This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.mft
File:                     pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.mft (raw, json)
Hash identifier:          hFmygy3upKu8CmzDTZqKjh/eJIY8PA6KuNVH4a+nM6w=
Subject key identifier:   2E:10:8C:81:11:B0:26:32:33:0E:FE:FA:74:4B:86:47:0A:E4:DA:E7
Authority key identifier: A6:08:DB:43:96:4B:69:86:EC:74:0F:0B:5E:33:F6:27:58:9A:C5:60
Certificate issuer:       /CN=a608db43964b6986ec740f0b5e33f627589ac560
Certificate serial:       019AF19B6CB01E67E8274D4EC4A61A6ADFD8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.mft
Manifest number:          1768
Signing time:             Sat 06 Dec 2025 03:01:26 +0000
Manifest this update:     Sat 06 Dec 2025 03:01:26 +0000
Manifest next update:     Sun 07 Dec 2025 03:01:26 +0000
Files and hashes:         1: I3mgQ157a_bF2dTxc-vf7pMJtM4.roa (hash: 7UAHNapwwX16Slile1RjKMtt2nkeBVUncM7zwsYLT8w=)
                          2: MHgro3rXC3LA-ZCKp8QuaVCuDNM.roa (hash: sXYt7ycXFJCXAbuucaVo5/ccp47LCDa9LjtriRMFWXQ=)
                          3: PBXMgqYnsJA87BxLSTiMQaCiTQM.roa (hash: wzJgz/i9pbuBUkW2cHLEeF8EDXUdrOLSSMmRBwjvuyY=)
                          4: Y_tOtZgYIeYtzs_lYehaepicSa4.roa (hash: 0Ji9IYm411z+1YtZY+qouN/MNWctJRSug7dej+6mWcM=)
                          5: aXYA7UmSga-uAKN3mA-MrcLvQNw.roa (hash: A6mLEC8I6HDPu8tLJ0OvOtzb6OIQimg3DdB4KG2uaDU=)
                          6: gGa9g3xm-WUrWGnZqfKZudqy63U.roa (hash: gMhH5wVZGQUaR4GjDTcIjxc58KL7jUF42zUcWUMJNmY=)
                          7: hK0B_1bjDs4SgkjuewwBu_Hyp1Q.roa (hash: P1SdgqhUGccV0nstYPHl8zR8nqe1TrQ9TkFifIcHjeo=)
                          8: pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.crl (hash: 7Byz6IgGZqN6mwRZIuMfooRfvcj8sEu1Vv3VBAj9asU=)
                          9: rWecwzOy_r05COuEiZl4KWht5j4.roa (hash: APFZzX7MSHk1ET0fGFHAZgyisv5z2ZfhR0L4cxUpeKo=)
                          10: zVSaKUExhHJLuuGxs99kYQGdQi0.roa (hash: kRzk6R6AO4mRz5HhKteUKae1kEl/X9QjV+pW67bmw5E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 03:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:9b:6c:b0:1e:67:e8:27:4d:4e:c4:a6:1a:6a:df:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a608db43964b6986ec740f0b5e33f627589ac560
        Validity
            Not Before: Dec  6 03:01:26 2025 GMT
            Not After : Dec  7 03:01:26 2025 GMT
        Subject: CN=2e108c8111b02632330efefa744b86470ae4dae7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:5e:1f:5d:f9:f9:b0:42:41:fc:01:38:7a:ce:
                    d9:4b:00:3a:3f:ec:2f:52:6d:4e:c6:eb:fe:66:65:
                    6a:9d:e2:18:ea:93:e1:8c:3e:1c:22:84:85:7c:d5:
                    1b:6a:ee:65:bc:35:1e:4d:1b:98:ea:df:bb:94:c3:
                    e6:1b:65:da:88:dd:85:c3:a6:96:4f:6e:c6:d9:47:
                    65:5c:14:3d:e4:6b:46:d9:6d:58:a8:02:78:60:de:
                    ac:a2:37:b0:3a:a5:93:4b:19:78:69:7b:0c:30:4c:
                    9f:1a:14:49:6e:a7:67:16:c3:35:e5:1f:ab:55:f9:
                    08:ba:8f:8b:69:b1:5e:9e:b7:e3:b5:20:a3:ae:5b:
                    9d:b2:42:eb:a0:f8:ff:9b:ee:bb:1a:57:57:d4:2e:
                    ae:0d:97:a6:d8:17:be:2e:de:2d:7d:d8:b3:a9:f7:
                    69:34:95:64:b0:e6:af:4e:21:1e:41:4d:02:bc:b4:
                    fd:c0:ca:74:a8:6e:33:ee:89:86:3f:cb:c7:33:38:
                    2e:01:f4:76:58:15:75:ac:89:fd:6f:33:27:cb:c0:
                    c5:17:c5:77:04:fa:de:c5:c5:1e:54:a7:08:fd:f6:
                    63:df:1a:bf:98:af:06:9f:8c:41:7f:18:04:88:6e:
                    9d:cc:07:0f:08:12:f9:a8:bf:90:76:56:8f:f0:a2:
                    19:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:10:8C:81:11:B0:26:32:33:0E:FE:FA:74:4B:86:47:0A:E4:DA:E7
            X509v3 Authority Key Identifier:
                keyid:A6:08:DB:43:96:4B:69:86:EC:74:0F:0B:5E:33:F6:27:58:9A:C5:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:cd:7a:64:a8:a8:df:53:1a:f6:ea:48:1c:1d:18:79:74:55:
         14:f5:64:33:0d:4e:3f:d9:40:1c:ff:b2:b8:7c:fd:82:5f:67:
         da:70:60:95:b6:32:d7:bf:16:c8:6b:73:d2:99:85:b4:3c:56:
         61:47:5a:5d:44:71:31:60:56:a7:69:e0:08:e8:b0:ad:7a:c5:
         de:03:d8:dc:00:24:75:ed:0a:94:0a:5b:71:b5:af:99:56:09:
         ce:61:dd:92:48:e4:a4:5a:f8:1f:97:3c:5c:d1:6b:4b:af:74:
         4b:ac:62:c7:0a:5e:df:fa:9e:81:22:7d:b1:21:17:4b:d3:f6:
         84:44:88:31:d3:cd:1f:66:80:b0:f9:20:72:59:4c:4f:7d:d9:
         7d:e7:67:5a:b8:00:6a:97:b2:e7:14:84:fb:21:68:74:f4:dc:
         7c:07:d2:cf:99:ea:fd:0e:25:95:55:6e:da:13:16:3d:a2:2a:
         4e:cd:1d:2d:f5:47:2c:cd:9f:b7:38:fb:d5:ff:25:9a:bb:42:
         67:0d:b2:44:95:15:44:83:cd:17:f8:ce:0b:49:d4:fa:a6:1d:
         70:2f:cb:5c:29:34:cd:37:c6:b4:e8:54:69:e4:59:ed:ad:db:
         63:a9:0f:04:07:a2:a2:24:01:2c:aa:18:7d:89:b0:96:ba:f8:
         cd:47:64:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 10:34:23 2025 by rpki-client