This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/6914ce-66c2-4238-92b7-a2d636f325e6/1/0BE91dB1nAMAk4AUDGaOu9H5wWg.mft
File:                     0BE91dB1nAMAk4AUDGaOu9H5wWg.mft (raw, json)
Hash identifier:          ZZ/8icoaxYU88Iog4jHBgka+2vyHGrj0Ciizi/LXnu8=
Subject key identifier:   E6:C2:A9:E7:10:CA:94:6A:C5:EF:F8:1F:F0:59:B3:69:2F:CD:12:13
Authority key identifier: D0:11:3D:D5:D0:75:9C:03:00:93:80:14:0C:66:8E:BB:D1:F9:C1:68
Certificate issuer:       /CN=d0113dd5d0759c03009380140c668ebbd1f9c168
Certificate serial:       019BF575122828E88E3C6D31B5FC59B4DF31
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0BE91dB1nAMAk4AUDGaOu9H5wWg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/6914ce-66c2-4238-92b7-a2d636f325e6/1/0BE91dB1nAMAk4AUDGaOu9H5wWg.mft
Manifest number:          0958
Signing time:             Sun 25 Jan 2026 14:00:48 +0000
Manifest this update:     Sun 25 Jan 2026 14:00:48 +0000
Manifest next update:     Mon 26 Jan 2026 14:00:48 +0000
Files and hashes:         1: 0BE91dB1nAMAk4AUDGaOu9H5wWg.crl (hash: 44IFtI6D/xCqt8FzMViTm4mfJWkpco6KNfDN5DgxYE4=)
                          2: 3bKiWroMVRWSgrVPCLoYKNVNG8A.roa (hash: pd1MEidf4yNPswPYHd04UaaBbqBAjijy+PB8kWBqbm0=)
                          3: 3kr5oYfp9V4uP3ft7fU_luP3qW4.roa (hash: HAdCLnnKIvgSKudpZEIhpADZADlQBM8bR9nxOEhnmHY=)
                          4: 5nq9HL_fbHwF3htXeFbjQsIUGNI.roa (hash: HH0P6PKHmRUyRPLZbai/JhwygluwWuiwYd/rDdjWeOU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/6914ce-66c2-4238-92b7-a2d636f325e6/1/0BE91dB1nAMAk4AUDGaOu9H5wWg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/6914ce-66c2-4238-92b7-a2d636f325e6/1/0BE91dB1nAMAk4AUDGaOu9H5wWg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0BE91dB1nAMAk4AUDGaOu9H5wWg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f5:75:12:28:28:e8:8e:3c:6d:31:b5:fc:59:b4:df:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0113dd5d0759c03009380140c668ebbd1f9c168
        Validity
            Not Before: Jan 25 14:00:48 2026 GMT
            Not After : Jan 26 14:00:48 2026 GMT
        Subject: CN=e6c2a9e710ca946ac5eff81ff059b3692fcd1213
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:07:d1:c8:8f:9b:70:b1:03:dc:60:f0:56:18:
                    9f:d9:16:43:81:05:eb:d5:cf:60:fb:07:f9:13:2e:
                    58:ae:d5:6d:20:ae:26:6b:46:3f:d0:55:38:1a:8a:
                    0e:23:e0:f7:3a:9d:0f:4a:1c:e1:a0:80:08:3b:b2:
                    e6:2b:e3:1f:69:c8:1e:13:4c:9b:2b:dd:1d:60:44:
                    22:2b:7c:5b:b9:70:f8:59:97:95:bc:43:c7:1e:0a:
                    77:01:49:f3:cb:37:94:c0:65:63:5d:dd:49:fe:7e:
                    56:a6:2d:4f:f2:c1:17:e9:b3:bf:31:31:63:ed:bc:
