This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/571b34-acf9-4ebf-988b-0feb66e7f28a/1/ogdDObsha4W9yD1hd4ghrfkUnVY.mft
File:                     ogdDObsha4W9yD1hd4ghrfkUnVY.mft (raw, json)
Hash identifier:          9LevqP1aUu9I00en5HmyOcYHlpB4n4VG3GPrjfz8pdo=
Subject key identifier:   8D:24:3A:6A:1F:2A:BD:2E:CA:B9:30:13:29:CD:CF:91:CF:CB:1E:E2
Authority key identifier: A2:07:43:39:BB:21:6B:85:BD:C8:3D:61:77:88:21:AD:F9:14:9D:56
Certificate issuer:       /CN=a2074339bb216b85bdc83d61778821adf9149d56
Certificate serial:       019B22507D46979A99B3C02EBA5A090370C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ogdDObsha4W9yD1hd4ghrfkUnVY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/571b34-acf9-4ebf-988b-0feb66e7f28a/1/ogdDObsha4W9yD1hd4ghrfkUnVY.mft
Manifest number:          177F
Signing time:             Mon 15 Dec 2025 14:00:58 +0000
Manifest this update:     Mon 15 Dec 2025 14:00:58 +0000
Manifest next update:     Tue 16 Dec 2025 14:00:58 +0000
Files and hashes:         1: 1xcc1SYILBbx3rhR6psLH4-mx1k.roa (hash: YY5s2ur+NPzr2i2PTIla4YnYnzjA2lNDUiBFlQTWU6s=)
                          2: DzgRwer0SyfEiMUBymVa3GjZBhc.roa (hash: H6oc5ilH3tnHz0hpCDXzWc1+BWJ5xndGPAgz0hIghPU=)
                          3: KSs1jOl2vQ2T9aBxS53muqbkeek.roa (hash: k6xoKkAhl7uyLISVfEu/5MO1xlAN4gAUOxN8werJasI=)
                          4: MOUd9P1Za8GRPdMhCv16TQcZqEA.roa (hash: 8oyYfQSDjCb57ReEl42i/Xt+XFMdZ0eQkDpTIRHnmxA=)
                          5: TCJElgSSWTdNPCx4HtGVjoR5OHE.roa (hash: qYI1zk90mfrJGyeYZUA0ZHtzOK7fZWd1alNZdeo0gHI=)
                          6: hzVSMi0KPzevpyomB4cUEWfY6i0.roa (hash: g4+WSmI6cNmxYSAsnD6CO/MARE1+j6J4yksR/5LsuhM=)
                          7: ogdDObsha4W9yD1hd4ghrfkUnVY.crl (hash: Jg7VaqQvqDsW4BNuSAT6RzZplvThLQt4t2CWkYcneZg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/571b34-acf9-4ebf-988b-0feb66e7f28a/1/ogdDObsha4W9yD1hd4ghrfkUnVY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/571b34-acf9-4ebf-988b-0feb66e7f28a/1/ogdDObsha4W9yD1hd4ghrfkUnVY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ogdDObsha4W9yD1hd4ghrfkUnVY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 16 Dec 2025 14:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:22:50:7d:46:97:9a:99:b3:c0:2e:ba:5a:09:03:70:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2074339bb216b85bdc83d61778821adf9149d56
        Validity
            Not Before: Dec 15 14:00:58 2025 GMT
            Not After : Dec 16 14:00:58 2025 GMT
        Subject: CN=8d243a6a1f2abd2ecab9301329cdcf91cfcb1ee2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:93:43:b8:87:bc:9d:f8:a7:31:54:b8:c4:43:
                    81:a5:a4:45:0a:3a:61:c9:3a:30:80:50:98:c6:6d:
                    cc:d7:32:59:b7:44:97:c3:1f:8c:4b:32:8b:2d:ac:
                    b0:0d:f0:b7:35:00:23:c1:b0:c4:d4:0f:8c:07:d9:
                    b7:7f:e9:a4:65:30:90:08:bd:42:77:de:4f:66:bc:
                    ef:05:b0:c1:b8:0b:64:8c:52:2b:e7:42:cf:2f:e1:
                    df:ea:78:5d:5b:38:12:e0:12:a8:c7:13:cd:62:51:
                    b3:1e:88:34:7d:a8:fd:c8:60:51:eb:f9:27:93:c2:
                    c3:6f:00:0e:87:01:b6:9e:07:66:d5:9f:d0:fe:b4:
                    5c:c7:7f:35:c1:d8:24:2a:6a:db:a1:17:e5:69:26:
                    21:3a:ff:73:ec:68:e3:fe:ef:9d:49:eb:c7:4f:1a:
                    95:7d:ca:ce:5d:15:c0:8a:68:d4:05:21:47:98:0e:
                    0e:bb:22:1d:43:31:68:d5:ed:ed:45:15:16:19:47:
