This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/eed9ce-aef9-4fc9-8a4a-c442a18f1efc/1/OXJF0Eku7eWbBFtb4f1OuRYbxBc.mft
File:                     OXJF0Eku7eWbBFtb4f1OuRYbxBc.mft (raw, json)
Hash identifier:          WJl6B7wDGlA99rQXcww/PHyUaQI/ka2LMjZECerCBtY=
Subject key identifier:   DF:5C:17:28:48:87:5A:E7:47:C5:CE:93:28:09:24:C4:2C:A0:65:FE
Authority key identifier: 39:72:45:D0:49:2E:ED:E5:9B:04:5B:5B:E1:FD:4E:B9:16:1B:C4:17
Certificate issuer:       /CN=397245d0492eede59b045b5be1fd4eb9161bc417
Certificate serial:       019B2FD53DB16C795CE7F283D086AEC5FBAC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OXJF0Eku7eWbBFtb4f1OuRYbxBc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/eed9ce-aef9-4fc9-8a4a-c442a18f1efc/1/OXJF0Eku7eWbBFtb4f1OuRYbxBc.mft
Manifest number:          0D14
Signing time:             Thu 18 Dec 2025 05:01:02 +0000
Manifest this update:     Thu 18 Dec 2025 05:01:02 +0000
Manifest next update:     Fri 19 Dec 2025 05:01:02 +0000
Files and hashes:         1: LNlStrlsE14yRfjQBfv8pQze1bk.roa (hash: fki9Rg0dg7D8WnpYuMELeDNz6e2xoBE+PNmZRxJsR0U=)
                          2: OXJF0Eku7eWbBFtb4f1OuRYbxBc.crl (hash: JQJHPuyAFTz1s+YO81TNHjA7pl0dXeRpIL5TmgaGbl4=)
                          3: WainZrZS95pV_wUDdXdKx-4zd8w.roa (hash: qSjOELN6BypOnZ25i1Ntw/+kYsT/hMNWS9eAPB2j+R4=)
                          4: fkySyXgYloFA_rSIKapDu83z4nA.roa (hash: YRI59uMH17c60OUwKfHOzSVfz3vipSg0/ta9/6RebOI=)
                          5: pkIeBUajXZ5S1YZVqFsipYPnvYY.roa (hash: wuHKfe7KGoVciBLRMcdEQvhSLdH+Z4ihPv48EoUAWBA=)
                          6: uQUwmqsLj0U3KwuONWjPJwlPoM0.roa (hash: 80ykNf1aAgBCnkcsaylXJwlHdJfFAWwXxym4KxERtHk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/eed9ce-aef9-4fc9-8a4a-c442a18f1efc/1/OXJF0Eku7eWbBFtb4f1OuRYbxBc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/eed9ce-aef9-4fc9-8a4a-c442a18f1efc/1/OXJF0Eku7eWbBFtb4f1OuRYbxBc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OXJF0Eku7eWbBFtb4f1OuRYbxBc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 19 Dec 2025 04:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:2f:d5:3d:b1:6c:79:5c:e7:f2:83:d0:86:ae:c5:fb:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=397245d0492eede59b045b5be1fd4eb9161bc417
        Validity
            Not Before: Dec 18 05:01:02 2025 GMT
            Not After : Dec 19 05:01:02 2025 GMT
        Subject: CN=df5c172848875ae747c5ce93280924c42ca065fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:a4:3a:25:b5:1c:87:c7:eb:c1:30:f6:f9:65:
                    c2:00:3a:d0:9e:2b:58:49:d7:a6:0d:19:70:23:70:
                    ab:db:97:bb:da:a3:78:a5:c6:f9:91:c7:86:be:df:
                    5e:34:95:82:39:54:ac:9f:a8:1f:3e:63:9b:64:c0:
                    8d:5c:75:50:6a:25:bd:fc:c2:f8:80:70:44:03:d4:
                    cb:37:a2:00:f8:69:db:7e:93:88:07:96:6f:c5:9d:
                    61:97:f6:ed:18:b3:42:da:d0:2f:c2:99:2e:59:89:
                    6f:0c:73:c2:8b:33:0e:b8:7a:dd:1d:c3:31:a7:33:
                    54:63:09:b9:f7:d9:72:4c:27:ee:f7:b6:8c:05:59:
                    f9:83:50:45:33:6d:fa:66:02:f6:90:67:ed:5d:71:
                    28:21:f6:80:58:c6:13:a7:53:c8:20:16:0c:0d:7f:
                    99:75:f8:4c:9b:b6:4f:15:ae:43:bb:33:e2:64:1b:
                    dc:d2:2d:20:7b:90:22:a3:25:44:f7:da:82:83:11:
                    5e:40:6e:ba:75:d6:89:26:6b:a0:cb:6c:5c:1d:d6:
                    9d:ad:74:19:ef:11:29:21:5d:a0:bc:cd:6a:ed:91:
                    0e:97:12:03:8b:99:19:69:da:f1:52:bc:57:5e:50:
                    a6:0d:73:fb:ef:a2:8a:19:0a:0d:5b:32:4b:63:9a:
                    c1:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:5C:17:28:48:87:5A:E7:47:C5:CE:93:28:09:24:C4:2C:A0:65:FE
            X509v3 Authority Key Identifier:
                keyid:39:72:45:D0:49:2E:ED:E5:9B:04:5B:5B:E1:FD:4E:B9:16:1B:C4:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OXJF0Eku7eWbBFtb4f1OuRYbxBc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/eed9ce-aef9-4fc9-8a4a-c442a18f1efc/1/OXJF0Eku7eWbBFtb4f1OuRYbxBc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/eed9ce-aef9-4fc9-8a4a-c442a18f1efc/1/OXJF0Eku7eWbBFtb4f1OuRYbxBc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:57:75:35:63:7e:c1:ba:3a:fa:36:9d:2f:34:19:a6:fc:e2:
         65:40:e9:db:8b:70:e2:a7:38:d5:61:5f:d6:1b:20:e4:67:47:
         8b:bd:51:ce:37:b7:a7:07:92:8b:f1:9e:bd:ab:a7:a8:0c:cb:
         c3:01:58:1f:4e:3e:f0:07:d5:f5:4d:fe:0d:03:ec:17:b7:0e:
         39:bc:a4:c8:ff:96:53:63:26:fd:2d:01:a4:d1:d3:fa:87:0b:
         d8:20:ec:44:a4:e0:a5:0d:ca:35:b9:57:2b:41:9f:af:d5:14:
         df:3b:9c:de:df:0f:80:4b:41:bb:58:f1:01:c2:c1:56:3e:c1:
         4c:3b:f5:2a:f2:64:fc:98:6a:47:f5:23:c0:a9:fe:56:1a:02:
         84:8d:78:d7:fc:94:e7:9e:8a:96:92:d0:c9:73:c9:a7:0a:34:
         ce:c8:5e:5d:54:73:df:aa:d8:57:42:3a:2c:d0:c1:60:36:75:
         83:7f:c9:27:5b:df:a7:e3:ee:a4:03:dc:68:bb:c4:99:f2:03:
         3f:8c:78:a6:c3:8f:18:82:48:97:af:60:94:b1:54:4e:ea:45:
         cb:d5:fb:ec:f0:b6:ba:bd:d5:c4:a7:21:57:d0:ea:4e:fe:b3:
         16:85:0e:a2:ce:41:f9:3a:46:a6:d1:c1:ce:e9:b7:5e:48:64:
         48:56:c5:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 11:33:24 2025 by rpki-client