This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.mft
File:                     OgsF9AppFjlHgjAtG1Zgc3JXpIs.mft (raw, json)
Hash identifier:          u6baF3SiCKiywTSZfR73wp2jp2ayeJB/xOp3LtiDHkQ=
Subject key identifier:   EB:15:6A:E2:0C:37:99:2B:A0:31:19:3D:CB:64:CA:93:46:D8:99:D7
Authority key identifier: 3A:0B:05:F4:0A:69:16:39:47:82:30:2D:1B:56:60:73:72:57:A4:8B
Certificate issuer:       /CN=3a0b05f40a6916394782302d1b5660737257a48b
Certificate serial:       019B0290BC25BA57B3125E841040477E3671
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.mft
Manifest number:          177B
Signing time:             Tue 09 Dec 2025 10:03:18 +0000
Manifest this update:     Tue 09 Dec 2025 10:03:18 +0000
Manifest next update:     Wed 10 Dec 2025 10:03:18 +0000
Files and hashes:         1: DZz0HwqqARibmrSZa6SW5rPMqjw.roa (hash: RrKpz2JATQa7eOyKwCGmO2SKLZQ3cFfCVCyUkvbItu4=)
                          2: ExzZcEDDPK8coOGqZF_YdjfXfTY.roa (hash: tPyYsW2QgB+AcIghP1gBpSMfXHmZrllmzlo1OmzCBLM=)
                          3: Gn8W_5-ZNDFJsfiVCxmuucbwfKk.roa (hash: Rgg/jkarS1sTLeBLQCfZMMhxb1UIfrYeesbGBI5cJnk=)
                          4: MBTQXLr6vq1FguZXPQ1ZjnRLX0U.roa (hash: DiaDx8fvSFqfD/x6lAZDVyhLerP4wBkwuVRd6+tSH0s=)
                          5: OgsF9AppFjlHgjAtG1Zgc3JXpIs.crl (hash: gV7tLBaSMjbRfV2D8xTuymfw+LA7tzYWOz2LGheBI90=)
                          6: Qv7rTlC4gRPHfaKxpRdgaHHNVTA.roa (hash: XlEPB7O64MaJL4hcRAWkANJshOuG+WaN9ZFd6ghdbYU=)
                          7: TJKP__jRvYBXC3BBkXlRyzg2w0g.roa (hash: GHcOS4AOS4XcRUHap/0HcPOkV0jRHLBB5ZJ27pNCDaI=)
                          8: U5IWhBqG97b4K8O2J5yF8MO11Cg.roa (hash: 67On1isYc/HlpspA3CcCESox5lYQWgCrNwtUMTchIFw=)
                          9: XE56sg4j-KwhHyMOsf5OdQ2yPfQ.roa (hash: q5FJqkEGMGo0y2NyOEmtmUQTtcbbFoMSEXPs1Zzk/4s=)
                          10: gVbT8W2DuKQGSKyTYPlzijekpes.roa (hash: BySj2tLoj2ApXY6YZVgDXdpqUHFzskR55psIZFMLIGo=)
                          11: k8lkUNXkJfgLKxdnNkQeItf74mI.roa (hash: +7BizQyd5jBu8yV1kF9jWxW79lVh5H17r91ZJsNLG2M=)
                          12: lav_pheHCvxBgtCqNEbxkYM0umw.roa (hash: YW7brfjkvz7GVJXNTBMw1n/NGXj9Q6aDu3cCW6J9Jc0=)
                          13: mglBNgMdDuQJqu_ome6lp6hFg3A.roa (hash: ypf4NnUwoqhbRRy/+Y9ZZDsZslPk5UguTizNFGojpIg=)
                          14: mn4muSMtqf3dn_5yHyuMR1ZbTMQ.roa (hash: IK6XpF5Q2Tkc5Ny5fEX1eYhz0+eVTj1ZR6kmoLH/Zpg=)
                          15: p8DkltUHyoRPsRZ8wqS7HkhD_w4.roa (hash: WZ922M0yus1urQsDExc+JxOh5vKRfme8mJQQlGJgw6I=)
                          16: rZ9vAsmJNNOHqo4MI2omEwhOYCY.roa (hash: VzlpWQixiHZ9OCMkbuv/OS2n5wRiP2sqImjhqEZvNaE=)
                          17: uz7b7qFJVRiLSqWV--WgGVLTauQ.roa (hash: wpzxfmrcY85kS1F+ylqPRHNmG+YinHe9dDJOqmsBNC0=)
                          18: yPuhQgtDvz4rhwfbwpPAALIJ55o.roa (hash: I+ErOy+M7Yzs1SVwCt9jCXFOvf6k0f8yBGW1RCbKRIM=)
