This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/fb8ca2-9fc9-4898-b048-52a368cac403/1/EvG7YR8rejeAD0nGwSXF7pi3GcU.mft
File:                     EvG7YR8rejeAD0nGwSXF7pi3GcU.mft (raw, json)
Hash identifier:          RT5bieXtSfZuWUMn7LNUxwygVs5sIm1wD91RvFhu/b4=
Subject key identifier:   BA:6B:22:23:C7:BB:1F:49:22:5C:7D:EB:2F:0B:2B:A4:45:47:72:5A
Authority key identifier: 12:F1:BB:61:1F:2B:7A:37:80:0F:49:C6:C1:25:C5:EE:98:B7:19:C5
Certificate issuer:       /CN=12f1bb611f2b7a37800f49c6c125c5ee98b719c5
Certificate serial:       019B446EBE6971DA28835BEED907EEA88FCA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EvG7YR8rejeAD0nGwSXF7pi3GcU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/fb8ca2-9fc9-4898-b048-52a368cac403/1/EvG7YR8rejeAD0nGwSXF7pi3GcU.mft
Manifest number:          178C
Signing time:             Mon 22 Dec 2025 05:01:06 +0000
Manifest this update:     Mon 22 Dec 2025 05:01:06 +0000
Manifest next update:     Tue 23 Dec 2025 05:01:06 +0000
Files and hashes:         1: EvG7YR8rejeAD0nGwSXF7pi3GcU.crl (hash: PEjzp7Nn9jlmKY0yYjuTOZGCJydEm6rO6aVfztOMrU4=)
                          2: IAnrwkjZREz9e2befvDjJt5K894.roa (hash: QbZkDRkpqioEjJh7FseQ0HMDmnK8FziG2mObmGFYiVk=)
                          3: ZUbaqrj_yFTDGp2flKk5KYAWImA.roa (hash: 8sRBl8RMRTSCzITTUP5fI9xbiQWEPVeo/rx5tDOUqn4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/fb8ca2-9fc9-4898-b048-52a368cac403/1/EvG7YR8rejeAD0nGwSXF7pi3GcU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/fb8ca2-9fc9-4898-b048-52a368cac403/1/EvG7YR8rejeAD0nGwSXF7pi3GcU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EvG7YR8rejeAD0nGwSXF7pi3GcU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 23 Dec 2025 05:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:44:6e:be:69:71:da:28:83:5b:ee:d9:07:ee:a8:8f:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12f1bb611f2b7a37800f49c6c125c5ee98b719c5
        Validity
            Not Before: Dec 22 05:01:06 2025 GMT
            Not After : Dec 23 05:01:06 2025 GMT
        Subject: CN=ba6b2223c7bb1f49225c7deb2f0b2ba44547725a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:fe:01:77:d3:0f:57:d0:2f:4e:d2:97:0a:ad:
                    bf:4a:86:ec:94:ff:0c:77:a0:b1:15:a0:3a:ae:e8:
                    53:1e:f3:e6:e2:96:4a:3e:92:73:93:d0:52:9f:2a:
                    3b:d9:b2:aa:14:2c:2f:f9:c6:80:74:e5:14:5e:f1:
                    46:ae:5e:ee:44:b5:ac:9d:c5:f4:94:d2:2f:f0:af:
                    2d:89:9b:2f:df:2e:da:be:77:1a:d1:1b:55:16:63:
                    bc:f6:5b:2b:7d:0c:5d:35:f2:73:c5:f5:43:2d:ab:
                    80:b4:f9:a6:f6:f5:cb:5f:68:fb:af:91:fa:99:87:
                    ef:ce:b1:e5:f4:23:62:2a:8b:7d:ba:4c:b0:ff:60:
                    51:20:0f:19:8c:e2:3a:3b:7e:30:60:11:dd:30:db:
                    31:9b:f7:58:bb:f2:05:a1:64:74:da:33:92:34:5d:
                    b7:26:d2:a6:21:0c:29:18:80:ee:ff:66:28:17:d2:
                    7d:83:37:ca:16:61:1e:5d:0e:c3:81:be:1d:cc:fa:
                    9f:51:7a:33:08:81:9c:5c:8e:b9:c9:da:e9:49:9b:
                    17:ab:0b:34:d0:6c:85:7e:d3:9e:50:bc:3c:5a:a8:
                    fa:3e:9d:fc:7a:4e:f6:4d:d0:03:5e:bc:eb:6a:ca:
                    13:f5:e5:b0:3a:c7:0f:3d:37:3b:76:43:55:58:26:
                    4d:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:6B:22:23:C7:BB:1F:49:22:5C:7D:EB:2F:0B:2B:A4:45:47:72:5A
            X509v3 Authority Key Identifier:
                keyid:12:F1:BB:61:1F:2B:7A:37:80:0F:49:C6:C1:25:C5:EE:98:B7:19:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EvG7YR8rejeAD0nGwSXF7pi3GcU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fb8ca2-9fc9-4898-b048-52a368cac403/1/EvG7YR8rejeAD0nGwSXF7pi3GcU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fb8ca2-9fc9-4898-b048-52a368cac403/1/EvG7YR8rejeAD0nGwSXF7pi3GcU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:e8:ec:e2:d9:7e:47:32:3a:d6:fc:8f:ef:b8:62:6f:a3:e1:
         f8:d8:8a:0d:c0:a8:0d:34:55:1a:6b:4d:2f:a6:47:86:36:48:
         89:24:c7:da:a2:cc:a6:8d:e3:4b:e5:cf:76:c4:fb:cf:ad:da:
         5e:d2:d5:cb:6a:53:48:64:2b:47:d2:76:fc:1e:b8:8d:c5:a3:
         9f:6d:76:0d:85:b8:ff:b4:a0:91:2a:74:5d:c1:77:92:86:eb:
         09:9d:9d:77:80:ec:1a:12:7a:8e:a4:39:69:02:93:66:2d:ee:
         c4:51:96:9f:99:24:03:bf:a5:0e:47:03:f3:7f:73:2c:9a:e7:
         ed:26:39:3c:23:0b:0d:fc:0e:cf:64:5a:12:ac:62:ea:07:38:
         c4:72:df:5e:a3:c3:b8:8d:00:ca:93:72:96:12:0a:a6:58:99:
         f4:99:32:f8:76:1e:d4:f9:05:88:33:37:5f:9a:9d:f6:9d:56:
         06:d9:c9:ac:a0:30:33:15:4c:91:a7:fa:88:d3:b8:0e:f0:a8:
         4f:4c:9f:5a:4f:76:95:9b:e5:c5:e0:2b:93:04:16:32:a1:ab:
         49:9f:a1:a0:26:4c:61:ae:18:42:0a:20:c8:65:51:67:9f:f2:
         e0:86:d1:a2:77:ac:ff:26:47:16:06:5d:21:d4:f1:5c:75:4d:
         61:12:f5:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 09:04:56 2025 by rpki-client