This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/672629-a0e2-476f-aead-ee380b82cfca/1/HASEi_73JOJqvtPGXk6PlQj7F5Y.mft
File:                     HASEi_73JOJqvtPGXk6PlQj7F5Y.mft (raw, json)
Hash identifier:          UT2wW0S8JxCgEfaBWvfCs3dHpeYh1IYDzJOVpP3L9nI=
Subject key identifier:   25:63:13:CB:FA:9D:AE:34:AB:35:17:07:58:E4:6E:28:15:31:F9:CA
Authority key identifier: 1C:04:84:8B:FE:F7:24:E2:6A:BE:D3:C6:5E:4E:8F:95:08:FB:17:96
Certificate issuer:       /CN=1c04848bfef724e26abed3c65e4e8f9508fb1796
Certificate serial:       019B43249C46AF07133B15FEC161FD5946A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HASEi_73JOJqvtPGXk6PlQj7F5Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/672629-a0e2-476f-aead-ee380b82cfca/1/HASEi_73JOJqvtPGXk6PlQj7F5Y.mft
Manifest number:          12B0
Signing time:             Sun 21 Dec 2025 23:00:31 +0000
Manifest this update:     Sun 21 Dec 2025 23:00:31 +0000
Manifest next update:     Mon 22 Dec 2025 23:00:31 +0000
Files and hashes:         1: HASEi_73JOJqvtPGXk6PlQj7F5Y.crl (hash: +lY98Mgs5jYZ9nr5lzcHukb2yyeg+o/piqxt94cY2UI=)
                          2: Hwa64s5gh2ljZYzswq1MygUDPHc.roa (hash: 0SMaVRBltPWPlJCAMP0PbN6yDjOR3rc4e6/DOO/swOM=)
                          3: SGwhn__bVbPsccKspAWva0mlWKE.roa (hash: 7jfyjyJCW+XQBhQgGW4lFXSavEUqWujd+R1L9MnkSV4=)
                          4: bVV-LmRxrJACwIt_3H5Y-KZM4tk.roa (hash: YG03EdxheWfNj9nAWSYO4FwqQuG3FqjegdG/4SAUoRw=)
                          5: tDDvO4ewPeixYnF0BIHSLyjo8w4.roa (hash: 2D9w4MUI/GtrAMc5KswKAPRyDxDgFgv99Z5MGOrURSw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/672629-a0e2-476f-aead-ee380b82cfca/1/HASEi_73JOJqvtPGXk6PlQj7F5Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/672629-a0e2-476f-aead-ee380b82cfca/1/HASEi_73JOJqvtPGXk6PlQj7F5Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HASEi_73JOJqvtPGXk6PlQj7F5Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 22 Dec 2025 22:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:43:24:9c:46:af:07:13:3b:15:fe:c1:61:fd:59:46:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c04848bfef724e26abed3c65e4e8f9508fb1796
        Validity
            Not Before: Dec 21 23:00:31 2025 GMT
            Not After : Dec 22 23:00:31 2025 GMT
        Subject: CN=256313cbfa9dae34ab35170758e46e281531f9ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:86:c9:6f:4a:65:24:d7:cc:2a:87:0f:34:8b:
                    90:f3:d6:7b:9d:84:63:d9:b7:97:2e:2e:93:68:82:
                    bc:2c:7d:69:01:8c:f5:b2:10:c2:e1:38:e6:91:29:
                    70:85:c2:e1:93:e2:cb:14:80:c7:e8:ef:5f:64:53:
                    d7:52:63:92:5c:df:76:8f:c3:83:40:a4:37:ee:a1:
                    b3:1f:ca:2b:ea:69:82:84:2b:72:00:9e:a9:a2:8a:
                    4d:77:e3:d7:f8:26:c7:6c:19:2e:ad:f2:54:7b:01:
                    f0:f6:0d:6c:ed:5b:5c:1a:cf:78:64:73:cb:55:51:
                    42:3d:13:0d:76:62:ae:2e:2a:de:fc:b0:bb:b7:18:
                    fd:96:76:44:be:9c:22:f2:a7:a4:f2:b4:7b:05:ae:
                    e3:a5:82:b7:86:b7:64:a1:67:73:3f:3c:86:6e:01:
                    7b:d8:aa:2f:8a:36:4f:c9:c2:ea:71:53:b1:a6:a5:
                    80:c9:62:c4:8e:b6:b0:60:09:95:e7:6b:25:a4:a6:
                    1d:2c:34:d3:ac:03:c2:02:aa:14:70:00:26:60:fc:
                    4c:76:2c:e4:4a:1c:f7:df:d0:08:20:81:f5:08:36:
