This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/b14193-f569-434a-aea4-f5deaa9bf0f7/1/evoTWyBy38xO87VBwTa8gAHvQwc.mft
File:                     evoTWyBy38xO87VBwTa8gAHvQwc.mft (raw, json)
Hash identifier:          32gKA3t4F/EXYeJKXA3Fh84lwn8A5bo+sc10ixITSfA=
Subject key identifier:   FC:08:4A:09:83:52:6B:42:F8:EA:8A:29:7E:B2:3D:71:6A:C6:49:30
Authority key identifier: 7A:FA:13:5B:20:72:DF:CC:4E:F3:B5:41:C1:36:BC:80:01:EF:43:07
Certificate issuer:       /CN=7afa135b2072dfcc4ef3b541c136bc8001ef4307
Certificate serial:       019AF12CB73B95469CDB679C5CEC25AB3095
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/evoTWyBy38xO87VBwTa8gAHvQwc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/b14193-f569-434a-aea4-f5deaa9bf0f7/1/evoTWyBy38xO87VBwTa8gAHvQwc.mft
Manifest number:          0BE4
Signing time:             Sat 06 Dec 2025 01:00:30 +0000
Manifest this update:     Sat 06 Dec 2025 01:00:30 +0000
Manifest next update:     Sun 07 Dec 2025 01:00:30 +0000
Files and hashes:         1: 1VFRaILqnJnJB3yngV6vDeJcapk.roa (hash: CqxIJgH7ih1CRmTJoFGPX9x50D1IUJFOHfeDDgVZwRg=)
                          2: evoTWyBy38xO87VBwTa8gAHvQwc.crl (hash: q2npKcWL5vCjF2AxsOwc+fP6R0yyFyWGD++yhBh50hI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/b14193-f569-434a-aea4-f5deaa9bf0f7/1/evoTWyBy38xO87VBwTa8gAHvQwc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/b14193-f569-434a-aea4-f5deaa9bf0f7/1/evoTWyBy38xO87VBwTa8gAHvQwc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/evoTWyBy38xO87VBwTa8gAHvQwc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 01:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:2c:b7:3b:95:46:9c:db:67:9c:5c:ec:25:ab:30:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7afa135b2072dfcc4ef3b541c136bc8001ef4307
        Validity
            Not Before: Dec  6 01:00:30 2025 GMT
            Not After : Dec  7 01:00:30 2025 GMT
        Subject: CN=fc084a0983526b42f8ea8a297eb23d716ac64930
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:e1:8e:bf:6c:50:70:5e:58:15:15:1a:97:83:
                    de:f0:a2:73:4f:64:a1:63:db:58:3d:be:b9:c3:a4:
                    52:d7:dc:70:93:4a:45:93:42:9b:1a:6d:23:ef:76:
                    1b:39:6f:7a:d5:87:71:7a:61:20:38:2a:2c:b0:20:
                    49:06:a3:d1:e1:17:f4:6e:ca:4b:45:24:de:e6:c1:
                    e4:8a:3e:50:e9:9b:5f:7f:c7:10:e2:48:b9:8e:ef:
                    af:19:03:b4:a7:c7:65:f0:9b:2d:28:2d:a5:6d:80:
                    38:f1:3f:6f:12:8f:89:3a:a1:a0:89:9d:c6:a1:4a:
                    22:9e:ca:45:e6:df:22:04:8e:c2:59:15:13:25:de:
                    15:44:71:41:36:e9:12:a4:e7:71:c3:75:bd:fe:55:
                    9b:c2:c5:a0:60:e9:52:28:1f:f8:95:e3:55:2a:5e:
                    8f:56:36:9e:92:60:11:e2:09:de:d2:ef:37:b2:3f:
                    b8:89:8c:3b:5a:87:0f:3c:74:01:46:b8:39:30:44:
                    a9:d4:00:1f:9e:f0:c2:48:40:64:0f:81:cc:00:d9:
                    3e:7e:05:8d:2e:c7:66:1a:ea:78:67:fc:dd:0f:f0:
                    7b:b6:dd:37:2b:20:d4:45:23:ba:a8:1c:91:08:d4:
                    85:4a:01:58:69:44:d2:5b:28:d0:bd:3f:fc:5d:28:
                    28:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:08:4A:09:83:52:6B:42:F8:EA:8A:29:7E:B2:3D:71:6A:C6:49:30
            X509v3 Authority Key Identifier:
                keyid:7A:FA:13:5B:20:72:DF:CC:4E:F3:B5:41:C1:36:BC:80:01:EF:43:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/evoTWyBy38xO87VBwTa8gAHvQwc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/b14193-f569-434a-aea4-f5deaa9bf0f7/1/evoTWyBy38xO87VBwTa8gAHvQwc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/b14193-f569-434a-aea4-f5deaa9bf0f7/1/evoTWyBy38xO87VBwTa8gAHvQwc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:25:0b:e2:df:c1:a0:6d:be:4c:8d:dc:d4:ed:6b:9c:f6:be:
         16:a6:a0:fc:db:51:ca:76:54:cc:77:38:99:28:e2:9b:b6:15:
         3f:37:c5:57:04:75:84:1f:db:c1:41:6e:f5:48:eb:59:18:28:
         43:89:62:e0:1a:5d:ee:ef:df:58:ab:05:2f:64:f7:2c:b3:a4:
         08:d3:de:f7:65:3a:a8:4e:79:eb:4a:98:b0:41:c5:8e:fc:d2:
         2d:a0:d1:09:47:fd:60:fe:ac:f9:81:25:a6:91:d4:49:35:9e:
         69:8b:ab:b3:04:68:46:ff:37:fe:5e:9a:3d:b4:63:8e:b5:c4:
         55:4c:3d:c1:d6:5a:84:98:90:d2:e8:d7:09:93:30:59:de:d8:
         36:bb:80:3e:5f:72:9b:a7:f0:f1:4b:fe:b0:76:56:f4:49:ac:
         eb:bc:8c:af:38:fc:ce:55:95:de:e4:c6:63:66:30:6e:a4:d9:
         17:1a:0e:9e:ab:06:d7:7e:fe:32:26:68:33:87:c8:2b:51:e2:
         21:04:9f:51:dc:81:56:1e:1f:f6:bd:77:1c:27:81:c4:fa:2f:
         a5:f2:9b:23:9e:40:3b:27:46:cf:e0:b4:1c:c3:4f:9e:35:e2:
         48:99:f2:13:53:02:94:ef:ea:53:92:04:d4:54:16:a1:13:08:
         4b:7d:80:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 10:03:08 2025 by rpki-client