This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.mft
File:                     oO9fu_ynqTz-6WXutr3ub7Q8QD4.mft (raw, json)
Hash identifier:          tuhRPILAWzYb/O+Nn7sL08e4QiUt3PnwBqgd2a1AZzI=
Subject key identifier:   6A:B1:9D:44:3E:29:6C:0D:1C:62:4E:97:92:03:84:A8:2E:A6:8E:D3
Authority key identifier: A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
Certificate issuer:       /CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Certificate serial:       019B11258D6A861DD4DE05064BC00F60B47C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.mft
Manifest number:          1841
Signing time:             Fri 12 Dec 2025 06:00:32 +0000
Manifest this update:     Fri 12 Dec 2025 06:00:32 +0000
Manifest next update:     Sat 13 Dec 2025 06:00:32 +0000
Files and hashes:         1: 0EOjf23f5uNRl8AKwLrSjcuzQ-M.roa (hash: TiKzyeJ1GrbpU3aFoto+cFftuRE3qJmGtPjLqVBjD3g=)
                          2: 2smUB5D8W7tuf_xW5EH9jWoz4DM.roa (hash: rTDJvm0oMNC8IUj5+JS+3prpnZefKwYKD4MK14dTYOE=)
                          3: 3a9lX76bQSJaqMppZTquI9xrjjE.roa (hash: VWrFd9vzYBvgjC7R4dgJGbGdtWDKe+wEQ3MjcA3hJGc=)
                          4: 5srUWfK2Cdi4wHjqlySTWyZ4Low.roa (hash: LNg07RRevBAHX1c+iNg80ZacJiC/7ZrA4U+xATH+Y0g=)
                          5: BkJLBllw1-ZWKgRHqGBiQqbyScY.roa (hash: 0YwDYhFvdzyYfI9IMpPvVCUOj6lVo6a8wPzczBvlz9k=)
                          6: CbhEbMn4AKVVqgWoX2_ZAyPcZvU.roa (hash: 20BJw7BzxjCOyEcdCPIydH+ZU0GghmGQyM/ZvZpvSVM=)
                          7: EDx9UJr_bR_MLAO7n7AlYPzVgHk.roa (hash: PJhAgFMtqQqa+J5NxHAYtorfHqm6JLgt9UdAzlPMssM=)
                          8: GIY6t8WXECqHBNB2XBzSrMQvdIc.roa (hash: ++2yNzUE5GKDvynAIsGfNfxbtdcmBjle2edzJpUiOrg=)
                          9: IStNe4e6LhEN0WqF0khMmbBnvEQ.roa (hash: SucxZMcCMGO/p9cXrgX+1VRtuUi5NI2PuW6+EwcCJx8=)
                          10: K_S25NvkOjpU_Bj9DbxQmJazd14.roa (hash: a1rxYtnZvodVSuCoVwHSmnvLNqe2f/aY8+zJP3kLU8Y=)
                          11: Khdam5ye6nHBc4YW_yrjL25Chls.roa (hash: zu0nJg15zErx3dxZklgiK5ZzU5CwLzliF0MMLUaHiLs=)
                          12: LIDGUWG6p3GJZZCu1Hpsr5bUXFc.roa (hash: PRox2/jLDeyB3TXExAWa7wQfqJBFS5HwT01/wjYfdq4=)
                          13: MI2MLphBpmPMjSMPt-CUURdJC0U.roa (hash: SxH7HYoFbVv194fh23JHJCaM+xcxOdCQONsLew0Wilo=)
                          14: QT9Y49Ocn7S1NlWkR85dSIq7Y4E.roa (hash: yheorWCDT9lcE3+NqS0jtyjeSBpJ3B/OD/QoM3nqGc4=)
                          15: QXjuOZgIB7V4oeaWX_BSYxvGQAU.roa (hash: 5m//oQGydvMXsHbRUuZAe1hKShJ2UuaSj0j4KmQCCK0=)
