This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.mft
File:                     pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.mft (raw, json)
Hash identifier:          cCZpGsgSs0wrIs0rR9t3a7AUjwq/TbZxiG3D3MkFTiI=
Subject key identifier:   CB:7C:4C:B6:BF:BA:11:B3:BF:EA:2E:DB:27:E4:CC:85:97:A3:43:C5
Authority key identifier: A6:08:DB:43:96:4B:69:86:EC:74:0F:0B:5E:33:F6:27:58:9A:C5:60
Certificate issuer:       /CN=a608db43964b6986ec740f0b5e33f627589ac560
Certificate serial:       019C42EB4559D4EB693CBFFEAC6325BD2C99
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.mft
Manifest number:          1817
Signing time:             Mon 09 Feb 2026 15:00:40 +0000
Manifest this update:     Mon 09 Feb 2026 15:00:40 +0000
Manifest next update:     Tue 10 Feb 2026 15:00:40 +0000
Files and hashes:         1: 1jh-7uha-4k_yznOuFtMZfFjuVs.roa (hash: AizGw3X7tT6ekzOxf8TOv3axo6nylx0oByvDgVQolps=)
                          2: CNUfiKvpSJ-WDTNl-84qlrCz1pc.roa (hash: G7YZZuqmByrC2YyMXfXbfApWC4fYr1PvZdU2/f31kE8=)
                          3: W7nZVgb0zUWTa-CQSc8zglFn-yk.roa (hash: 8qZZ+7l1ZHC/t+K4fj+5zc9uGqORgxBHYmAlmab2Xnc=)
                          4: bFCiT-xm8pNFWWzoBOkYrKOTCD8.roa (hash: yLGiXFTaycTRRK4U/+Au/PGXnPMnZr+N3txpommAKyk=)
                          5: ePhJRyKt0-yBQZxDLefUcoLBEBQ.roa (hash: UHzKib5+JGmW2WEcbEdpa4gFy7zL2c+OqxrmnN7xcck=)
                          6: foQpbry3Rd7cIVHoGwPbNUEQzJA.roa (hash: YeKA8xu/nluThLS+3wNeRMaiot0rKjIzr+b6mcEkW0Q=)
                          7: g8ACjhxQk5J0DU745hi99GsFqfc.roa (hash: /h98eurUCwI/ZM7sMftwVJTVqywWLaik3VpX3tKiswU=)
                          8: gvmtotg3-G7C4Va6UzlSGJozsjc.roa (hash: mFRFlXOUP4cVoFa3wC4kCHkSiaXUH9pe3FPWW9xHeGk=)
                          9: nwIwVLXIvem69G9q9KDnzvsmAhg.roa (hash: 2+aHQGuqT9Ohp8sqd8VoWtkoMLGI1sXdFboz6ZhVoNo=)
                          10: pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.crl (hash: 6k+PUAhHfV9E5mWwBlgTt9PgoSCL4suOYcSjcYWtPJo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:eb:45:59:d4:eb:69:3c:bf:fe:ac:63:25:bd:2c:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a608db43964b6986ec740f0b5e33f627589ac560
        Validity
            Not Before: Feb  9 15:00:40 2026 GMT
            Not After : Feb 10 15:00:40 2026 GMT
        Subject: CN=cb7c4cb6bfba11b3bfea2edb27e4cc8597a343c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:1f:22:b0:85:98:63:73:d7:3f:30:80:f4:8f:
                    c0:03:40:a9:77:c4:f5:7d:c0:c1:e9:ff:20:ac:4b:
                    3c:44:5d:13:f5:c6:85:e5:5a:45:26:0d:45:7f:d9:
                    d1:53:b4:f9:09:47:cc:1c:b2:3b:b9:2a:56:6e:80:
                    fc:0a:64:6b:e2:94:b7:42:2f:6f:ed:b0:ff:ec:b6:
                    59:91:a8:90:2a:2f:06:aa:6a:66:6e:d2:e3:07:84:
                    d7:24:ed:a4:e4:d0:85:75:92:67:27:04:19:5f:91:
                    a5:3e:11:31:8e:c7:44:9a:f6:55:dc:3c:9b:5f:dc:
                    d9:b7:e3:66:a6:08:a6:23:8d:78:54:38:b9:37:b6:
                    0e:3d:77:7b:4c:87:8d:7d:48:12:c0:59:e0:26:3b:
                    d1:24:1e:6e:f9:e4:5a:3e:a1:3a:d2:8a:fa:16:c0:
                    21:9f:32:62:a8:d0:e6:0c:b6:bc:3a:fd:4f:51:6e:
                    76:c9:8c:58:ed:10:d2:d8:06:83:96:ba:1a:b1:55:
