This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/672629-a0e2-476f-aead-ee380b82cfca/1/HASEi_73JOJqvtPGXk6PlQj7F5Y.mft
File:                     HASEi_73JOJqvtPGXk6PlQj7F5Y.mft (raw, json)
Hash identifier:          Jot13cdbNCYnGhfG+jSejuKGnnvqwtEYSmZq1toWW7E=
Subject key identifier:   46:9D:49:8E:5B:E5:DB:D4:5F:3F:38:8B:D7:70:F4:B1:95:D9:A8:1F
Authority key identifier: 1C:04:84:8B:FE:F7:24:E2:6A:BE:D3:C6:5E:4E:8F:95:08:FB:17:96
Certificate issuer:       /CN=1c04848bfef724e26abed3c65e4e8f9508fb1796
Certificate serial:       019AF5E677EFA8E870975F4ADBF98ABDC250
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HASEi_73JOJqvtPGXk6PlQj7F5Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/672629-a0e2-476f-aead-ee380b82cfca/1/HASEi_73JOJqvtPGXk6PlQj7F5Y.mft
Manifest number:          1288
Signing time:             Sat 06 Dec 2025 23:01:53 +0000
Manifest this update:     Sat 06 Dec 2025 23:01:53 +0000
Manifest next update:     Sun 07 Dec 2025 23:01:53 +0000
Files and hashes:         1: HASEi_73JOJqvtPGXk6PlQj7F5Y.crl (hash: 3nDiOfaT7sH7k75JVRRi6tH2z/SaOxxcUUoeIVm7hx8=)
                          2: Hwa64s5gh2ljZYzswq1MygUDPHc.roa (hash: 0SMaVRBltPWPlJCAMP0PbN6yDjOR3rc4e6/DOO/swOM=)
                          3: SGwhn__bVbPsccKspAWva0mlWKE.roa (hash: 7jfyjyJCW+XQBhQgGW4lFXSavEUqWujd+R1L9MnkSV4=)
                          4: bVV-LmRxrJACwIt_3H5Y-KZM4tk.roa (hash: YG03EdxheWfNj9nAWSYO4FwqQuG3FqjegdG/4SAUoRw=)
                          5: tDDvO4ewPeixYnF0BIHSLyjo8w4.roa (hash: 2D9w4MUI/GtrAMc5KswKAPRyDxDgFgv99Z5MGOrURSw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/672629-a0e2-476f-aead-ee380b82cfca/1/HASEi_73JOJqvtPGXk6PlQj7F5Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/672629-a0e2-476f-aead-ee380b82cfca/1/HASEi_73JOJqvtPGXk6PlQj7F5Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HASEi_73JOJqvtPGXk6PlQj7F5Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:29:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f5:e6:77:ef:a8:e8:70:97:5f:4a:db:f9:8a:bd:c2:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c04848bfef724e26abed3c65e4e8f9508fb1796
        Validity
            Not Before: Dec  6 23:01:53 2025 GMT
            Not After : Dec  7 23:01:53 2025 GMT
        Subject: CN=469d498e5be5dbd45f3f388bd770f4b195d9a81f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:47:bd:89:10:88:ac:29:1c:d6:b4:56:0d:59:
                    9a:63:37:47:3a:00:58:40:25:5a:6c:22:27:06:4e:
                    b3:8f:48:3e:d2:8a:39:9d:2d:38:89:8c:6d:47:f7:
                    62:d5:96:35:0c:fc:98:fd:a4:ad:2e:9a:05:d7:98:
                    1b:b3:71:29:27:3c:1b:28:59:04:78:ef:b2:98:b8:
                    e9:f7:5d:2b:4b:4b:7a:d3:a9:2c:04:0d:fd:34:79:
                    93:73:34:8d:39:96:e2:8c:fe:4f:87:e8:15:be:ee:
                    8c:52:f0:2f:05:92:1d:c8:0a:2b:94:74:06:5a:4e:
                    b9:58:79:9e:00:52:2c:5d:8b:40:15:51:e8:22:70:
                    00:70:0f:7f:b2:27:4e:f0:d2:85:c0:39:e0:2c:07:
                    97:6b:f0:33:19:3d:84:d3:d7:5f:b6:89:e9:fd:1e:
                    c5:5c:79:7c:c9:d2:d8:7d:41:fe:b5:70:18:6f:7b:
                    1d:e7:e3:7c:d8:22:ed:67:6c:16:21:48:53:7f:bb:
                    ee:12:be:2c:c5:7c:95:3c:9c:8f:a2:de:98:50:dd:
                    de:b5:53:b9:27:f6:a3:5d:dd:a5:8f:88:22:0e:fa:
                    40:b9:90:fe:a7:01:41:04:60:f6:64:bd:3f:d1:42:
                    22:ce:50:10:38:c9:93:b4:da:8c:6d:76:ce:12:c1:
                    ab:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:9D:49:8E:5B:E5:DB:D4:5F:3F:38:8B:D7:70:F4:B1:95:D9:A8:1F
            X509v3 Authority Key Identifier:
                keyid:1C:04:84:8B:FE:F7:24:E2:6A:BE:D3:C6:5E:4E:8F:95:08:FB:17:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HASEi_73JOJqvtPGXk6PlQj7F5Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/672629-a0e2-476f-aead-ee380b82cfca/1/HASEi_73JOJqvtPGXk6PlQj7F5Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/672629-a0e2-476f-aead-ee380b82cfca/1/HASEi_73JOJqvtPGXk6PlQj7F5Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:bf:72:93:6c:95:ad:15:c9:5b:3d:1d:38:d1:bb:92:9d:18:
         6a:9b:b5:45:b8:0f:dd:d7:88:30:ed:ae:5e:b5:0c:8d:80:91:
         d1:1b:31:ca:f8:20:9b:e6:15:f2:3b:b1:b5:e0:1a:99:3d:60:
         17:b1:7f:cb:0f:d2:7c:5b:2b:7b:49:8e:74:2e:63:29:f7:f1:
         75:23:92:6b:ca:0c:ff:61:31:14:ba:f6:a7:4f:81:b5:4f:01:
         36:98:5d:40:da:69:6a:8e:a8:c1:eb:05:8b:08:8f:f7:f2:59:
         29:93:ff:fe:35:be:7d:df:21:70:cc:45:98:70:86:a6:3e:f7:
         46:80:30:82:6f:98:e0:78:22:9f:05:39:3e:54:4d:f7:88:40:
         a3:bb:83:53:d5:69:fd:6d:a5:29:4f:73:c0:79:ff:d0:1f:d9:
         10:dd:d6:fa:9f:b4:54:71:db:91:6d:c2:40:42:22:cb:9d:d3:
         e6:6c:ea:f0:ed:d7:71:96:f2:2c:5b:27:a9:dd:f3:8e:a4:0d:
         4d:ca:e3:73:1f:ef:1c:b1:e4:0c:a5:28:fe:85:27:35:72:51:
         98:5a:b0:97:7e:55:79:8b:18:fc:76:70:92:c2:68:32:59:88:
         21:14:77:13:f0:c8:29:d1:f4:d7:77:2e:e7:4d:81:b1:f2:58:
         a6:4f:ff:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 06:03:37 2025 by rpki-client