This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
File:                     bwsVGTgW_RXc_QR9tO7KZykSu2A.mft (raw, json)
Hash identifier:          IGIjVhqVye98XVEWti7vNBFBxt0aT9KSURUkz9j86NM=
Subject key identifier:   9B:AE:0A:DB:2D:21:E6:4D:92:59:0C:5B:BF:B6:E3:33:33:D4:FF:0C
Authority key identifier: 6F:0B:15:19:38:16:FD:15:DC:FD:04:7D:B4:EE:CA:67:29:12:BB:60
Certificate issuer:       /CN=6f0b15193816fd15dcfd047db4eeca672912bb60
Certificate serial:       019BB9CE66EA353666C757A939E08C724CBA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
Manifest number:          0FFA
Signing time:             Wed 14 Jan 2026 00:01:10 +0000
Manifest this update:     Wed 14 Jan 2026 00:01:10 +0000
Manifest next update:     Thu 15 Jan 2026 00:01:10 +0000
Files and hashes:         1: Dzfij-56Js_7H-jbcQxH-p0cmAs.roa (hash: Z+CaW8ckDIWY/oKH9+ByV5fYpxK+zdPr9T/cG0kLCqw=)
                          2: I1YJFxw21cTu-Qd8EAxDnplO6Zs.roa (hash: cAwDZZhWlnexH7GwqbKuslWZIOJhOccecpBC86Dnr2Y=)
                          3: Mt-Opg160kBARBTU28meoXARLd8.roa (hash: TB7+3UZC0vW7vpoGODBSbw4rk6M41GF33QLmygPvyP4=)
                          4: WgdXGCq5750IZB5Te3z2Ts4JuHo.roa (hash: BuQ1Y5enK/3DpIsodzPPjyugSuHNto6XMIOPzcMe6cQ=)
                          5: bwsVGTgW_RXc_QR9tO7KZykSu2A.crl (hash: vqvtWwhMHtNfGEFmNIfjaDYOO1NUYbD+c13dgepbw0M=)
                          6: iwnR0_v7DrZOMyhOwK5w8tNyMio.roa (hash: m9wlWVaLcH73FDQVsUWe6KN6JmhaiRLX69jEcq4ITXs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 Jan 2026 23:05:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:b9:ce:66:ea:35:36:66:c7:57:a9:39:e0:8c:72:4c:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f0b15193816fd15dcfd047db4eeca672912bb60
        Validity
            Not Before: Jan 14 00:01:10 2026 GMT
            Not After : Jan 15 00:01:10 2026 GMT
        Subject: CN=9bae0adb2d21e64d92590c5bbfb6e33333d4ff0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:31:72:c7:32:a2:70:dd:43:04:d4:ea:65:f9:
                    80:b4:0a:33:14:38:d5:f0:5a:1d:73:2d:d2:8d:1f:
                    85:81:60:58:48:8a:09:f3:44:e3:36:64:97:fe:ee:
                    37:97:bc:5c:92:1b:54:4a:78:b6:e5:c8:f9:d3:b0:
                    34:84:ee:89:5a:d4:fc:98:05:68:e0:ce:8f:12:73:
                    61:0b:3a:69:e1:9e:36:ba:28:76:b4:ed:57:d9:19:
                    e8:21:2b:5b:39:d0:a9:fe:cf:2c:d2:2d:1c:82:2c:
                    bd:9e:46:71:2b:bb:de:02:75:d2:50:26:fb:da:ad:
                    68:59:f3:51:63:d1:ca:ab:5a:f9:0c:26:26:78:13:
                    a5:9b:b4:56:5c:39:83:df:7d:54:e1:d9:2e:42:64:
                    a8:f6:98:aa:f2:49:b9:32:58:df:3b:3d:5c:b6:9a:
                    3b:a2:11:6c:26:03:14:dc:9c:87:8d:0a:d4:34:02:
                    61:df:8e:0b:5c:83:c8:a1:13:4f:b1:e1:47:e6:d1:
                    49:d4:f1:5a:7c:3f:71:fe:e6:4b:5a:4e:a6:c7:d0:
                    66:bf:48:81:fa:ee:91:65:d6:6f:bc:aa:ee:bb:ed:
                    7f:bb:04:24:0c:ea:1c:f6:02:b1:89:f0:57:37:86:
