHYMfGNgubyNZXEIDmIdBJQf4Ppr
VWWbzeNvO4yDTg==
-----END CERTIFICATE-----
Generated at Sat Dec 6 15:57:40 2025 by rpki-client