This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/6ff230-e012-4531-866c-0a8bd2f36c72/1/dwAbzGmhZQNCG4iFH0eqFsXPLbw.mft
File:                     dwAbzGmhZQNCG4iFH0eqFsXPLbw.mft (raw, json)
Hash identifier:          NqWq1JvIZREu2q6jSJHmlzsHoVIu3EyAFaFImf4JDcc=
Subject key identifier:   27:E4:6B:9D:1E:F8:D4:DA:B0:A1:41:E6:B6:62:A3:11:A2:56:F3:B5
Authority key identifier: 77:00:1B:CC:69:A1:65:03:42:1B:88:85:1F:47:AA:16:C5:CF:2D:BC
Certificate issuer:       /CN=77001bcc69a16503421b88851f47aa16c5cf2dbc
Certificate serial:       019BF687B2792C250D7B024C3E833DE583A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dwAbzGmhZQNCG4iFH0eqFsXPLbw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/6ff230-e012-4531-866c-0a8bd2f36c72/1/dwAbzGmhZQNCG4iFH0eqFsXPLbw.mft
Manifest number:          0B44
Signing time:             Sun 25 Jan 2026 19:00:46 +0000
Manifest this update:     Sun 25 Jan 2026 19:00:46 +0000
Manifest next update:     Mon 26 Jan 2026 19:00:46 +0000
Files and hashes:         1: Jwf_hYKhkzsSqlC_ATEnCQ1TOWE.roa (hash: WNChQ5FZcNT+Uy6r/VXAfEff5h4yB9HjomF668ERFPs=)
                          2: dwAbzGmhZQNCG4iFH0eqFsXPLbw.crl (hash: ESMvPYknlxqfh2us83Z1NEd6/6BVIe4iTM24pPivZgw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/6ff230-e012-4531-866c-0a8bd2f36c72/1/dwAbzGmhZQNCG4iFH0eqFsXPLbw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/6ff230-e012-4531-866c-0a8bd2f36c72/1/dwAbzGmhZQNCG4iFH0eqFsXPLbw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dwAbzGmhZQNCG4iFH0eqFsXPLbw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 19:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f6:87:b2:79:2c:25:0d:7b:02:4c:3e:83:3d:e5:83:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77001bcc69a16503421b88851f47aa16c5cf2dbc
        Validity
            Not Before: Jan 25 19:00:46 2026 GMT
            Not After : Jan 26 19:00:46 2026 GMT
        Subject: CN=27e46b9d1ef8d4dab0a141e6b662a311a256f3b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:5d:e6:0a:d2:08:7f:41:66:8a:0a:0a:cb:54:
                    00:c7:45:00:19:a9:cd:08:5e:1f:fb:7e:fe:90:1a:
                    ae:0b:a9:9b:24:37:e4:4c:2a:c6:35:5f:a1:9c:17:
                    d7:42:65:95:95:2d:03:4e:d1:9c:fd:c1:69:cb:8b:
                    f5:a1:10:90:7d:77:1f:40:21:2d:33:ca:0d:12:36:
                    93:31:02:c7:51:e6:65:bc:ee:20:0e:ca:f9:e6:41:
                    db:d7:17:2a:a6:0f:ac:2e:77:3e:56:10:ef:11:f0:
                    66:31:39:16:2b:8d:02:18:f1:59:f6:6c:7d:d3:a0:
                    76:92:66:44:ca:93:41:f5:65:6a:e5:9a:48:97:76:
                    7c:d8:1a:ee:1a:53:0e:54:d9:c5:6f:ab:d2:ce:0a:
                    30:0b:97:69:46:5a:cc:16:51:77:ea:77:48:0f:53:
                    ca:ba:8e:6a:fd:01:f0:9d:26:9d:18:38:44:b4:3e:
                    1b:c8:d5:94:27:3c:42:5b:80:d2:e6:4d:00:87:93:
                    d5:b7:c5:4e:40:5c:19:89:2a:2a:ce:ff:94:c4:3d:
                    26:8a:d2:ec:7d:31:26:9a:24:6a:50:58:c5:73:3e:
                    35:69:0e:a8:9d:a6:d7:b7:ad:f6:db:3f:52:b1:35:
                    30:ca:8c:a7:2c:f8:bf:b3:b2:10:a0:4e:b8:a3:f1:
