This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/33d71a-9350-4345-b6b8-a83d6c3cf053/1/pjxtuvK89S8n5YwticbBxVuV3yY.mft
File:                     pjxtuvK89S8n5YwticbBxVuV3yY.mft (raw, json)
Hash identifier:          qSmk/dGQuwYCuZvrWDnm/jVgzGLb66pm/hnWOcMRN6M=
Subject key identifier:   5E:79:A4:8A:CC:36:76:F2:18:D1:EB:31:6C:65:15:94:CB:F0:FC:D0
Authority key identifier: A6:3C:6D:BA:F2:BC:F5:2F:27:E5:8C:2D:89:C6:C1:C5:5B:95:DF:26
Certificate issuer:       /CN=a63c6dbaf2bcf52f27e58c2d89c6c1c55b95df26
Certificate serial:       019AF27733405AA7E21BA2711CF30AE44646
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pjxtuvK89S8n5YwticbBxVuV3yY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/33d71a-9350-4345-b6b8-a83d6c3cf053/1/pjxtuvK89S8n5YwticbBxVuV3yY.mft
Manifest number:          09D9
Signing time:             Sat 06 Dec 2025 07:01:29 +0000
Manifest this update:     Sat 06 Dec 2025 07:01:29 +0000
Manifest next update:     Sun 07 Dec 2025 07:01:29 +0000
Files and hashes:         1: NANvvd_V7iIUj7mJYMTOqque3Po.roa (hash: z7IZKlxruCsipOwPt42pcffU0s1l9uB/ojQdv9l2AxM=)
                          2: pjxtuvK89S8n5YwticbBxVuV3yY.crl (hash: IOCTZruM1kGNF6QFGZGF47ygwBoZkv2kb7GhCGPV1Bk=)
                          3: yG3GRDnYBo69OMDgoi6l30IqdQQ.roa (hash: s36xnlN956H1thb9LXHw6o5GvT+TFLxm0zFqGU00y/k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/33d71a-9350-4345-b6b8-a83d6c3cf053/1/pjxtuvK89S8n5YwticbBxVuV3yY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/33d71a-9350-4345-b6b8-a83d6c3cf053/1/pjxtuvK89S8n5YwticbBxVuV3yY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pjxtuvK89S8n5YwticbBxVuV3yY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 07:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:77:33:40:5a:a7:e2:1b:a2:71:1c:f3:0a:e4:46:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a63c6dbaf2bcf52f27e58c2d89c6c1c55b95df26
        Validity
            Not Before: Dec  6 07:01:29 2025 GMT
            Not After : Dec  7 07:01:29 2025 GMT
        Subject: CN=5e79a48acc3676f218d1eb316c651594cbf0fcd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:60:18:06:ac:93:2b:1e:ac:fc:f6:aa:bb:0a:
                    1f:c8:dc:04:0a:be:dc:97:c3:69:fc:cf:a2:7c:92:
                    14:61:5a:85:ed:46:de:61:56:5b:ae:9f:a6:b0:54:
                    0b:4f:90:25:3f:c6:87:6b:4d:cb:23:9b:aa:7f:e4:
                    34:3b:47:61:1e:65:6a:18:2e:23:51:46:13:79:89:
                    0f:e6:75:0d:89:01:78:fa:a3:84:4c:d8:18:93:d2:
                    32:0b:5e:1c:03:f0:6e:e2:20:12:fb:8d:97:f5:45:
                    5c:11:c8:e3:b1:ad:49:04:ca:85:0b:ea:08:30:27:
                    a1:43:dd:ff:18:9a:8b:b7:87:75:67:b5:66:a6:4b:
                    17:60:c7:90:09:7d:49:72:b9:92:49:5a:6e:11:22:
                    a4:33:47:f7:5b:53:83:f5:ca:5d:47:b8:0f:85:60:
                    20:4f:da:45:92:25:76:af:95:f6:cf:12:9b:45:b9:
                    2d:8a:e2:61:83:ea:7a:7e:c2:bb:ce:7f:e3:48:48:
                    d5:dd:ed:bc:52:53:3d:9f:bd:24:3e:01:42:09:c3:
                    30:04:bb:19:3a:35:28:a8:15:e9:83:10:37:29:1d:
                    45:ec:67:f5:20:ac:51:da:76:44:a8:70:1b:08:85:
                    23:f6:fb:32:d5:3f:ec:a9:04:ad:0e:1c:75:07:2a:
                    e2:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:79:A4:8A:CC:36:76:F2:18:D1:EB:31:6C:65:15:94:CB:F0:FC:D0
            X509v3 Authority Key Identifier:
                keyid:A6:3C:6D:BA:F2:BC:F5:2F:27:E5:8C:2D:89:C6:C1:C5:5B:95:DF:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pjxtuvK89S8n5YwticbBxVuV3yY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/33d71a-9350-4345-b6b8-a83d6c3cf053/1/pjxtuvK89S8n5YwticbBxVuV3yY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/33d71a-9350-4345-b6b8-a83d6c3cf053/1/pjxtuvK89S8n5YwticbBxVuV3yY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:a7:3d:20:8e:80:21:b6:25:71:d4:a2:44:70:ac:d5:1b:88:
         68:96:cd:e3:9f:dd:b9:bf:6f:d5:e8:a9:05:d1:80:88:89:5e:
         f1:6b:97:8e:99:78:ba:8c:c0:4e:9a:cf:d1:b7:70:8e:b8:f0:
         da:da:00:3f:af:ce:fc:7a:30:55:57:bd:1d:55:26:97:c5:eb:
         9e:7e:68:b0:9c:d9:53:f6:5c:4e:14:eb:3e:43:3f:fc:d4:f4:
         d8:f6:ae:34:30:01:45:b6:2e:d6:b9:9e:30:b7:0a:40:6c:33:
         4e:df:e7:65:e1:ac:af:ad:2d:a9:52:aa:c1:47:1b:62:1d:42:
         8a:25:b6:e8:bf:0b:e2:f1:a1:46:63:c8:32:73:b6:13:82:f9:
         31:c7:d4:49:dd:52:cb:06:7e:e7:85:2d:4a:1d:c6:58:47:03:
         a3:96:70:75:1e:fc:15:59:ee:71:35:3c:2c:f7:d7:c6:ce:5d:
         f8:46:44:f6:6f:30:b6:09:97:47:01:69:6a:7f:06:93:33:c5:
         20:73:19:17:13:79:6b:42:ef:6a:3b:56:86:6d:86:09:03:e8:
         bd:8d:a6:69:f9:a1:23:54:46:9a:9b:a5:98:ec:01:1a:ce:b8:
         00:ac:c5:63:dc:54:06:2a:b3:1d:80:a5:7a:17:03:d5:01:87:
         00:3c:1e:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:32:23 2025 by rpki-client