This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/304d73-65ba-4bbe-9fde-dc26e9ee8410/1/pjx_KbiD9LPCQ22WPchTKhpjTMo.mft
File:                     pjx_KbiD9LPCQ22WPchTKhpjTMo.mft (raw, json)
Hash identifier:          do/nMOTSmwpCNH5yB4PoKFL33RVO4LprBkBdk4dl2+I=
Subject key identifier:   AD:71:21:5F:41:27:05:E4:CD:27:AC:F0:F8:45:4B:54:B1:0E:12:24
Authority key identifier: A6:3C:7F:29:B8:83:F4:B3:C2:43:6D:96:3D:C8:53:2A:1A:63:4C:CA
Certificate issuer:       /CN=a63c7f29b883f4b3c2436d963dc8532a1a634cca
Certificate serial:       019A91799665816C773C09E22FD9F82D1016
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pjx_KbiD9LPCQ22WPchTKhpjTMo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/304d73-65ba-4bbe-9fde-dc26e9ee8410/1/pjx_KbiD9LPCQ22WPchTKhpjTMo.mft
Manifest number:          172F
Signing time:             Mon 17 Nov 2025 11:00:55 +0000
Manifest this update:     Mon 17 Nov 2025 11:00:55 +0000
Manifest next update:     Tue 18 Nov 2025 11:00:55 +0000
Files and hashes:         1: OLpJ9Bd9ZoAmgRKrxQeXRHzzVFE.roa (hash: IxODUiMSX3F7Gj+ZqyPwgE/3+jVQ+YMse6cLMmOU7iI=)
                          2: UTDX9X0E-WocbOKc9uxoBBtUNW8.roa (hash: POK+eugWAjhkZBM6kVW5R4lWCtIN/mz6eft4yJE4FsE=)
                          3: pjx_KbiD9LPCQ22WPchTKhpjTMo.crl (hash: sv7la24Dwq+Twp6dny2SWjM/m94isW3eRxmb0YkurF4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:91:79:96:65:81:6c:77:3c:09:e2:2f:d9:f8:2d:10:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a63c7f29b883f4b3c2436d963dc8532a1a634cca
        Validity
            Not Before: Nov 17 11:00:55 2025 GMT
            Not After : Nov 18 11:00:55 2025 GMT
        Subject: CN=ad71215f412705e4cd27acf0f8454b54b10e1224
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:54:07:25:d1:57:84:d5:08:5e:13:c1:72:c5:
                    28:a7:45:5f:1c:06:de:fa:b3:2b:91:e1:55:79:d2:
                    eb:cb:1a:2c:ac:cc:83:4b:9a:23:14:0b:cd:29:20:
                    ad:b0:82:68:81:a9:bf:1f:88:b1:59:5e:b2:d3:a3:
                    e5:e3:1c:ae:41:36:b8:7d:5a:c2:0b:c1:4b:fc:1d:
                    6c:0a:15:12:08:b3:23:3b:36:27:9e:56:f1:7d:57:
                    ea:5a:55:fe:2d:d2:ef:6e:c4:09:79:e7:79:92:bf:
                    ae:5f:e9:60:16:8d:36:fd:d4:e0:e7:43:8d:9f:07:
                    36:2e:27:66:c6:8b:cf:58:9e:bf:a8:75:58:78:6a:
                    50:fb:a7:99:34:c1:f0:39:35:d6:15:60:71:36:97:
                    73:7c:cf:1d:4a:6e:57:b6:de:2b:f6:8b:14:bb:19:
                    d6:25:0b:d2:39:be:05:38:29:cd:5a:e5:18:41:0e:
                    be:16:68:99:29:20:4d:1a:65:61:c4:a5:2b:e4:45:
                    6c:dd:4c:0c:5c:fd:c6:28:c3:fc:bf:df:ab:0f:12:
                    b5:fa:be:a5:20:a2:07:41:6d:ff:87:40:10:65:5b:
                    7f:7d:b3:18:db:0d:77:ba:77:16:cd:89:bf:bf:14:
                    6c:d9:88:3e:a9:38:f9:9c:eb:79:da:aa:59:54:80:
                    67:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:71:21:5F:41:27:05:E4:CD:27:AC:F0:F8:45:4B:54:B1:0E:12:24
            X509v3 Authority Key Identifier:
                keyid:A6:3C:7F:29:B8:83:F4:B3:C2:43:6D:96:3D:C8:53:2A:1A:63:4C:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pjx_KbiD9LPCQ22WPchTKhpjTMo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/304d73-65ba-4bbe-9fde-dc26e9ee8410/1/pjx_KbiD9LPCQ22WPchTKhpjTMo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/304d73-65ba-4bbe-9fde-dc26e9ee8410/1/pjx_KbiD9LPCQ22WPchTKhpjTMo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:d4:37:d0:c9:20:bd:a9:c2:92:48:88:27:1a:14:bf:a9:7f:
         bb:c6:d0:a8:8a:0f:58:e7:b3:ff:53:c8:3c:8a:56:d4:b0:26:
         ca:57:b0:20:b4:bf:bd:1c:e6:08:4d:24:1a:93:46:17:ae:f0:
         09:38:47:55:d5:6c:f2:d7:fa:59:03:98:70:61:9c:cf:fd:cb:
         96:11:e0:ce:ea:11:d3:b8:50:22:62:e6:89:21:c7:ff:e4:be:
         0d:93:08:26:2f:91:46:17:89:b6:67:9f:ac:17:a1:b6:b2:a2:
         b5:f0:7e:7d:df:81:60:77:6a:d9:e2:bc:b7:0c:e0:5a:d0:04:
         ff:7c:56:83:24:af:da:a0:c3:67:6f:81:9a:f6:4c:c6:2f:1e:
         c6:86:3e:fd:1d:a9:7e:cc:d9:a2:86:31:ac:12:b4:c2:b2:68:
         9d:6b:f9:e4:18:53:25:4b:2b:5d:08:d1:e2:09:72:93:13:67:
         60:e6:55:8c:77:4f:72:37:64:09:39:d8:11:c8:ab:fd:66:ab:
         c0:b0:f4:e9:07:f9:9e:be:69:06:33:e9:d6:87:f3:34:a7:50:
         ae:27:07:3e:c9:00:15:6e:4d:8f:88:4a:16:8a:44:34:b3:5a:
         fd:39:4a:31:c3:ad:7d:96:4f:9c:ae:db:4b:8e:9f:0a:ed:c7:
         90:57:ab:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----