This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/8797de-3ae9-4e05-80ff-c2534096c60d/1/evV91Sx1_OOf_ikVRp2eZW28uHM.mft
File:                     evV91Sx1_OOf_ikVRp2eZW28uHM.mft (raw, json)
Hash identifier:          UDtG0naI77tnRPNUCv+eCnbCdZl/RKDRPVAnfMU3GO0=
Subject key identifier:   E5:2B:97:D2:35:0E:C6:55:38:0E:98:0C:FE:43:B8:A0:12:CD:9F:77
Authority key identifier: 7A:F5:7D:D5:2C:75:FC:E3:9F:FE:29:15:46:9D:9E:65:6D:BC:B8:73
Certificate issuer:       /CN=7af57dd52c75fce39ffe2915469d9e656dbcb873
Certificate serial:       019B40C967E985943A5A9CC4FAB015EE14D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/evV91Sx1_OOf_ikVRp2eZW28uHM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/8797de-3ae9-4e05-80ff-c2534096c60d/1/evV91Sx1_OOf_ikVRp2eZW28uHM.mft
Manifest number:          03F3
Signing time:             Sun 21 Dec 2025 12:01:39 +0000
Manifest this update:     Sun 21 Dec 2025 12:01:39 +0000
Manifest next update:     Mon 22 Dec 2025 12:01:39 +0000
Files and hashes:         1: B7d3MQIbfkEvo2qSsfhEkCAgz6c.roa (hash: aYYmRrZYB32cQ/o3auZL57R8HcFii3L/DbLpVUlrCzo=)
                          2: IA6UYcR72NZizch7SKA0NekJnzE.roa (hash: RWiYTu2GWF+/6G/rbSBa91ZS7IUG29tqgFfg/qB2D9Y=)
                          3: evV91Sx1_OOf_ikVRp2eZW28uHM.crl (hash: ft+VnN2O/6hTHpnaCnMr1y9EoM8qO4ChmdJyTOEY/Ls=)
                          4: pshq4_QA-qLSghM03EWquGAt7rc.roa (hash: rpLjV1rbxm+W2cg04ypjM5dgXLvT0vLct5eUeqe0Yfs=)
                          5: uNcW8oAJty7QJ3rdwrvZtidPJb4.roa (hash: Va2QYZ3dyGhdpIjzyxbKQa1lFsVqCxw/WfEiLCdpGjc=)
                          6: w2cifThx8liTp2UosKmPtTuVnbg.roa (hash: 4M3/VZ3vA0bwXmuEW9DfiaSDaEw4jhqFMcpDjEAK5AY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/8797de-3ae9-4e05-80ff-c2534096c60d/1/evV91Sx1_OOf_ikVRp2eZW28uHM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/8797de-3ae9-4e05-80ff-c2534096c60d/1/evV91Sx1_OOf_ikVRp2eZW28uHM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/evV91Sx1_OOf_ikVRp2eZW28uHM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 22 Dec 2025 12:01:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:40:c9:67:e9:85:94:3a:5a:9c:c4:fa:b0:15:ee:14:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7af57dd52c75fce39ffe2915469d9e656dbcb873
        Validity
            Not Before: Dec 21 12:01:39 2025 GMT
            Not After : Dec 22 12:01:39 2025 GMT
        Subject: CN=e52b97d2350ec655380e980cfe43b8a012cd9f77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:db:1f:7a:a4:43:71:57:74:32:aa:26:0f:d0:
                    80:21:cf:05:1c:1b:1f:31:87:d5:97:38:ed:98:f8:
                    41:15:e6:25:8e:c2:61:8c:12:e5:fb:06:f6:c7:83:
                    e4:4b:3a:e7:85:f9:24:12:62:c2:dd:2c:a3:fb:2a:
                    07:22:f9:ac:d1:ce:dc:8d:01:7d:af:49:b1:a1:d7:
                    ec:f4:a0:17:f3:68:1e:d5:d5:db:ac:21:e9:a6:43:
                    3e:4d:04:5d:f6:11:18:3d:10:c3:08:ed:08:68:0e:
                    d2:f2:3a:ab:e5:17:e0:a6:10:0f:f8:8b:81:59:29:
                    e2:77:57:c2:b9:b5:21:d8:e9:74:7a:2e:af:45:a3:
                    58:d0:36:f7:aa:5b:1b:db:af:14:00:d6:0f:f4:81:
                    1d:0b:fd:35:69:b7:99:3e:61:b8:01:ef:d6:10:64:
                    67:06:7a:cd:98:ae:d6:33:68:5f:46:75:09:26:b8:
                    3a:4c:c2:22:00:ca:b0:12:30:be:c3:76:1d:06:92:
                    74:44:24:49:d7:b7:be:78:58:d4:69:63:72:78:93:
                    eb:82:1a:38:d3:72:53:41:5e:11:12:10:21:78:38:
                    c1:a8:9e:19:65:98:68:5a:7a:bf:5a:4c:3e:a6:b4:
                    94:14:c2:4c:2b:73:ae:87:66:62:40:62:93:68:5f:
                    54:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:2B:97:D2:35:0E:C6:55:38:0E:98:0C:FE:43:B8:A0:12:CD:9F:77
            X509v3 Authority Key Identifier:
                keyid:7A:F5:7D:D5:2C:75:FC:E3:9F:FE:29:15:46:9D:9E:65:6D:BC:B8:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/evV91Sx1_OOf_ikVRp2eZW28uHM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/8797de-3ae9-4e05-80ff-c2534096c60d/1/evV91Sx1_OOf_ikVRp2eZW28uHM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/8797de-3ae9-4e05-80ff-c2534096c60d/1/evV91Sx1_OOf_ikVRp2eZW28uHM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:9c:21:06:4f:98:cb:22:31:e3:ae:6c:1f:7d:e0:ec:3b:e4:
         f1:d8:88:63:7b:09:92:36:f4:4b:ba:87:61:f1:74:46:78:83:
         95:fa:28:02:48:99:c2:54:10:55:a7:7c:e7:05:39:55:70:d0:
         3c:12:86:30:5d:20:eb:22:86:b6:06:e9:a1:46:9c:13:8b:b0:
         bb:9d:21:87:8c:8b:fe:bb:29:ad:8f:c8:ee:8f:db:15:47:f3:
         88:04:2c:df:48:75:ad:1a:2d:45:43:32:9e:55:dc:cb:b4:47:
         85:0c:22:62:43:45:0a:99:fc:d7:dc:9c:f5:d1:8b:6d:1c:b1:
         15:4c:82:36:22:95:8c:d2:36:de:ed:73:08:3f:99:35:0c:b0:
         5e:54:54:20:1b:88:85:d9:7e:64:c3:b0:93:05:13:66:cb:54:
         93:75:dc:2c:23:70:cc:e0:db:7a:31:53:66:cb:27:a1:6c:5a:
         e3:d5:3c:7f:e0:18:3e:00:05:88:70:32:c6:b6:37:16:0d:e7:
         d1:0a:58:55:f4:68:0e:b6:b1:d3:72:b6:62:85:16:1c:45:4a:
         2b:d0:1e:02:0f:06:53:8c:dc:cd:99:c1:64:59:ce:f6:c4:cb:
         89:68:07:82:fc:57:b5:d3:20:10:9d:d7:0c:2c:96:3c:ce:63:
         d4:38:89:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 22:29:45 2025 by rpki-client