This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/Ev1VimTpdYakPcfuUKjWspI2W2A.mft
File:                     Ev1VimTpdYakPcfuUKjWspI2W2A.mft (raw, json)
Hash identifier:          ZsyuftiuFvf9U1cpLZoOIk40uLsnETM2CDBz13S/qKg=
Subject key identifier:   A7:85:E3:3F:AE:B8:35:88:F8:6A:EC:91:B1:19:37:AF:18:47:09:78
Authority key identifier: 12:FD:55:8A:64:E9:75:86:A4:3D:C7:EE:50:A8:D6:B2:92:36:5B:60
Certificate issuer:       /CN=12fd558a64e97586a43dc7ee50a8d6b292365b60
Certificate serial:       019BD01F08518925FDAD2E637179D58F3607
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ev1VimTpdYakPcfuUKjWspI2W2A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/Ev1VimTpdYakPcfuUKjWspI2W2A.mft
Manifest number:          17EF
Signing time:             Sun 18 Jan 2026 08:00:53 +0000
Manifest this update:     Sun 18 Jan 2026 08:00:53 +0000
Manifest next update:     Mon 19 Jan 2026 08:00:53 +0000
Files and hashes:         1: Ev1VimTpdYakPcfuUKjWspI2W2A.crl (hash: EKl+RLzmkwFdqDzt7SHc0wDdhovt6eLxBaBJaWPO/Lg=)
                          2: _DUQvzCHi4TjgwrtIlsWotmeAkk.roa (hash: ANEvAKdTGhIs8TP4Hdyx04j79Xu2tvxw7I5FqurjlJA=)
                          3: cxb_oT322Fryh7O2-S8UFvjffMA.roa (hash: J0/Usdv8CTRD5keT+2o7ilKn2K+VpWC41BAM3v5d5/g=)
                          4: hIbrwFSisf2h-dr2yXD0dZ8eyb4.roa (hash: M3Mtg3zx7J5utY91jrM2A9ukNWuOabpf3WxUFDwDfrs=)
                          5: n1gszGNi91NKoAVx2xcmyMTkTXY.roa (hash: FWe/Htj+8lvEAdsYtcUQYTp79iPETMeKYH5pSUcy/4E=)
                          6: o3XtkSdw3aKJG2sRUhkSBnXsAtg.roa (hash: xUAHGYxE9dwSZ85RWRaN4oQ+XDM/Xaw4ialmewEiRi8=)
                          7: qORWtxjZi9lt_BScasY49cJmDXc.roa (hash: Mi06Ddfs1bfJJ0aXxmmQMn2zwSuj1l36dIcHPxE6r0U=)
                          8: wUrse7e0uVL1xNA23Yfsfg_-PZg.roa (hash: GKtwNbEa19rz8r44r6wfkdAxRFh4u/hNQmkbpTbo8c8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/Ev1VimTpdYakPcfuUKjWspI2W2A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/Ev1VimTpdYakPcfuUKjWspI2W2A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ev1VimTpdYakPcfuUKjWspI2W2A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 19 Jan 2026 08:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:d0:1f:08:51:89:25:fd:ad:2e:63:71:79:d5:8f:36:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12fd558a64e97586a43dc7ee50a8d6b292365b60
        Validity
            Not Before: Jan 18 08:00:53 2026 GMT
            Not After : Jan 19 08:00:53 2026 GMT
        Subject: CN=a785e33faeb83588f86aec91b11937af18470978
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:95:0b:cc:97:06:4c:9a:c7:09:db:99:cd:44:
                    3b:d5:26:56:8a:1d:61:d0:44:e5:cd:d8:a6:94:7c:
                    a5:5f:af:ca:c1:16:22:32:ed:54:f5:ea:d7:46:9d:
                    30:66:fe:b7:1c:a9:dd:eb:3d:ff:e9:0b:0e:29:d5:
                    17:51:1e:93:34:46:2b:24:2e:ee:79:c9:9c:2a:f2:
                    63:c0:b1:1e:4f:ed:78:a8:a2:ec:7c:4d:33:bc:65:
                    5e:67:c2:55:c9:0e:98:c9:a7:9d:48:01:dc:ae:da:
                    f9:69:b9:d9:8c:28:f0:d8:5b:1f:80:a2:0f:12:20:
                    de:e8:11:52:dc:24:f8:53:77:ea:1d:de:a8:0e:9d:
                    d4:da:a4:38:3f:5c:85:e5:ef:34:8d:01:7a:95:17:
                    07:1f:f0:45:6b:ee:23:37:41:98:14:58:e8:84:6c:
                    0d:46:9d:b4:d8:2e:7d:75:0c:80:19:7b:ff:8f:a4:
                    6d:78:c0:e5:80:71:3e:41:09:80:8e:1f:f7:8d:3f:
