This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/746767-ef5f-436c-bd5d-8e8b79926aa3/1/1-EVikthaC4bE4lNLJ9JrR7_gQxc.mft
File:                     1-EVikthaC4bE4lNLJ9JrR7_gQxc.mft (raw, json)
Hash identifier:          4ZiS321iFfPjgHlBd0TmassMq0qw2LbaGuBF9B2szGs=
Subject key identifier:   F2:FB:77:7B:53:5C:0E:3C:46:DC:F8:95:1B:A0:85:E9:C9:AC:C2:56
Authority key identifier: F8:45:62:92:D8:5A:0B:86:C4:E2:53:4B:27:D2:6B:47:BF:E0:43:17
Certificate issuer:       /CN=f8456292d85a0b86c4e2534b27d26b47bfe04317
Certificate serial:       019B4CCCB04F21DDCDA42B8358C2D3BB6CAD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-EVikthaC4bE4lNLJ9JrR7_gQxc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/746767-ef5f-436c-bd5d-8e8b79926aa3/1/1-EVikthaC4bE4lNLJ9JrR7_gQxc.mft
Manifest number:          0D98
Signing time:             Tue 23 Dec 2025 20:00:41 +0000
Manifest this update:     Tue 23 Dec 2025 20:00:41 +0000
Manifest next update:     Wed 24 Dec 2025 20:00:41 +0000
Files and hashes:         1: 1-EVikthaC4bE4lNLJ9JrR7_gQxc.crl (hash: KrO5kChImaJgBdETwNXd3gA2Ci3BsMJwmTI0DeS3lQg=)
                          2: Ye-1b3Oqv586dqfuogOZnzwmKao.roa (hash: M9y1SazElcLTZkq2/3rTLHzloUqVKkD3eSc9q5agDu4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/746767-ef5f-436c-bd5d-8e8b79926aa3/1/1-EVikthaC4bE4lNLJ9JrR7_gQxc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/746767-ef5f-436c-bd5d-8e8b79926aa3/1/1-EVikthaC4bE4lNLJ9JrR7_gQxc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-EVikthaC4bE4lNLJ9JrR7_gQxc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 24 Dec 2025 15:46:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:4c:cc:b0:4f:21:dd:cd:a4:2b:83:58:c2:d3:bb:6c:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8456292d85a0b86c4e2534b27d26b47bfe04317
        Validity
            Not Before: Dec 23 20:00:41 2025 GMT
            Not After : Dec 24 20:00:41 2025 GMT
        Subject: CN=f2fb777b535c0e3c46dcf8951ba085e9c9acc256
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:9a:8b:89:19:ae:c5:e1:e7:c8:c3:c6:64:94:
                    33:5a:f2:b2:1f:54:96:af:33:9b:04:d1:56:80:3d:
                    4e:93:b9:63:cd:67:6f:30:b0:ae:ac:7f:5b:bb:af:
                    5a:8e:2f:a0:b6:aa:3c:19:bb:1d:c0:60:0f:33:9b:
                    dd:8d:11:51:6f:7f:9f:11:eb:1b:17:a0:db:cd:5f:
                    77:38:d5:9a:eb:8d:a7:9e:21:e0:9a:c8:b4:04:87:
                    79:af:15:39:e1:c4:7d:3f:cf:ef:a2:0e:56:f8:af:
                    6b:47:b6:a8:e3:46:ac:0e:17:ab:76:ca:df:ae:33:
                    41:d5:39:cd:fe:87:4c:73:c0:71:24:09:18:4c:71:
                    5e:db:95:a6:33:4c:04:5d:3b:2a:f7:20:80:38:bb:
                    56:9c:26:32:28:da:9f:e9:ac:42:2f:10:85:06:4c:
                    43:33:4b:e5:c6:05:1f:4d:6a:16:f6:7e:97:47:70:
                    b9:d6:f6:52:32:5c:54:b2:13:00:16:81:c7:c4:a5:
                    c0:ad:88:e9:2d:14:56:7e:e8:34:4e:c6:9f:e1:da:
                    21:1a:a6:b3:bc:d3:fc:f2:5b:ae:07:d7:14:37:2a:
                    5c:b0:fc:d3:03:af:b4:8d:64:a2:20:5e:ba:31:89:
                    b2:34:f3:a3:9f:fc:2d:6c:a0:07:62:a4:ca:5d:03:
                    b9:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:FB:77:7B:53:5C:0E:3C:46:DC:F8:95:1B:A0:85:E9:C9:AC:C2:56
            X509v3 Authority Key Identifier:
                keyid:F8:45:62:92:D8:5A:0B:86:C4:E2:53:4B:27:D2:6B:47:BF:E0:43:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-EVikthaC4bE4lNLJ9JrR7_gQxc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/746767-ef5f-436c-bd5d-8e8b79926aa3/1/1-EVikthaC4bE4lNLJ9JrR7_gQxc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/746767-ef5f-436c-bd5d-8e8b79926aa3/1/1-EVikthaC4bE4lNLJ9JrR7_gQxc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cd:81:84:f4:1f:d3:cc:92:91:e9:bf:bb:fb:59:50:19:87:c5:
         32:35:fd:d0:b1:07:8d:2b:44:f3:55:ff:f9:7b:19:7a:a1:59:
         ec:98:7c:5b:45:fe:a9:97:d5:91:66:df:6d:a3:df:70:e4:c2:
         74:a3:66:c2:cd:92:4f:75:53:9f:23:b9:2c:cb:2c:d2:13:8a:
         3f:e6:81:37:06:6b:f3:7e:67:05:de:ac:a0:a6:6c:75:5c:bb:
         a8:ef:9f:29:23:e0:b3:8c:f9:85:c3:11:9e:e4:cb:8c:54:aa:
         81:33:05:bd:7c:5a:ca:32:e0:dd:63:81:d7:1b:e0:2a:e9:54:
         fb:5e:75:0f:31:84:30:75:92:01:5a:a5:c8:22:ef:fe:65:d1:
         86:b0:9a:f3:ae:62:71:0c:47:07:cc:0c:dd:63:1b:df:e7:db:
         f8:51:06:bc:6c:e5:02:b2:ba:cd:95:1e:06:5a:a8:35:6a:61:
         55:97:71:37:28:69:16:e6:8e:a2:c7:7b:69:c7:f1:8d:76:6f:
         1c:96:de:37:52:e1:3c:8f:80:3f:b1:e6:e2:6a:c5:02:00:e6:
         76:1e:2f:50:00:d2:e9:cc:19:c1:5a:b6:86:8b:b6:93:9f:43:
         78:71:8f:11:c1:05:17:36:42:ae:9e:6b:26:92:e4:83:12:a8:
         9f:ce:5c:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 22:24:42 2025 by rpki-client