                          19: zyZ78bjjA4tIA3fv3utJmc55bbo.roa (hash: entrEKMQHYUvG/L8GyBbjw39lpFARYO30PpBBNqPFi4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 10 Dec 2025 09:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:02:90:bc:25:ba:57:b3:12:5e:84:10:40:47:7e:36:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a0b05f40a6916394782302d1b5660737257a48b
        Validity
            Not Before: Dec  9 10:03:18 2025 GMT
            Not After : Dec 10 10:03:18 2025 GMT
        Subject: CN=eb156ae20c37992ba031193dcb64ca9346d899d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:06:5a:3e:5f:d1:6f:0f:b5:9e:65:12:6f:55:
                    91:be:db:8b:58:c8:41:9e:2e:60:1e:01:bc:30:ab:
                    f1:9f:27:2e:82:27:6b:9a:62:0f:0b:4d:d4:cf:a5:
                    7b:c6:8c:39:14:55:29:35:ea:c9:2a:45:7d:49:0f:
                    0a:69:88:6f:b9:63:8c:5c:3e:42:9a:49:90:f4:0e:
                    15:82:6c:51:e5:aa:8c:cc:f8:01:70:ea:e8:c9:18:
                    bd:0b:e2:23:60:a1:7f:50:13:7d:b3:8f:14:61:17:
                    94:16:42:d4:8b:d1:3a:65:0a:fd:f4:f3:f0:c5:83:
                    69:e5:86:a4:f8:a7:4c:bb:fa:6d:5c:c6:47:bd:04:
                    e2:db:1a:19:c3:99:3b:a6:bc:60:1e:f7:5b:79:cb:
                    06:57:e2:09:f7:e9:0d:44:03:f8:f3:89:4c:7a:c2:
                    dc:a8:4c:47:8d:c5:09:a5:3b:26:95:ca:89:1e:ec:
                    cb:a7:56:2a:de:fc:08:82:61:81:26:c4:2f:5a:b0:
                    ce:14:dd:78:e3:78:5c:11:c9:12:64:0c:84:01:1c:
                    45:62:fd:46:59:30:3a:d6:d0:9f:aa:0b:4b:22:01:
                    24:98:c9:dc:34:82:0e:6a:6d:6d:0b:c9:96:a4:36:
                    10:6e:93:77:9d:10:85:b9:22:ae:e9:fd:93:61:5e:
                    16:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:15:6A:E2:0C:37:99:2B:A0:31:19:3D:CB:64:CA:93:46:D8:99:D7
            X509v3 Authority Key Identifier:
                keyid:3A:0B:05:F4:0A:69:16:39:47:82:30:2D:1B:56:60:73:72:57:A4:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d3:9c:41:3c:bb:cb:17:72:81:f0:6f:63:cb:aa:87:b6:be:3f:
         ee:64:6d:c4:b0:60:d3:ee:d2:cf:e8:00:7a:6f:b4:5b:5e:67:
         35:e8:ca:52:19:1a:d6:04:41:8c:54:b9:68:a6:15:33:c1:1d:
         50:27:a1:fd:a1:17:f1:de:d0:e1:99:71:f4:e5:f8:55:4e:ac:
         e1:a1:56:53:f5:35:cb:d0:0b:13:cf:b7:01:10:c8:2e:03:fb:
         f1:1e:ae:e5:70:af:e7:d6:dc:d0:c3:7e:fc:0e:59:77:a4:be:
         fe:0d:1e:7e:d3:24:68:53:1c:51:e4:51:5e:1b:24:5b:95:51:
         76:b7:57:5f:da:f1:09:8e:6a:78:1a:ab:f4:df:82:7f:1f:25:
         75:62:44:64:f1:38:75:4c:40:5f:0a:b9:28:4b:c2:26:55:90:
         bf:b5:3d:e9:66:38:8d:25:52:96:89:50:24:00:09:71:11:8e:
         2e:76:ea:a7:cf:d1:f1:6e:8a:ca:f8:45:e2:52:90:f2:16:92:
         37:a5:22:7a:a2:63:47:2e:6f:b6:d8:af:08:e6:53:65:0d:23:
         1a:05:a5:99:53:6f:38:d4:5b:3b:9b:a4:bf:2b:07:b4:97:67:
         27:84:38:32:43:53:88:8e:a9:af:f2:b6:93:b4:82:36:a6:00:
         f5:8c:1d:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 9 12:03:43 2025 by rpki-client