This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.mft
File:                     pjvMbSX3R2-7PsM_bbw-nurZIhI.mft (raw, json)
Hash identifier:          TQ45yuRyuzSdul+HoQwhDDlj8RP/U+O7CRCpGNaZR5U=
Subject key identifier:   7C:8C:F0:FD:54:F0:AC:72:8B:72:C0:E6:D6:CC:16:14:66:E7:0D:98
Authority key identifier: A6:3B:CC:6D:25:F7:47:6F:BB:3E:C3:3F:6D:BC:3E:9E:EA:D9:22:12
Certificate issuer:       /CN=a63bcc6d25f7476fbb3ec33f6dbc3e9eead92212
Certificate serial:       019B1C17EF66870186C3DFA4933DDFC3667E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pjvMbSX3R2-7PsM_bbw-nurZIhI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.mft
Manifest number:          0ADC
Signing time:             Sun 14 Dec 2025 09:01:29 +0000
Manifest this update:     Sun 14 Dec 2025 09:01:29 +0000
Manifest next update:     Mon 15 Dec 2025 09:01:29 +0000
Files and hashes:         1: 5NFcVQOlS2SfRA9_dseHho-9-mc.roa (hash: swfI8aXvx2sxn3YOzxRnlDU7qvwOILHJAwX26Y3ztqI=)
                          2: 719PZLmeHqbujtRsKmvo5771XIo.roa (hash: bsKRuhzJIveVWiHQvKvv+dLt6oNf3d66tNY6ht9/C3A=)
                          3: 8-R9vBIjsdFkLJ6TAxmOtR4QU6I.roa (hash: F/qibakU6AQARJG53zEiFCnfouALh8xovmhCIsR4Po8=)
                          4: 8WUQrdzKsEZUNzZ9k3E9ajfkd5s.roa (hash: Ixz0hSpVqJJ/oAfsncTGxOv3fHWBSaH9gBGjqTv8vpQ=)
                          5: FHXWFrj4nreKJjXTfDKCc6Y16Is.roa (hash: PfuW04ELrwKUUeQD8qGy+/BFhBo8C5J05OWPOUMFx5w=)
                          6: Ho4pDAaaconFe5cZ7ygze1a44Xo.roa (hash: 1pC6hpICFpbgfqlZn7adq2AVfLKO5t0AC5KWofkjFSE=)
                          7: Kd5CFoG07kPDgqUGQpHj24zQka8.roa (hash: +2s4BraFjLJP4x9hMH6DgHfMWVkWCLxuz2cF8ghToGs=)
                          8: NYJYw1BTKJV56akoY5ZQRJna-MA.roa (hash: brwHoHz9mi1vg8NUkbqZqqePDdu1Ej44xmauCwQ9Qac=)
                          9: TLEdQvZiEPlpX35O8B6oknJfuyE.roa (hash: AdjCtV/JftiFEQtyk78ssQUWpqAhZBfMUWjoyo3BngI=)
                          10: fBfhsJw2d6Op2y70b533dv-T4j4.roa (hash: B8cZmEngTY2Ne9QwtzyJ6aeIrWSAdYH7Des5rTXKgP4=)
                          11: pjvMbSX3R2-7PsM_bbw-nurZIhI.crl (hash: Z1yS6gXO+k6ds1vPFBeJEZjqk8uvVjmIjM4uCQBY9NM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pjvMbSX3R2-7PsM_bbw-nurZIhI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 15 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:1c:17:ef:66:87:01:86:c3:df:a4:93:3d:df:c3:66:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a63bcc6d25f7476fbb3ec33f6dbc3e9eead92212
        Validity
            Not Before: Dec 14 09:01:29 2025 GMT
            Not After : Dec 15 09:01:29 2025 GMT
