This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.mft
File:                     Pudw9H_ZA5JdgKxY4F4HbzuqEQs.mft (raw, json)
Hash identifier:          kgrPZsiUH9JFJLgeoOD4VqxUEqr+8KmLAWBW+41NxP8=
Subject key identifier:   C0:00:1C:8F:70:9C:82:D7:27:A5:83:2D:3B:A2:5D:81:C5:07:3C:B2
Authority key identifier: 3E:E7:70:F4:7F:D9:03:92:5D:80:AC:58:E0:5E:07:6F:3B:AA:11:0B
Certificate issuer:       /CN=3ee770f47fd903925d80ac58e05e076f3baa110b
Certificate serial:       019AF3F7A2EF8CDE93728E8441C37E2AC678
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.mft
Manifest number:          1781
Signing time:             Sat 06 Dec 2025 14:01:23 +0000
Manifest this update:     Sat 06 Dec 2025 14:01:23 +0000
Manifest next update:     Sun 07 Dec 2025 14:01:23 +0000
Files and hashes:         1: 4M-N5xlv2y6s1CK-eYBew9cPD5o.roa (hash: HqqHwynkdmRe9dzstw9O0nGymglErcXW49QTo0giUNA=)
                          2: 5GDtzDxQGf1ytzR86OdYdVfgY10.roa (hash: Y7XPkUc6nkXQ9pggu+D76scK3gfgjCpno0IF9isJJaU=)
                          3: 8_VofHRjLqpbexG_OvMfcAc1YnM.roa (hash: LU1FpEuXnyVe9W4sDVOna2qpuw6a/LcZ+SoooZ+qS1I=)
                          4: 8qjrXxf9jtNr47FRVKRSz85TGS4.roa (hash: SsaCooTIDNTfCCpDTLMFLudJKmMFgJLb1xwsYYcdMzw=)
                          5: 8xy5rUcaiuIUBakSTQsgG3rSQVI.roa (hash: xa6+9/r3YYHcUx8lzSCbtlOFi79wzElE5PSXHJiDLnE=)
                          6: FLnErLvOpzZbsRT_gxw1xkGyG-k.roa (hash: hVcpYnUD1s1paKRtMc3s9Fba/ywgfiiofSMSn9fncl4=)
                          7: HIaBGvmxdnBLgd35agLSA4bkubM.roa (hash: i0iDI6axXMfE17qcVLg1zq6ssI2uwAR7lVjpfhI0sp0=)
                          8: KXfP7XKNaMn2JhuLJT9dpckmiyA.roa (hash: GS9b0UNjXL4SmRFzEHGDNFVlOx4BK3qOMQxT+UosqWQ=)
                          9: Pudw9H_ZA5JdgKxY4F4HbzuqEQs.crl (hash: F53z+9aKEtJNaLV5cTqEwObjPh+YHyEI4AUDsXrWGho=)
                          10: X2zPXDZDw062_b_HvXSPFiahZHE.roa (hash: HHiPpVTX6x6BIWaFkT1eYQ6ttHeAln3bmKcpARZzNPU=)
                          11: bkHQOuqvDDjiWoZ_FWNlw3OoyWg.roa (hash: 4pB5ThjluE6IXLoMqZ2xaF+3UW/apUpBTyNJgyK3/o0=)
                          12: dpiwVyP36v1YV2afir9h5xUMcuE.roa (hash: YrE4G5icZyg4bgdRocIY+JMcSadk1tZR0cVr4Ds0EB0=)
                          13: j17E10pt-sdCMvdAGXR5fww8P-c.roa (hash: imqf20HY+jakU4kZsIAxUjH8TtRUqSCubkaA6JMwuUY=)
                          14: jahgwortntlQHohzLAQ0tN4yHMw.roa (hash: awaLuIiyqPNJzkHQQmDP4aHVUxcrbbrVGi6oXMKNBUI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 13:09:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f3:f7:a2:ef:8c:de:93:72:8e:84:41:c3:7e:2a:c6:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ee770f47fd903925d80ac58e05e076f3baa110b