                    96:d2:88:65:dc:35:83:3d:b1:4c:f1:fb:2b:be:a2:
                    ec:68:89:58:2e:27:05:86:90:95:f4:b5:58:1c:a2:
                    d1:15:69:40:08:26:7c:ad:49:eb:93:22:e6:82:4f:
                    14:c5:2c:1b:d9:bc:08:1c:8a:ad:ad:f3:3f:f4:ff:
                    37:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:85:E3:3F:AE:B8:35:88:F8:6A:EC:91:B1:19:37:AF:18:47:09:78
            X509v3 Authority Key Identifier:
                keyid:12:FD:55:8A:64:E9:75:86:A4:3D:C7:EE:50:A8:D6:B2:92:36:5B:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ev1VimTpdYakPcfuUKjWspI2W2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/Ev1VimTpdYakPcfuUKjWspI2W2A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/Ev1VimTpdYakPcfuUKjWspI2W2A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:47:eb:91:aa:2c:23:91:b4:ea:25:66:cf:3c:ce:68:39:da:
         3f:5a:da:57:95:e3:39:b8:6f:10:0b:64:35:e6:76:96:ff:78:
         88:7f:fd:14:f9:22:6a:f3:7f:82:1d:6a:75:37:63:31:1b:ec:
         7a:6c:50:3f:ff:d2:78:c9:10:0f:02:76:60:4f:f3:57:8c:cb:
         97:8b:f4:af:dd:96:0f:01:c9:eb:67:7a:3c:6b:5f:5b:5d:f9:
         17:dd:e6:22:37:e9:7b:2f:e6:07:4d:d7:36:bb:3b:fa:73:00:
         58:af:78:a9:09:24:b3:e9:3c:87:52:ec:e1:3f:0d:23:c8:3f:
         75:8b:37:4d:71:15:2b:1b:00:68:1f:47:1c:5e:4f:82:77:0f:
         de:5b:79:df:45:da:ca:47:5d:01:34:08:49:49:c0:88:e3:ea:
         dc:58:7b:35:fd:e7:06:02:58:01:c5:b8:f0:0d:9c:b9:5d:60:
         57:6e:68:19:6f:7a:d3:88:8b:19:97:ec:d7:1e:33:7b:08:10:
         d7:59:11:a3:d8:b3:a0:91:aa:e6:fc:48:9e:bb:7b:6c:a0:11:
         6e:2e:6a:a9:cc:92:b9:39:37:c2:79:87:5a:53:e7:82:08:15:
         8c:59:6a:a0:d1:cd:62:40:c7:5d:27:63:9a:f5:7f:8e:31:4a:
         29:52:16:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZvQHwhRiSX9rS5jcXnVjzYHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyZmQ1NThhNjRlOTc1ODZhNDNkYzdlZTUwYThkNmIyOTIz
NjViNjAwHhcNMjYwMTE4MDgwMDUzWhcNMjYwMTE5MDgwMDUzWjAzMTEwLwYDVQQD
EyhhNzg1ZTMzZmFlYjgzNTg4Zjg2YWVjOTFiMTE5MzdhZjE4NDcwOTc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZULzJcGTJrHCduZzUQ71SZWih1h
0ETlzdimlHylX6/KwRYiMu1U9erXRp0wZv63HKnd6z3/6QsOKdUXUR6TNEYrJC7u
ecmcKvJjwLEeT+14qKLsfE0zvGVeZ8JVyQ6YyaedSAHcrtr5abnZjCjw2FsfgKIP
EiDe6BFS3CT4U3fqHd6oDp3U2qQ4P1yF5e80jQF6lRcHH/BFa+4jN0GYFFjohGwN
Rp202C59dQyAGXv/j6RteMDlgHE+QQmAjh/3jT+W0ohl3DWDPbFM8fsrvqLsaIlY
LicFhpCV9LVYHKLRFWlACCZ8rUnrkyLmgk8UxSwb2bwIHIqtrfM/9P83pQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKeF4z+uuDWI+GrskbEZN68YRwl4MB8GA1UdIwQY
MBaAFBL9VYpk6XWGpD3H7lCo1rKSNltgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXYxVmltVHBkWWFrUGNmdVVLaldzcEkyVzJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9hZjk2ZGYtYTRkNS00OGY5LWFjMGMt
MjRkOGU3NDdjMzhmLzEvRXYxVmltVHBkWWFrUGNmdVVLaldzcEkyVzJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS9hZjk2ZGYtYTRkNS00OGY5LWFjMGMtMjRkOGU3NDdjMzhm
LzEvRXYxVmltVHBkWWFrUGNmdVVLaldzcEkyVzJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEEfrkaos
I5G06iVmzzzOaDnaP1raV5XjObhvEAtkNeZ2lv94iH/9FPkiavN/gh1qdTdjMRvs
emxQP//SeMkQDwJ2YE/zV4zLl4v0r92WDwHJ62d6PGtfW135F93mIjfpey/mB03X
Nrs7+nMAWK94qQkks+k8h1Ls4T8NI8g/dYs3TXEVKxsAaB9HHF5PgncP3lt530Xa
ykddATQISUnAiOPq3Fh7Nf3nBgJYAcW48A2cuV1gV25oGW9604iLGZfs1x4zewgQ
11kRo9izoJGq5vxInrt7bKARbi5qqcySuTk3wnmHWlPngggVjFlqoNHNYkDHXSdj
mvV/jjFKKVIW0A==
-----END CERTIFICATE-----
Generated at Sun Jan 18 17:58:36 2026 by rpki-client