This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/8e6f08-30f0-46dd-a7a1-a9c384128d42/1/oOOBtudsuVIOjY9Wd27KD-F2zEA.mft
File:                     oOOBtudsuVIOjY9Wd27KD-F2zEA.mft (raw, json)
Hash identifier:          Lsk0HkhfCyTP2EDpRchQC6r9PVBW8xGa9zhWWi7hHiM=
Subject key identifier:   32:B9:34:CD:5E:59:36:2A:67:E1:08:D6:BB:99:A1:F1:A4:DE:D1:28
Authority key identifier: A0:E3:81:B6:E7:6C:B9:52:0E:8D:8F:56:77:6E:CA:0F:E1:76:CC:40
Certificate issuer:       /CN=a0e381b6e76cb9520e8d8f56776eca0fe176cc40
Certificate serial:       019B07B508F693A808E282DFD29C92352615
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oOOBtudsuVIOjY9Wd27KD-F2zEA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/8e6f08-30f0-46dd-a7a1-a9c384128d42/1/oOOBtudsuVIOjY9Wd27KD-F2zEA.mft
Manifest number:          177C
Signing time:             Wed 10 Dec 2025 10:01:03 +0000
Manifest this update:     Wed 10 Dec 2025 10:01:03 +0000
Manifest next update:     Thu 11 Dec 2025 10:01:03 +0000
Files and hashes:         1: 95FzUOf19GAUgH-NNap3guhoYwc.roa (hash: xIP1fB6Qn9UTZZo8HocsS+GRzZb3S08GTszP5U7/+78=)
                          2: MuDm6qOBJ8xkrh2L926I8rpU5do.roa (hash: LGlkBx/kOBt10H9SsN38yJ3HGznA6mZgmUvmJ/8iHgA=)
                          3: kKHhag8OTcKOXKL4tqRHrcy5NDY.roa (hash: 1hD0boi1MCMets6jW6GCgAElJ8cKDe4YcTao6OTBJnY=)
                          4: oOOBtudsuVIOjY9Wd27KD-F2zEA.crl (hash: lHc5qjJlbbm+4ijT2ZS8B+V96jwWUweXfVTK08t1yGU=)
                          5: vA3DqyvNGHMDKHTEiVWXXGlC-Q4.roa (hash: I5VIDSXlYm0OjzIrYxH5a3fzHBdn2UCpIwB6Nwr4MjU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/8e6f08-30f0-46dd-a7a1-a9c384128d42/1/oOOBtudsuVIOjY9Wd27KD-F2zEA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/8e6f08-30f0-46dd-a7a1-a9c384128d42/1/oOOBtudsuVIOjY9Wd27KD-F2zEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oOOBtudsuVIOjY9Wd27KD-F2zEA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 11 Dec 2025 10:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:07:b5:08:f6:93:a8:08:e2:82:df:d2:9c:92:35:26:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0e381b6e76cb9520e8d8f56776eca0fe176cc40
        Validity
            Not Before: Dec 10 10:01:03 2025 GMT
            Not After : Dec 11 10:01:03 2025 GMT
        Subject: CN=32b934cd5e59362a67e108d6bb99a1f1a4ded128
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:e3:23:35:3a:ae:c8:d3:78:ed:76:55:96:3c:
                    de:f2:2e:1d:17:84:5e:22:8b:6a:17:42:7e:cb:a4:
                    83:42:70:e3:6f:fa:b2:84:e8:2c:94:9f:be:7b:53:
                    3b:6e:a9:44:9c:f4:95:27:f1:14:94:97:3e:ab:64:
                    82:45:55:ae:67:fe:54:5a:cd:92:1c:0d:c3:96:f4:
                    41:b0:6f:43:2d:77:2e:22:ea:31:e0:c6:bb:95:7b:
                    7a:ea:0d:20:25:60:3a:24:8a:ff:89:84:15:f4:0c:
                    3a:b6:19:49:b6:fb:d3:30:af:47:f2:da:d9:1f:24:
                    af:04:85:ee:56:a1:3e:a6:a9:24:3b:0f:d3:0b:f2:
                    bc:b9:6a:6a:a9:84:3a:78:e5:b2:85:c2:b1:3e:8c:
                    2a:2a:76:2c:4c:81:5d:53:7d:67:d9:50:1f:30:08:
                    e1:1b:0f:8e:90:9a:7c:f2:71:ae:be:18:97:e8:c9:
                    07:b2:fe:11:27:52:82:b5:94:2a:cf:78:5a:42:2b:
                    f4:3d:d2:1b:52:c3:31:6a:78:33:4c:c9:80:35:f0:
                    a7:b7:d3:86:1b:90:1a:ea:23:8d:6d:39:ed:66:a2:
                    42:7b:88:cd:19:fe:0d:bd:18:a8:25:1c:d5:a1:4f:
                    89:7a:18:27:68:79:e0:aa:15:d3:36:44:45:40:3d:
                    2b:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:B9:34:CD:5E:59:36:2A:67:E1:08:D6:BB:99:A1:F1:A4:DE:D1:28
            X509v3 Authority Key Identifier:
                keyid:A0:E3:81:B6:E7:6C:B9:52:0E:8D:8F:56:77:6E:CA:0F:E1:76:CC:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oOOBtudsuVIOjY9Wd27KD-F2zEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/8e6f08-30f0-46dd-a7a1-a9c384128d42/1/oOOBtudsuVIOjY9Wd27KD-F2zEA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/8e6f08-30f0-46dd-a7a1-a9c384128d42/1/oOOBtudsuVIOjY9Wd27KD-F2zEA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:56:7f:39:76:d9:db:6c:09:4a:ec:dc:3b:71:a3:9b:42:36:
         92:4c:34:fc:68:92:4a:b6:ce:4c:19:48:d0:c2:db:87:42:e8:
         8c:79:62:4b:67:09:f7:69:fb:40:aa:2e:6b:c7:49:ec:d2:73:
         7c:af:a0:bc:1c:28:30:77:66:58:27:d2:6c:dc:ed:1d:45:1a:
         51:75:0f:54:28:f1:f5:e3:f9:59:8c:91:9c:fa:b5:ac:25:39:
         a0:bf:5e:04:98:10:ea:d7:0e:f1:03:ab:62:bf:3c:65:f7:bb:
         22:90:b8:db:86:64:3e:d6:49:c4:0c:03:db:e8:8e:84:dd:a7:
         9d:cf:08:f2:2a:98:5d:5a:ff:99:e5:65:70:dd:5c:51:44:a2:
         9b:be:b3:7a:2a:0e:e2:c0:a8:51:db:f4:5c:b3:4c:d3:e7:84:
         d7:78:02:cb:5c:b2:99:69:4b:6f:cc:d8:e5:75:5e:e6:22:05:
         03:b0:5c:5e:ec:f5:d6:95:0f:3a:0c:59:7b:b3:a5:9d:68:fa:
         15:64:c9:51:df:d6:61:0b:66:56:5b:0c:3a:0c:57:2b:48:52:
         4d:d7:9c:58:57:39:c5:15:4e:94:8f:75:91:0c:a9:72:20:07:
         db:57:26:82:13:97:38:34:71:87:19:46:c9:97:a4:ed:d1:0d:
         86:6e:44:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 10 11:36:12 2025 by rpki-client