This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/81de07-8481-4d83-82e9-a3471774157b/1/Evrf4pHe_Fb5R54ufSG1OXz6K2Q.mft
File:                     Evrf4pHe_Fb5R54ufSG1OXz6K2Q.mft (raw, json)
Hash identifier:          ZSWOvPEZHcUNH/OmhGC7jm3EEX7OhHm9738VEIZnQdg=
Subject key identifier:   06:44:E4:5B:AD:62:1F:A5:FA:CC:66:B2:8C:A4:C7:B3:FB:1A:D7:B6
Authority key identifier: 12:FA:DF:E2:91:DE:FC:56:F9:47:9E:2E:7D:21:B5:39:7C:FA:2B:64
Certificate issuer:       /CN=12fadfe291defc56f9479e2e7d21b5397cfa2b64
Certificate serial:       019AF31CD7B43BF5B0A08905FC951AAACDFB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Evrf4pHe_Fb5R54ufSG1OXz6K2Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/81de07-8481-4d83-82e9-a3471774157b/1/Evrf4pHe_Fb5R54ufSG1OXz6K2Q.mft
Manifest number:          0A35
Signing time:             Sat 06 Dec 2025 10:02:25 +0000
Manifest this update:     Sat 06 Dec 2025 10:02:25 +0000
Manifest next update:     Sun 07 Dec 2025 10:02:25 +0000
Files and hashes:         1: Evrf4pHe_Fb5R54ufSG1OXz6K2Q.crl (hash: V6xqw9y3+042iOsMEUcXgOvBOX9FQx1rHm8MXKPZIrw=)
                          2: _xRBA0-FJYAq2bhvbQe3j68XREg.roa (hash: Gym+lS7Pb7qSAGCB20Y3Am819Ocp8b/loNBlr9diFjw=)
                          3: q1r-kgfbVidNcGbxwm5Lfbx8idQ.roa (hash: XO5fotFJ+du20eg1ObsZCqOM3JLAQslX928MaBxUf9k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/81de07-8481-4d83-82e9-a3471774157b/1/Evrf4pHe_Fb5R54ufSG1OXz6K2Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/81de07-8481-4d83-82e9-a3471774157b/1/Evrf4pHe_Fb5R54ufSG1OXz6K2Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Evrf4pHe_Fb5R54ufSG1OXz6K2Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 10:02:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f3:1c:d7:b4:3b:f5:b0:a0:89:05:fc:95:1a:aa:cd:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12fadfe291defc56f9479e2e7d21b5397cfa2b64
        Validity
            Not Before: Dec  6 10:02:25 2025 GMT
            Not After : Dec  7 10:02:25 2025 GMT
        Subject: CN=0644e45bad621fa5facc66b28ca4c7b3fb1ad7b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:30:f6:27:ab:64:88:23:9e:76:b8:88:e4:42:
                    e5:8b:ed:ca:80:64:94:c5:c7:49:d1:85:5f:32:7d:
                    cb:94:cd:7a:ab:fe:79:08:23:2b:58:3d:21:89:f2:
                    00:10:93:7a:b9:ff:6d:b8:22:c9:22:95:ba:53:0d:
                    01:98:c3:f5:aa:de:ef:25:a6:8e:a1:18:05:49:6b:
                    5f:82:74:a7:f6:25:3b:37:00:f8:1b:93:f7:6b:a8:
                    97:68:f4:66:53:76:f8:12:43:41:7b:b1:dc:77:b4:
                    3e:ca:3a:50:a8:5f:8c:72:d2:2b:d6:da:20:82:a6:
                    56:62:1a:12:5f:47:57:73:b2:2c:d8:a8:f2:e5:83:
                    75:5c:54:5b:f1:70:4d:d4:4e:23:a4:b1:19:f0:5b:
                    f8:2f:ff:55:36:a3:23:7c:5a:0f:22:f8:01:3c:c3:
                    0c:ce:cf:50:f0:c3:6f:c7:59:09:c3:c2:56:bc:95:
                    7b:24:f0:e4:a4:88:34:3e:96:65:95:16:e4:60:9f:
                    5c:7b:11:18:cd:f9:ba:f2:43:ee:1a:ca:70:fe:45:
                    12:60:5a:29:fd:18:f7:4b:71:6c:43:65:76:72:68:
                    a8:4e:27:16:62:63:50:13:81:a1:1f:63:7c:08:10:
                    98:28:08:87:45:6e:5f:1b:c0:32:9b:6c:3c:49:b5:
                    b8:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:44:E4:5B:AD:62:1F:A5:FA:CC:66:B2:8C:A4:C7:B3:FB:1A:D7:B6
            X509v3 Authority Key Identifier:
                keyid:12:FA:DF:E2:91:DE:FC:56:F9:47:9E:2E:7D:21:B5:39:7C:FA:2B:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Evrf4pHe_Fb5R54ufSG1OXz6K2Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/81de07-8481-4d83-82e9-a3471774157b/1/Evrf4pHe_Fb5R54ufSG1OXz6K2Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/81de07-8481-4d83-82e9-a3471774157b/1/Evrf4pHe_Fb5R54ufSG1OXz6K2Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:3f:ea:2a:5d:94:34:96:9c:9c:90:35:da:58:a4:46:5f:ae:
         0b:4f:6e:5f:e4:b3:06:ce:8d:89:7e:39:02:e0:1b:04:0d:a4:
         74:4d:84:c1:88:07:1d:04:36:7f:6b:d0:d7:f6:d2:63:a6:7b:
         02:33:3f:52:1f:a3:a6:fc:f8:ec:c6:75:c9:ee:be:a6:82:6b:
         a7:ab:74:b4:bb:17:04:1b:00:63:44:50:65:2b:9f:02:4c:f3:
         fa:81:79:db:13:58:5b:58:ee:ac:7d:c6:16:c1:e8:26:bd:73:
         4c:76:78:47:85:0d:e8:cd:61:35:4e:b7:cb:36:af:1c:1e:a2:
         d5:3a:62:a4:23:a1:62:f4:ab:da:3a:21:f1:8e:37:51:39:8b:
         b6:36:b1:3c:3d:0d:ea:96:ff:c6:0e:c7:42:20:78:69:e8:9b:
         ef:82:77:d6:23:a8:ff:69:3b:9c:5d:08:66:6a:4b:cd:92:87:
         1e:6b:0c:b2:27:6d:d1:25:bf:92:eb:be:ca:2f:ab:b6:33:4b:
         20:be:f2:cd:30:da:d4:94:ec:bc:c6:98:7a:e2:eb:3c:77:51:
         a4:c1:81:98:02:0f:68:a2:0a:62:c6:0d:fa:6d:f6:2f:c0:1e:
         7b:8c:9c:9f:6c:d8:0f:d9:8e:7a:88:d3:fd:1d:75:f2:a4:a2:
         06:01:bd:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:42:03 2025 by rpki-client