                          16: R0dlQD847tZZ6Sme0uHqVL1A8SE.roa (hash: aqwVbQ/5C0zR8yt+iaSmmHLJT4dD7bnIMHMb82qWbS4=)
                          17: U0UedjwFm98ns_lAKOOXn5f0A5o.roa (hash: UJnZuL0xV2NkJnE82ZqSllhysuKGYoP0ufoIJUA/SkI=)
                          18: UCe95u6GACs5-LEqrQoGtiD4Qyc.roa (hash: fWIhlO/tzw5gQd0aSlrmvFLetMTNXBRD0DWVGpqMdrE=)
                          19: VV3pVQmA3jL8s0bmbKamtZwlCt0.roa (hash: vCwn19zgG2GXQkWTrwcbkBf3n2pPD744DQga4uWIovg=)
                          20: VXguZ1IP4OPQ2wSfFG2Zt-8rRmU.roa (hash: FYCub9tLigFfu6QRGXOsYxtNUaq1jqWty883jSxTd34=)
                          21: YjHZVJXAnKr8xh5R9wmBVaYEgXg.roa (hash: kSLUkCF1fVqfg2Z9iMd8kS34Maa3MeKt4Z6zguLvO/o=)
                          22: YwyROsLXS46Sx4a7dO7BvxlhzcM.roa (hash: 0Aw01zQYIIojYrmRbQn7ALYRxmwBexME2a27WU1nXKc=)
                          23: cPYOKrKiYT89IO9upkxHw5ZbR8A.roa (hash: J92jBclwmj0vXUCJUdBwqUYTP+Ud22YvPF211aGRosQ=)
                          24: eLugRLDui958XmylSjkxP3wnTMY.roa (hash: PBCwpuzp3sL6oE89Qyaa4YR3Aa/1ZZavbG6JwYcrhzA=)
                          25: em928uE801tncexTsiwdYgbCyFs.roa (hash: 1Ae8DHrnQc4neMkHdKNSjlxKrv6jUbvWVefMenI+FSo=)
                          26: fCUGFfWzW4S1F4DnK4n7a0AgUjI.roa (hash: Aef8TeyLWHEX0HhoAhmS5O45O1FHLWTrY+cesMIs6t4=)
                          27: iXuidHo1QSBSsFaoOTf1QHBof7o.roa (hash: SwI6517kDyPUXy1d894x4OYleQzHpw1lcJfr2I15BNA=)
                          28: knLIpaWN6wJ3RxuEkxRAHKiWFPY.roa (hash: dim/8umOJ6epBF/Pi+TF62ZYesagnxCU/L0WDdWu3/o=)
                          29: mygN9EXv15Mv_R2x5EM_di5X8p4.roa (hash: +hnEnqUqGPQ5/+etnnWXKfILgh8ttS98q0vUC8Q5rns=)
                          30: oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl (hash: +4/+JQrYtreCU+k+k62ObJwLlPcOm6JiWpv8JSEcxn4=)
                          31: rtz3qC9idXx0_hTVcLvfRzUUQ90.roa (hash: 7y0gqO8gR/cVJ2yXfPcNMo6vDwpg4ULFhgIIv/G88ls=)
                          32: t4_sItGLetnCYeXERod5-ebrm9I.roa (hash: AiOBn1us05R9pPuObBSz8aWjDmfVrdiLt6SCizxK1Rw=)
                          33: ttAnXllamFmBtbR_DYOny1OSmYs.roa (hash: e98MJzYR91mKGrKILF7fKjR02eJfGXannZIuUuXRiAM=)
                          34: vQvAhs3X9SIrwTiZLcGRbLHAse8.roa (hash: NgpNHRkuHeYtV5T9QGV0qWm2Ew38Qqs1VxG+Tb300CI=)
                          35: wwk7jEvd5L4YZES1E9puWxeNbgI.roa (hash: lBMJB934mzmC5MKmNtcjd0YdBXtrbY3Uex1I8nAQBqM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Dec 2025 06:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:11:25:8d:6a:86:1d:d4:de:05:06:4b:c0:0f:60:b4:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
        Validity
