This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/d3e23f-0e5a-4923-ab2f-a9ea2057042b/1/ouYGx-k_7TbvkNQs5KlyYLuKqcE.mft
File:                     ouYGx-k_7TbvkNQs5KlyYLuKqcE.mft (raw, json)
Hash identifier:          G+4y8eoYjYfbfZUNj7jZ7ZgE3RaEEgvqVwBslAlylDs=
Subject key identifier:   FE:B0:0F:D4:DC:A5:1F:02:A1:04:9E:F0:D3:27:B2:F5:76:8D:0F:D7
Authority key identifier: A2:E6:06:C7:E9:3F:ED:36:EF:90:D4:2C:E4:A9:72:60:BB:8A:A9:C1
Certificate issuer:       /CN=a2e606c7e93fed36ef90d42ce4a97260bb8aa9c1
Certificate serial:       019B4438D3C4B07AF07A479EC1F7E1ACA3B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ouYGx-k_7TbvkNQs5KlyYLuKqcE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/d3e23f-0e5a-4923-ab2f-a9ea2057042b/1/ouYGx-k_7TbvkNQs5KlyYLuKqcE.mft
Manifest number:          178E
Signing time:             Mon 22 Dec 2025 04:02:13 +0000
Manifest this update:     Mon 22 Dec 2025 04:02:13 +0000
Manifest next update:     Tue 23 Dec 2025 04:02:13 +0000
Files and hashes:         1: 1Sndi7er7bpQydqDqOMh1TcWi2c.roa (hash: 1MEp25vqqZ0ufx7FrXXarnt6HcRltVfMx9pP8jk/+jU=)
                          2: G3ZIKi5NlW3jvdkfzVqAJ4xyXOo.roa (hash: rwjhfMhSY3LA1PgrA0qmqDeuJnCpkzyImzevDSh2Ji4=)
                          3: ouYGx-k_7TbvkNQs5KlyYLuKqcE.crl (hash: vHR/j8yN/WEwW2wamhxC6haRxlnUnYO8pomgvlub+bM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/d3e23f-0e5a-4923-ab2f-a9ea2057042b/1/ouYGx-k_7TbvkNQs5KlyYLuKqcE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/d3e23f-0e5a-4923-ab2f-a9ea2057042b/1/ouYGx-k_7TbvkNQs5KlyYLuKqcE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ouYGx-k_7TbvkNQs5KlyYLuKqcE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 23 Dec 2025 04:02:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:44:38:d3:c4:b0:7a:f0:7a:47:9e:c1:f7:e1:ac:a3:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2e606c7e93fed36ef90d42ce4a97260bb8aa9c1
        Validity
            Not Before: Dec 22 04:02:13 2025 GMT
            Not After : Dec 23 04:02:13 2025 GMT
        Subject: CN=feb00fd4dca51f02a1049ef0d327b2f5768d0fd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:65:8d:39:22:ca:83:8e:01:87:4a:51:1a:5a:
                    0a:31:fc:fc:58:04:81:f1:cc:07:88:f4:c2:8b:d6:
                    d4:bb:67:9a:3f:f1:2e:0d:3c:9e:fb:93:19:24:25:
                    a0:2b:8e:e4:bb:c3:ed:d9:bc:5e:dc:73:30:83:b7:
                    2f:4b:b3:ea:fa:7d:69:2d:6a:29:fd:6f:8c:e5:73:
                    76:4d:2a:47:7a:81:22:2e:9f:36:09:aa:04:c9:e8:
                    d8:2c:54:4c:56:13:61:28:5a:fe:2e:52:35:88:6f:
                    2d:4f:6a:b0:63:cc:58:d7:45:a7:37:fe:ff:b6:95:
                    8a:e6:8d:e0:1e:a2:dc:25:1d:c6:8c:bd:5a:ac:fe:
                    43:80:a1:21:e7:09:44:e3:b9:09:9a:73:23:0f:0f:
                    36:22:34:77:3d:97:2e:f8:95:f5:77:be:52:9c:7d:
                    17:fe:27:bb:b9:ca:36:a6:46:57:4d:c9:46:ca:3e:
                    59:38:d9:55:c1:5c:b9:36:2a:a8:eb:32:87:c9:9c:
                    5e:ed:90:d9:29:0f:37:bd:2b:f6:16:a4:be:be:1f:
                    cf:fb:e5:24:a1:23:7b:db:1a:59:e4:0d:86:e4:a0:
                    8f:57:b9:70:5b:75:4a:60:65:40:cf:f6:f4:cd:18:
                    50:de:c9:a7:47:b7:69:3b:82:96:3c:cf:35:b1:25:
                    4b:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:B0:0F:D4:DC:A5:1F:02:A1:04:9E:F0:D3:27:B2:F5:76:8D:0F:D7
            X509v3 Authority Key Identifier:
                keyid:A2:E6:06:C7:E9:3F:ED:36:EF:90:D4:2C:E4:A9:72:60:BB:8A:A9:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ouYGx-k_7TbvkNQs5KlyYLuKqcE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/d3e23f-0e5a-4923-ab2f-a9ea2057042b/1/ouYGx-k_7TbvkNQs5KlyYLuKqcE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/d3e23f-0e5a-4923-ab2f-a9ea2057042b/1/ouYGx-k_7TbvkNQs5KlyYLuKqcE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ca:61:1e:8f:8e:8e:3c:e7:7b:b9:b9:df:ba:3d:22:e8:0a:e6:
         ec:0e:fa:dc:97:25:46:f6:b1:2d:41:08:9c:0e:8a:bb:91:69:
         dc:ac:b9:a7:9c:1e:06:62:3d:58:4e:06:98:66:73:2e:c6:0e:
         91:c7:95:b9:c8:cf:4f:2e:61:da:18:67:cc:92:c4:99:21:e6:
         c9:f2:50:db:82:2a:3a:ca:5a:e9:ed:d1:86:23:eb:08:bf:d0:
         15:2b:b8:bd:83:c7:4d:c9:c4:fc:10:3a:8f:b7:b3:8a:62:33:
         3f:5c:78:e2:75:b8:77:84:bf:d2:a2:79:f5:d5:bd:20:b1:ca:
         f2:da:62:52:4c:44:78:99:20:9f:08:a8:90:df:b0:86:9c:14:
         f8:05:63:c7:40:f0:7f:a2:5e:d3:53:c6:55:06:09:8b:80:c5:
         b2:3a:6b:8f:c9:8b:62:3a:3e:7c:35:a0:ef:66:a5:c9:2a:4c:
         3c:1a:83:8b:b2:3e:f2:f0:d1:89:9e:37:47:45:dc:85:c2:db:
         45:14:c5:1a:4a:81:dc:55:f9:82:95:73:a1:91:c0:60:ed:18:
         6e:f0:97:45:1e:fc:a1:91:36:5d:34:20:47:a3:87:de:ae:f5:
         7b:25:20:ae:1b:61:b0:dc:bf:8a:9b:a4:01:e5:04:54:f3:98:
         73:d9:c0:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 10:17:59 2025 by rpki-client