This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/dbf104-1e2c-42e8-b28b-ebd3145422ea/1/ReKp-3dwEClvm44hXuDbRGcXTS0.mft
File:                     ReKp-3dwEClvm44hXuDbRGcXTS0.mft (raw, json)
Hash identifier:          /AhgXkhoXZp2PzTBe+SXPr/JU7eG2gpEYt123JJG1q0=
Subject key identifier:   06:07:97:E4:E8:11:C8:82:71:C4:9D:08:EB:74:B0:11:C4:10:D8:98
Authority key identifier: 45:E2:A9:FB:77:70:10:29:6F:9B:8E:21:5E:E0:DB:44:67:17:4D:2D
Certificate issuer:       /CN=45e2a9fb777010296f9b8e215ee0db4467174d2d
Certificate serial:       019B269B38789FCF1D7E7B548E3513626F60
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ReKp-3dwEClvm44hXuDbRGcXTS0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/dbf104-1e2c-42e8-b28b-ebd3145422ea/1/ReKp-3dwEClvm44hXuDbRGcXTS0.mft
Manifest number:          177E
Signing time:             Tue 16 Dec 2025 10:01:05 +0000
Manifest this update:     Tue 16 Dec 2025 10:01:05 +0000
Manifest next update:     Wed 17 Dec 2025 10:01:05 +0000
Files and hashes:         1: Da5ukIODRFZkZgl7acW52LzBL34.roa (hash: 2S0h0c/tsGIJ57Pr+A8pwZxQY2/WXek+xC9ZKTvhbzU=)
                          2: ReKp-3dwEClvm44hXuDbRGcXTS0.crl (hash: cN5vOHvUyY6U3/5N6d4fAaZ0omXThdpWunNl8wjagfg=)
                          3: Z45rQavEcQTf3vGUVM_AgWAXCn4.roa (hash: q7JvLSO411WbeIPtlyaZvnsbtnUZIYteyAyCawxKvzU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/dbf104-1e2c-42e8-b28b-ebd3145422ea/1/ReKp-3dwEClvm44hXuDbRGcXTS0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/dbf104-1e2c-42e8-b28b-ebd3145422ea/1/ReKp-3dwEClvm44hXuDbRGcXTS0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ReKp-3dwEClvm44hXuDbRGcXTS0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 17 Dec 2025 10:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:26:9b:38:78:9f:cf:1d:7e:7b:54:8e:35:13:62:6f:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45e2a9fb777010296f9b8e215ee0db4467174d2d
        Validity
            Not Before: Dec 16 10:01:05 2025 GMT
            Not After : Dec 17 10:01:05 2025 GMT
        Subject: CN=060797e4e811c88271c49d08eb74b011c410d898
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:79:32:e1:b2:1e:c5:4d:d4:28:72:72:dc:a1:
                    6e:01:27:eb:9f:10:9a:86:94:ce:15:45:99:c6:bf:
                    81:06:33:c5:b5:63:75:b3:96:ef:83:10:f9:a5:5e:
                    8b:4b:37:ba:d4:d6:7c:2f:9e:25:ac:53:2e:88:3a:
                    f7:d5:a7:7b:13:bb:88:ec:07:8c:88:9d:dd:b0:8b:
                    95:2b:27:78:67:05:85:36:da:e0:60:7b:7e:6d:08:
                    ec:10:9f:ce:d7:26:48:bb:f0:bd:8d:e0:7c:bf:86:
                    31:ea:f0:42:37:9b:35:9f:83:25:57:bf:b2:3a:95:
                    6b:a1:84:be:21:11:b1:ec:f9:df:29:0e:bf:21:22:
                    d1:14:5e:04:0b:1e:9c:c8:15:ed:9d:c1:04:41:67:
                    a4:54:76:9e:3c:1e:68:03:ac:b0:b5:f0:2d:39:60:
                    56:1b:79:96:29:3d:17:9c:50:6b:ad:13:52:57:f1:
                    5e:a8:a8:f6:a2:9d:23:40:17:bb:a6:2a:38:4e:89:
                    60:ba:21:e1:4b:a9:60:fc:82:8f:70:30:d4:1f:68:
                    78:f3:eb:a4:ff:0c:a8:3d:06:17:53:18:0c:bd:1f:
                    6a:2c:7b:93:f2:d2:b6:45:ba:a6:56:e7:42:0c:8c:
                    4a:88:77:76:23:c1:4e:ef:0c:c0:24:99:ba:53:2a:
                    fb:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:07:97:E4:E8:11:C8:82:71:C4:9D:08:EB:74:B0:11:C4:10:D8:98
            X509v3 Authority Key Identifier:
                keyid:45:E2:A9:FB:77:70:10:29:6F:9B:8E:21:5E:E0:DB:44:67:17:4D:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ReKp-3dwEClvm44hXuDbRGcXTS0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/dbf104-1e2c-42e8-b28b-ebd3145422ea/1/ReKp-3dwEClvm44hXuDbRGcXTS0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/dbf104-1e2c-42e8-b28b-ebd3145422ea/1/ReKp-3dwEClvm44hXuDbRGcXTS0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:71:1c:59:62:c4:ee:9f:28:81:22:94:d6:95:7b:1d:5a:74:
         6f:52:9d:c6:4a:2a:33:6f:5e:96:bc:56:80:9f:2a:c2:4b:49:
         c0:6e:a8:d1:56:10:71:b0:d7:7f:7a:f7:22:cc:40:40:fb:bb:
         15:02:ce:85:5e:2f:8a:c2:5f:ed:4a:1f:fa:ee:74:f0:d1:9d:
         34:30:63:eb:dc:88:d6:c7:fe:41:87:ea:45:0c:4c:3b:e4:25:
         0a:0c:f9:06:88:34:4e:58:70:4b:ad:e7:1c:e3:2b:96:5b:57:
         8d:44:3c:ea:3d:34:76:b7:0e:b3:a8:66:a2:75:6b:f7:52:8d:
         2d:fe:b2:5d:0e:ad:dd:c8:c0:87:b3:95:b2:cf:f9:49:66:34:
         13:52:b8:9c:e6:a9:6b:3f:ee:00:de:e6:43:f4:29:f1:52:05:
         a2:27:9b:7a:cb:91:0c:e7:52:9b:55:92:19:c0:c0:f7:55:a9:
         f7:46:37:f3:88:79:b5:e6:65:73:2d:de:48:f1:51:52:56:2f:
         4b:99:dd:f4:a3:5d:a9:33:b5:05:9b:78:1e:bd:b0:e0:26:54:
         99:cd:5b:2f:7e:55:90:03:26:65:51:76:bb:b1:37:55:80:34:
         90:90:06:1f:18:1a:26:31:c2:80:ba:74:cb:ce:46:50:97:49:
         e2:06:43:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 19:15:25 2025 by rpki-client