                    35:7f:af:78:34:1b:e7:96:b4:38:d7:ab:68:5f:eb:
                    62:f7:4d:02:95:fe:2d:79:e7:46:0c:7b:29:5d:d3:
                    23:55:83:39:4d:6e:6a:8c:69:7f:95:07:fe:af:f3:
                    6c:37:71:03:55:83:7c:82:92:c5:23:29:2f:58:e2:
                    c3:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:7C:4C:B6:BF:BA:11:B3:BF:EA:2E:DB:27:E4:CC:85:97:A3:43:C5
            X509v3 Authority Key Identifier:
                keyid:A6:08:DB:43:96:4B:69:86:EC:74:0F:0B:5E:33:F6:27:58:9A:C5:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:9c:97:f8:46:04:6d:26:de:5b:ab:99:70:48:f8:10:67:57:
         81:2c:fb:14:0f:f3:8a:c7:e0:17:bb:99:59:3c:50:1b:47:19:
         ef:d3:4d:18:70:d8:f5:df:9b:b2:7a:0b:68:2f:bf:0e:00:0d:
         71:99:4d:0d:c2:bc:93:9a:75:a6:47:77:df:6e:8e:d2:5e:25:
         5b:8e:0e:ab:e2:8f:97:81:00:fd:aa:1e:c1:77:1b:75:f2:7b:
         91:e8:bc:1f:6b:51:0c:13:8d:3a:7a:67:23:1a:94:7f:fb:80:
         ed:70:70:0b:f3:56:aa:7a:8f:65:8f:5a:9e:f7:66:92:ad:17:
         33:c7:1b:ca:34:a0:b9:77:28:e3:f2:97:67:b7:2a:56:f8:43:
         97:35:2f:5c:d7:d4:65:65:ad:0b:e0:5a:ad:92:c5:27:3a:ac:
         a8:06:99:e7:e2:32:d2:39:64:7f:fa:c4:4f:02:29:9f:67:e8:
         61:db:c4:99:5a:50:ef:13:27:29:e1:3e:e6:d2:cb:b9:52:2a:
         d8:00:95:84:7c:30:11:74:ed:f2:52:ef:0b:e1:22:cf:e7:69:
         c0:51:19:b8:e1:b2:90:2d:24:41:19:80:70:88:e0:e8:6f:c0:
         54:b8:a9:bf:02:e9:20:45:4f:14:40:37:94:b1:d8:23:fc:1a:
         6e:fa:b3:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxC60VZ1OtpPL/+rGMlvSyZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2MDhkYjQzOTY0YjY5ODZlYzc0MGYwYjVlMzNmNjI3NTg5
YWM1NjAwHhcNMjYwMjA5MTUwMDQwWhcNMjYwMjEwMTUwMDQwWjAzMTEwLwYDVQQD
EyhjYjdjNGNiNmJmYmExMWIzYmZlYTJlZGIyN2U0Y2M4NTk3YTM0M2M1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjh8isIWYY3PXPzCA9I/AA0Cpd8T1
fcDB6f8grEs8RF0T9caF5VpFJg1Ff9nRU7T5CUfMHLI7uSpWboD8CmRr4pS3Qi9v
7bD/7LZZkaiQKi8GqmpmbtLjB4TXJO2k5NCFdZJnJwQZX5GlPhExjsdEmvZV3Dyb
X9zZt+NmpgimI414VDi5N7YOPXd7TIeNfUgSwFngJjvRJB5u+eRaPqE60or6FsAh
nzJiqNDmDLa8Ov1PUW52yYxY7RDS2AaDlroasVU1f694NBvnlrQ416toX+ti900C
lf4teedGDHspXdMjVYM5TW5qjGl/lQf+r/NsN3EDVYN8gpLFIykvWOLD9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMt8TLa/uhGzv+ou2yfkzIWXo0PFMB8GA1UdIwQY
MBaAFKYI20OWS2mG7HQPC14z9idYmsVgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGdqYlE1WkxhWWJzZEE4TFhqUDJKMWlheFdBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi81MDAxNTAtMTU1MS00N2RlLWI1MDQt
ZDY0NjgzY2VlMTZmLzEvcGdqYlE1WkxhWWJzZEE4TFhqUDJKMWlheFdBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi81MDAxNTAtMTU1MS00N2RlLWI1MDQtZDY0NjgzY2VlMTZm
LzEvcGdqYlE1WkxhWWJzZEE4TFhqUDJKMWlheFdBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVZyX+EYE
bSbeW6uZcEj4EGdXgSz7FA/zisfgF7uZWTxQG0cZ79NNGHDY9d+bsnoLaC+/DgAN
cZlNDcK8k5p1pkd3326O0l4lW44Oq+KPl4EA/aoewXcbdfJ7kei8H2tRDBONOnpn
IxqUf/uA7XBwC/NWqnqPZY9anvdmkq0XM8cbyjSguXco4/KXZ7cqVvhDlzUvXNfU
ZWWtC+BarZLFJzqsqAaZ5+Iy0jlkf/rETwIpn2foYdvEmVpQ7xMnKeE+5tLLuVIq
2ACVhHwwEXTt8lLvC+Eiz+dpwFEZuOGykC0kQRmAcIjg6G/AVLipvwLpIEVPFEA3
lLHYI/wabvqziA==
-----END CERTIFICATE-----
Generated at Mon Feb 9 18:32:32 2026 by rpki-client