This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/608e21-6a40-4711-9c83-d024ad4b7beb/1/PjMt0plMbuiUNhWKLqwfSCkizSo.mft
File:                     PjMt0plMbuiUNhWKLqwfSCkizSo.mft (raw, json)
Hash identifier:          Wi59xZUPtcWUWlHcM2hi9kdIHLkHCNNubu+FSKS0OS4=
Subject key identifier:   5D:A4:DE:DB:69:5C:DA:B0:BB:FD:03:35:85:90:41:86:1E:36:54:D5
Authority key identifier: 3E:33:2D:D2:99:4C:6E:E8:94:36:15:8A:2E:AC:1F:48:29:22:CD:2A
Certificate issuer:       /CN=3e332dd2994c6ee89436158a2eac1f482922cd2a
Certificate serial:       019AF0BF852F2F9EA93F217F77354E52D22E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PjMt0plMbuiUNhWKLqwfSCkizSo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/608e21-6a40-4711-9c83-d024ad4b7beb/1/PjMt0plMbuiUNhWKLqwfSCkizSo.mft
Manifest number:          0878
Signing time:             Fri 05 Dec 2025 23:01:14 +0000
Manifest this update:     Fri 05 Dec 2025 23:01:14 +0000
Manifest next update:     Sat 06 Dec 2025 23:01:14 +0000
Files and hashes:         1: Eg6f3oV_tmh90tuvdcGS4z7md3o.roa (hash: +iCyWfpNRgku+keY+1TZvk0pjaW3ZowUvCSdJVvHiXs=)
                          2: PjMt0plMbuiUNhWKLqwfSCkizSo.crl (hash: /6e/+T5Dxuvt8ko/3/Yv2JR0nWlyuitW29+jCmC179E=)
                          3: hvAcV0p--qlqSvXjrIPln93SWWk.roa (hash: TjRxZCcsv470SMx3GoJIYlzXG8w9x5IPVw3HcGg4jOI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/608e21-6a40-4711-9c83-d024ad4b7beb/1/PjMt0plMbuiUNhWKLqwfSCkizSo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/608e21-6a40-4711-9c83-d024ad4b7beb/1/PjMt0plMbuiUNhWKLqwfSCkizSo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PjMt0plMbuiUNhWKLqwfSCkizSo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Dec 2025 23:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f0:bf:85:2f:2f:9e:a9:3f:21:7f:77:35:4e:52:d2:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e332dd2994c6ee89436158a2eac1f482922cd2a
        Validity
            Not Before: Dec  5 23:01:14 2025 GMT
            Not After : Dec  6 23:01:14 2025 GMT
        Subject: CN=5da4dedb695cdab0bbfd0335859041861e3654d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:89:d2:e3:0c:c0:bf:a6:5c:96:20:6d:90:23:
                    10:5b:fe:7f:e6:65:85:be:6f:37:92:10:1b:39:ab:
                    f1:44:4d:cf:6b:72:f2:77:7e:a8:7a:63:46:3e:a4:
                    21:4b:e5:3c:e5:1b:3d:63:93:8f:7b:d0:00:d5:18:
                    ad:c9:64:e6:a2:ac:e0:eb:cc:a4:8a:c7:96:0c:26:
                    ca:a2:ee:ab:e1:a1:97:0a:46:b3:1e:f9:94:03:d9:
                    c6:56:b7:83:e6:30:1a:a9:04:94:4a:5c:25:50:16:
                    3b:4c:5b:c6:12:a6:8c:da:e0:f2:df:5a:8c:0d:22:
                    06:27:c7:4b:4a:5c:e4:73:d5:d5:80:74:06:1d:62:
                    ff:3f:80:64:9c:fb:59:b1:c5:ef:0c:1e:13:69:ed:
                    c0:62:40:5e:e8:b2:16:49:5e:bb:a4:e2:e2:ee:8c:
                    19:8f:6b:24:b7:10:b0:f3:02:ff:f4:35:61:75:ca:
                    76:a6:e6:b2:cc:80:be:ef:1e:16:e9:03:69:55:f2:
                    16:b6:cd:82:8d:a1:d6:26:67:31:b3:7c:19:65:eb:
                    e3:9c:e7:e0:d9:51:5f:e4:f5:19:80:df:3b:15:8a:
                    e2:4a:05:88:70:8f:da:80:0f:61:6a:42:9c:8c:57:
                    b8:e1:df:74:26:7b:68:b3:91:6f:8a:32:39:27:0d:
                    6a:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:A4:DE:DB:69:5C:DA:B0:BB:FD:03:35:85:90:41:86:1E:36:54:D5
            X509v3 Authority Key Identifier:
                keyid:3E:33:2D:D2:99:4C:6E:E8:94:36:15:8A:2E:AC:1F:48:29:22:CD:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PjMt0plMbuiUNhWKLqwfSCkizSo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/608e21-6a40-4711-9c83-d024ad4b7beb/1/PjMt0plMbuiUNhWKLqwfSCkizSo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/608e21-6a40-4711-9c83-d024ad4b7beb/1/PjMt0plMbuiUNhWKLqwfSCkizSo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:31:2a:80:ae:07:2d:5f:0d:ee:52:14:29:0b:10:28:d8:18:
         36:d1:10:e1:4e:d1:d2:bd:9d:a7:ee:b7:2a:9c:40:ce:34:e9:
         c2:0b:d8:ea:c3:d7:2e:ad:54:f9:fd:ff:71:63:15:e0:18:a6:
         26:9c:43:54:6a:7b:ef:da:a9:aa:12:b3:3e:77:4d:01:ee:3b:
         84:b7:8e:6a:2b:c9:17:b6:ed:f0:80:86:10:b9:36:e4:44:40:
         51:41:ac:e0:8a:a7:38:0c:6c:ef:57:2b:2d:2c:1e:3e:fc:a3:
         0e:b1:d2:8e:17:d9:09:a2:80:6e:a0:36:5a:9d:1b:28:86:99:
         ba:79:05:60:a0:2a:8f:56:2b:51:b2:32:6d:ce:93:57:18:ab:
         92:45:e4:e2:2e:d5:56:e9:80:2b:1e:15:b2:95:23:20:18:5b:
         4a:8e:fb:41:d1:cc:c7:b1:59:43:c6:e8:b8:46:b0:85:12:d7:
         6d:e9:fc:03:0b:9c:9c:ec:55:5e:1c:83:38:fc:ee:fb:88:4b:
         64:75:91:24:4e:d5:97:7a:0c:2f:b1:25:39:2a:a2:fd:fb:ca:
         f3:7a:ed:78:15:97:5c:80:70:4c:44:b5:ae:7b:a2:32:49:9e:
         63:6b:3b:ce:de:35:ef:98:99:42:bd:fb:58:3c:66:db:d0:e3:
         99:5f:6b:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 06:57:04 2025 by rpki-client