This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/453199-6343-4c67-b87e-32eb3a4ead43/1/pcJJ62-mtduvarnes6d3juDrNIc.mft
File:                     pcJJ62-mtduvarnes6d3juDrNIc.mft (raw, json)
Hash identifier:          YT2+TN+/XLtHgqV7FptgtHPit3KxPvDivuaS+8V5hVk=
Subject key identifier:   C8:C4:AC:CE:09:40:12:49:04:DC:07:67:A8:2E:9A:E2:FC:C7:42:BD
Authority key identifier: A5:C2:49:EB:6F:A6:B5:DB:AF:6A:B9:DE:B3:A7:77:8E:E0:EB:34:87
Certificate issuer:       /CN=a5c249eb6fa6b5dbaf6ab9deb3a7778ee0eb3487
Certificate serial:       019B066D201826920C7C65E8D90C05A5E8B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pcJJ62-mtduvarnes6d3juDrNIc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/453199-6343-4c67-b87e-32eb3a4ead43/1/pcJJ62-mtduvarnes6d3juDrNIc.mft
Manifest number:          0703
Signing time:             Wed 10 Dec 2025 04:02:53 +0000
Manifest this update:     Wed 10 Dec 2025 04:02:53 +0000
Manifest next update:     Thu 11 Dec 2025 04:02:53 +0000
Files and hashes:         1: iI8Orlzgb6VVuw4zGceAk4Y_gdo.roa (hash: xavQWQ+h3Wh68WfrJKGu7Ge405dFSg9FX+cO3lDgnEY=)
                          2: pcJJ62-mtduvarnes6d3juDrNIc.crl (hash: /VpVdac5wfOPjkUQLWDVSV1/FMjZcwyALpfPlsFjK40=)
                          3: u9Sx8vquonuxfGSR4H7LLp3rbKI.roa (hash: 2NhtYGZCkznHHTIw/AAV97Orzomj5GZcOrYU4RhtX1Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/453199-6343-4c67-b87e-32eb3a4ead43/1/pcJJ62-mtduvarnes6d3juDrNIc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/453199-6343-4c67-b87e-32eb3a4ead43/1/pcJJ62-mtduvarnes6d3juDrNIc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pcJJ62-mtduvarnes6d3juDrNIc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 11 Dec 2025 04:02:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:06:6d:20:18:26:92:0c:7c:65:e8:d9:0c:05:a5:e8:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5c249eb6fa6b5dbaf6ab9deb3a7778ee0eb3487
        Validity
            Not Before: Dec 10 04:02:53 2025 GMT
            Not After : Dec 11 04:02:53 2025 GMT
        Subject: CN=c8c4acce0940124904dc0767a82e9ae2fcc742bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:21:78:5e:76:17:64:ec:96:dc:f8:32:b3:01:
                    0b:00:ef:9c:f0:f6:d4:c0:54:31:f6:f2:7e:b1:a1:
                    77:b0:91:bf:76:52:cb:a5:b8:82:26:c7:ce:22:8f:
                    6e:fb:a3:1d:3c:a2:46:67:23:17:83:7f:5c:c4:06:
                    5f:1b:93:8c:23:b3:be:92:45:9f:50:7f:a0:04:1c:
                    03:cf:dc:f2:12:53:43:89:9b:57:52:7b:7d:a5:ba:
                    72:ec:2b:8e:92:10:81:66:69:0d:5d:46:22:2d:10:
                    5f:ea:0a:88:10:a1:d3:9b:2e:81:d9:58:e3:21:f8:
                    6f:47:61:4c:13:9a:c6:ca:3a:a0:f5:c8:59:d5:a5:
                    02:0d:2e:2d:db:c7:7b:1e:23:1b:0d:46:fd:ec:b9:
                    12:a2:53:44:d3:1a:1e:4e:11:a4:67:76:55:82:34:
                    94:af:40:98:c6:f2:38:c3:de:c4:a4:06:41:ad:1f:
                    5c:77:5b:fa:63:08:45:e5:f2:59:6c:31:9b:9f:91:
                    75:5d:ce:78:ca:7a:6a:86:28:8c:08:9f:38:50:9a:
                    12:be:16:c2:95:1f:07:e7:95:07:45:aa:86:b2:37:
                    bb:49:54:ae:4f:c0:c1:77:6d:25:fc:7b:17:01:61:
                    8e:f5:8f:dc:51:48:e3:f4:70:ea:34:87:28:53:4b:
                    e1:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:C4:AC:CE:09:40:12:49:04:DC:07:67:A8:2E:9A:E2:FC:C7:42:BD
            X509v3 Authority Key Identifier:
                keyid:A5:C2:49:EB:6F:A6:B5:DB:AF:6A:B9:DE:B3:A7:77:8E:E0:EB:34:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pcJJ62-mtduvarnes6d3juDrNIc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/453199-6343-4c67-b87e-32eb3a4ead43/1/pcJJ62-mtduvarnes6d3juDrNIc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/453199-6343-4c67-b87e-32eb3a4ead43/1/pcJJ62-mtduvarnes6d3juDrNIc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:f2:f4:70:27:e9:88:9b:11:d6:4e:b6:f2:a3:ad:6b:38:50:
         6c:22:0e:9f:08:88:72:96:b4:27:7d:97:c0:83:1c:97:ee:59:
         e1:5c:c3:e2:d6:db:86:51:64:b7:9a:ac:d2:73:c8:06:92:2f:
         cb:41:1f:5c:f4:8d:28:62:02:5e:1f:54:1c:48:6e:80:03:60:
         9f:f1:75:d0:73:54:06:9e:cd:60:11:bf:d5:4d:08:81:c5:61:
         27:89:b7:11:6f:a5:77:16:68:8d:a3:15:86:36:92:c3:54:2a:
         7f:c5:1e:f0:ba:2e:cc:f9:a2:ea:32:06:cc:5d:39:c5:fc:8b:
         8e:58:89:e5:8f:0e:69:e1:4d:26:c3:05:61:a4:18:f8:05:74:
         d0:a8:e8:63:a2:34:f8:bf:f5:af:2e:1a:f2:e4:ea:51:84:36:
         91:45:a3:bc:76:09:58:78:86:ca:50:fb:05:f2:e0:22:df:3c:
         79:6b:61:52:cf:25:7e:f3:81:a7:f5:bd:e1:e0:f5:85:a3:bf:
         0b:55:bd:b3:ae:28:2f:b0:0f:60:4d:fc:f6:76:e0:1d:3a:c3:
         a1:51:ff:83:b2:10:50:4d:6c:de:fa:97:9f:52:8c:10:9a:d5:
         ad:15:30:ad:79:ba:f9:74:cc:4c:28:8e:b9:89:38:eb:fb:61:
         c6:40:91:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZsGbSAYJpIMfGXo2QwFpeixMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1YzI0OWViNmZhNmI1ZGJhZjZhYjlkZWIzYTc3NzhlZTBl
YjM0ODcwHhcNMjUxMjEwMDQwMjUzWhcNMjUxMjExMDQwMjUzWjAzMTEwLwYDVQQD
EyhjOGM0YWNjZTA5NDAxMjQ5MDRkYzA3NjdhODJlOWFlMmZjYzc0MmJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4CF4XnYXZOyW3PgyswELAO+c8PbU
wFQx9vJ+saF3sJG/dlLLpbiCJsfOIo9u+6MdPKJGZyMXg39cxAZfG5OMI7O+kkWf
UH+gBBwDz9zyElNDiZtXUnt9pbpy7CuOkhCBZmkNXUYiLRBf6gqIEKHTmy6B2Vjj
IfhvR2FME5rGyjqg9chZ1aUCDS4t28d7HiMbDUb97LkSolNE0xoeThGkZ3ZVgjSU
r0CYxvI4w97EpAZBrR9cd1v6YwhF5fJZbDGbn5F1Xc54ynpqhiiMCJ84UJoSvhbC
lR8H55UHRaqGsje7SVSuT8DBd20l/HsXAWGO9Y/cUUjj9HDqNIcoU0vh8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMjErM4JQBJJBNwHZ6gumuL8x0K9MB8GA1UdIwQY
MBaAFKXCSetvprXbr2q53rOnd47g6zSHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGNKSjYyLW10ZHV2YXJuZXM2ZDNqdURyTkljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi80NTMxOTktNjM0My00YzY3LWI4N2Ut
MzJlYjNhNGVhZDQzLzEvcGNKSjYyLW10ZHV2YXJuZXM2ZDNqdURyTkljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi80NTMxOTktNjM0My00YzY3LWI4N2UtMzJlYjNhNGVhZDQz
LzEvcGNKSjYyLW10ZHV2YXJuZXM2ZDNqdURyTkljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh/L0cCfp
iJsR1k628qOtazhQbCIOnwiIcpa0J32XwIMcl+5Z4VzD4tbbhlFkt5qs0nPIBpIv
y0EfXPSNKGICXh9UHEhugANgn/F10HNUBp7NYBG/1U0IgcVhJ4m3EW+ldxZojaMV
hjaSw1Qqf8Ue8LouzPmi6jIGzF05xfyLjliJ5Y8OaeFNJsMFYaQY+AV00KjoY6I0
+L/1ry4a8uTqUYQ2kUWjvHYJWHiGylD7BfLgIt88eWthUs8lfvOBp/W94eD1haO/
C1W9s64oL7APYE389nbgHTrDoVH/g7IQUE1s3vqXn1KMEJrVrRUwrXm6+XTMTCiO
uYk46/thxkCREQ==
-----END CERTIFICATE-----
Generated at Wed Dec 10 13:34:38 2025 by rpki-client