        Validity
            Not Before: Dec  6 14:01:23 2025 GMT
            Not After : Dec  7 14:01:23 2025 GMT
        Subject: CN=c0001c8f709c82d727a5832d3ba25d81c5073cb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:b8:9e:e0:c7:1c:3b:7f:33:62:27:a6:ab:fd:
                    a0:8f:5f:22:dd:a9:a2:9f:99:57:4e:35:71:7e:9a:
                    38:a8:20:dd:d0:9a:d5:e1:39:65:65:5b:8f:78:f7:
                    c6:85:c2:30:1e:69:21:96:89:6e:9e:9c:40:d3:1c:
                    d5:d7:4d:94:60:aa:2c:46:fe:63:cc:aa:ac:84:ed:
                    53:08:06:25:1b:67:e1:2e:56:5e:13:22:37:e1:f4:
                    3b:24:dd:1f:db:96:09:9a:8a:a3:38:55:1f:65:86:
                    39:b9:94:f0:92:2a:f7:95:81:ce:e3:32:a4:14:53:
                    65:61:08:c4:dc:e7:c1:c5:6b:90:34:e6:28:56:ff:
                    34:45:e9:ed:37:ad:17:cf:16:ab:32:a0:3d:03:19:
                    80:e0:46:73:cb:90:b9:5a:03:66:14:24:f2:8b:d3:
                    ef:fe:e9:5b:10:e1:88:b3:78:31:e3:1c:0e:45:3f:
                    a3:48:12:00:80:9e:e0:df:f4:af:a5:e7:db:1f:9b:
                    20:d6:d5:e8:5b:5b:e7:10:05:b3:51:53:07:86:4e:
                    12:e4:75:a4:ac:88:f7:0b:84:cd:54:76:76:f7:a6:
                    6c:24:8b:20:77:21:3a:69:1f:c9:32:50:57:76:37:
                    fe:6d:04:56:ae:46:ea:a2:a2:99:73:24:a1:a9:93:
                    41:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:00:1C:8F:70:9C:82:D7:27:A5:83:2D:3B:A2:5D:81:C5:07:3C:B2
            X509v3 Authority Key Identifier:
                keyid:3E:E7:70:F4:7F:D9:03:92:5D:80:AC:58:E0:5E:07:6F:3B:AA:11:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:5a:87:8a:37:30:a0:fc:f7:3a:ad:1d:c6:49:fe:5b:5e:5b:
         77:9b:89:1d:23:bb:c9:32:db:1d:fa:36:6b:0f:f9:b5:51:dd:
         e4:39:7d:74:8e:b3:2a:e8:65:ec:33:d5:3d:d6:24:77:bc:63:
         81:11:98:fd:dc:f4:01:64:04:54:98:f3:c3:bc:f8:1f:c1:d2:
         9f:ec:77:17:dc:c5:4f:94:23:70:8e:8a:fd:24:e3:e5:77:c6:
         4c:ef:5c:ab:8a:5a:e0:89:16:fc:d5:3a:04:ed:31:33:d3:69:
         8e:f0:c9:ae:8a:90:2c:6d:47:0c:03:d9:55:02:83:02:ba:a5:
         62:68:a1:68:c6:6e:0d:27:60:f3:1d:ed:7b:fc:6e:2f:bf:7f:
         47:ae:82:8f:f5:60:2b:df:72:8f:eb:8d:6b:46:77:16:38:31:
         60:bf:9d:13:90:8d:eb:88:80:66:30:94:fb:2f:60:a7:8b:a8:
         9c:ae:14:cb:e5:db:01:94:cb:be:30:56:15:b4:86:f3:81:5a:
         f8:ff:9b:11:fd:d3:1f:ae:3d:0d:fd:23:64:d4:c3:76:70:11:
         2c:ad:0c:87:fe:f6:13:ff:7c:fc:1e:48:28:9d:dc:25:a4:f3:
         78:0d:dd:df:86:b7:b7:b2:32:d2:d1:02:89:2e:d5:7f:09:47:
         25:cd:86:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:28:23 2025 by rpki-client