This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/ffe07c-16f0-4999-8894-10f0093eaae0/1/91Ohm13OHUFZNSIpQmqf232fmjs.mft
File:                     91Ohm13OHUFZNSIpQmqf232fmjs.mft (raw, json)
Hash identifier:          8GaEcFihtpgZ8AqdGSatu6MwlPJAyuKPEXGJkPsseWE=
Subject key identifier:   4F:4E:DF:44:85:D2:27:BA:50:41:59:84:BC:18:17:B0:BB:41:67:33
Authority key identifier: F7:53:A1:9B:5D:CE:1D:41:59:35:22:29:42:6A:9F:DB:7D:9F:9A:3B
Certificate issuer:       /CN=f753a19b5dce1d4159352229426a9fdb7d9f9a3b
Certificate serial:       019B38A2D651A5BE358AEC8E7C629C82DEC0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/91Ohm13OHUFZNSIpQmqf232fmjs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/ffe07c-16f0-4999-8894-10f0093eaae0/1/91Ohm13OHUFZNSIpQmqf232fmjs.mft
Manifest number:          0A96
Signing time:             Fri 19 Dec 2025 22:02:34 +0000
Manifest this update:     Fri 19 Dec 2025 22:02:34 +0000
Manifest next update:     Sat 20 Dec 2025 22:02:34 +0000
Files and hashes:         1: 7DobkB9YDZRCFthUqh8EeCazT9A.roa (hash: wrSSktbEIiruaMGzjyB9HPAsqfXawT4rvBYdbF17ar8=)
                          2: 91Ohm13OHUFZNSIpQmqf232fmjs.crl (hash: fpCfcGM5hg1frQU1ev5xj0IwdLwkBn5zgL/ogUJ7gxI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/ffe07c-16f0-4999-8894-10f0093eaae0/1/91Ohm13OHUFZNSIpQmqf232fmjs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/ffe07c-16f0-4999-8894-10f0093eaae0/1/91Ohm13OHUFZNSIpQmqf232fmjs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/91Ohm13OHUFZNSIpQmqf232fmjs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Dec 2025 22:02:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:38:a2:d6:51:a5:be:35:8a:ec:8e:7c:62:9c:82:de:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f753a19b5dce1d4159352229426a9fdb7d9f9a3b
        Validity
            Not Before: Dec 19 22:02:34 2025 GMT
            Not After : Dec 20 22:02:34 2025 GMT
        Subject: CN=4f4edf4485d227ba50415984bc1817b0bb416733
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:89:36:53:1c:f4:5c:21:6e:80:a9:78:0c:dd:
                    ff:cc:23:a1:89:86:1a:66:c9:ec:8e:e7:1a:49:cc:
                    cd:d2:d9:0a:95:10:7e:97:52:72:ee:4f:6f:02:73:
                    39:81:65:d8:c4:ca:de:44:5e:c0:c5:17:56:5b:d1:
                    5f:47:d0:52:f4:86:13:06:74:8b:68:f0:5e:cc:ed:
                    d7:e0:e8:6f:33:42:1b:ec:33:19:bb:d5:0c:ed:68:
                    1a:a1:9c:b8:39:24:f4:7d:09:03:fa:0a:fb:24:be:
                    9d:2b:07:b8:8a:58:47:d5:1b:42:6b:9c:e3:03:1e:
                    96:aa:b4:46:ee:d8:a9:78:8d:1c:6c:42:e1:b6:84:
                    c4:c7:b1:cf:89:fa:12:7e:3f:a9:0d:5a:11:e9:74:
                    6e:98:58:b0:93:98:fc:85:92:76:1e:eb:17:16:62:
                    b2:94:a6:9c:6a:30:90:4b:91:23:e1:14:f0:58:7a:
                    21:98:3a:45:00:65:03:ee:e1:91:82:9c:0e:df:1d:
                    32:b4:64:37:04:e2:b4:ec:80:67:5c:e7:2c:56:1b:
                    ee:e4:bd:f3:33:50:b9:fa:3e:e0:4e:02:53:5c:d1:
                    e8:32:0e:68:d4:25:9a:72:df:26:4c:ea:69:20:7d:
                    58:98:82:e3:bb:76:94:70:c3:ca:e6:89:0b:83:b4:
                    5c:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:4E:DF:44:85:D2:27:BA:50:41:59:84:BC:18:17:B0:BB:41:67:33
            X509v3 Authority Key Identifier:
                keyid:F7:53:A1:9B:5D:CE:1D:41:59:35:22:29:42:6A:9F:DB:7D:9F:9A:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/91Ohm13OHUFZNSIpQmqf232fmjs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ffe07c-16f0-4999-8894-10f0093eaae0/1/91Ohm13OHUFZNSIpQmqf232fmjs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ffe07c-16f0-4999-8894-10f0093eaae0/1/91Ohm13OHUFZNSIpQmqf232fmjs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:2d:07:92:90:e3:77:46:42:13:70:2b:ce:b4:29:84:dd:d5:
         cf:46:66:9b:34:10:ef:05:a8:dc:ea:16:91:8b:71:4a:c3:a4:
         ea:2d:25:27:0b:ab:29:09:d3:a5:1d:74:45:1d:21:13:20:bc:
         7f:be:15:d8:c6:da:68:65:52:b7:39:24:e7:58:ca:2e:b2:1b:
         41:33:02:45:ad:3a:f2:3f:e3:1c:1f:02:29:af:f1:6e:8b:f3:
         15:87:c1:b3:98:3a:c5:e5:d3:ea:45:6a:b2:e2:d8:e7:cf:20:
         e6:a0:dd:de:b3:e8:48:2b:ad:56:37:71:87:cd:5a:5f:20:94:
         29:a2:ac:b2:1d:7c:2e:82:ec:8c:07:b0:04:dd:b3:fd:38:63:
         62:5e:ef:df:a6:65:f9:3f:7c:23:12:05:94:e2:c0:c3:e3:9b:
         39:e7:21:31:0e:57:ce:0e:2a:4d:5b:10:1c:58:a1:d7:46:17:
         79:de:54:fc:73:03:29:c4:b8:73:98:c5:d5:5a:16:61:df:1e:
         fc:fa:a9:45:7b:64:c0:c3:b2:1d:2d:9b:67:a9:92:e7:b5:a1:
         82:af:28:b9:cd:68:51:df:b3:97:59:76:c2:d4:4e:7a:e7:4d:
         2d:73:ed:7a:25:bf:e6:94:71:fb:b0:b7:8c:31:3b:50:67:b3:
         73:46:ac:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 05:34:24 2025 by rpki-client