This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/9fcccf-e7aa-4c44-9590-1cf0feaaa3ea/1/PwKJr_qvCA4lJxjj9Eidop2fpVo.mft
File:                     PwKJr_qvCA4lJxjj9Eidop2fpVo.mft (raw, json)
Hash identifier:          +uy7TPp2zjBD8VUglF93fkeJqWIcFOeJ2Hpk6QP62aI=
Subject key identifier:   0D:F6:DE:EF:31:42:68:A9:3C:28:2D:E5:92:8E:70:35:AD:67:AA:AA
Authority key identifier: 3F:02:89:AF:FA:AF:08:0E:25:27:18:E3:F4:48:9D:A2:9D:9F:A5:5A
Certificate issuer:       /CN=3f0289affaaf080e252718e3f4489da29d9fa55a
Certificate serial:       019AF19AD53A1C25A7B33BDFDBDEB94AB0DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PwKJr_qvCA4lJxjj9Eidop2fpVo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/9fcccf-e7aa-4c44-9590-1cf0feaaa3ea/1/PwKJr_qvCA4lJxjj9Eidop2fpVo.mft
Manifest number:          1762
Signing time:             Sat 06 Dec 2025 03:00:47 +0000
Manifest this update:     Sat 06 Dec 2025 03:00:47 +0000
Manifest next update:     Sun 07 Dec 2025 03:00:47 +0000
Files and hashes:         1: 4vBZmgBMnVCe-FhubPi7IwTZR7U.roa (hash: pC9viwrfXhDTa2hNSC3okPZXSzJEUX3jBZCttoAMuYA=)
                          2: PwKJr_qvCA4lJxjj9Eidop2fpVo.crl (hash: EQn3p8GarSWzevelx2NbrsXuJisMKeMJoNf77VelvBw=)
                          3: liO3Dk9HW5maOXYINfx-lTJgFC0.roa (hash: q4LEiFG0iKJd0o8pxD+sRsl85pA8hcAalAJZcMAOiLU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/9fcccf-e7aa-4c44-9590-1cf0feaaa3ea/1/PwKJr_qvCA4lJxjj9Eidop2fpVo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/9fcccf-e7aa-4c44-9590-1cf0feaaa3ea/1/PwKJr_qvCA4lJxjj9Eidop2fpVo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PwKJr_qvCA4lJxjj9Eidop2fpVo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 03:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:9a:d5:3a:1c:25:a7:b3:3b:df:db:de:b9:4a:b0:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f0289affaaf080e252718e3f4489da29d9fa55a
        Validity
            Not Before: Dec  6 03:00:47 2025 GMT
            Not After : Dec  7 03:00:47 2025 GMT
        Subject: CN=0df6deef314268a93c282de5928e7035ad67aaaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:cf:4d:be:ce:1b:b5:03:97:b2:c3:0c:21:8c:
                    e9:94:77:de:1c:f2:9b:22:f6:f0:d0:f5:0f:bf:85:
                    88:db:bc:91:8d:05:69:c9:62:71:0a:1c:99:a6:9b:
                    98:8f:d9:5f:8a:6e:d6:d4:48:c4:fc:00:2c:21:4e:
                    51:65:93:26:44:e1:22:a1:fe:c6:f4:ca:f9:34:a2:
                    6d:9b:62:e0:54:12:f3:39:0b:b8:5e:1f:a0:be:fc:
                    b0:b9:3f:95:40:f9:ed:db:fa:24:74:59:ec:ee:7f:
                    fa:11:6d:95:f8:87:2d:03:cc:bb:14:e9:ce:92:f9:
                    a8:07:2e:b5:e5:5d:d9:fb:30:c4:7c:d4:fe:9d:f0:
                    3b:24:18:e7:b2:67:e2:f2:c2:a8:92:8a:e3:32:78:
                    d8:16:33:d2:8b:96:11:98:6a:4a:72:8e:e7:94:66:
                    0b:61:77:b6:9f:53:f5:b7:54:bb:ae:0f:89:ca:0b:
                    30:73:88:ba:27:d2:75:ab:c5:7b:d5:02:b0:e7:f8:
                    2b:f9:18:7e:60:91:ee:18:e9:6c:94:3c:6f:54:44:
                    70:10:5b:db:48:82:16:0c:21:e3:34:ca:c6:d6:b6:
                    4b:48:76:be:77:69:7a:6d:50:18:05:8a:f9:61:7b:
                    06:68:07:55:a4:f6:01:6f:fc:17:70:e8:4b:59:cd:
                    f7:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:F6:DE:EF:31:42:68:A9:3C:28:2D:E5:92:8E:70:35:AD:67:AA:AA
            X509v3 Authority Key Identifier:
                keyid:3F:02:89:AF:FA:AF:08:0E:25:27:18:E3:F4:48:9D:A2:9D:9F:A5:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PwKJr_qvCA4lJxjj9Eidop2fpVo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/9fcccf-e7aa-4c44-9590-1cf0feaaa3ea/1/PwKJr_qvCA4lJxjj9Eidop2fpVo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/9fcccf-e7aa-4c44-9590-1cf0feaaa3ea/1/PwKJr_qvCA4lJxjj9Eidop2fpVo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:6e:2f:0b:32:df:44:d0:19:06:ad:c8:49:31:20:7e:28:ea:
         12:24:34:90:02:77:82:d0:3b:38:1b:5c:9b:94:21:ac:df:d1:
         83:a7:7f:2b:c4:3e:29:9c:78:b8:bd:3c:92:71:7e:36:3e:ec:
         75:b7:53:27:12:db:e6:7d:76:cb:24:ce:c1:c8:34:3f:7f:34:
         a8:ad:a9:3d:7f:81:35:46:6f:25:ce:72:7a:ac:ff:7e:9a:0f:
         a4:5a:2c:68:f8:a9:2f:d3:37:28:01:c8:b2:33:5d:e5:47:a1:
         46:77:b5:13:16:c1:6a:65:fc:fb:b7:31:f5:f0:2c:50:9b:30:
         68:96:f4:3b:52:4b:0a:73:57:87:55:58:ef:55:d7:58:58:59:
         c4:9d:c8:8d:ce:d9:2f:6e:fe:78:ba:f2:36:7d:5e:51:65:1c:
         90:e2:4a:33:29:de:5d:a0:28:29:43:02:f8:2a:70:e6:60:53:
         af:1c:0e:0d:f7:ba:8b:56:7f:c7:6a:11:ac:ec:1f:d2:cd:af:
         a7:fe:22:d9:86:81:30:3a:ad:a8:6f:44:27:a7:ce:17:79:8a:
         c3:a6:fa:0a:da:cf:8f:50:12:c1:38:da:ce:c0:4c:a7:f7:99:
         b8:45:de:70:6d:22:ac:7c:45:10:60:d8:f8:81:45:ef:af:f7:
         31:33:5c:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:16:03 2025 by rpki-client