This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.mft
File:                     OH1t9-t1QuAzOu7dFK3_j1H4y9g.mft (raw, json)
Hash identifier:          1hnuWmmLWPFnKRtEbJSS10mbSsoxM4gKAjvB3nQJ7RI=
Subject key identifier:   D1:F0:B4:F1:D3:7F:1B:17:F8:46:59:E4:CD:8E:E6:0C:62:EA:11:76
Authority key identifier: 38:7D:6D:F7:EB:75:42:E0:33:3A:EE:DD:14:AD:FF:8F:51:F8:CB:D8
Certificate issuer:       /CN=387d6df7eb7542e0333aeedd14adff8f51f8cbd8
Certificate serial:       019B1A5FC445C0559F09C1563DC77F3FFF36
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OH1t9-t1QuAzOu7dFK3_j1H4y9g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.mft
Manifest number:          1785
Signing time:             Sun 14 Dec 2025 01:00:42 +0000
Manifest this update:     Sun 14 Dec 2025 01:00:42 +0000
Manifest next update:     Mon 15 Dec 2025 01:00:42 +0000
Files and hashes:         1: 3nAxOrqe3oi83iVjt7-kMzJ_imI.roa (hash: 0jNIl4uBhcm5LdIuubw+L/Ha2QMXka6zLLkNeAcF40c=)
                          2: 7B2j1343QblR9F6iTWiRinHn8x0.roa (hash: Bp/dbOZRIjunqnEsDuN3X0tRwg1SKVjgcGEA09U24Zc=)
                          3: B9dwnbBbiJenj05UDjyUy_TzXDg.roa (hash: s4Wv5YaGEZaX82N6dusRWR3tSJBVmvjmxniLSHfxYAE=)
                          4: E6umy5_OlHHb3NOgNKiaqTj372A.roa (hash: kmYIRPqCRch39x2r6WhmK+8aDVBlwYVLvzQIGAbOPps=)
                          5: GrCJk2XTvFQ1bFg3LeF86Dm0kMU.roa (hash: //aHWa+QTi3TqyDc0NocuZ54Ser38N49WnMxWn6LdwE=)
                          6: OH1t9-t1QuAzOu7dFK3_j1H4y9g.crl (hash: 2KLJZFsbm9qgcRBPwFjxjJ8RycUzJZtm2C1qUEwvNCE=)
                          7: P0hYRZk_epkkwrcDiaxk_ejd9pE.roa (hash: RbP7Hj7hNb6SHmHJtPw1bzOEo2w8Ign3eKIaXKeZWz8=)
                          8: SOBAES4j7h-D6nKfccoc2NpSr8A.roa (hash: vmAKmT6VUkF1cozh164hgKJKVk8BJXYwDbwibYkkVy4=)
                          9: WBa-OMWvS5R9EiWcpIqPa_m7lKo.roa (hash: JhWDx8KAw0uX/VJGQRKzvoZLcAnbsOAM+D0EwwgJJrs=)
                          10: _6ucnx77KQFalvj5yEE2wp5osls.roa (hash: Xw55WCSv/8tmiRj4/KKvZ6v3swmB6TKO4qL1Xw6aI30=)
                          11: hmNo0lfF6aVfLa7MkqmEKjtbdyQ.roa (hash: +xwhsq1RdvJOWfeJtHcoWSMc+U0UkSWEqMUWf9xz80w=)
                          12: jtw47htspCaZBqLn-szAwwLDgRI.roa (hash: 4ge4ZfZPpCPnlsJ6k5nbKp3z9nIWCai+fnrSIWJ/WUA=)
                          13: jzrvK-bgXnpFKZtkluSwDEQbp08.roa (hash: ZM3tthCJVaSjXclzoJDdeWjLh7O5ICpnIBuMTiMEL9g=)
                          14: nDB6bqiXy-rzhdku9Lj005kPHfA.roa (hash: 0AJR+PurXnO7T0pJNk8Tq3MFQx7X/cSxW3eCAXJvtLk=)
                          15: pvCC0r4LUt3fsl1VHVQdfXh8Y18.roa (hash: 7j0tvWV4dVH4uAAkH8k/IyIqfSMk5UZQp8CnBxjMpFY=)
                          16: u50dx3Lab1g7VZDVh4T56LPcn_0.roa (hash: jDquIHZmp2NFyWqEfhpXVj8qaJ2TUhubdI3kfdM2qms=)
                          17: z5q48ktpf1eARPpbmIGK9GsvsrQ.roa (hash: tmWASzkDn54AHUg2VFq+szTIlcEFXE4zmXDoc40cFbw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OH1t9-t1QuAzOu7dFK3_j1H4y9g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 15 Dec 2025 01:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:1a:5f:c4:45:c0:55:9f:09:c1:56:3d:c7:7f:3f:ff:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=387d6df7eb7542e0333aeedd14adff8f51f8cbd8
