This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/oGOa3x4LhLn_ZOT46-Y4679dJ7k.mft
File:                     oGOa3x4LhLn_ZOT46-Y4679dJ7k.mft (raw, json)
Hash identifier:          KF3Ky3UFO8ukykezguHG2GIuMTon5ywJOlUMu9qGmEU=
Subject key identifier:   9C:E6:31:34:04:47:4D:A8:5A:E5:A1:08:91:68:3B:99:60:D5:BC:10
Authority key identifier: A0:63:9A:DF:1E:0B:84:B9:FF:64:E4:F8:EB:E6:38:EB:BF:5D:27:B9
Certificate issuer:       /CN=a0639adf1e0b84b9ff64e4f8ebe638ebbf5d27b9
Certificate serial:       019B28F72514AEC0093C70E222769FAF8285
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oGOa3x4LhLn_ZOT46-Y4679dJ7k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/oGOa3x4LhLn_ZOT46-Y4679dJ7k.mft
Manifest number:          177F
Signing time:             Tue 16 Dec 2025 21:00:44 +0000
Manifest this update:     Tue 16 Dec 2025 21:00:44 +0000
Manifest next update:     Wed 17 Dec 2025 21:00:44 +0000
Files and hashes:         1: 7C0eLiHaSivPjWvCeJI7OYyeX0w.roa (hash: QECF5Dw9n/dUuIXbwLPUz1r2SDqHk19ywfPN3IJ1Bjo=)
                          2: iALFaO66XR7bzKvgq4B-T0dt4x4.roa (hash: PA5b0zcAe+bx03MLbtIWhk9SgkBfHIkZikFyxJSWiS8=)
                          3: oGOa3x4LhLn_ZOT46-Y4679dJ7k.crl (hash: hEoDuVTFm/UzagSYT/IhVMUrW1uRqLvar4f2ruMLxKM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/oGOa3x4LhLn_ZOT46-Y4679dJ7k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/oGOa3x4LhLn_ZOT46-Y4679dJ7k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oGOa3x4LhLn_ZOT46-Y4679dJ7k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 17 Dec 2025 14:45:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:28:f7:25:14:ae:c0:09:3c:70:e2:22:76:9f:af:82:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0639adf1e0b84b9ff64e4f8ebe638ebbf5d27b9
        Validity
            Not Before: Dec 16 21:00:44 2025 GMT
            Not After : Dec 17 21:00:44 2025 GMT
        Subject: CN=9ce6313404474da85ae5a10891683b9960d5bc10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:60:fd:e1:7f:bf:a2:6b:a1:84:91:22:69:13:
                    b2:b6:4f:3b:01:7b:96:33:63:f5:bb:0c:7b:97:51:
                    b1:e1:fd:e9:40:1b:14:36:2b:d6:c3:75:42:bf:25:
                    2e:bd:c5:b9:66:91:d9:cd:85:f9:c1:2e:61:54:20:
                    a8:f4:72:6f:c4:80:ab:56:8a:64:4c:a7:77:e3:95:
                    4c:43:4f:f6:18:58:de:31:ab:5b:d1:c9:3c:8e:5b:
                    b1:ad:48:ac:52:5d:d4:9f:25:9a:10:f9:0b:39:b2:
                    e0:dd:73:88:99:8e:71:22:62:0d:fc:80:bf:d9:64:
                    d2:5e:bf:5c:71:27:4f:f4:9f:f4:0b:f5:96:68:c0:
                    51:19:24:16:15:f7:7c:1a:c4:2d:0d:15:53:49:48:
                    a5:96:cb:14:7e:fc:c6:96:2a:2e:89:d4:37:57:c6:
                    0d:28:f6:58:32:d9:26:c9:80:40:63:18:45:ca:28:
                    ad:b4:d5:9b:01:27:ac:0b:5d:26:ba:ce:9a:6c:9b:
                    88:1e:cc:08:79:da:a0:69:02:37:2a:87:b9:e9:0a:
                    4c:96:5d:d9:2a:50:bd:f3:20:20:6a:41:36:46:ff:
                    2c:83:93:2b:a7:8a:de:e9:5a:45:b4:5a:05:92:07:
                    ff:73:06:6a:52:5f:6a:af:76:d5:dc:d1:f3:ae:0b:
                    67:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:E6:31:34:04:47:4D:A8:5A:E5:A1:08:91:68:3B:99:60:D5:BC:10
            X509v3 Authority Key Identifier:
                keyid:A0:63:9A:DF:1E:0B:84:B9:FF:64:E4:F8:EB:E6:38:EB:BF:5D:27:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oGOa3x4LhLn_ZOT46-Y4679dJ7k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/oGOa3x4LhLn_ZOT46-Y4679dJ7k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/oGOa3x4LhLn_ZOT46-Y4679dJ7k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:3b:67:6a:09:cb:e0:57:bc:1e:ed:ad:a7:74:68:19:f8:a3:
         6a:4d:46:4f:bb:eb:bc:53:98:27:d5:8c:a0:15:4b:80:e1:7f:
         8e:0f:b0:16:65:05:df:12:39:4d:d5:32:3f:a9:73:ae:0a:ba:
         e2:96:f7:96:fb:98:95:a3:29:ab:6c:d1:19:9f:21:db:32:bc:
         06:8e:5b:c6:64:1d:bd:c2:b2:a0:08:02:ef:f0:f5:ff:63:d8:
         7f:e9:1c:db:09:ac:fb:53:66:17:a2:58:0e:33:93:50:97:e1:
         a6:41:83:aa:f5:97:3d:d5:7e:8d:12:c9:62:0f:2d:9d:e0:9c:
         d1:74:ec:9f:40:04:0d:b9:42:29:a7:62:ed:e8:b4:3b:12:b6:
         39:f9:f4:c5:3c:ad:3e:85:84:02:45:01:e2:12:e6:43:ea:4e:
         97:cd:00:a4:1b:2c:5b:b4:7a:00:5c:24:bb:bc:43:fc:2c:79:
         ea:92:90:85:a6:0e:77:fa:c2:aa:d5:a6:af:14:81:af:4a:8e:
         bb:48:6f:e3:18:bd:2b:8b:5b:4f:7a:42:56:c5:8e:26:a1:62:
         80:5c:92:b3:03:62:18:3a:ae:a4:4b:5e:71:a5:45:94:a2:e6:
         9d:22:ec:50:85:7c:62:bf:6c:eb:4d:52:3d:16:7e:db:88:46:
         56:f8:66:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 00:30:19 2025 by rpki-client