This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
File:                     bwsVGTgW_RXc_QR9tO7KZykSu2A.mft (raw, json)
Hash identifier:          vLQWKby0Eak8ax2oIYdSExGl0RzYy7hshnu8cH4FhXs=
Subject key identifier:   7E:DF:79:DA:10:59:62:DD:95:1E:28:0E:79:22:70:80:A5:2F:DC:84
Authority key identifier: 6F:0B:15:19:38:16:FD:15:DC:FD:04:7D:B4:EE:CA:67:29:12:BB:60
Certificate issuer:       /CN=6f0b15193816fd15dcfd047db4eeca672912bb60
Certificate serial:       019BFD65589F7B5D7518453258E4FAC96A2C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
Manifest number:          101D
Signing time:             Tue 27 Jan 2026 03:00:36 +0000
Manifest this update:     Tue 27 Jan 2026 03:00:36 +0000
Manifest next update:     Wed 28 Jan 2026 03:00:36 +0000
Files and hashes:         1: Dzfij-56Js_7H-jbcQxH-p0cmAs.roa (hash: Z+CaW8ckDIWY/oKH9+ByV5fYpxK+zdPr9T/cG0kLCqw=)
                          2: I1YJFxw21cTu-Qd8EAxDnplO6Zs.roa (hash: cAwDZZhWlnexH7GwqbKuslWZIOJhOccecpBC86Dnr2Y=)
                          3: Mt-Opg160kBARBTU28meoXARLd8.roa (hash: TB7+3UZC0vW7vpoGODBSbw4rk6M41GF33QLmygPvyP4=)
                          4: WgdXGCq5750IZB5Te3z2Ts4JuHo.roa (hash: BuQ1Y5enK/3DpIsodzPPjyugSuHNto6XMIOPzcMe6cQ=)
                          5: bwsVGTgW_RXc_QR9tO7KZykSu2A.crl (hash: 7Nm7pTNAze5ar3QDFO78GKOuaXI48c5eIj3KNbxxuZM=)
                          6: iwnR0_v7DrZOMyhOwK5w8tNyMio.roa (hash: m9wlWVaLcH73FDQVsUWe6KN6JmhaiRLX69jEcq4ITXs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Jan 2026 00:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fd:65:58:9f:7b:5d:75:18:45:32:58:e4:fa:c9:6a:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f0b15193816fd15dcfd047db4eeca672912bb60
        Validity
            Not Before: Jan 27 03:00:36 2026 GMT
            Not After : Jan 28 03:00:36 2026 GMT
        Subject: CN=7edf79da105962dd951e280e79227080a52fdc84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:8f:dd:11:65:7b:d2:e1:dd:69:aa:15:6a:ce:
                    c6:1f:72:22:ec:90:81:62:a7:93:75:00:e3:11:bb:
                    d9:01:c8:fa:6a:7c:bc:85:c2:13:6a:15:2e:c6:f6:
                    7c:13:ab:ac:e1:4f:c0:2b:92:fa:44:4f:bc:19:18:
                    9f:1f:62:c8:1e:e3:b6:d3:f5:a5:fa:4d:e8:d6:05:
                    46:91:1d:89:97:9e:22:2b:47:bd:3b:1f:0f:3f:db:
                    0c:4c:e2:1a:80:f1:36:2d:d7:9b:7c:21:a8:c5:9d:
                    88:7c:b9:b6:f5:67:74:8e:0b:e5:6f:00:d3:06:54:
                    02:f3:d8:bb:98:ef:9d:14:19:0e:89:af:d7:90:24:
                    91:84:a9:7b:41:9a:89:30:71:a2:d8:7d:15:54:51:
                    20:e0:59:02:a7:09:4e:1c:51:2a:c9:f3:5f:ca:a6:
                    69:0e:dd:06:f0:d7:b9:7f:24:a0:68:23:1a:a7:f5:
                    f0:83:a5:77:06:ad:05:fd:c3:05:e8:c7:f5:10:f6:
                    31:e6:04:fe:95:14:3f:8c:a6:e5:83:1a:01:81:19:
                    c5:89:d0:a7:42:0b:56:6a:e0:39:9f:6e:3a:61:e3:
                    43:d5:8a:a6:b8:1a:f4:cb:bc:b5:14:83:1a:3f:41:
                    a1:57:05:87:36:23:4f:74:8b:b4:a4:1a:9a:95:dd:
                    94:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:DF:79:DA:10:59:62:DD:95:1E:28:0E:79:22:70:80:A5:2F:DC:84
            X509v3 Authority Key Identifier:
                keyid:6F:0B:15:19:38:16:FD:15:DC:FD:04:7D:B4:EE:CA:67:29:12:BB:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:39:9a:86:74:34:bc:1a:61:2a:19:fb:10:c2:b2:4b:47:16:
         44:68:27:d5:56:d9:87:19:7c:26:33:10:89:d0:ee:ed:09:b1:
         dd:77:17:cb:57:bf:15:1d:c3:82:a1:60:c6:21:db:8f:29:70:
         20:d9:69:79:ce:e7:b5:28:ef:c8:fb:65:24:9f:08:e1:05:4a:
         a0:01:eb:a3:89:0a:00:1f:ee:7f:57:f8:85:53:ee:64:a0:47:
         67:ae:79:5d:23:d3:34:c7:a5:61:a8:ec:26:ca:ab:9f:06:39:
         7b:77:8c:99:1b:94:60:4e:f8:1c:2e:ba:10:32:8b:80:4a:2f:
         bf:b9:3a:ac:af:22:d4:0f:e6:c5:7c:63:93:22:1a:d3:9c:53:
         be:43:47:18:70:65:40:10:7e:84:05:00:be:3d:47:d5:76:6b:
         57:c1:7c:5c:9e:5d:cf:8c:82:c9:14:65:be:f4:94:4d:5e:da:
         26:ce:bf:3a:d1:c1:b6:3d:f5:61:68:a5:9b:14:85:c5:e3:d0:
         79:63:25:3e:fb:34:5c:0f:ec:62:68:dc:fb:be:fb:cf:1d:44:
         d4:7f:b5:82:5d:45:e2:da:07:8c:ef:5f:85:cb:05:79:cc:6f:
         cb:04:3c:5b:08:7c:ef:f9:0c:f8:63:b2:4d:79:27:ff:a7:ee:
         27:a1:ad:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv9ZVife111GEUyWOT6yWosMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmMGIxNTE5MzgxNmZkMTVkY2ZkMDQ3ZGI0ZWVjYTY3Mjkx
MmJiNjAwHhcNMjYwMTI3MDMwMDM2WhcNMjYwMTI4MDMwMDM2WjAzMTEwLwYDVQQD
Eyg3ZWRmNzlkYTEwNTk2MmRkOTUxZTI4MGU3OTIyNzA4MGE1MmZkYzg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtI/dEWV70uHdaaoVas7GH3Ii7JCB
YqeTdQDjEbvZAcj6any8hcITahUuxvZ8E6us4U/AK5L6RE+8GRifH2LIHuO20/Wl
+k3o1gVGkR2Jl54iK0e9Ox8PP9sMTOIagPE2LdebfCGoxZ2IfLm29Wd0jgvlbwDT
BlQC89i7mO+dFBkOia/XkCSRhKl7QZqJMHGi2H0VVFEg4FkCpwlOHFEqyfNfyqZp
Dt0G8Ne5fySgaCMap/Xwg6V3Bq0F/cMF6Mf1EPYx5gT+lRQ/jKblgxoBgRnFidCn
QgtWauA5n246YeND1YqmuBr0y7y1FIMaP0GhVwWHNiNPdIu0pBqald2U1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH7fedoQWWLdlR4oDnkicIClL9yEMB8GA1UdIwQY
MBaAFG8LFRk4Fv0V3P0EfbTuymcpErtgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYndzVkdUZ1dfUlhjX1FSOXRPN0taeWtTdTJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS85NTg4NDEtZjZiMC00MjQ5LTgwNDYt
OWNmODQzZjA1NjcwLzEvYndzVkdUZ1dfUlhjX1FSOXRPN0taeWtTdTJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS85NTg4NDEtZjZiMC00MjQ5LTgwNDYtOWNmODQzZjA1Njcw
LzEvYndzVkdUZ1dfUlhjX1FSOXRPN0taeWtTdTJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvjmahnQ0
vBphKhn7EMKyS0cWRGgn1VbZhxl8JjMQidDu7Qmx3XcXy1e/FR3DgqFgxiHbjylw
INlpec7ntSjvyPtlJJ8I4QVKoAHro4kKAB/uf1f4hVPuZKBHZ655XSPTNMelYajs
JsqrnwY5e3eMmRuUYE74HC66EDKLgEovv7k6rK8i1A/mxXxjkyIa05xTvkNHGHBl
QBB+hAUAvj1H1XZrV8F8XJ5dz4yCyRRlvvSUTV7aJs6/OtHBtj31YWilmxSFxePQ
eWMlPvs0XA/sYmjc+777zx1E1H+1gl1F4toHjO9fhcsFecxvywQ8Wwh87/kM+GOy
TXkn/6fuJ6GtXA==
-----END CERTIFICATE-----
Generated at Tue Jan 27 11:03:10 2026 by rpki-client