This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/PXud_6rjPsLPGbWtTknB6esdnWQ.mft
File:                     PXud_6rjPsLPGbWtTknB6esdnWQ.mft (raw, json)
Hash identifier:          nxU8bA/HLBp+oUDac7W0Vfk89fKNg5bjL1KugWHAr8Y=
Subject key identifier:   DE:72:69:A1:21:D8:B3:7D:D1:2C:20:85:11:47:8F:56:76:27:16:02
Authority key identifier: 3D:7B:9D:FF:AA:E3:3E:C2:CF:19:B5:AD:4E:49:C1:E9:EB:1D:9D:64
Certificate issuer:       /CN=3d7b9dffaae33ec2cf19b5ad4e49c1e9eb1d9d64
Certificate serial:       019B37579937ACBB20D082BA4B6630D8BBE3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PXud_6rjPsLPGbWtTknB6esdnWQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/PXud_6rjPsLPGbWtTknB6esdnWQ.mft
Manifest number:          03D0
Signing time:             Fri 19 Dec 2025 16:00:46 +0000
Manifest this update:     Fri 19 Dec 2025 16:00:46 +0000
Manifest next update:     Sat 20 Dec 2025 16:00:46 +0000
Files and hashes:         1: 7MAR8ldskj16F5kzBhniowMVmU4.roa (hash: mAbacv2iYcdMB2GMEDPPh1FDDClOu0PIdLu6x7Tl3MY=)
                          2: FmkKEcHCN4SKkKjvm4wbiP2rqGc.roa (hash: BxDXl5Xd1DRGy1evvpUKKCLNhtBpKlkHYmd1XWHZ6n8=)
                          3: LXf5lLnTSduTm8Y4-ZFOkzEWaRE.roa (hash: eOFvk5CuTujGAeTIr7JdTBGuzY2jhTziJfw9wzb3/Po=)
                          4: PXud_6rjPsLPGbWtTknB6esdnWQ.crl (hash: fFhXRp9h87F957LO4qio/DSOnIDE48BLQX/9Xte2YEQ=)
                          5: k4yKqIR7cQItxrDu_gDWC-myYX0.roa (hash: xhdvsy13/3L8cbu2Dvi5ab7FoTe57YZRZZmouEau4sA=)
                          6: lThuEEXjbOk9kIBiQn4XNJSri60.roa (hash: saUcIO3Pzwx9suP3W1g5k4dgT0dO1lpuD0PTK3qh6JE=)
                          7: pWtbtMqs_9aJQ0KT8UAl4XExZLI.roa (hash: WNvv2z5ka9H0FOvY11NFaV4Er6oN7s2ejAsfJawgadw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/PXud_6rjPsLPGbWtTknB6esdnWQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/PXud_6rjPsLPGbWtTknB6esdnWQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PXud_6rjPsLPGbWtTknB6esdnWQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Dec 2025 16:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:37:57:99:37:ac:bb:20:d0:82:ba:4b:66:30:d8:bb:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d7b9dffaae33ec2cf19b5ad4e49c1e9eb1d9d64
        Validity
            Not Before: Dec 19 16:00:46 2025 GMT
            Not After : Dec 20 16:00:46 2025 GMT
        Subject: CN=de7269a121d8b37dd12c208511478f5676271602
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:d8:03:7b:10:4f:c8:ca:11:8c:ad:b8:76:cc:
                    d7:63:2d:7e:23:3a:f4:78:ae:d3:f9:f0:b8:ca:bc:
                    55:25:1e:da:1f:85:2a:de:c0:bc:87:2a:36:78:9b:
                    3f:d9:75:49:1a:56:72:e5:e3:90:2d:fe:c1:a6:a8:
                    87:f0:74:dc:75:48:38:42:d1:3b:0f:5c:93:99:b8:
                    30:02:f0:5d:14:4b:f0:f0:aa:05:42:4f:6a:6a:f6:
                    a5:c0:28:f8:98:05:ce:21:0d:d4:4f:5b:bc:dc:8d:
                    b1:93:6b:f3:d3:bb:5e:21:a0:ad:13:ce:ef:ee:3f:
                    9c:08:45:a9:66:14:c9:5e:a9:48:30:ba:32:9a:e1:
                    62:f4:85:2c:27:59:a4:47:6b:42:5d:1b:43:8a:6c:
                    80:0a:f5:30:c2:b4:18:9d:19:1a:68:ec:f3:8c:b1:
                    52:18:19:b5:c7:9f:b7:b3:67:6c:d0:14:54:00:67:
                    51:4d:6b:b1:fc:89:d1:c7:8e:c1:27:c6:50:a9:61:
                    83:d1:c7:84:05:28:8e:fa:0f:61:b2:49:ba:0e:de:
                    e8:fb:80:00:29:cd:cc:ac:05:36:fb:d2:d1:f2:42:
                    f1:78:1e:85:6b:b3:3a:26:3d:e1:7d:00:8e:4f:31:
                    70:50:8d:7f:9d:16:31:2c:fe:3d:c2:88:44:4a:93:
                    31:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:72:69:A1:21:D8:B3:7D:D1:2C:20:85:11:47:8F:56:76:27:16:02
            X509v3 Authority Key Identifier:
                keyid:3D:7B:9D:FF:AA:E3:3E:C2:CF:19:B5:AD:4E:49:C1:E9:EB:1D:9D:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PXud_6rjPsLPGbWtTknB6esdnWQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/PXud_6rjPsLPGbWtTknB6esdnWQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/PXud_6rjPsLPGbWtTknB6esdnWQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:4d:cf:47:46:eb:d6:7a:40:d2:98:75:28:c5:22:d1:d4:d4:
         5e:59:ee:57:c5:57:39:be:46:b2:72:4a:23:aa:b5:01:66:27:
         0c:55:f9:09:0b:51:6b:36:1a:d4:dc:e1:e5:83:39:62:60:88:
         32:a9:23:d0:bd:b4:a2:47:78:c0:22:04:a0:5b:77:c5:f5:18:
         a5:e3:8a:4d:fb:bf:f8:c4:df:9c:5e:00:0a:ee:13:ee:e0:0f:
         73:d4:9a:aa:e7:16:83:9c:cb:90:79:be:0f:e5:5a:5e:ce:a8:
         d9:a4:94:cc:ad:9b:36:fa:fa:a3:79:32:5e:64:77:a1:c9:b8:
         e2:45:41:56:42:b0:06:25:8b:99:b8:41:d1:d3:c1:fb:da:8e:
         85:36:0e:e8:a5:13:98:4e:c6:3c:fc:9f:ec:08:c3:bc:98:6c:
         ec:06:10:68:14:cd:81:48:21:a9:fa:c2:cd:7d:20:44:1f:ff:
         e1:3b:30:50:0e:c2:7a:dc:59:23:74:84:34:f0:12:5a:99:90:
         03:e5:7e:21:27:10:cd:04:21:ce:2f:dd:89:bf:84:f4:cd:fc:
         57:f1:01:09:41:70:c9:d0:5b:c7:fa:16:1a:92:19:98:5b:4a:
         b2:c7:23:35:ae:76:3d:54:79:46:d4:f3:d0:74:99:45:76:a6:
         cc:50:58:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 23:02:49 2025 by rpki-client