This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.mft
File:                     olSp86JmUT3caTXYvgIuflIw6hA.mft (raw, json)
Hash identifier:          81PdiPFPjzeZBMMUidNs21HA7+mhw4BC4mbE1NocvPQ=
Subject key identifier:   BA:A0:34:6A:E0:E9:78:B3:05:F2:68:52:58:9C:67:D1:CA:E5:27:BC
Authority key identifier: A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10
Certificate issuer:       /CN=a254a9f3a266513ddc6935d8be022e7e5230ea10
Certificate serial:       019B33E8CDEEEA0E07835F97D7E8864AD526
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.mft
Manifest number:          17B9
Signing time:             Fri 19 Dec 2025 00:00:53 +0000
Manifest this update:     Fri 19 Dec 2025 00:00:53 +0000
Manifest next update:     Sat 20 Dec 2025 00:00:53 +0000
Files and hashes:         1: 4fOUGNAFWdnm9vrv4ZQhOu3Vid8.roa (hash: 18whJjpGFnu6ScIrQqgXZw68MDv5UwqOnT+my9pfd4w=)
                          2: 5BICsEwf39tSfyuR3Dxq7LQhNTs.roa (hash: F1ThVBGu9zXgcyXnsxcohjmknQWFIwIuRVmf9x9GU+Q=)
                          3: 6pgC2WmbvOwKxQdYhXcqJyv8gLI.roa (hash: YzcBdSuJXmc3F8XHuHfPgYGMrEVDV50rG3CcR70Lp9E=)
                          4: 8W6gEnbSbHB4zwWx578JWmNIZ9s.roa (hash: HhOmkvbfHuyLR8S9fvlNMW34CV2ZzM/vCu2LBQ3dRHc=)
                          5: 8eep6dVAmsZIpyTErh0SkPM8qXc.roa (hash: SD/qDWKDw7GpyuYdzNmymhVCtf1WfMbKlxVT2o4ptxo=)
                          6: A45T9JlIkLiT_DE0_6X5S8Fq0t0.roa (hash: 1LNt/xXPBnaerAH+uwhDYJHEIRMdA6RsiiUq2tdop/g=)
                          7: Ad-S1Ngl3fPcvtK5iA-h46LCpGQ.roa (hash: 3gPtY4k7qdupyNOfnaxWEN6tHASq2wNK+0Cq9Xgk6AE=)
                          8: CcxaxD4EoKhnFbCvn7fGx4PHWlU.roa (hash: KZDH2XHLPt0marUxUQIkJLqgLsepcaWVX+BzF0QFh4g=)
                          9: GxlDQiNeRlshf53miAx19J4RPC0.roa (hash: OeiSyRpl3mLDjdlOEGBqomQ5rlxYiJaiIYb0ad2mSjQ=)
                          10: KAFqKDk9BCiu0n2y7Q0oKN9OUbo.roa (hash: iAsCXatV/rRYZjdzqnb2mrvtu4xhk01R8Z28UHFMbWk=)
                          11: MoWJzAK8yM2I9t1LTRcJGgWiL8I.roa (hash: wVfGqj4RePXTFHGr8qHdJS00EnHJkEaNtUvIvHlJWq0=)
                          12: Ni-Fp4_j67fDXsFhqeAtqlBDVMk.roa (hash: 9tgqY57FLat9I59Y+ts7KO1YugeEb5mFhO4VhQMSpuE=)
                          13: T30bJyS4tnukk0y5XcMB2tlA-sE.roa (hash: NB63nJlDN5bcZa8a7PZtrUJV2b4GBR3YB6Q88OfOLtU=)
                          14: UrXy_LDsHx2iNrccJeDCBS_jIt8.roa (hash: TsZDwaHwD4vmvW8H5SOM5KIJanIsOqNbP0SQtQy4htA=)
                          15: cfdbmoaWdxVHIDhjILaSo4OtkDc.roa (hash: uQyWoeGxbLL+4u04+Lk0DJknoS3PSDcycZWpGGdkjbU=)
                          16: dKlv3q5W0ZkPs-fHNGVzVPehrhk.roa (hash: P0BUXs0HjfUZHQTfdJ+247g73zbdUO2l0SQMdBs7h04=)
                          17: oBER7XWnZgdSbj3Czv9uaUFR2sQ.roa (hash: M0t0U5rqpdmYFg7skq2cv8yVVYTvEMFedcezsIR5ZSA=)
                          18: oF-ZKm-LG7Iu63mJDsCWuLFkY4M.roa (hash: xR0FwkohVFgDTpppB9NlKBMFWMVay8ZCu79sDc8DKiI=)
                          19: olSp86JmUT3caTXYvgIuflIw6hA.crl (hash: 565uU4l5yflPORMhv59ukRziF58/7RWx8iNkmXVkgYs=)
