This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/672629-a0e2-476f-aead-ee380b82cfca/1/HASEi_73JOJqvtPGXk6PlQj7F5Y.mft
File:                     HASEi_73JOJqvtPGXk6PlQj7F5Y.mft (raw, json)
Hash identifier:          ya5hsqcpwX/8AAf9XDx7e8hMMmxgE1MXKlPIr6Cgces=
Subject key identifier:   DA:63:E8:6D:04:7D:C6:3D:8B:A6:97:62:E3:87:A3:1D:32:AC:EB:6B
Authority key identifier: 1C:04:84:8B:FE:F7:24:E2:6A:BE:D3:C6:5E:4E:8F:95:08:FB:17:96
Certificate issuer:       /CN=1c04848bfef724e26abed3c65e4e8f9508fb1796
Certificate serial:       019B755AA97F2090CA88E7D6DD53A6E3BBC5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HASEi_73JOJqvtPGXk6PlQj7F5Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/672629-a0e2-476f-aead-ee380b82cfca/1/HASEi_73JOJqvtPGXk6PlQj7F5Y.mft
Manifest number:          12CA
Signing time:             Wed 31 Dec 2025 17:00:34 +0000
Manifest this update:     Wed 31 Dec 2025 17:00:34 +0000
Manifest next update:     Thu 01 Jan 2026 17:00:34 +0000
Files and hashes:         1: HASEi_73JOJqvtPGXk6PlQj7F5Y.crl (hash: G7ur3N1afUfIxmGX6zMholHJm2mRHzaO3X9clMX+u+Y=)
                          2: Hwa64s5gh2ljZYzswq1MygUDPHc.roa (hash: 0SMaVRBltPWPlJCAMP0PbN6yDjOR3rc4e6/DOO/swOM=)
                          3: SGwhn__bVbPsccKspAWva0mlWKE.roa (hash: 7jfyjyJCW+XQBhQgGW4lFXSavEUqWujd+R1L9MnkSV4=)
                          4: bVV-LmRxrJACwIt_3H5Y-KZM4tk.roa (hash: YG03EdxheWfNj9nAWSYO4FwqQuG3FqjegdG/4SAUoRw=)
                          5: tDDvO4ewPeixYnF0BIHSLyjo8w4.roa (hash: 2D9w4MUI/GtrAMc5KswKAPRyDxDgFgv99Z5MGOrURSw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/672629-a0e2-476f-aead-ee380b82cfca/1/HASEi_73JOJqvtPGXk6PlQj7F5Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/672629-a0e2-476f-aead-ee380b82cfca/1/HASEi_73JOJqvtPGXk6PlQj7F5Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HASEi_73JOJqvtPGXk6PlQj7F5Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 Jan 2026 16:22:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:75:5a:a9:7f:20:90:ca:88:e7:d6:dd:53:a6:e3:bb:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c04848bfef724e26abed3c65e4e8f9508fb1796
        Validity
            Not Before: Dec 31 17:00:34 2025 GMT
            Not After : Jan  1 17:00:34 2026 GMT
        Subject: CN=da63e86d047dc63d8ba69762e387a31d32aceb6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:4f:2c:09:ef:c4:ed:d6:82:97:c3:c8:72:49:
                    6d:6e:b4:a7:6d:ab:b2:26:57:58:dc:bb:05:2b:18:
                    1f:af:7f:4e:61:1b:6b:08:f3:53:22:85:3f:cb:4b:
                    6e:24:85:54:af:d1:53:94:62:ae:3c:13:f2:5a:2a:
                    61:a9:e6:ba:25:ef:5e:08:26:94:72:68:48:23:f9:
                    6f:2d:d8:d1:15:93:0a:83:57:c8:43:7b:94:a9:3b:
                    3c:00:8e:0a:f7:db:d0:14:7a:a9:1c:ce:bf:e9:89:
                    07:48:96:48:c8:57:08:f7:29:b5:65:99:76:92:3e:
                    12:68:17:81:18:9a:58:78:dc:b1:90:74:0b:c5:5d:
                    8c:a5:bc:34:ae:7e:5f:dc:84:ae:29:7a:c8:fb:f3:
                    1d:b1:43:6e:ab:b0:77:e5:e9:03:c4:3c:38:e7:bb:
                    42:d9:a0:59:2d:a4:37:95:14:a3:56:0b:81:78:e6:
                    84:c0:61:01:c5:2c:02:f3:78:c7:7f:3b:34:db:bb:
                    b2:ed:af:69:be:ae:62:ec:77:dd:a0:ab:3e:d7:b1:
                    fe:85:79:bb:9c:28:09:53:87:35:d0:d1:40:e7:bb:
                    8b:07:2a:c3:e9:6c:5f:62:8e:e9:b3:54:6a:0a:53:
                    98:50:b5:0e:6e:64:91:85:2e:a0:1d:36:a8:3e:ca:
                    84:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:63:E8:6D:04:7D:C6:3D:8B:A6:97:62:E3:87:A3:1D:32:AC:EB:6B
            X509v3 Authority Key Identifier:
                keyid:1C:04:84:8B:FE:F7:24:E2:6A:BE:D3:C6:5E:4E:8F:95:08:FB:17:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HASEi_73JOJqvtPGXk6PlQj7F5Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/672629-a0e2-476f-aead-ee380b82cfca/1/HASEi_73JOJqvtPGXk6PlQj7F5Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/672629-a0e2-476f-aead-ee380b82cfca/1/HASEi_73JOJqvtPGXk6PlQj7F5Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:f8:3d:37:98:54:4b:5a:23:79:43:cf:8a:c7:04:0d:f0:bb:
         f8:77:75:77:45:6f:82:88:cb:81:9c:d8:3a:0b:80:8e:b8:ef:
         9a:8e:83:77:84:48:7b:60:54:52:2f:9b:2a:9f:a4:f9:81:81:
         16:c6:bc:cd:e5:90:60:f5:bc:9c:a6:74:65:80:94:c6:1d:6a:
         76:38:7a:9a:4a:0c:7e:ab:33:ee:90:e3:76:a4:90:4d:2a:3f:
         18:6f:27:17:2e:c9:23:52:0c:7d:fb:4b:84:28:da:83:90:33:
         19:ce:20:d8:1a:5c:44:fc:20:ec:27:d3:3d:ae:4e:92:15:5a:
         f0:27:03:54:4c:f1:60:ea:70:f5:bb:89:47:08:39:a6:72:35:
         54:4f:9b:a3:14:01:50:c3:76:a0:3c:93:6b:08:84:b1:00:c5:
         48:50:f7:be:99:c1:9f:10:02:2b:6c:e9:81:84:d3:62:fe:e9:
         71:5c:9c:34:c5:c4:0e:96:53:b6:72:52:7e:2a:9c:21:61:a6:
         29:0f:b1:ed:53:88:e9:4a:3e:db:e8:ee:0f:71:67:10:93:63:
         1b:ff:e3:cc:df:4a:f5:2b:02:f4:d4:91:3d:bf:2b:07:70:c1:
         3f:8c:bf:c6:d5:7b:b7:92:01:22:85:9c:05:7d:08:73:ae:17:
         39:58:c4:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 31 19:33:02 2025 by rpki-client