This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/Ev1VimTpdYakPcfuUKjWspI2W2A.mft
File:                     Ev1VimTpdYakPcfuUKjWspI2W2A.mft (raw, json)
Hash identifier:          DuHIw0xEhFGc46BEK6VA6+unHkAMvf+jbUn/WlHa5s0=
Subject key identifier:   7B:C1:15:96:F5:B8:2E:C2:BF:F6:86:36:0F:B4:9C:26:BC:BF:54:46
Authority key identifier: 12:FD:55:8A:64:E9:75:86:A4:3D:C7:EE:50:A8:D6:B2:92:36:5B:60
Certificate issuer:       /CN=12fd558a64e97586a43dc7ee50a8d6b292365b60
Certificate serial:       019AEF407ADE40926528220DFFE25628ED81
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ev1VimTpdYakPcfuUKjWspI2W2A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/Ev1VimTpdYakPcfuUKjWspI2W2A.mft
Manifest number:          177A
Signing time:             Fri 05 Dec 2025 16:02:51 +0000
Manifest this update:     Fri 05 Dec 2025 16:02:51 +0000
Manifest next update:     Sat 06 Dec 2025 16:02:51 +0000
Files and hashes:         1: 0UNxLFiNDnM7JAFQJgASYQsaA6g.roa (hash: yeNDFn94twaWZPqm9gsLvpXQ7L9cVI5aXIkqJKLoX5M=)
                          2: 1xdn8NiVRswlc4uk1WDeK_RiIBI.roa (hash: q1iCF9iJIPjwrPQXtH4xaMoQe7AL1oF2LyzhxGkgni4=)
                          3: Ev1VimTpdYakPcfuUKjWspI2W2A.crl (hash: sAjp+TYQSLZiSes2+LguDgbOLXwUfSjCCqiHXoKUAq0=)
                          4: Nh1ckidMNKlHTaQDjmBWaD_RTqU.roa (hash: HGI9KzkrMn/Mgs6qOK3BC5AOQs+VrhmYJ0sTwXf2f0M=)
                          5: W4wf-OAMEK-73Ed6RT7ypN5sr-k.roa (hash: IJZ4wsFpXNgYN94omFfW/OOG2yIoCFkgqtOfLsCQRvA=)
                          6: W5MLip5ZK1ufGEZ9vOY2cxblKvI.roa (hash: pIDJh0k5gLIn4YvkPKi7ydxg61w5euWKQP9v/Tmlx1o=)
                          7: Wq5DUxTVl0Dm7wyA_VIMLG14k7s.roa (hash: vEG0EhUJl23XyGjHlaal+XqlIJfe5erG7/zNb/KcbuI=)
                          8: Z0sinVsrjztZdWZXyq0HAMquROw.roa (hash: 5+GjpnCGBWsr7RuL/tVtX2VueODcLobULhwbhL426U8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/Ev1VimTpdYakPcfuUKjWspI2W2A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/Ev1VimTpdYakPcfuUKjWspI2W2A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ev1VimTpdYakPcfuUKjWspI2W2A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Dec 2025 16:02:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:ef:40:7a:de:40:92:65:28:22:0d:ff:e2:56:28:ed:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12fd558a64e97586a43dc7ee50a8d6b292365b60
        Validity
            Not Before: Dec  5 16:02:51 2025 GMT
            Not After : Dec  6 16:02:51 2025 GMT
        Subject: CN=7bc11596f5b82ec2bff686360fb49c26bcbf5446
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:07:5b:93:23:27:79:e1:5b:cb:a8:15:7f:30:
                    0d:65:15:3f:47:e2:59:10:1f:e9:ce:99:ea:0b:e7:
                    34:bb:e7:9f:8b:1e:ff:e2:bc:58:4c:72:c2:03:e4:
                    fa:9d:16:72:27:b3:a1:6a:92:50:f8:1c:fd:fb:73:
                    d5:96:8c:b2:c5:98:bf:fb:ac:e5:7d:44:5f:b3:31:
                    37:ce:c5:83:5a:c5:c4:96:f3:d2:22:56:23:f8:9b:
                    31:e0:ce:2a:f7:3d:36:eb:5b:4d:a0:46:66:a3:f7:
                    89:af:e9:04:50:91:65:79:10:13:f1:bd:90:0e:46:
                    13:01:9e:de:02:c7:8d:de:6a:f4:02:0d:48:ac:60:
                    cd:56:63:28:0e:a9:dd:12:c3:b0:90:d0:49:59:57:
                    0f:0e:a3:c5:f4:66:8e:a4:6d:a3:03:b0:74:99:6b:
                    47:e3:c6:0d:d7:ec:f6:f2:b6:09:6b:f5:75:3a:cd:
                    92:67:11:db:6c:19:50:45:ac:5c:ef:70:eb:b8:e4:
                    ad:bd:7a:9a:4d:5c:4d:9c:df:71:fb:2f:e3:ec:e1:
                    24:5f:25:a8:18:10:22:41:52:94:e3:39:89:8d:ee:
                    a0:59:c3:c1:c1:03:2c:7e:d7:93:10:19:1a:d4:dc:
                    c7:1f:ce:9b:a1:93:08:6e:6f:af:0d:c3:cd:10:71:
                    6e:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:C1:15:96:F5:B8:2E:C2:BF:F6:86:36:0F:B4:9C:26:BC:BF:54:46
            X509v3 Authority Key Identifier:
                keyid:12:FD:55:8A:64:E9:75:86:A4:3D:C7:EE:50:A8:D6:B2:92:36:5B:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ev1VimTpdYakPcfuUKjWspI2W2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/Ev1VimTpdYakPcfuUKjWspI2W2A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/Ev1VimTpdYakPcfuUKjWspI2W2A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:72:44:8a:38:dc:d3:3a:0b:77:8d:cd:c7:61:f4:49:7f:06:
         9a:08:3d:df:18:e8:2d:80:69:38:41:ef:30:2b:c9:4a:08:25:
         40:e3:40:68:9b:e6:11:c5:bb:04:72:ae:5d:3f:d7:41:77:4f:
         01:77:7a:f2:ba:e3:7a:d9:c5:58:05:e7:fe:cb:62:3c:62:99:
         9c:97:53:f8:85:98:d6:24:b6:b3:d4:29:e8:1f:0f:08:f2:eb:
         b5:4f:f7:7c:55:4d:8e:d0:77:33:9a:41:c1:21:97:b8:74:d2:
         eb:0b:09:05:91:6b:90:10:58:31:59:ad:55:b3:56:cf:44:68:
         84:91:29:56:80:0f:95:e2:34:ed:73:63:0c:4e:18:10:36:b4:
         c9:b9:bb:c7:7e:e5:2d:c3:5b:d6:c5:e1:ee:b6:6c:26:9b:8c:
         8d:e4:a8:f4:d6:d7:c0:50:90:b5:27:f4:8f:3f:cb:01:e2:62:
         f2:c5:aa:d7:62:64:27:3b:59:72:de:e4:77:4e:68:44:c6:59:
         be:b0:a3:60:ae:07:2b:e1:9b:6f:96:bd:dd:a8:9c:45:d6:6a:
         73:6b:56:e6:cd:8f:79:95:7b:02:c7:24:4d:84:09:92:4a:91:
         79:83:0c:eb:3b:93:b2:0d:31:ab:91:8c:2c:df:9c:5d:63:5b:
         b9:af:bf:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 5 22:28:48 2025 by rpki-client