                          20: s2dvs87g7mYk_o56Wn0SDYYnNL4.roa (hash: a599Jm7G6hEm8AkMoi92fe7la5Wnmj78p+F/nlpnTCM=)
                          21: yCRPZTKKwyn7Dh1bpIRLO3VF08w.roa (hash: j8CzkpxZ0irSvwe8kG2OgPs54FXnomRGROilLkPqjF8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 19 Dec 2025 22:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:33:e8:cd:ee:ea:0e:07:83:5f:97:d7:e8:86:4a:d5:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a254a9f3a266513ddc6935d8be022e7e5230ea10
        Validity
            Not Before: Dec 19 00:00:53 2025 GMT
            Not After : Dec 20 00:00:53 2025 GMT
        Subject: CN=baa0346ae0e978b305f26852589c67d1cae527bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:fc:04:3b:3f:35:84:7d:33:a5:74:05:63:13:
                    c9:c3:54:53:78:96:a0:68:ff:fa:e9:79:18:4a:50:
                    71:5b:07:19:33:9e:41:4f:bb:de:66:2a:41:83:b4:
                    1e:2a:f9:c7:f9:68:a7:2d:7a:1e:f1:34:76:0d:6a:
                    1a:45:b9:8f:9c:36:fd:68:e8:19:b3:57:6d:4d:e7:
                    65:46:97:7d:17:86:2e:d6:dd:78:e6:39:cd:3e:9e:
                    7a:51:3a:b8:2e:50:88:5c:9e:47:9b:e3:d0:2a:5a:
                    ad:4f:1e:9f:17:56:69:97:af:53:70:06:fc:49:3a:
                    78:62:4f:bc:cd:d5:a4:ec:22:ce:14:c4:3c:15:93:
                    fe:f1:10:63:3c:ff:c1:90:80:7d:9e:8b:41:7e:47:
                    0c:fe:3a:f0:92:91:c1:40:c8:e7:5a:db:0f:69:17:
                    77:5b:a8:58:82:2a:ce:97:a3:b3:71:8d:b3:c6:7c:
                    a8:66:b0:1c:92:90:f3:40:b7:44:b6:09:da:53:35:
                    da:a0:2c:6d:dc:dd:da:28:11:eb:d2:7b:cb:a7:35:
                    40:38:40:c8:2d:0a:3a:4f:b5:75:6f:06:3f:af:41:
                    05:c8:9b:a8:ad:f9:a7:fe:14:fb:01:65:a3:dc:e4:
                    9a:d1:33:c1:87:3a:b1:22:35:a2:41:53:cb:a0:f0:
                    59:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:A0:34:6A:E0:E9:78:B3:05:F2:68:52:58:9C:67:D1:CA:E5:27:BC
            X509v3 Authority Key Identifier:
                keyid:A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:9c:d8:01:4a:14:55:ad:b2:e5:69:71:a4:06:2e:8d:52:e4:
         b5:e4:18:3b:40:f9:d1:5b:52:a6:af:26:a0:f3:3b:91:75:7a:
         4b:9e:db:a6:d0:4a:42:e6:9c:02:ac:b8:43:fd:16:49:0e:ac:
         5c:72:ba:5d:ae:1d:e5:b8:5e:52:0d:54:64:b8:23:31:23:ca:
         7d:4e:aa:38:6b:be:2e:83:44:3d:4a:a2:a4:52:77:91:b5:5e:
         55:cc:b9:1c:df:8d:f5:0b:32:96:39:22:6e:f7:52:04:1d:26:
         9d:98:08:a8:7b:e9:f3:6a:2d:b7:31:58:1a:3d:c1:ba:77:c5:
         68:7e:64:e2:fc:b9:9f:6a:fb:6a:c4:b5:f6:6d:72:3b:93:0a:
         75:03:c7:24:0d:c2:9a:3f:96:2e:24:6d:17:ca:9c:b4:c4:41:
         3c:1c:d5:15:48:7d:be:3c:6d:a1:bf:37:00:29:d8:a1:36:21:
         6c:de:1c:de:b8:31:f9:06:32:a6:dd:b6:03:6e:d5:80:f2:a4:
         99:6e:9a:f7:e6:87:91:11:be:b9:6e:f1:97:5e:00:04:4b:81:
         ef:8f:6e:8c:ac:77:5f:cc:27:da:01:97:de:9c:f8:4c:a6:99:
         30:e8:c5:fb:5e:09:57:ea:95:79:9e:a9:ea:49:b9:c8:2c:60:
         57:67:30:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 03:45:02 2025 by rpki-client