This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/0cd949-f4b7-48d9-a0c6-fda8a13ca1d7/1/mowynYdjwp8pkxq7uBlfl1A4KYs.mft
File:                     mowynYdjwp8pkxq7uBlfl1A4KYs.mft (raw, json)
Hash identifier:          l2c+cfXJ+CS1X33+zdHf/ZL4z8eABIattg4RofqA/ds=
Subject key identifier:   C7:3B:B0:A5:85:86:20:54:8B:8F:DA:07:4B:3A:01:7F:F7:72:DA:E7
Authority key identifier: 9A:8C:32:9D:87:63:C2:9F:29:93:1A:BB:B8:19:5F:97:50:38:29:8B
Certificate issuer:       /CN=9a8c329d8763c29f29931abbb8195f975038298b
Certificate serial:       019C41A22340B01862E4E7FA26EEE6CC7036
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mowynYdjwp8pkxq7uBlfl1A4KYs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/0cd949-f4b7-48d9-a0c6-fda8a13ca1d7/1/mowynYdjwp8pkxq7uBlfl1A4KYs.mft
Manifest number:          0507
Signing time:             Mon 09 Feb 2026 09:01:10 +0000
Manifest this update:     Mon 09 Feb 2026 09:01:10 +0000
Manifest next update:     Tue 10 Feb 2026 09:01:10 +0000
Files and hashes:         1: DEtJZBXl24UTmKRuIq3pxJtnaOw.roa (hash: MndJAH2T2Jh63p0lxR3Y6bgJbjAqRwsstx6Rzo2dgCo=)
                          2: mowynYdjwp8pkxq7uBlfl1A4KYs.crl (hash: 4ePTxAgQaHaiolwQM9P98jvQLbjHkgkTHKrmtavlL/o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/0cd949-f4b7-48d9-a0c6-fda8a13ca1d7/1/mowynYdjwp8pkxq7uBlfl1A4KYs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/0cd949-f4b7-48d9-a0c6-fda8a13ca1d7/1/mowynYdjwp8pkxq7uBlfl1A4KYs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mowynYdjwp8pkxq7uBlfl1A4KYs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 09:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:a2:23:40:b0:18:62:e4:e7:fa:26:ee:e6:cc:70:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a8c329d8763c29f29931abbb8195f975038298b
        Validity
            Not Before: Feb  9 09:01:10 2026 GMT
            Not After : Feb 10 09:01:10 2026 GMT
        Subject: CN=c73bb0a5858620548b8fda074b3a017ff772dae7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:0d:80:a7:a0:56:87:f5:60:fb:c8:f8:92:fa:
                    14:c7:0a:2a:c1:ed:62:19:b0:5c:38:01:5a:c2:23:
                    8e:81:8f:e3:ac:30:58:a6:c7:c4:e4:ac:5c:2e:77:
                    33:00:9b:d1:e1:59:08:28:10:ff:5e:e2:1d:df:59:
                    a0:b8:8f:43:f4:01:42:51:02:90:f7:fb:71:35:3c:
                    9c:52:ab:21:52:39:0b:97:6a:f5:59:41:e1:46:9a:
                    87:6d:fc:57:1e:88:25:b3:3a:4b:31:60:04:86:98:
                    4f:d3:df:94:a9:8a:a1:d4:ba:7a:e4:51:1b:7f:d0:
                    81:c8:50:25:79:d2:a3:fa:25:e6:c7:10:8d:81:1c:
                    50:5e:df:59:65:7b:b8:68:83:2c:4b:3e:54:91:91:
                    62:bd:bf:16:d8:92:ce:5d:ca:71:e5:82:19:26:18:
                    04:db:df:f0:77:f0:1e:5a:66:e1:f0:04:4f:ad:70:
                    e5:8a:dd:2f:29:9a:86:59:8d:ae:21:fc:1a:75:5b:
                    da:5e:0b:bd:a2:9c:94:ef:13:dc:a2:c5:c0:87:6c:
                    83:7b:5e:4b:27:76:8f:ff:cd:77:d8:0c:53:4b:7f:
                    8d:65:4c:a7:4e:e9:f5:27:5c:e3:25:d4:4b:62:df:
                    12:65:07:a8:06:40:27:a2:88:6c:8e:f6:c0:f2:ea:
                    c1:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:3B:B0:A5:85:86:20:54:8B:8F:DA:07:4B:3A:01:7F:F7:72:DA:E7
            X509v3 Authority Key Identifier:
                keyid:9A:8C:32:9D:87:63:C2:9F:29:93:1A:BB:B8:19:5F:97:50:38:29:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mowynYdjwp8pkxq7uBlfl1A4KYs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/0cd949-f4b7-48d9-a0c6-fda8a13ca1d7/1/mowynYdjwp8pkxq7uBlfl1A4KYs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/0cd949-f4b7-48d9-a0c6-fda8a13ca1d7/1/mowynYdjwp8pkxq7uBlfl1A4KYs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:c4:49:23:c8:3e:81:17:11:fe:a5:4b:79:1e:3f:26:f8:c5:
         bf:94:97:d6:25:69:34:de:af:66:5d:30:b8:30:ae:7a:75:7a:
         1c:f7:8c:69:85:36:5f:f2:04:8b:70:cf:3d:a9:22:26:24:9d:
         0e:22:47:99:2e:b3:4b:af:3f:5f:66:c8:18:4c:78:f4:a9:a5:
         c5:a5:2f:ab:50:98:30:e7:1e:a4:39:2a:da:c8:78:2a:e8:43:
         6c:e0:64:f6:d5:b8:6e:67:01:db:e4:e4:92:92:0b:43:a5:74:
         d4:42:80:a2:76:2b:f1:44:67:a7:41:9e:10:c9:c3:a7:ee:cf:
         01:f0:99:71:63:5d:43:c3:ee:96:a5:fd:8a:e4:f8:03:ec:31:
         a8:0e:50:17:2e:ce:58:bb:6e:42:fc:d7:61:83:ac:52:77:c0:
         19:c3:3f:22:ce:da:72:5b:ab:d6:7b:44:49:87:65:cd:b1:78:
         32:c5:aa:d1:a9:a0:fe:de:37:c5:7b:a3:4a:51:5c:fa:37:2c:
         05:dc:86:8b:ca:50:13:a2:a5:be:8a:9e:65:0f:1f:96:7d:52:
         c7:3f:26:8b:64:b7:58:3a:26:7c:3d:e7:1e:df:10:06:52:73:
         0c:cb:1c:a7:94:77:71:1e:33:c5:d9:6d:43:95:78:03:b4:c5:
         4b:a2:e1:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:33:27 2026 by rpki-client