        Validity
            Not Before: Dec 14 01:00:42 2025 GMT
            Not After : Dec 15 01:00:42 2025 GMT
        Subject: CN=d1f0b4f1d37f1b17f84659e4cd8ee60c62ea1176
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:bc:27:72:42:39:3b:d9:4a:58:2a:2e:10:0e:
                    ac:17:ff:3a:ea:7b:1b:dc:3b:55:b9:c4:a0:dc:ab:
                    6c:71:20:d8:18:29:b2:02:3a:7a:78:76:17:a1:de:
                    15:8c:e6:5c:ef:49:51:ee:5d:12:05:22:a8:c9:21:
                    bf:20:9a:dd:e5:98:3f:ff:c6:6a:0d:31:38:07:0c:
                    bc:e5:a3:38:28:49:ee:d7:a7:14:db:02:42:72:50:
                    9a:8b:a3:1d:9d:22:70:dd:47:32:43:27:09:2c:ba:
                    b3:79:68:8a:d9:35:03:db:36:46:42:2c:fd:0e:61:
                    be:92:47:fc:de:71:e4:a9:8f:2c:8e:af:6a:b6:2f:
                    ad:00:be:52:23:3c:e0:7d:bc:53:3d:27:a6:d7:97:
                    c6:36:89:a6:3a:74:c5:d1:dc:ee:5c:ea:a4:2c:02:
                    16:3f:36:ff:ab:e9:b0:9b:b5:82:d3:d1:b4:87:e7:
                    8a:60:48:20:78:5e:92:66:ce:44:4f:86:48:c0:7c:
                    b0:92:92:68:be:a6:d6:1b:1f:e4:5a:a8:d4:02:ea:
                    bc:e7:b2:c2:e7:fe:4f:8a:8d:cf:96:32:80:cc:a9:
                    68:83:14:4b:42:6b:1a:0b:cf:19:c1:8a:62:b3:09:
                    ea:20:b1:cb:06:61:5d:46:8f:99:09:78:46:c5:4e:
                    4c:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:F0:B4:F1:D3:7F:1B:17:F8:46:59:E4:CD:8E:E6:0C:62:EA:11:76
            X509v3 Authority Key Identifier:
                keyid:38:7D:6D:F7:EB:75:42:E0:33:3A:EE:DD:14:AD:FF:8F:51:F8:CB:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OH1t9-t1QuAzOu7dFK3_j1H4y9g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:f5:d5:77:eb:82:3e:4e:f6:f7:69:24:26:2f:ee:d0:7c:2c:
         68:a6:07:d8:90:63:21:ec:45:da:8a:8e:83:82:93:c3:1d:30:
         0f:76:be:1e:de:8b:e0:cc:bc:c6:a0:92:f6:d1:da:1e:ac:ab:
         9d:c4:44:89:a2:15:51:a9:de:4a:3e:1b:8f:25:c8:81:aa:a4:
         7d:03:d6:e2:e3:90:12:1e:6e:ce:9b:7b:ca:bd:59:8b:9b:11:
         69:f4:44:cb:06:e6:dc:8b:e8:19:2c:d3:2e:0a:5f:0d:f7:21:
         b4:84:be:b8:24:6e:2e:c1:c1:20:c7:32:06:c8:26:11:49:f2:
         a3:a8:0d:59:65:50:c4:4a:a2:f8:a4:ba:bc:6c:73:19:67:ed:
         61:fe:cd:84:77:40:75:e2:ec:65:ac:f4:5e:10:d9:85:06:b8:
         67:94:26:7b:a9:d5:25:be:9f:3e:5a:45:dc:32:7b:6e:b4:ed:
         41:68:ad:9c:de:fb:a6:50:00:fd:85:69:e1:40:41:de:e3:c3:
         d2:9c:e1:1e:26:c3:da:2d:65:60:fb:f5:af:2d:a2:0c:19:bc:
         69:88:e6:52:34:f8:9e:e4:cc:18:62:10:93:72:b7:28:40:d2:
         02:78:65:d2:ff:9d:74:5a:6a:01:ed:d8:ca:62:55:9c:05:7e:
         77:59:af:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 14 08:37:20 2025 by rpki-client