This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/1e4a64-7aa0-4c94-9bb0-deb7b9189169/1/Re_-mMJMPW1gh8jR0_kBuMzUAIg.mft
File:                     Re_-mMJMPW1gh8jR0_kBuMzUAIg.mft (raw, json)
Hash identifier:          ac1rA1uR7RzNDtmSFdVqPtBoJM7IPJs+pGdmWQQlkV8=
Subject key identifier:   05:99:FB:91:8D:E2:6E:68:0F:B4:F4:A5:EF:A4:E0:40:A9:BC:8B:BB
Authority key identifier: 45:EF:FE:98:C2:4C:3D:6D:60:87:C8:D1:D3:F9:01:B8:CC:D4:00:88
Certificate issuer:       /CN=45effe98c24c3d6d6087c8d1d3f901b8ccd40088
Certificate serial:       019B725979C1458DA8AD7A6916D481FB2A4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Re_-mMJMPW1gh8jR0_kBuMzUAIg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/1e4a64-7aa0-4c94-9bb0-deb7b9189169/1/Re_-mMJMPW1gh8jR0_kBuMzUAIg.mft
Manifest number:          06C2
Signing time:             Wed 31 Dec 2025 03:00:25 +0000
Manifest this update:     Wed 31 Dec 2025 03:00:25 +0000
Manifest next update:     Thu 01 Jan 2026 03:00:25 +0000
Files and hashes:         1: 1-mKTp_9x4jSxLfMrjZRYWSL2w4Y.roa (hash: DC2p78SiJuzIaXxQwV5e0jB7M1ooOawXmJPpEB8RdBQ=)
                          2: FVztUFkhUmgNammrig4lq2khRec.roa (hash: MBe/F0X2e05UmIZ71xdZyQkumN8ul5YjBsp/xc1ECtg=)
                          3: Re_-mMJMPW1gh8jR0_kBuMzUAIg.crl (hash: jYmcQZAuCLH+Avqmldo66xq1q0ZF/7uj4661w3uTw4g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/da/1e4a64-7aa0-4c94-9bb0-deb7b9189169/1/Re_-mMJMPW1gh8jR0_kBuMzUAIg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/da/1e4a64-7aa0-4c94-9bb0-deb7b9189169/1/Re_-mMJMPW1gh8jR0_kBuMzUAIg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Re_-mMJMPW1gh8jR0_kBuMzUAIg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 Jan 2026 03:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:72:59:79:c1:45:8d:a8:ad:7a:69:16:d4:81:fb:2a:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45effe98c24c3d6d6087c8d1d3f901b8ccd40088
        Validity
            Not Before: Dec 31 03:00:25 2025 GMT
            Not After : Jan  1 03:00:25 2026 GMT
        Subject: CN=0599fb918de26e680fb4f4a5efa4e040a9bc8bbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ec:3e:22:75:d4:7f:eb:3b:c3:50:de:53:ab:
                    b8:4c:0d:21:1c:d8:ce:e5:2b:39:39:6e:9e:eb:e5:
                    72:bb:df:0d:3f:ce:69:9a:4f:33:46:b7:5d:fc:6e:
                    e2:3d:d9:f0:14:17:57:bb:ad:22:7f:99:0c:c2:4f:
                    6a:87:18:70:0d:d1:b5:26:de:b2:fb:08:e3:40:33:
                    67:d5:d4:e2:91:71:44:18:e7:80:81:68:e5:3e:60:
                    ae:ac:ca:f3:c1:9a:c4:d6:b0:fb:3b:a4:56:d7:50:
                    9e:db:d4:a7:7c:ab:4c:d6:38:6c:bc:16:35:51:a2:
                    46:ec:d8:fd:c2:41:db:99:03:82:38:ff:72:f6:7c:
                    c0:55:0d:57:7d:fd:4d:d6:d2:a4:4c:a7:16:4c:28:
                    eb:fe:31:51:74:d8:ce:c3:6e:9c:2a:43:3d:74:c7:
                    41:38:e5:5d:d7:3c:a4:a6:08:15:45:57:79:87:fa:
                    2c:3b:31:f3:1b:67:50:c6:4d:c0:f4:48:1a:cc:4f:
                    c9:47:09:ec:32:62:56:a9:98:dd:6b:0e:d8:35:72:
                    84:9d:c6:af:ec:ee:a3:68:67:e2:a8:73:22:06:4f:
                    46:41:06:99:c7:ef:83:1d:33:5b:c9:52:74:72:52:
                    72:7c:54:57:f7:68:ea:b9:6a:e9:91:fd:42:f7:8a:
                    ca:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:99:FB:91:8D:E2:6E:68:0F:B4:F4:A5:EF:A4:E0:40:A9:BC:8B:BB
            X509v3 Authority Key Identifier:
                keyid:45:EF:FE:98:C2:4C:3D:6D:60:87:C8:D1:D3:F9:01:B8:CC:D4:00:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Re_-mMJMPW1gh8jR0_kBuMzUAIg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/1e4a64-7aa0-4c94-9bb0-deb7b9189169/1/Re_-mMJMPW1gh8jR0_kBuMzUAIg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/1e4a64-7aa0-4c94-9bb0-deb7b9189169/1/Re_-mMJMPW1gh8jR0_kBuMzUAIg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:06:1c:cb:94:5e:08:ae:ba:45:09:48:12:3d:50:3c:41:a0:
         13:23:d7:59:d4:f7:59:7d:8e:58:0e:0c:5f:8c:81:20:06:04:
         2b:57:5f:26:75:93:e2:60:53:ce:d8:e6:6c:8a:6c:33:f3:8e:
         5d:50:0c:89:c4:70:a5:b9:c6:49:fb:f4:14:7c:05:06:e8:33:
         07:24:3e:d4:b1:c5:12:e7:23:90:2e:b1:67:59:ce:e6:a8:f1:
         7b:1e:e0:54:b7:f6:f6:c7:91:3e:4b:50:ac:4c:53:dd:0c:2a:
         b0:68:2d:b6:14:f3:33:73:a6:eb:a7:3c:03:8b:cc:af:d5:d5:
         cb:cf:9e:5c:d0:1f:77:b0:4b:cc:26:38:24:d6:d7:09:c1:cc:
         46:3a:b9:e6:e2:d4:8c:a5:e6:5b:78:df:94:1b:b9:b9:e7:6b:
         93:3b:bb:51:ea:50:b6:ba:d0:d6:68:37:6e:a9:1e:a5:12:6d:
         75:3d:d9:43:e4:06:7d:2b:dd:65:19:4b:b3:09:6f:73:aa:bd:
         40:64:5a:16:2e:61:ac:d7:96:b5:d5:42:0c:b0:29:cd:1d:cd:
         7c:28:bf:b7:d2:2e:7b:67:73:ad:a3:e7:4e:ad:00:1a:5a:4a:
         8a:00:8a:40:fd:a8:1a:3a:c5:8f:84:67:39:65:8a:44:7b:c9:
         60:5d:db:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 31 10:27:46 2025 by rpki-client