        Subject: CN=7c8cf0fd54f0ac728b72c0e6d6cc161466e70d98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:a6:8a:b2:f3:6e:f1:eb:33:28:ee:a4:8c:bb:
                    7b:8a:f8:60:1b:c3:7b:64:42:34:20:54:24:20:03:
                    54:64:2b:32:d0:0e:1d:ae:ff:0a:83:5b:2e:5c:e5:
                    2c:a9:c1:31:43:6e:72:62:0f:38:15:83:ee:47:a7:
                    2e:be:2d:cb:5b:d1:b1:62:bf:c0:ff:84:f9:f1:04:
                    19:f4:42:ae:e0:aa:6a:c0:e3:7e:fd:d1:f3:ec:db:
                    0c:79:c8:8c:ed:c8:66:1a:94:0e:8e:0c:c0:72:96:
                    98:a3:dd:7c:57:2f:58:4d:59:f9:8c:3b:2a:88:19:
                    d9:bc:57:a6:ab:1c:31:89:36:84:ad:fe:03:68:28:
                    81:9a:aa:2e:19:4a:20:39:a0:ab:04:94:24:60:54:
                    39:80:7e:97:82:ec:40:1a:8f:66:a0:0b:f3:fe:31:
                    29:1b:6e:5c:ba:55:84:35:d8:dd:fd:49:f3:59:12:
                    f0:d8:54:8b:3c:08:1a:04:fa:c9:86:47:7e:07:70:
                    45:00:80:38:33:70:58:d7:81:4b:e8:6d:e2:42:d5:
                    39:bd:2a:e7:89:ee:7c:0f:0b:c4:fc:4b:25:38:92:
                    40:12:6e:f9:58:39:50:7f:7f:2b:ca:f9:e1:d4:09:
                    35:74:4a:d9:f3:54:8a:9d:6b:c6:77:9b:74:6b:2b:
                    bb:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:8C:F0:FD:54:F0:AC:72:8B:72:C0:E6:D6:CC:16:14:66:E7:0D:98
            X509v3 Authority Key Identifier:
                keyid:A6:3B:CC:6D:25:F7:47:6F:BB:3E:C3:3F:6D:BC:3E:9E:EA:D9:22:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pjvMbSX3R2-7PsM_bbw-nurZIhI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:0b:43:0d:d3:e0:62:b7:26:e2:b7:37:57:3a:b9:d1:ed:fd:
         12:cd:5d:1d:b3:9d:08:28:18:22:5f:28:bb:56:f9:fe:dd:f4:
         12:39:a6:1c:af:ad:6b:18:ee:30:0f:2a:4c:56:9b:7f:63:46:
         15:68:3b:b3:6e:56:ca:fa:41:d2:72:9e:a4:d5:11:48:60:a1:
         4d:eb:a5:5f:52:64:ef:86:97:ee:29:ab:78:f5:35:5c:78:8b:
         c4:ab:d8:8b:36:ea:58:a8:8a:f7:31:67:02:6e:b0:24:10:a3:
         13:1f:41:e0:86:36:ee:50:40:29:eb:83:60:5d:af:ac:d9:38:
         ed:fe:77:4d:11:d0:2b:79:83:c3:e2:25:41:79:74:3b:b6:a1:
         31:b4:f0:09:d3:69:02:42:ec:7a:3e:f4:31:52:27:82:d7:79:
         1e:a7:55:9f:d6:f9:fc:94:ff:e3:27:12:7b:dd:50:c3:6b:a6:
         4c:e1:83:d9:ee:a5:3f:79:6c:41:c7:a5:74:14:cc:5d:09:c2:
         aa:30:d0:97:ac:26:24:2e:4c:1a:6e:f6:c6:bd:0e:6c:ef:3d:
         7e:2b:22:39:61:01:eb:3d:9a:a7:86:92:16:de:22:17:8c:34:
         f1:28:0e:4e:e2:6b:21:21:75:e3:28:7b:0a:dd:36:ab:d1:a9:
         f7:c5:f9:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 14 13:28:49 2025 by rpki-client