                    5c:9a:6f:23:47:90:c8:ce:9b:97:0f:8a:b7:e0:5c:
                    0f:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:AE:0A:DB:2D:21:E6:4D:92:59:0C:5B:BF:B6:E3:33:33:D4:FF:0C
            X509v3 Authority Key Identifier:
                keyid:6F:0B:15:19:38:16:FD:15:DC:FD:04:7D:B4:EE:CA:67:29:12:BB:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:20:57:cc:1d:f7:29:d4:3d:03:91:3a:c4:3a:b6:74:42:23:
         c0:19:ca:c1:82:2a:e2:56:89:4f:d7:a5:11:c7:7e:1d:6e:8d:
         e6:41:30:4f:f9:82:da:4b:11:14:3d:c1:83:1d:a3:e3:aa:8c:
         5b:2c:79:1e:41:bb:db:99:86:4c:c2:15:7f:e2:83:29:f5:d0:
         f6:c1:2f:66:98:ae:4a:2e:83:b9:ed:4d:aa:c3:be:26:64:41:
         80:31:f4:66:36:22:0b:9b:bb:e2:7b:84:9d:2e:41:62:25:2b:
         a5:2b:6c:82:42:84:2a:59:bc:2c:61:3f:74:ce:a0:0d:83:b0:
         d4:73:7e:22:01:7d:e9:cd:40:43:ba:52:5d:f9:5a:40:7a:6c:
         f6:b6:52:1f:2b:da:df:92:9d:72:4e:02:9c:ba:73:28:e4:02:
         ae:b4:ca:e7:fe:f5:61:a7:9c:8c:04:63:e9:f1:b9:89:ab:56:
         4d:12:a9:2d:dd:4a:2b:5c:af:6f:6a:7b:29:9c:f5:3b:38:0f:
         eb:90:81:0b:b1:34:5b:84:5a:88:88:63:e9:a6:df:d8:d4:6d:
         e0:c8:b7:fd:35:92:34:c9:02:d4:98:e8:28:5c:f3:f8:b0:ab:
         9f:71:bc:dc:3c:94:72:bf:93:87:31:07:2d:c3:ad:19:1e:0c:
         09:b5:b6:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZu5zmbqNTZmx1epOeCMcky6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmMGIxNTE5MzgxNmZkMTVkY2ZkMDQ3ZGI0ZWVjYTY3Mjkx
MmJiNjAwHhcNMjYwMTE0MDAwMTEwWhcNMjYwMTE1MDAwMTEwWjAzMTEwLwYDVQQD
Eyg5YmFlMGFkYjJkMjFlNjRkOTI1OTBjNWJiZmI2ZTMzMzMzZDRmZjBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjjFyxzKicN1DBNTqZfmAtAozFDjV
8Fodcy3SjR+FgWBYSIoJ80TjNmSX/u43l7xckhtUSni25cj507A0hO6JWtT8mAVo
4M6PEnNhCzpp4Z42uih2tO1X2RnoIStbOdCp/s8s0i0cgiy9nkZxK7veAnXSUCb7
2q1oWfNRY9HKq1r5DCYmeBOlm7RWXDmD331U4dkuQmSo9piq8km5MljfOz1ctpo7
ohFsJgMU3JyHjQrUNAJh344LXIPIoRNPseFH5tFJ1PFafD9x/uZLWk6mx9Bmv0iB
+u6RZdZvvKruu+1/uwQkDOoc9gKxifBXN4Zcmm8jR5DIzpuXD4q34FwPawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJuuCtstIeZNklkMW7+24zMz1P8MMB8GA1UdIwQY
MBaAFG8LFRk4Fv0V3P0EfbTuymcpErtgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYndzVkdUZ1dfUlhjX1FSOXRPN0taeWtTdTJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS85NTg4NDEtZjZiMC00MjQ5LTgwNDYt
OWNmODQzZjA1NjcwLzEvYndzVkdUZ1dfUlhjX1FSOXRPN0taeWtTdTJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS85NTg4NDEtZjZiMC00MjQ5LTgwNDYtOWNmODQzZjA1Njcw
LzEvYndzVkdUZ1dfUlhjX1FSOXRPN0taeWtTdTJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmCBXzB33
KdQ9A5E6xDq2dEIjwBnKwYIq4laJT9elEcd+HW6N5kEwT/mC2ksRFD3Bgx2j46qM
Wyx5HkG725mGTMIVf+KDKfXQ9sEvZpiuSi6Due1NqsO+JmRBgDH0ZjYiC5u74nuE
nS5BYiUrpStsgkKEKlm8LGE/dM6gDYOw1HN+IgF96c1AQ7pSXflaQHps9rZSHyva
35Kdck4CnLpzKOQCrrTK5/71YaecjARj6fG5iatWTRKpLd1KK1yvb2p7KZz1OzgP
65CBC7E0W4RaiIhj6abf2NRt4Mi3/TWSNMkC1JjoKFzz+LCrn3G83DyUcr+ThzEH
LcOtGR4MCbW2hw==
-----END CERTIFICATE-----
Generated at Wed Jan 14 07:42:57 2026 by rpki-client