This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/PXud_6rjPsLPGbWtTknB6esdnWQ.mft
File:                     PXud_6rjPsLPGbWtTknB6esdnWQ.mft (raw, json)
Hash identifier:          Jdk8ZXGbhMgNOqo7zWCMBUQmuadxlkRqHBxFXB8FwIU=
Subject key identifier:   0A:40:F3:01:9A:A4:8C:E5:2C:A4:B2:0F:CC:E1:1A:A6:A3:C8:21:0C
Authority key identifier: 3D:7B:9D:FF:AA:E3:3E:C2:CF:19:B5:AD:4E:49:C1:E9:EB:1D:9D:64
Certificate issuer:       /CN=3d7b9dffaae33ec2cf19b5ad4e49c1e9eb1d9d64
Certificate serial:       019AF464CF863C84E9E6C4D11E0B224016BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PXud_6rjPsLPGbWtTknB6esdnWQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/PXud_6rjPsLPGbWtTknB6esdnWQ.mft
Manifest number:          03AC
Signing time:             Sat 06 Dec 2025 16:00:38 +0000
Manifest this update:     Sat 06 Dec 2025 16:00:38 +0000
Manifest next update:     Sun 07 Dec 2025 16:00:38 +0000
Files and hashes:         1: 7MAR8ldskj16F5kzBhniowMVmU4.roa (hash: mAbacv2iYcdMB2GMEDPPh1FDDClOu0PIdLu6x7Tl3MY=)
                          2: Cu_tMI7PQ6xbwC801ON2UpFh-7U.roa (hash: GIgBSdweK8qeTSk0k9hGLBlRLULkx2CFmhF3qwcGbl0=)
                          3: FmkKEcHCN4SKkKjvm4wbiP2rqGc.roa (hash: BxDXl5Xd1DRGy1evvpUKKCLNhtBpKlkHYmd1XWHZ6n8=)
                          4: N8UiZC6ekKP1es4B_Bk3APFkdxc.roa (hash: tgQGNuurT5CnHai6yz0N+Wra1nyaeCzvPS5Kjtxbyvk=)
                          5: PXud_6rjPsLPGbWtTknB6esdnWQ.crl (hash: TvfihokY3iaTlgj/h7G8he/kzTFKKCuQOw9UaMHXaqQ=)
                          6: k4yKqIR7cQItxrDu_gDWC-myYX0.roa (hash: xhdvsy13/3L8cbu2Dvi5ab7FoTe57YZRZZmouEau4sA=)
                          7: lThuEEXjbOk9kIBiQn4XNJSri60.roa (hash: saUcIO3Pzwx9suP3W1g5k4dgT0dO1lpuD0PTK3qh6JE=)
                          8: pWtbtMqs_9aJQ0KT8UAl4XExZLI.roa (hash: WNvv2z5ka9H0FOvY11NFaV4Er6oN7s2ejAsfJawgadw=)
                          9: rBORiVnjaTLo34wXgk56Wdk6L40.roa (hash: ilIiHrBuCknqXlqYLmYdfV8RuudQEzNokXG+7gARkUc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/PXud_6rjPsLPGbWtTknB6esdnWQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/PXud_6rjPsLPGbWtTknB6esdnWQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PXud_6rjPsLPGbWtTknB6esdnWQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 13:09:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f4:64:cf:86:3c:84:e9:e6:c4:d1:1e:0b:22:40:16:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d7b9dffaae33ec2cf19b5ad4e49c1e9eb1d9d64
        Validity
            Not Before: Dec  6 16:00:38 2025 GMT
            Not After : Dec  7 16:00:38 2025 GMT
        Subject: CN=0a40f3019aa48ce52ca4b20fcce11aa6a3c8210c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:07:dd:7a:08:9b:ce:67:a2:21:8b:6d:a4:bd:
                    f5:6d:4f:a9:54:c6:92:86:d1:8b:b7:b4:70:4a:13:
                    11:1d:e8:18:bb:19:96:46:f0:e5:43:8f:35:75:4c:
                    bc:e0:82:d0:6f:f2:df:2e:3a:40:d3:a5:58:e3:9e:
                    5a:3e:e7:05:16:71:16:82:8a:78:76:f9:a8:f0:0d:
                    e1:f5:e3:55:e7:43:57:8e:6b:4f:0a:05:10:38:db:
                    32:67:68:23:ba:f4:e6:4c:67:d1:23:a6:74:43:5c:
                    cd:95:96:5c:fa:cb:44:51:2f:fa:06:8c:20:55:bb:
                    e8:31:7e:2e:7a:7d:46:7d:77:2f:c7:e4:92:00:7c:
                    d2:a9:5d:f5:3a:b1:f1:57:8a:89:63:9a:bc:b6:92:
                    8d:5d:8f:de:34:dc:9e:0d:5c:2d:da:75:23:5d:b2:
                    e7:6e:7a:83:b3:50:8a:fe:2a:bf:f9:f8:a6:6e:95:
                    3c:ea:49:e9:b8:f2:4b:28:9b:ee:06:f2:64:80:48:
                    72:40:1d:99:c4:42:82:c9:91:fe:ba:dd:45:14:e7:
                    02:74:7b:5d:d0:4d:30:69:dd:f0:03:00:82:29:ad:
                    25:48:5e:b0:f8:b8:b0:5a:04:d9:d4:10:be:cf:bd:
                    10:53:27:6a:af:06:3f:f9:45:0e:b9:53:6d:ed:f6:
                    d1:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:40:F3:01:9A:A4:8C:E5:2C:A4:B2:0F:CC:E1:1A:A6:A3:C8:21:0C
            X509v3 Authority Key Identifier:
                keyid:3D:7B:9D:FF:AA:E3:3E:C2:CF:19:B5:AD:4E:49:C1:E9:EB:1D:9D:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PXud_6rjPsLPGbWtTknB6esdnWQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/PXud_6rjPsLPGbWtTknB6esdnWQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/PXud_6rjPsLPGbWtTknB6esdnWQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:5a:00:8c:0c:07:c2:96:b0:1e:90:d5:0a:47:48:ff:59:e3:
         ea:b0:7a:ab:8f:81:38:35:fc:54:60:2b:5d:af:d2:6c:bd:8f:
         f0:1f:31:f0:3c:a7:1f:a0:16:1a:99:14:c4:50:48:30:c0:4f:
         2a:5e:79:bb:1c:98:bb:64:1d:fe:76:90:22:b1:2a:ea:93:31:
         8a:7d:fe:2b:e6:2b:42:e4:e0:cb:a4:7a:45:83:54:78:73:14:
         a7:d4:d3:86:42:0f:2e:0e:4c:0a:99:92:c3:42:d3:46:47:df:
         97:93:0f:c6:2f:49:d6:40:30:3f:a7:a9:d3:28:05:8f:10:99:
         4c:e8:33:1f:28:32:cc:99:de:7e:02:18:a5:64:c8:16:ff:21:
         56:c6:dd:44:b7:a0:d6:fa:62:f5:8e:73:03:e3:19:09:22:54:
         c7:94:86:af:f8:eb:fb:6d:bc:1b:0a:ca:9d:ec:2b:7c:a3:08:
         53:1f:2f:bc:da:86:c7:6e:60:90:a5:fb:6f:ef:5a:fe:63:da:
         1b:32:73:8a:c3:e4:84:7e:e1:43:03:a6:1b:3c:1e:83:c6:39:
         85:c8:4a:e2:f3:ab:db:4d:5c:26:ec:aa:67:0b:92:59:8d:9e:
         80:96:32:89:ee:19:96:ae:07:bf:b8:2c:d7:f7:83:51:90:f5:
         6b:2a:82:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:13:26 2025 by rpki-client