                    b7:72:d9:a4:ce:92:e6:ae:4e:63:12:7a:a6:8c:47:
                    62:98:e0:f5:7e:db:8c:87:03:14:cc:31:0d:d4:8a:
                    39:2a:9d:02:50:85:c7:05:ed:6a:94:85:c6:a2:34:
                    fa:23:af:85:55:16:ac:de:3b:00:f4:53:03:e4:fb:
                    6c:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:24:3A:6A:1F:2A:BD:2E:CA:B9:30:13:29:CD:CF:91:CF:CB:1E:E2
            X509v3 Authority Key Identifier:
                keyid:A2:07:43:39:BB:21:6B:85:BD:C8:3D:61:77:88:21:AD:F9:14:9D:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogdDObsha4W9yD1hd4ghrfkUnVY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/571b34-acf9-4ebf-988b-0feb66e7f28a/1/ogdDObsha4W9yD1hd4ghrfkUnVY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/571b34-acf9-4ebf-988b-0feb66e7f28a/1/ogdDObsha4W9yD1hd4ghrfkUnVY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:bc:40:90:a5:7c:75:fc:d0:94:02:68:42:21:eb:18:28:47:
         bb:5e:09:60:46:66:a1:cf:99:2d:02:3a:15:1b:4a:b5:a2:9d:
         a4:ff:c9:32:11:96:7d:23:d6:ad:9b:08:74:35:65:37:43:57:
         d9:d4:d7:d6:1e:b1:85:ce:97:e5:9b:d0:c3:b2:a4:ee:88:88:
         86:93:5f:86:97:68:85:d2:be:56:f0:1f:f9:40:df:2f:c5:10:
         4d:83:1a:8c:6c:0e:12:cc:91:dd:80:04:8b:0d:c8:d4:b0:0f:
         54:dd:c9:f2:43:ac:a3:70:a8:74:91:9e:97:78:cd:7b:92:b7:
         bc:24:6f:2a:15:0a:43:d3:d5:38:d5:ef:94:44:4e:3d:8d:ce:
         07:eb:8c:9f:57:4b:29:58:df:b0:a4:2e:ca:75:33:53:05:e7:
         b7:4b:3a:e3:89:a3:72:88:d7:f7:e6:0c:81:55:b5:c7:77:c0:
         d1:fd:6e:e2:6a:c4:58:97:80:15:53:6c:af:03:10:46:bf:f9:
         e7:77:dc:f0:cc:61:91:aa:01:3e:da:05:47:ee:96:9f:58:97:
         b6:a1:2f:11:51:61:2d:45:e7:38:be:e4:3d:7d:af:bb:a3:db:
         8d:99:b9:1d:43:42:96:24:4b:de:ef:ff:6c:8e:06:6f:b5:d3:
         6e:e9:6e:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZsiUH1Gl5qZs8AuuloJA3DAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyMDc0MzM5YmIyMTZiODViZGM4M2Q2MTc3ODgyMWFkZjkx
NDlkNTYwHhcNMjUxMjE1MTQwMDU4WhcNMjUxMjE2MTQwMDU4WjAzMTEwLwYDVQQD
Eyg4ZDI0M2E2YTFmMmFiZDJlY2FiOTMwMTMyOWNkY2Y5MWNmY2IxZWUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxZNDuIe8nfinMVS4xEOBpaRFCjph
yTowgFCYxm3M1zJZt0SXwx+MSzKLLaywDfC3NQAjwbDE1A+MB9m3f+mkZTCQCL1C
d95PZrzvBbDBuAtkjFIr50LPL+Hf6nhdWzgS4BKoxxPNYlGzHog0faj9yGBR6/kn
k8LDbwAOhwG2ngdm1Z/Q/rRcx381wdgkKmrboRflaSYhOv9z7Gjj/u+dSevHTxqV
fcrOXRXAimjUBSFHmA4OuyIdQzFo1e3tRRUWGUe3ctmkzpLmrk5jEnqmjEdimOD1
ftuMhwMUzDEN1Io5Kp0CUIXHBe1qlIXGojT6I6+FVRas3jsA9FMD5PtsiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI0kOmofKr0uyrkwEynNz5HPyx7iMB8GA1UdIwQY
MBaAFKIHQzm7IWuFvcg9YXeIIa35FJ1WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2dkRE9ic2hhNFc5eUQxaGQ0Z2hyZmtVblZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy81NzFiMzQtYWNmOS00ZWJmLTk4OGIt
MGZlYjY2ZTdmMjhhLzEvb2dkRE9ic2hhNFc5eUQxaGQ0Z2hyZmtVblZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy81NzFiMzQtYWNmOS00ZWJmLTk4OGItMGZlYjY2ZTdmMjhh
LzEvb2dkRE9ic2hhNFc5eUQxaGQ0Z2hyZmtVblZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb7xAkKV8
dfzQlAJoQiHrGChHu14JYEZmoc+ZLQI6FRtKtaKdpP/JMhGWfSPWrZsIdDVlN0NX
2dTX1h6xhc6X5ZvQw7Kk7oiIhpNfhpdohdK+VvAf+UDfL8UQTYMajGwOEsyR3YAE
iw3I1LAPVN3J8kOso3CodJGel3jNe5K3vCRvKhUKQ9PVONXvlEROPY3OB+uMn1dL
KVjfsKQuynUzUwXnt0s644mjcojX9+YMgVW1x3fA0f1u4mrEWJeAFVNsrwMQRr/5
53fc8MxhkaoBPtoFR+6Wn1iXtqEvEVFhLUXnOL7kPX2vu6PbjZm5HUNCliRL3u//
bI4Gb7XTbuluKw==
-----END CERTIFICATE-----
Generated at Mon Dec 15 21:34:13 2025 by rpki-client