This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/Ev1VimTpdYakPcfuUKjWspI2W2A.mft
File:                     Ev1VimTpdYakPcfuUKjWspI2W2A.mft (raw, json)
Hash identifier:          g7xefHnN1Qc17TOix3hzgY/FlpmjeSaO94jYAIWc1Ao=
Subject key identifier:   C1:44:9C:E4:30:24:BD:55:8D:18:A8:C1:70:9E:3A:09:AB:22:BD:3B
Authority key identifier: 12:FD:55:8A:64:E9:75:86:A4:3D:C7:EE:50:A8:D6:B2:92:36:5B:60
Certificate issuer:       /CN=12fd558a64e97586a43dc7ee50a8d6b292365b60
Certificate serial:       019AF31CB03ED32E479606874EE074F9968D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ev1VimTpdYakPcfuUKjWspI2W2A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/Ev1VimTpdYakPcfuUKjWspI2W2A.mft
Manifest number:          177C
Signing time:             Sat 06 Dec 2025 10:02:14 +0000
Manifest this update:     Sat 06 Dec 2025 10:02:14 +0000
Manifest next update:     Sun 07 Dec 2025 10:02:14 +0000
Files and hashes:         1: 0UNxLFiNDnM7JAFQJgASYQsaA6g.roa (hash: yeNDFn94twaWZPqm9gsLvpXQ7L9cVI5aXIkqJKLoX5M=)
                          2: 1xdn8NiVRswlc4uk1WDeK_RiIBI.roa (hash: q1iCF9iJIPjwrPQXtH4xaMoQe7AL1oF2LyzhxGkgni4=)
                          3: Ev1VimTpdYakPcfuUKjWspI2W2A.crl (hash: tNsr1zeO1yfliMDnYEU8EnnQhV8KCL3RaIfgcPPrA4c=)
                          4: Nh1ckidMNKlHTaQDjmBWaD_RTqU.roa (hash: HGI9KzkrMn/Mgs6qOK3BC5AOQs+VrhmYJ0sTwXf2f0M=)
                          5: W4wf-OAMEK-73Ed6RT7ypN5sr-k.roa (hash: IJZ4wsFpXNgYN94omFfW/OOG2yIoCFkgqtOfLsCQRvA=)
                          6: W5MLip5ZK1ufGEZ9vOY2cxblKvI.roa (hash: pIDJh0k5gLIn4YvkPKi7ydxg61w5euWKQP9v/Tmlx1o=)
                          7: Wq5DUxTVl0Dm7wyA_VIMLG14k7s.roa (hash: vEG0EhUJl23XyGjHlaal+XqlIJfe5erG7/zNb/KcbuI=)
                          8: Z0sinVsrjztZdWZXyq0HAMquROw.roa (hash: 5+GjpnCGBWsr7RuL/tVtX2VueODcLobULhwbhL426U8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/Ev1VimTpdYakPcfuUKjWspI2W2A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/Ev1VimTpdYakPcfuUKjWspI2W2A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ev1VimTpdYakPcfuUKjWspI2W2A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f3:1c:b0:3e:d3:2e:47:96:06:87:4e:e0:74:f9:96:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12fd558a64e97586a43dc7ee50a8d6b292365b60
        Validity
            Not Before: Dec  6 10:02:14 2025 GMT
            Not After : Dec  7 10:02:14 2025 GMT
        Subject: CN=c1449ce43024bd558d18a8c1709e3a09ab22bd3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:27:01:1e:0c:c6:d6:ee:d1:3a:96:a2:d5:6e:
                    cb:f3:fb:d2:16:42:9e:eb:7a:c4:07:c0:17:bc:15:
                    4a:46:67:1e:c3:8d:d8:35:89:4f:0c:be:5a:c3:83:
                    b4:fd:0d:8d:40:d2:42:7b:3a:22:28:bb:b1:1b:63:
                    97:61:53:5b:df:fd:7f:c9:e8:59:d1:5b:b2:05:01:
                    c9:e3:0a:8b:59:8c:92:a9:6c:03:e1:14:46:49:4f:
                    7e:2a:39:f8:65:0d:d0:db:50:3c:c9:4a:36:71:00:
                    14:c3:4d:48:7a:f3:ad:48:90:4c:d6:91:d8:b7:63:
                    f7:d3:ff:f8:1e:ce:0b:7d:06:37:b4:f0:f4:0f:fe:
                    6c:2d:7c:ac:56:34:e9:d1:b6:d8:35:c1:22:b0:ad:
                    a3:b3:99:13:f2:cf:61:21:c4:64:87:a5:b8:7f:d6:
                    d1:e3:06:4e:b4:76:8c:62:02:69:ef:a1:d7:c0:4f:
                    6b:2b:37:37:78:07:dc:5c:d4:c1:cc:7c:c2:f9:b6:
                    c7:83:7f:d2:6c:d9:79:13:91:eb:97:fc:d6:fa:95:
                    34:80:d0:75:e6:f0:37:cc:93:bf:67:87:c7:58:31:
                    d0:2a:ba:3b:61:28:31:d5:5c:c8:fc:8e:24:93:47:
                    22:6d:bf:98:4e:83:fe:46:63:56:cd:27:4b:6c:ea:
                    0b:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:44:9C:E4:30:24:BD:55:8D:18:A8:C1:70:9E:3A:09:AB:22:BD:3B
            X509v3 Authority Key Identifier:
                keyid:12:FD:55:8A:64:E9:75:86:A4:3D:C7:EE:50:A8:D6:B2:92:36:5B:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ev1VimTpdYakPcfuUKjWspI2W2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/Ev1VimTpdYakPcfuUKjWspI2W2A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/Ev1VimTpdYakPcfuUKjWspI2W2A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:df:29:92:46:3d:bf:af:3a:20:3b:b2:b0:8d:c9:a8:d0:5e:
         08:9f:3b:8c:a9:51:1f:74:0d:ab:5d:f6:1c:bc:07:c6:7c:f5:
         69:df:f5:46:39:63:ec:ed:e8:27:d3:0f:72:fa:f8:2c:ae:33:
         cb:8a:81:11:32:28:a1:61:be:18:54:a5:3c:bf:16:5d:89:b6:
         af:1d:68:9e:d1:df:7c:0f:62:ff:01:d4:b4:c1:c3:5e:b3:75:
         5e:7e:c9:f8:ab:fc:e0:17:f1:8c:2d:69:96:b9:d3:6f:2e:88:
         7f:d9:e8:4c:8b:c5:62:79:97:47:de:44:d2:b8:86:a2:7e:c3:
         22:1d:63:02:5f:82:bf:1c:3a:36:bf:fc:e9:53:52:b4:75:aa:
         8f:75:7a:3e:8b:e7:7e:34:1a:dc:a0:0b:48:63:0d:7f:41:8a:
         91:89:98:91:37:e0:d6:18:4a:84:ed:f6:86:28:5e:2c:f5:8a:
         43:40:45:7b:60:39:c5:5f:7e:e0:27:10:3c:37:a5:49:4a:1e:
         46:53:73:5c:da:eb:93:c0:52:48:c4:01:ef:98:b6:f2:de:b6:
         99:13:29:24:90:4c:3e:78:7f:8d:2b:33:6c:34:68:a0:50:68:
         3e:82:f1:05:66:94:a5:4e:30:30:0c:cf:e2:f7:09:8b:68:22:
         d9:d6:70:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:38:52 2025 by rpki-client