This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/c42b37-d448-4cf3-bfec-1692fc8bba15/1/EVYEuolej7O0mix4CI6f8v-XCgg.mft
File:                     EVYEuolej7O0mix4CI6f8v-XCgg.mft (raw, json)
Hash identifier:          xlxx0DXdavSMAAkro52WILtBauDT7sZpg1rNsNSkU0Y=
Subject key identifier:   AD:9F:95:95:94:DF:AF:7F:9A:E6:D4:6F:26:C7:C2:2E:20:4C:CF:DD
Authority key identifier: 11:56:04:BA:89:5E:8F:B3:B4:9A:2C:78:08:8E:9F:F2:FF:97:0A:08
Certificate issuer:       /CN=115604ba895e8fb3b49a2c78088e9ff2ff970a08
Certificate serial:       019B2740807C9FC32EA0F9810F4D02586C88
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EVYEuolej7O0mix4CI6f8v-XCgg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/c42b37-d448-4cf3-bfec-1692fc8bba15/1/EVYEuolej7O0mix4CI6f8v-XCgg.mft
Manifest number:          170F
Signing time:             Tue 16 Dec 2025 13:01:37 +0000
Manifest this update:     Tue 16 Dec 2025 13:01:37 +0000
Manifest next update:     Wed 17 Dec 2025 13:01:37 +0000
Files and hashes:         1: EVYEuolej7O0mix4CI6f8v-XCgg.crl (hash: utSlwHdTcv6KTukikctqvtkskDlrjBfIDfs+sxa1mR8=)
                          2: Mf8_fr0emM9VzKXxaSCkla0gpe8.roa (hash: M0YySaNEC7qXOCCeVLXEwEcDDAoxkin1ih/jS/04KOM=)
                          3: _LxyVkgbKLMaCoKf-wa-gjXEY9g.roa (hash: Tt/J7UaLJpGwa3pTn7jEj8mr5nT4j+av9OQ17W7ixzc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/c42b37-d448-4cf3-bfec-1692fc8bba15/1/EVYEuolej7O0mix4CI6f8v-XCgg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/c42b37-d448-4cf3-bfec-1692fc8bba15/1/EVYEuolej7O0mix4CI6f8v-XCgg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EVYEuolej7O0mix4CI6f8v-XCgg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 17 Dec 2025 13:01:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:27:40:80:7c:9f:c3:2e:a0:f9:81:0f:4d:02:58:6c:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=115604ba895e8fb3b49a2c78088e9ff2ff970a08
        Validity
            Not Before: Dec 16 13:01:37 2025 GMT
            Not After : Dec 17 13:01:37 2025 GMT
        Subject: CN=ad9f959594dfaf7f9ae6d46f26c7c22e204ccfdd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:12:62:2f:b3:02:e3:73:0f:ee:f4:cf:a9:25:
                    01:21:27:36:2a:e4:0b:0a:57:86:71:69:dd:b8:16:
                    d7:95:91:c5:8b:1d:2e:d7:0f:24:05:c6:4b:d0:4c:
                    43:4c:90:f3:73:dc:60:bd:fb:11:2b:9e:9d:71:45:
                    8c:af:31:a0:0f:84:fd:9f:c5:da:ea:2e:56:c3:6c:
                    37:4b:22:f5:cf:9b:d2:fa:78:48:b8:3e:a7:0c:c9:
                    d9:4a:c9:0b:7c:e7:f8:81:a2:0b:73:42:0f:6c:e8:
                    a1:6c:df:2f:86:02:1e:30:04:57:37:e1:72:64:a6:
                    e8:72:19:5f:ed:50:5c:0c:ac:bc:16:5d:f8:1c:62:
                    3e:fe:75:e3:22:8a:5a:52:25:6b:9d:3e:cf:48:52:
                    4f:f3:5f:9a:4b:53:58:a1:e4:2a:7f:6b:1f:b4:bb:
                    32:6e:7f:e3:3f:f0:09:0a:90:6d:3d:11:c4:d2:a7:
                    ff:b4:73:7f:74:28:68:23:12:1c:f0:a3:61:bb:21:
                    ed:ea:51:c7:d7:9f:c1:6b:21:d7:d2:85:56:4f:44:
                    d1:7e:a2:03:ff:70:20:33:b1:a9:c5:11:6e:d3:73:
                    5c:0c:a0:a1:68:1c:df:be:c6:78:13:a0:a0:36:00:
                    1d:a6:01:9c:2a:54:d3:ee:31:84:6e:ff:a4:46:84:
                    54:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:9F:95:95:94:DF:AF:7F:9A:E6:D4:6F:26:C7:C2:2E:20:4C:CF:DD
            X509v3 Authority Key Identifier:
                keyid:11:56:04:BA:89:5E:8F:B3:B4:9A:2C:78:08:8E:9F:F2:FF:97:0A:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EVYEuolej7O0mix4CI6f8v-XCgg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/c42b37-d448-4cf3-bfec-1692fc8bba15/1/EVYEuolej7O0mix4CI6f8v-XCgg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/c42b37-d448-4cf3-bfec-1692fc8bba15/1/EVYEuolej7O0mix4CI6f8v-XCgg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:71:74:39:27:30:75:35:d2:d3:39:bf:97:e8:0f:7c:b2:5f:
         90:d6:8c:05:0b:77:25:a4:37:54:49:4e:4f:60:29:e2:a1:d6:
         84:78:5e:23:00:48:4c:15:2d:3d:31:0d:0d:07:ff:65:9a:39:
         98:55:54:8a:12:7f:89:15:0a:8b:41:81:d9:eb:fb:3b:33:f1:
         56:fc:2d:da:5e:f0:54:b6:5d:cb:b7:8c:1a:cd:63:5a:bd:aa:
         f3:f1:02:d3:23:a5:ed:2d:2d:6f:91:86:82:e2:d2:fb:19:66:
         01:41:5b:ce:3b:f2:f8:06:2d:48:f5:71:a6:9d:63:62:84:cd:
         ee:44:c1:31:a9:ab:ac:40:54:69:8f:7b:95:74:8b:f6:f1:5f:
         bb:c7:8c:b3:2e:7c:37:83:be:dd:97:e8:8b:3c:07:1a:5d:62:
         f3:f6:39:33:f1:a3:a6:eb:97:08:96:49:46:72:e7:6e:a2:00:
         ce:db:bc:da:2e:cb:a9:5d:28:e1:30:8b:80:68:e1:43:a3:5a:
         2e:dd:07:f3:40:d0:5b:5e:0b:ce:77:27:44:49:ae:0f:93:eb:
         06:9a:c1:ea:90:77:b4:15:8d:ac:0f:53:48:5e:18:8c:eb:17:
         87:48:9e:e5:b1:aa:de:c0:d1:e3:c1:b9:2a:05:f5:bd:84:03:
         fb:78:80:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 15:34:46 2025 by rpki-client