            Not Before: Dec 12 06:00:32 2025 GMT
            Not After : Dec 13 06:00:32 2025 GMT
        Subject: CN=6ab19d443e296c0d1c624e97920384a82ea68ed3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:2e:95:32:f3:d8:ac:60:f4:10:51:21:c4:2f:
                    6e:29:e0:0d:ef:1c:36:b5:2b:91:ec:f0:60:ab:2b:
                    1d:d0:f7:ac:26:d7:f4:c1:e9:a0:b0:3e:ec:37:2b:
                    66:c6:79:68:ab:05:4b:84:61:d9:58:4a:2f:5e:68:
                    31:96:40:3a:b4:8a:05:3f:ff:9f:5d:7a:51:13:1f:
                    54:e4:28:2a:7d:de:de:6d:09:5b:1b:51:4a:e1:70:
                    0c:71:93:ea:65:45:19:c5:1f:d2:ab:61:86:d6:a1:
                    dc:52:3b:77:85:f5:c7:cf:63:89:ec:c2:9e:10:90:
                    12:35:cf:b1:2d:63:fd:dd:3b:68:77:dd:1a:28:32:
                    07:78:dc:c1:4c:0c:e1:fc:bd:28:7f:84:d4:fb:d9:
                    a4:83:3c:15:4a:e0:82:3f:57:91:34:62:99:47:5f:
                    27:78:4b:ae:47:34:2d:c3:78:b5:83:84:1b:ef:12:
                    16:72:7e:8b:6e:3b:1d:08:d9:81:15:67:22:bb:ba:
                    6f:c4:4d:15:07:1a:a6:76:e7:a2:d6:84:1b:22:ea:
                    c8:ec:d7:19:39:59:fe:3a:47:5d:46:8e:36:dd:3a:
                    9a:18:40:42:15:cd:92:28:bd:6a:cf:a7:df:cc:94:
                    70:ff:a0:87:72:27:10:ea:32:3d:96:e8:c5:99:2a:
                    ac:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:B1:9D:44:3E:29:6C:0D:1C:62:4E:97:92:03:84:A8:2E:A6:8E:D3
            X509v3 Authority Key Identifier:
                keyid:A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:b9:52:d0:bf:c8:24:aa:5e:44:52:5a:ae:ab:48:df:8a:92:
         5f:3c:3d:a5:42:dc:32:d6:5a:41:b8:39:ed:c2:3a:32:69:ec:
         9d:4d:b6:1f:57:bb:37:73:4e:45:40:c1:08:4f:71:d7:1d:b4:
         86:7d:26:78:a9:b2:88:f4:c3:43:df:e0:fd:f3:5d:09:4b:86:
         ec:3b:5e:26:98:3a:df:e6:53:14:ba:d6:b3:7e:7d:7d:8e:ff:
         ec:83:03:54:41:b9:a5:5c:67:f1:4e:d0:c0:bc:91:e9:b2:f4:
         8b:16:5e:60:e3:d2:07:35:1e:61:44:6f:94:2b:ae:1f:d9:33:
         f1:fa:dc:1c:eb:30:82:3e:fb:bb:ac:93:00:d5:32:e4:93:4e:
         92:ed:d3:3e:bd:dc:a5:12:05:1d:40:0a:6a:10:57:0b:0f:7b:
         fd:86:f5:93:3a:73:53:93:8b:b7:8d:b1:22:c3:82:ec:2f:13:
         73:76:5c:1d:7e:e5:49:a1:32:41:df:56:d8:40:9f:de:30:c0:
         42:d0:fd:59:e0:20:8c:ba:eb:50:b2:ab:06:07:8d:71:01:95:
         39:d1:67:85:41:ae:ef:f2:1b:0c:c9:70:8f:93:c0:c0:bf:bf:
         2b:cd:8d:84:45:7e:11:44:8a:ec:92:9b:b2:be:40:58:23:5d:
         7a:7f:f5:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 12 10:46:38 2025 by rpki-client