This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ee5cd7-b30e-466b-aaad-6c3b87443e06/1/edVl-Z_14P-1vfmZXteoCNQUBuU.mft
File:                     edVl-Z_14P-1vfmZXteoCNQUBuU.mft (raw, json)
Hash identifier:          /dYs/TnqB1O60M+xNTN813lsuX1gFd2Rt53syk8iiww=
Subject key identifier:   05:F4:BF:AE:7B:58:73:55:9A:6F:B4:45:20:D0:53:93:D4:24:1F:18
Authority key identifier: 79:D5:65:F9:9F:F5:E0:FF:B5:BD:F9:99:5E:D7:A8:08:D4:14:06:E5
Certificate issuer:       /CN=79d565f99ff5e0ffb5bdf9995ed7a808d41406e5
Certificate serial:       019B269BA15B07993A62F9353984F867DA95
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/edVl-Z_14P-1vfmZXteoCNQUBuU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/ee5cd7-b30e-466b-aaad-6c3b87443e06/1/edVl-Z_14P-1vfmZXteoCNQUBuU.mft
Manifest number:          0C3E
Signing time:             Tue 16 Dec 2025 10:01:32 +0000
Manifest this update:     Tue 16 Dec 2025 10:01:32 +0000
Manifest next update:     Wed 17 Dec 2025 10:01:32 +0000
Files and hashes:         1: 4nMnvp2ZB-ImGV_NyuJptQX_s-M.roa (hash: Jozll95TUYI/7k+2ywrLfwC0XpMxyQSMxXrX5jLQvuI=)
                          2: EF4BqSKTxflZOPA4JpZQYqM10d0.roa (hash: rvN1vLA9FFQoxDYtGHSi89qsjoBPIE2CgdxWal1aCXw=)
                          3: R65PH65k0gwzX81GAD8rU_ScyO4.roa (hash: Nr7OuzzGf5ue02dNRD602xmVvt2ExeHdCc/mpLjZtDk=)
                          4: RKT_evyL3NUG3_cWZQQfxnmmdao.roa (hash: VGkvt16btIeqbgaf/Hbqyj4Pp4ltwgVCqh4eRSNtObc=)
                          5: edVl-Z_14P-1vfmZXteoCNQUBuU.crl (hash: j7gtbzv9uiD/XoUU8bylxJKuEz7tUQqIhXE6T3Il3Vs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/ee5cd7-b30e-466b-aaad-6c3b87443e06/1/edVl-Z_14P-1vfmZXteoCNQUBuU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/ee5cd7-b30e-466b-aaad-6c3b87443e06/1/edVl-Z_14P-1vfmZXteoCNQUBuU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/edVl-Z_14P-1vfmZXteoCNQUBuU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 17 Dec 2025 10:01:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:26:9b:a1:5b:07:99:3a:62:f9:35:39:84:f8:67:da:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79d565f99ff5e0ffb5bdf9995ed7a808d41406e5
        Validity
            Not Before: Dec 16 10:01:32 2025 GMT
            Not After : Dec 17 10:01:32 2025 GMT
        Subject: CN=05f4bfae7b5873559a6fb44520d05393d4241f18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:0b:08:ea:b8:f6:ef:b2:57:8d:1c:8b:3d:b9:
                    93:b5:95:d1:aa:dd:1e:11:57:4f:e7:4b:09:93:13:
                    af:01:41:0b:c4:84:c5:2a:9d:ac:54:cb:27:ee:da:
                    ec:12:f1:fb:e2:9d:e1:1e:a2:82:bf:6b:70:e4:77:
                    71:f3:8d:41:97:84:06:0d:a0:ca:4c:06:7a:e7:ca:
                    e5:1a:ab:cf:b0:91:db:f2:53:1d:e1:94:3d:7a:65:
                    ed:ac:b6:7a:09:42:b8:79:29:f3:31:1c:7a:1f:cc:
                    09:9f:6e:da:df:37:2e:fc:52:a1:e1:87:8f:72:50:
                    a5:4e:80:52:6b:27:3d:c9:ba:ca:63:73:dd:17:18:
                    73:13:e8:09:49:cc:16:8a:27:e7:e2:9e:e5:b9:60:
                    60:2e:f2:75:36:c1:88:ed:8a:75:89:f0:c1:18:e3:
                    ec:80:45:2f:a7:43:ba:2e:d4:76:e7:d6:7d:40:ed:
                    49:ed:87:e2:03:8f:25:0a:f9:70:2f:17:ea:60:51:
                    c2:bb:8b:cd:dd:51:26:73:5f:ce:1b:ae:d1:9f:72:
                    5e:50:d5:dd:e8:e3:fc:21:ea:45:8a:d4:30:74:66:
                    7a:40:b5:20:7d:6d:a3:44:ad:60:8e:08:5c:51:16:
                    8e:72:eb:8b:9d:93:f2:b3:7d:e1:58:50:4f:24:c8:
                    09:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:F4:BF:AE:7B:58:73:55:9A:6F:B4:45:20:D0:53:93:D4:24:1F:18
            X509v3 Authority Key Identifier:
                keyid:79:D5:65:F9:9F:F5:E0:FF:B5:BD:F9:99:5E:D7:A8:08:D4:14:06:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/edVl-Z_14P-1vfmZXteoCNQUBuU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ee5cd7-b30e-466b-aaad-6c3b87443e06/1/edVl-Z_14P-1vfmZXteoCNQUBuU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ee5cd7-b30e-466b-aaad-6c3b87443e06/1/edVl-Z_14P-1vfmZXteoCNQUBuU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:eb:2f:c2:87:47:f6:3a:c1:f9:48:2a:2d:4c:81:f2:04:1d:
         05:bb:e4:66:a4:fc:bf:d0:f0:ae:d7:75:da:07:ab:35:b8:f3:
         71:dd:1c:a8:8f:51:b0:b3:2b:6b:47:0f:e3:58:e7:e8:e6:cd:
         81:38:eb:ba:45:06:5c:17:1b:49:94:14:e7:4f:54:03:fe:10:
         e6:1f:ca:92:fe:e7:74:cb:33:58:b8:e0:b2:62:5c:8c:11:69:
         bd:37:b2:ed:75:06:a7:5d:6a:13:65:85:4f:04:a1:b8:06:33:
         6b:b7:14:db:b8:06:a5:03:0a:46:5f:be:c7:2d:bf:6d:51:ca:
         dd:c9:8e:ac:d0:69:49:00:0a:87:4e:f8:5f:a9:20:c2:65:47:
         f3:d1:5a:59:3e:44:13:da:27:3e:17:cd:c8:aa:e5:27:1e:65:
         96:3b:3e:1b:24:25:bf:dc:e4:9e:c5:bc:0b:aa:5d:79:94:24:
         b2:2c:81:03:82:e9:ca:db:12:7a:f6:ed:6d:ae:3a:9c:38:58:
         52:d0:0b:c2:34:fe:63:f0:3b:34:62:b6:bd:ea:22:2c:c7:7d:
         86:8a:c2:b5:44:74:31:6b:b4:db:71:04:fd:c7:1e:c2:40:f8:
         ea:5d:ec:0b:ae:17:d6:8a:bc:9b:40:f0:3d:9c:6f:0e:d2:32:
         9d:74:d0:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 16:08:35 2025 by rpki-client