                    77:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:E4:6B:9D:1E:F8:D4:DA:B0:A1:41:E6:B6:62:A3:11:A2:56:F3:B5
            X509v3 Authority Key Identifier:
                keyid:77:00:1B:CC:69:A1:65:03:42:1B:88:85:1F:47:AA:16:C5:CF:2D:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dwAbzGmhZQNCG4iFH0eqFsXPLbw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/6ff230-e012-4531-866c-0a8bd2f36c72/1/dwAbzGmhZQNCG4iFH0eqFsXPLbw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/6ff230-e012-4531-866c-0a8bd2f36c72/1/dwAbzGmhZQNCG4iFH0eqFsXPLbw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:8b:23:e8:21:e1:2e:15:7e:e7:d8:fc:14:a9:63:fa:47:5f:
         4e:34:6e:ac:e0:56:25:1a:26:89:c7:6c:09:ff:a8:fc:40:bf:
         5e:d4:58:e8:5c:56:7a:a4:0d:5b:aa:c7:da:56:91:d9:e6:84:
         16:3c:35:1e:19:d6:f5:79:4f:a5:40:da:2a:27:73:fa:53:12:
         f1:5d:79:c8:fe:f5:9a:5d:4f:b1:31:df:e1:ee:73:36:89:63:
         bb:81:0d:e8:bc:e9:ef:48:d3:1a:48:38:a3:ab:92:ef:7e:d8:
         30:8b:8e:89:7d:b1:62:14:5e:09:4f:28:e9:1d:82:76:39:f0:
         10:22:12:57:26:57:50:fb:1a:31:88:c5:8a:d3:4b:c9:af:bb:
         66:25:9d:14:49:b6:f0:cf:e6:f7:ed:15:99:f7:e0:bf:29:70:
         02:74:e1:20:4e:38:dc:52:01:20:f8:bb:1c:ed:c9:b3:e5:48:
         a5:e6:a9:16:6f:25:e9:1e:1c:c8:2e:40:16:03:4b:0b:e5:78:
         b3:8b:25:95:9d:e5:71:ca:23:25:17:a5:b5:41:49:76:8b:fc:
         6d:b9:59:e2:7d:f2:f3:65:59:0d:b0:1a:c1:7e:07:38:b7:d1:
         1d:94:e9:e6:59:4e:6c:1d:a8:fa:4f:37:61:fc:7d:4d:c6:61:
         c8:de:0d:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv2h7J5LCUNewJMPoM95YOpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3MDAxYmNjNjlhMTY1MDM0MjFiODg4NTFmNDdhYTE2YzVj
ZjJkYmMwHhcNMjYwMTI1MTkwMDQ2WhcNMjYwMTI2MTkwMDQ2WjAzMTEwLwYDVQQD
EygyN2U0NmI5ZDFlZjhkNGRhYjBhMTQxZTZiNjYyYTMxMWEyNTZmM2I1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArV3mCtIIf0FmigoKy1QAx0UAGanN
CF4f+37+kBquC6mbJDfkTCrGNV+hnBfXQmWVlS0DTtGc/cFpy4v1oRCQfXcfQCEt
M8oNEjaTMQLHUeZlvO4gDsr55kHb1xcqpg+sLnc+VhDvEfBmMTkWK40CGPFZ9mx9
06B2kmZEypNB9WVq5ZpIl3Z82BruGlMOVNnFb6vSzgowC5dpRlrMFlF36ndID1PK
uo5q/QHwnSadGDhEtD4byNWUJzxCW4DS5k0Ah5PVt8VOQFwZiSoqzv+UxD0mitLs
fTEmmiRqUFjFcz41aQ6onabXt6322z9SsTUwyoynLPi/s7IQoE64o/F3AQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCfka50e+NTasKFB5rZioxGiVvO1MB8GA1UdIwQY
MBaAFHcAG8xpoWUDQhuIhR9HqhbFzy28MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZHdBYnpHbWhaUU5DRzRpRkgwZXFGc1hQTGJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS82ZmYyMzAtZTAxMi00NTMxLTg2NmMt
MGE4YmQyZjM2YzcyLzEvZHdBYnpHbWhaUU5DRzRpRkgwZXFGc1hQTGJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS82ZmYyMzAtZTAxMi00NTMxLTg2NmMtMGE4YmQyZjM2Yzcy
LzEvZHdBYnpHbWhaUU5DRzRpRkgwZXFGc1hQTGJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlIsj6CHh
LhV+59j8FKlj+kdfTjRurOBWJRomicdsCf+o/EC/XtRY6FxWeqQNW6rH2laR2eaE
Fjw1HhnW9XlPpUDaKidz+lMS8V15yP71ml1PsTHf4e5zNolju4EN6Lzp70jTGkg4
o6uS737YMIuOiX2xYhReCU8o6R2CdjnwECISVyZXUPsaMYjFitNLya+7ZiWdFEm2
8M/m9+0VmffgvylwAnThIE443FIBIPi7HO3Js+VIpeapFm8l6R4cyC5AFgNLC+V4
s4sllZ3lccojJReltUFJdov8bblZ4n3y82VZDbAawX4HOLfRHZTp5llObB2o+k83
Yfx9TcZhyN4NjQ==
-----END CERTIFICATE-----
Generated at Mon Jan 26 03:33:01 2026 by rpki-client