This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/b14193-f569-434a-aea4-f5deaa9bf0f7/1/evoTWyBy38xO87VBwTa8gAHvQwc.mft
File:                     evoTWyBy38xO87VBwTa8gAHvQwc.mft (raw, json)
Hash identifier:          kFFeCGAvBaQbpKzrTkgtWyW6NOTfQt4/Sq0uYYirO3o=
Subject key identifier:   CF:42:25:7E:22:40:0C:39:B4:9A:A9:46:EA:29:53:3F:A7:6D:9F:7B
Authority key identifier: 7A:FA:13:5B:20:72:DF:CC:4E:F3:B5:41:C1:36:BC:80:01:EF:43:07
Certificate issuer:       /CN=7afa135b2072dfcc4ef3b541c136bc8001ef4307
Certificate serial:       019B1013163879F069DCA2CFE97C0D455616
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/evoTWyBy38xO87VBwTa8gAHvQwc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/b14193-f569-434a-aea4-f5deaa9bf0f7/1/evoTWyBy38xO87VBwTa8gAHvQwc.mft
Manifest number:          0BF4
Signing time:             Fri 12 Dec 2025 01:00:44 +0000
Manifest this update:     Fri 12 Dec 2025 01:00:44 +0000
Manifest next update:     Sat 13 Dec 2025 01:00:44 +0000
Files and hashes:         1: 1VFRaILqnJnJB3yngV6vDeJcapk.roa (hash: CqxIJgH7ih1CRmTJoFGPX9x50D1IUJFOHfeDDgVZwRg=)
                          2: evoTWyBy38xO87VBwTa8gAHvQwc.crl (hash: zfn/+RI+I6+Jl0/8q+1lLXcbiUQadrryIxu7NzwC4r0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/b14193-f569-434a-aea4-f5deaa9bf0f7/1/evoTWyBy38xO87VBwTa8gAHvQwc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/b14193-f569-434a-aea4-f5deaa9bf0f7/1/evoTWyBy38xO87VBwTa8gAHvQwc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/evoTWyBy38xO87VBwTa8gAHvQwc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Dec 2025 19:27:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:10:13:16:38:79:f0:69:dc:a2:cf:e9:7c:0d:45:56:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7afa135b2072dfcc4ef3b541c136bc8001ef4307
        Validity
            Not Before: Dec 12 01:00:44 2025 GMT
            Not After : Dec 13 01:00:44 2025 GMT
        Subject: CN=cf42257e22400c39b49aa946ea29533fa76d9f7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:35:9e:2f:6f:04:46:78:fd:61:97:dd:07:c6:
                    8a:00:f9:7e:bd:23:ba:59:6a:6f:93:0f:ff:5e:26:
                    e2:a3:41:09:6b:76:dc:30:43:fd:8c:b6:ce:a8:55:
                    ee:71:5b:ce:2f:b5:e9:1d:62:d3:ac:dc:fc:dc:58:
                    66:f4:d9:a2:76:ba:7c:99:b4:9e:9a:1e:e3:8c:7b:
                    94:62:7f:d8:d1:a4:2e:90:55:0f:9b:94:35:00:c9:
                    6e:94:ec:2f:a5:ef:d6:6d:f2:77:e1:8f:26:d6:2a:
                    bd:9e:eb:f1:a5:fd:f3:e0:47:a8:b9:32:88:51:81:
                    b6:8c:1b:63:81:aa:be:26:f4:65:4a:78:2a:c0:43:
                    3e:ee:47:c4:0e:cb:d9:80:cf:3a:b5:f6:fb:7d:fa:
                    17:2e:ee:94:a6:83:5c:a1:4d:62:72:f6:1d:e6:9b:
                    cb:f7:04:de:d3:3e:44:ff:bc:88:ba:d5:4c:3e:c9:
                    71:75:7e:8f:d2:19:0e:87:7a:b6:69:df:52:c9:36:
                    3e:25:73:bb:80:8a:97:1b:d1:09:34:17:1d:44:76:
                    ea:27:e3:13:91:30:ad:fc:00:0c:4d:38:d9:27:0d:
                    6e:9e:2f:94:b1:77:99:ce:43:3e:a1:59:fd:21:f2:
                    9f:b7:d9:46:8b:c0:37:96:c7:2b:26:9d:e3:77:19:
                    0f:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:42:25:7E:22:40:0C:39:B4:9A:A9:46:EA:29:53:3F:A7:6D:9F:7B
            X509v3 Authority Key Identifier:
                keyid:7A:FA:13:5B:20:72:DF:CC:4E:F3:B5:41:C1:36:BC:80:01:EF:43:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/evoTWyBy38xO87VBwTa8gAHvQwc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/b14193-f569-434a-aea4-f5deaa9bf0f7/1/evoTWyBy38xO87VBwTa8gAHvQwc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/b14193-f569-434a-aea4-f5deaa9bf0f7/1/evoTWyBy38xO87VBwTa8gAHvQwc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:fc:94:cf:25:57:0a:a5:3b:ae:d1:c0:07:fb:07:17:ff:f5:
         86:c4:a1:78:29:62:fa:86:08:e7:87:64:96:8b:66:39:10:f3:
         0b:1a:2a:6d:32:9d:41:13:cf:16:4d:a6:21:ff:67:68:24:62:
         cc:6b:90:64:b9:af:9f:b6:52:3b:63:8c:c6:71:8b:2a:92:a2:
         8c:df:3d:b4:a6:2f:01:4a:28:a6:ab:e4:e0:28:15:eb:79:96:
         28:98:5e:15:c8:95:c7:99:e6:ad:7b:a3:25:97:61:cf:74:60:
         4a:df:03:e4:88:7b:2c:2e:e5:9b:66:22:56:22:f3:e2:01:c8:
         96:cb:dd:e2:d3:ea:11:4e:a3:7c:93:cf:8c:d7:a6:83:1a:3c:
         5c:a8:f1:c5:04:2e:f9:a9:9e:3b:15:0b:c7:78:84:f4:b4:0d:
         d3:5c:7f:88:8b:68:57:97:09:52:85:0d:d9:d4:7b:8e:c1:c3:
         c1:4c:5d:75:60:64:4d:15:65:4c:8d:b2:c4:dc:f0:85:91:23:
         72:0d:41:d4:ae:81:90:87:b6:92:c3:3f:91:7b:03:1a:76:f4:
         2c:45:7f:62:d7:f2:8f:2f:af:26:0d:72:e0:b8:24:24:6b:55:
         8b:a3:e8:c0:0e:65:91:54:e8:30:04:a7:7d:c2:b8:7a:e0:94:
         99:3e:03:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 12 04:02:59 2025 by rpki-client