This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/672629-a0e2-476f-aead-ee380b82cfca/1/HASEi_73JOJqvtPGXk6PlQj7F5Y.mft
File:                     HASEi_73JOJqvtPGXk6PlQj7F5Y.mft (raw, json)
Hash identifier:          b8Mv69B5I0C+B7xtsCxbpdrGXXi7K6YyKvvOATwEGaY=
Subject key identifier:   96:FE:51:3A:46:53:0B:49:7C:AA:5F:8D:39:D1:7A:4A:63:EF:DD:82
Authority key identifier: 1C:04:84:8B:FE:F7:24:E2:6A:BE:D3:C6:5E:4E:8F:95:08:FB:17:96
Certificate issuer:       /CN=1c04848bfef724e26abed3c65e4e8f9508fb1796
Certificate serial:       019AF3F742CF1B5324E5387834D47DBEA008
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HASEi_73JOJqvtPGXk6PlQj7F5Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/672629-a0e2-476f-aead-ee380b82cfca/1/HASEi_73JOJqvtPGXk6PlQj7F5Y.mft
Manifest number:          1287
Signing time:             Sat 06 Dec 2025 14:00:59 +0000
Manifest this update:     Sat 06 Dec 2025 14:00:59 +0000
Manifest next update:     Sun 07 Dec 2025 14:00:59 +0000
Files and hashes:         1: HASEi_73JOJqvtPGXk6PlQj7F5Y.crl (hash: KjOzX3R4S/J91WjZ5unatr1DHenjMP5wrmnLbyXmf5I=)
                          2: Hwa64s5gh2ljZYzswq1MygUDPHc.roa (hash: 0SMaVRBltPWPlJCAMP0PbN6yDjOR3rc4e6/DOO/swOM=)
                          3: SGwhn__bVbPsccKspAWva0mlWKE.roa (hash: 7jfyjyJCW+XQBhQgGW4lFXSavEUqWujd+R1L9MnkSV4=)
                          4: bVV-LmRxrJACwIt_3H5Y-KZM4tk.roa (hash: YG03EdxheWfNj9nAWSYO4FwqQuG3FqjegdG/4SAUoRw=)
                          5: tDDvO4ewPeixYnF0BIHSLyjo8w4.roa (hash: 2D9w4MUI/GtrAMc5KswKAPRyDxDgFgv99Z5MGOrURSw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/672629-a0e2-476f-aead-ee380b82cfca/1/HASEi_73JOJqvtPGXk6PlQj7F5Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/672629-a0e2-476f-aead-ee380b82cfca/1/HASEi_73JOJqvtPGXk6PlQj7F5Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HASEi_73JOJqvtPGXk6PlQj7F5Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 13:09:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f3:f7:42:cf:1b:53:24:e5:38:78:34:d4:7d:be:a0:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c04848bfef724e26abed3c65e4e8f9508fb1796
        Validity
            Not Before: Dec  6 14:00:59 2025 GMT
            Not After : Dec  7 14:00:59 2025 GMT
        Subject: CN=96fe513a46530b497caa5f8d39d17a4a63efdd82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:cc:c0:10:f1:a9:65:0b:cc:e7:db:de:af:b7:
                    f3:97:76:6f:6d:17:99:fa:23:e8:3b:1e:2f:29:b6:
                    ce:4d:8a:bd:5b:5e:db:e3:63:68:e5:40:15:45:6d:
                    a3:e7:a3:cb:40:91:1a:4b:c0:a8:60:9c:19:37:0f:
                    22:2e:d3:b1:b6:c9:3a:c8:5e:6d:94:3e:7c:ce:9f:
                    5d:3c:be:11:bd:43:63:b8:0e:a3:3d:b2:51:1d:25:
                    98:a3:96:70:cd:1d:21:fa:f1:e0:24:df:d2:a6:75:
                    f4:c4:05:96:93:d4:c3:60:5c:3c:a3:db:53:ef:68:
                    43:e1:c7:51:c4:08:b8:ac:d1:a3:53:b5:8b:17:96:
                    b8:92:44:fa:03:ec:4b:71:bb:05:f3:a4:94:c6:76:
                    96:39:94:fa:b2:9f:ee:98:b8:61:29:36:cd:5b:96:
                    78:e4:29:11:8d:c7:2d:96:e2:56:f3:9e:82:45:5c:
                    a1:65:ad:e6:f7:64:73:d2:22:07:3f:cd:52:a2:8b:
                    72:14:b2:c2:3c:f1:8f:5b:98:e0:43:e4:61:4c:4e:
                    03:35:96:3a:51:e6:44:37:a8:57:ab:bc:ee:4a:99:
                    d6:9f:3f:67:60:80:27:6d:34:cb:ea:41:f6:22:fb:
                    83:14:1f:50:f0:76:a1:a3:16:15:cc:05:a8:3c:60:
                    c4:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:FE:51:3A:46:53:0B:49:7C:AA:5F:8D:39:D1:7A:4A:63:EF:DD:82
            X509v3 Authority Key Identifier:
                keyid:1C:04:84:8B:FE:F7:24:E2:6A:BE:D3:C6:5E:4E:8F:95:08:FB:17:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HASEi_73JOJqvtPGXk6PlQj7F5Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/672629-a0e2-476f-aead-ee380b82cfca/1/HASEi_73JOJqvtPGXk6PlQj7F5Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/672629-a0e2-476f-aead-ee380b82cfca/1/HASEi_73JOJqvtPGXk6PlQj7F5Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:90:16:26:2f:db:c3:6a:2a:44:6d:6a:94:ea:67:d4:ef:75:
         5a:4e:95:85:20:dc:2c:fe:24:54:5b:37:7c:a1:e4:b1:05:6f:
         f8:a2:08:37:50:2d:86:00:7d:3c:9f:91:55:91:1d:25:ea:87:
         1d:b4:a4:5e:29:62:62:c4:e4:2d:42:56:d6:7c:3b:20:d7:17:
         90:e3:77:e8:af:fd:7e:c7:e4:03:70:05:15:61:c5:a2:a3:4f:
         f9:ad:c1:51:b9:f1:51:ae:57:57:4a:5a:d4:88:e4:32:8d:15:
         c8:4c:a2:8a:03:91:5d:7f:5d:c4:2c:a7:f0:fa:46:bf:f2:38:
         d5:66:36:8d:66:bd:ee:b3:6d:0b:99:12:d1:c1:67:55:af:07:
         87:69:e0:b4:39:ee:fb:f5:83:a7:eb:a8:ac:79:3f:93:f3:96:
         fa:80:18:5d:b4:0a:45:56:87:04:1c:63:62:95:ed:80:37:52:
         e5:12:aa:f2:36:01:69:c8:fb:d6:46:27:3b:b9:cf:9d:80:87:
         18:8d:0b:1d:2b:9c:81:07:a6:67:ca:6d:d7:41:d8:ed:94:e4:
         34:d0:39:f0:45:48:2f:62:7d:f2:5c:bc:ea:1e:e2:22:e3:dc:
         4d:be:4b:4a:95:fb:be:1f:4c:ab:3a:e4:07:e4:64:2c:ab:af:
         c2:47:21:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:06:38 2025 by rpki-client