This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9e2dfd-f2e9-416d-8f1f-bb3431fe0285/1/oGBriq1VPwlIx6iU1oZxhw64LLA.mft
File:                     oGBriq1VPwlIx6iU1oZxhw64LLA.mft (raw, json)
Hash identifier:          g6k+j+s+QyXNBxLsO8guHk+Jn84u54nY6emxDmfMtt0=
Subject key identifier:   7A:D1:78:DE:5D:A8:53:8F:12:C6:06:55:4E:CC:35:44:03:28:A2:77
Authority key identifier: A0:60:6B:8A:AD:55:3F:09:48:C7:A8:94:D6:86:71:87:0E:B8:2C:B0
Certificate issuer:       /CN=a0606b8aad553f0948c7a894d68671870eb82cb0
Certificate serial:       019B262D604B0DFB521DC1DC84B22E5AFFB6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oGBriq1VPwlIx6iU1oZxhw64LLA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/9e2dfd-f2e9-416d-8f1f-bb3431fe0285/1/oGBriq1VPwlIx6iU1oZxhw64LLA.mft
Manifest number:          1582
Signing time:             Tue 16 Dec 2025 08:01:06 +0000
Manifest this update:     Tue 16 Dec 2025 08:01:06 +0000
Manifest next update:     Wed 17 Dec 2025 08:01:06 +0000
Files and hashes:         1: KrIvvgvNcbldjoVbc0aYd49MKLk.roa (hash: Efb7XeSs1Qr2rRr6o/FWnq95UEV78aFPxWcZg4DCWHc=)
                          2: ZkYwAX8sFU0tx7MlmzFWDuReNoo.roa (hash: 1bC+YhGSYAmLg99m2lBrTp2m6aERC4TuVMQpOPNQzNM=)
                          3: coBIhj-g7a4t_QkFPEnA3t3TN8U.roa (hash: FMtCmhYv8BwdhkKpNroPbCbepJ79NGcx+1J9x7kaHKA=)
                          4: oGBriq1VPwlIx6iU1oZxhw64LLA.crl (hash: S3KhIj1SFVJVAKtDdXcGiUt3lTfsjofBNPMTy6zIUxk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/9e2dfd-f2e9-416d-8f1f-bb3431fe0285/1/oGBriq1VPwlIx6iU1oZxhw64LLA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/9e2dfd-f2e9-416d-8f1f-bb3431fe0285/1/oGBriq1VPwlIx6iU1oZxhw64LLA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oGBriq1VPwlIx6iU1oZxhw64LLA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 17 Dec 2025 08:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:26:2d:60:4b:0d:fb:52:1d:c1:dc:84:b2:2e:5a:ff:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0606b8aad553f0948c7a894d68671870eb82cb0
        Validity
            Not Before: Dec 16 08:01:06 2025 GMT
            Not After : Dec 17 08:01:06 2025 GMT
        Subject: CN=7ad178de5da8538f12c606554ecc35440328a277
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:ff:ac:1a:cd:99:78:1d:c5:7e:13:9f:8c:b2:
                    70:f6:05:93:1e:c4:d0:4e:ee:81:af:bd:12:cd:52:
                    43:87:8d:d5:39:9b:5e:9b:8e:0b:7f:84:80:a9:7c:
                    cd:03:29:26:98:87:ae:21:9e:86:63:e7:3d:65:f8:
                    79:fd:a2:ed:ac:82:bd:f5:4e:1a:67:07:c6:8e:9f:
                    0a:f7:0d:cc:c9:d8:6d:58:39:1d:5a:91:8c:80:08:
                    54:ec:ab:e5:ba:c3:fd:a5:e1:df:5d:ec:cc:a0:b4:
                    b7:57:e3:6c:ef:38:88:2f:08:6e:89:32:90:6e:e5:
                    3d:2f:7a:31:d3:ef:c4:6f:7a:50:25:76:09:d5:79:
                    ee:fd:6d:41:4f:7a:cb:cf:a4:45:3b:bb:ba:11:fe:
                    04:4f:fb:18:85:23:7d:19:c9:74:00:b8:d1:1f:f6:
                    ae:43:1d:b7:28:68:50:13:65:0f:d2:87:1b:ba:50:
                    20:b0:9f:27:a4:6c:88:01:54:24:f0:78:7d:44:0a:
                    87:62:3e:41:aa:bf:f0:5f:90:d3:e4:e9:b1:96:42:
                    06:f4:ba:69:aa:e0:f4:b3:4a:c0:0f:6e:43:31:cc:
                    ce:e1:53:1e:99:39:32:90:05:e2:c7:88:d7:a5:5d:
                    d4:30:fa:ee:cf:9d:a4:1b:9d:d8:f0:75:fb:66:ff:
                    bc:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:D1:78:DE:5D:A8:53:8F:12:C6:06:55:4E:CC:35:44:03:28:A2:77
            X509v3 Authority Key Identifier:
                keyid:A0:60:6B:8A:AD:55:3F:09:48:C7:A8:94:D6:86:71:87:0E:B8:2C:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oGBriq1VPwlIx6iU1oZxhw64LLA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9e2dfd-f2e9-416d-8f1f-bb3431fe0285/1/oGBriq1VPwlIx6iU1oZxhw64LLA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9e2dfd-f2e9-416d-8f1f-bb3431fe0285/1/oGBriq1VPwlIx6iU1oZxhw64LLA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:09:b3:13:10:fa:05:1f:26:58:a0:36:ba:e4:44:db:5d:af:
         15:02:02:00:3c:25:69:8e:46:55:05:7f:1e:dc:e7:c7:29:e1:
         5f:64:e8:ec:45:f9:0c:4c:5f:7a:88:56:29:35:15:0c:b5:dc:
         db:9d:93:e1:7a:9e:ac:e0:15:75:57:59:90:b2:b8:8b:6f:4a:
         1e:f2:4d:43:7f:7f:35:a1:ee:15:e2:df:30:9d:ca:50:a0:5d:
         81:6c:9f:e0:b5:40:64:da:80:f7:c8:0d:63:98:70:7a:d7:65:
         f7:be:ef:dd:fe:e4:0c:f2:8a:11:b0:45:e1:14:fc:31:92:75:
         16:77:db:4f:94:d8:fe:ec:c8:9f:74:25:e0:d7:86:53:e4:c4:
         5e:4c:7a:14:4d:9c:06:e8:67:95:fb:12:0e:2a:ce:a4:fc:b9:
         a7:48:93:21:eb:83:0e:e4:fe:cb:ef:23:01:4a:b9:90:5b:ff:
         ca:65:02:50:c5:23:26:c1:a2:4e:ab:25:04:d8:95:3d:2f:d9:
         95:d3:54:39:8c:ec:7e:b7:8f:20:cb:9f:42:a9:ed:d3:52:52:
         4d:9b:aa:e7:bc:6d:3a:8b:b5:11:7a:98:5e:56:3e:84:fc:c1:
         b0:2f:e4:50:5d:69:98:e2:b7:9e:00:80:41:e0:9b:36:c2:5c:
         9f:4b:8e:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 14:43:11 2025 by rpki-client