                    59:20:1b:38:dc:f0:73:33:3f:76:c9:c0:d9:97:3b:
                    a1:b0:f4:97:ae:a9:47:58:a6:fc:6f:03:18:60:a9:
                    5d:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:63:13:CB:FA:9D:AE:34:AB:35:17:07:58:E4:6E:28:15:31:F9:CA
            X509v3 Authority Key Identifier:
                keyid:1C:04:84:8B:FE:F7:24:E2:6A:BE:D3:C6:5E:4E:8F:95:08:FB:17:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HASEi_73JOJqvtPGXk6PlQj7F5Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/672629-a0e2-476f-aead-ee380b82cfca/1/HASEi_73JOJqvtPGXk6PlQj7F5Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/672629-a0e2-476f-aead-ee380b82cfca/1/HASEi_73JOJqvtPGXk6PlQj7F5Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:d7:fa:47:08:be:0a:a1:f4:88:1b:61:1c:67:6a:3c:85:e1:
         08:b4:0a:ae:6f:06:fe:c8:e7:e7:06:78:4c:92:0a:55:74:62:
         17:a0:2c:87:e2:c2:18:f7:4e:f4:43:37:e6:eb:09:74:7d:7a:
         2f:a1:e2:34:c4:1f:d7:6a:de:22:7a:2e:58:d0:b7:1a:ed:ea:
         e1:2e:5f:af:e6:12:27:22:af:f8:61:10:89:0a:08:b9:ac:27:
         b6:11:7a:e8:21:2f:ba:2a:fe:9a:c9:0e:4d:07:95:d2:8a:a1:
         27:75:e3:ce:3c:2b:9c:ef:1b:1e:f8:40:bd:74:99:2e:7c:00:
         ec:05:15:b0:ea:ac:e6:f6:03:54:4a:51:25:dc:fd:ed:b4:35:
         07:e7:44:b4:d6:38:5c:f6:f3:8f:88:51:78:d1:d6:ed:e4:ec:
         59:e1:1a:8f:04:d1:80:8a:27:07:e1:e0:7c:f8:de:56:19:fb:
         86:c5:cb:82:af:48:15:e7:ae:4d:67:66:71:85:db:91:01:cb:
         14:dc:96:a9:5e:51:e6:a0:2a:43:24:8e:12:bd:af:76:dd:50:
         13:3d:d2:6e:4d:1a:f0:7f:0c:41:89:16:17:f2:5c:11:7a:28:
         8e:6a:0f:c1:1a:61:9e:cd:00:77:81:e4:c6:a4:5e:5a:b0:b8:
         23:8f:d1:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZtDJJxGrwcTOxX+wWH9WUajMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjMDQ4NDhiZmVmNzI0ZTI2YWJlZDNjNjVlNGU4Zjk1MDhm
YjE3OTYwHhcNMjUxMjIxMjMwMDMxWhcNMjUxMjIyMjMwMDMxWjAzMTEwLwYDVQQD
EygyNTYzMTNjYmZhOWRhZTM0YWIzNTE3MDc1OGU0NmUyODE1MzFmOWNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqobJb0plJNfMKocPNIuQ89Z7nYRj
2beXLi6TaIK8LH1pAYz1shDC4TjmkSlwhcLhk+LLFIDH6O9fZFPXUmOSXN92j8OD
QKQ37qGzH8or6mmChCtyAJ6poopNd+PX+CbHbBkurfJUewHw9g1s7VtcGs94ZHPL
VVFCPRMNdmKuLire/LC7txj9lnZEvpwi8qek8rR7Ba7jpYK3hrdkoWdzPzyGbgF7
2KovijZPycLqcVOxpqWAyWLEjrawYAmV52slpKYdLDTTrAPCAqoUcAAmYPxMdizk
Shz339AIIIH1CDZZIBs43PBzMz92ycDZlzuhsPSXrqlHWKb8bwMYYKldtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCVjE8v6na40qzUXB1jkbigVMfnKMB8GA1UdIwQY
MBaAFBwEhIv+9yTiar7Txl5Oj5UI+xeWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEFTRWlfNzNKT0pxdnRQR1hrNlBsUWo3RjVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny82NzI2MjktYTBlMi00NzZmLWFlYWQt
ZWUzODBiODJjZmNhLzEvSEFTRWlfNzNKT0pxdnRQR1hrNlBsUWo3RjVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny82NzI2MjktYTBlMi00NzZmLWFlYWQtZWUzODBiODJjZmNh
LzEvSEFTRWlfNzNKT0pxdnRQR1hrNlBsUWo3RjVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM9f6Rwi+
CqH0iBthHGdqPIXhCLQKrm8G/sjn5wZ4TJIKVXRiF6Ash+LCGPdO9EM35usJdH16
L6HiNMQf12reInouWNC3Gu3q4S5fr+YSJyKv+GEQiQoIuawnthF66CEvuir+mskO
TQeV0oqhJ3XjzjwrnO8bHvhAvXSZLnwA7AUVsOqs5vYDVEpRJdz97bQ1B+dEtNY4
XPbzj4hReNHW7eTsWeEajwTRgIonB+HgfPjeVhn7hsXLgq9IFeeuTWdmcYXbkQHL
FNyWqV5R5qAqQySOEr2vdt1QEz3Sbk0a8H8MQYkWF/JcEXoojmoPwRphns0Ad4Hk
xqReWrC4I4/RkA==
-----END CERTIFICATE-----
Generated at Mon Dec 22 05:37:36 2025 by rpki-client