This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/b14193-f569-434a-aea4-f5deaa9bf0f7/1/evoTWyBy38xO87VBwTa8gAHvQwc.mft
File:                     evoTWyBy38xO87VBwTa8gAHvQwc.mft (raw, json)
Hash identifier:          C6pd1NdJdTm/yGHWNfmdrDmKrlmDhfNRJkiMqXPF03g=
Subject key identifier:   C9:13:37:B6:D5:C7:35:AC:19:AD:14:F6:4E:B3:C0:55:5A:EC:62:1B
Authority key identifier: 7A:FA:13:5B:20:72:DF:CC:4E:F3:B5:41:C1:36:BC:80:01:EF:43:07
Certificate issuer:       /CN=7afa135b2072dfcc4ef3b541c136bc8001ef4307
Certificate serial:       019B2D0AD004EC85B4D1916A64E63D7CAEC9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/evoTWyBy38xO87VBwTa8gAHvQwc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/b14193-f569-434a-aea4-f5deaa9bf0f7/1/evoTWyBy38xO87VBwTa8gAHvQwc.mft
Manifest number:          0C03
Signing time:             Wed 17 Dec 2025 16:00:41 +0000
Manifest this update:     Wed 17 Dec 2025 16:00:41 +0000
Manifest next update:     Thu 18 Dec 2025 16:00:41 +0000
Files and hashes:         1: 1VFRaILqnJnJB3yngV6vDeJcapk.roa (hash: CqxIJgH7ih1CRmTJoFGPX9x50D1IUJFOHfeDDgVZwRg=)
                          2: evoTWyBy38xO87VBwTa8gAHvQwc.crl (hash: kR/voCC4m6IVw11WRHO+tw5JhMopWQ29pZD7xbXFlkQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/b14193-f569-434a-aea4-f5deaa9bf0f7/1/evoTWyBy38xO87VBwTa8gAHvQwc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/b14193-f569-434a-aea4-f5deaa9bf0f7/1/evoTWyBy38xO87VBwTa8gAHvQwc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/evoTWyBy38xO87VBwTa8gAHvQwc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 18 Dec 2025 10:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:2d:0a:d0:04:ec:85:b4:d1:91:6a:64:e6:3d:7c:ae:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7afa135b2072dfcc4ef3b541c136bc8001ef4307
        Validity
            Not Before: Dec 17 16:00:41 2025 GMT
            Not After : Dec 18 16:00:41 2025 GMT
        Subject: CN=c91337b6d5c735ac19ad14f64eb3c0555aec621b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:36:17:d7:5e:cc:8c:80:a9:72:98:4c:ff:bd:
                    97:87:a8:47:5b:85:c4:e3:14:67:6e:52:bc:fb:43:
                    d5:48:b1:c1:e6:dd:5a:78:59:4c:e8:21:c5:4b:eb:
                    11:fd:6b:21:c6:ba:e9:96:50:1c:f4:76:cc:90:55:
                    69:9c:a8:41:81:26:52:f4:32:13:e6:27:d4:ac:45:
                    80:9a:a0:f4:e9:b7:20:84:83:e5:0b:55:a5:86:57:
                    59:f5:5f:0b:6d:8e:ce:4c:ae:1e:26:be:a2:26:22:
                    30:2d:e4:e0:5f:84:e4:79:03:74:3b:19:d6:0a:65:
                    6b:dd:25:3f:33:84:2f:ab:fa:93:d1:3f:e9:82:c9:
                    8c:d4:a7:4a:7e:69:df:08:48:04:fd:12:23:2b:d1:
                    d1:4d:37:d2:72:f7:31:99:27:28:d9:8f:51:78:86:
                    04:e3:39:be:5c:a3:95:97:2d:0c:2e:22:f4:dc:78:
                    e8:4c:3b:4e:b1:cd:a6:a0:54:83:c9:7c:ad:51:6d:
                    7c:fe:96:b4:5f:50:d5:9e:43:d2:dc:c7:d1:ee:44:
                    44:be:66:03:92:fc:ec:46:2a:4b:41:c2:eb:fc:52:
                    c2:99:29:07:28:d6:89:c8:5d:9c:59:3e:dc:91:6f:
                    98:8a:17:cc:cb:9b:98:b9:0d:1a:8e:14:50:8a:a8:
                    7f:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:13:37:B6:D5:C7:35:AC:19:AD:14:F6:4E:B3:C0:55:5A:EC:62:1B
            X509v3 Authority Key Identifier:
                keyid:7A:FA:13:5B:20:72:DF:CC:4E:F3:B5:41:C1:36:BC:80:01:EF:43:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/evoTWyBy38xO87VBwTa8gAHvQwc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/b14193-f569-434a-aea4-f5deaa9bf0f7/1/evoTWyBy38xO87VBwTa8gAHvQwc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/b14193-f569-434a-aea4-f5deaa9bf0f7/1/evoTWyBy38xO87VBwTa8gAHvQwc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:6e:7b:9c:4f:87:73:c5:0b:82:c1:0e:87:c6:9e:a4:41:51:
         98:20:01:cc:88:61:40:6f:6e:fe:3e:60:b7:b6:43:61:ef:56:
         e1:41:00:c9:ac:f0:48:d8:aa:02:ec:18:69:dc:14:03:27:7d:
         b7:4e:df:bf:f7:bc:a1:3b:1c:6f:86:76:e7:f3:a7:aa:cb:38:
         57:1e:4e:ff:da:19:c0:18:1b:54:a2:58:a1:0e:12:7a:fc:9d:
         52:14:06:bc:7e:d1:1d:37:a5:c0:c4:6d:a6:3c:54:7e:38:98:
         67:35:55:2a:35:86:7c:df:ba:d8:21:f6:bf:18:50:de:62:10:
         26:a1:18:60:57:c8:c8:a0:7d:38:77:98:5e:7f:66:39:fe:7c:
         d3:54:72:f9:da:8b:39:22:d6:a0:e0:24:92:ab:51:17:3d:a6:
         46:97:2c:ff:f1:6b:47:a9:2d:5f:d4:bb:e2:82:c7:d2:f7:83:
         46:e7:19:4e:b5:57:8e:b5:a7:6c:25:51:0e:9c:0f:d1:69:7d:
         c3:eb:e5:bd:00:5c:87:f2:93:a2:18:23:ee:dd:7d:2f:22:c7:
         23:0f:f3:f6:c0:41:47:45:47:b1:1b:1a:64:13:4d:dc:18:a8:
         ef:e8:24:f2:91:ee:1b:aa:ec:98:39:a4:0e:68:58:f4:62:28:
         5d:ee:f0:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 17:53:17 2025 by rpki-client