                    de:f6:93:f5:e8:00:e7:32:06:94:47:f2:90:a0:a2:
                    fd:a9:5e:fe:22:c5:fe:32:19:ac:f8:00:75:85:62:
                    93:7e:87:69:9a:1e:46:8c:65:70:e7:f0:53:d9:cb:
                    ea:ae:db:89:18:74:f9:95:11:bd:45:0b:3b:ef:f9:
                    e8:85:d4:c8:38:78:06:2a:ff:53:7d:1c:1c:02:8b:
                    24:83:f5:39:d7:fb:b5:19:53:e9:99:1e:58:28:5a:
                    d0:a1:c4:d1:fe:25:4d:25:de:52:32:ec:f7:b3:83:
                    d9:d0:27:6c:37:d5:f7:95:0a:a5:d9:0c:80:eb:d2:
                    9f:e4:fa:d4:39:e1:c4:7c:19:b2:72:c1:2f:b5:75:
                    f0:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:C2:A9:E7:10:CA:94:6A:C5:EF:F8:1F:F0:59:B3:69:2F:CD:12:13
            X509v3 Authority Key Identifier:
                keyid:D0:11:3D:D5:D0:75:9C:03:00:93:80:14:0C:66:8E:BB:D1:F9:C1:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0BE91dB1nAMAk4AUDGaOu9H5wWg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/6914ce-66c2-4238-92b7-a2d636f325e6/1/0BE91dB1nAMAk4AUDGaOu9H5wWg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/6914ce-66c2-4238-92b7-a2d636f325e6/1/0BE91dB1nAMAk4AUDGaOu9H5wWg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:f3:24:f6:44:6e:d9:b1:d0:2d:21:9c:a2:5d:be:d9:7b:0c:
         bc:4d:5f:c8:13:98:29:9c:63:d5:52:5d:37:04:83:f4:01:fb:
         e6:24:44:ba:38:69:a7:3b:15:d6:b1:5c:88:71:d7:dc:e6:9f:
         f9:01:43:ab:25:c5:78:b2:f6:d4:98:fa:89:5b:3c:ad:7b:ba:
         d5:47:73:ae:49:be:5c:46:3f:17:f5:8f:2b:23:31:1e:79:80:
         92:04:2e:a9:5d:be:cd:9c:23:7b:f9:c6:03:67:84:a9:a0:9b:
         b8:01:38:0a:d0:5e:f7:2b:df:8f:17:78:43:8f:d8:0a:c7:9c:
         24:37:b5:a0:ac:6c:2a:e1:df:82:b4:fe:8a:0e:3d:88:50:be:
         77:5b:9c:d4:8b:10:ac:0f:87:34:98:fd:26:b2:12:01:03:d1:
         44:59:47:f2:51:cb:d9:2e:47:0f:4f:7b:a4:47:6e:1c:34:c9:
         bc:32:62:7a:84:30:18:9c:33:61:ef:69:77:81:f9:36:fd:61:
         12:aa:9c:32:c2:5e:d7:12:83:8c:a9:e7:5f:1a:82:01:f2:c0:
         d5:54:b7:b2:d5:24:bc:cc:e7:dc:10:ca:b4:c8:b2:0b:bf:89:
         54:1f:27:03:a3:39:29:7e:86:10:da:33:d2:6a:9a:ac:8c:24:
         d1:22:99:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv1dRIoKOiOPG0xtfxZtN8xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwMTEzZGQ1ZDA3NTljMDMwMDkzODAxNDBjNjY4ZWJiZDFm
OWMxNjgwHhcNMjYwMTI1MTQwMDQ4WhcNMjYwMTI2MTQwMDQ4WjAzMTEwLwYDVQQD
EyhlNmMyYTllNzEwY2E5NDZhYzVlZmY4MWZmMDU5YjM2OTJmY2QxMjEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxAfRyI+bcLED3GDwVhif2RZDgQXr
1c9g+wf5Ey5YrtVtIK4ma0Y/0FU4GooOI+D3Op0PShzhoIAIO7LmK+MfacgeE0yb
K90dYEQiK3xbuXD4WZeVvEPHHgp3AUnzyzeUwGVjXd1J/n5Wpi1P8sEX6bO/MTFj
7bze9pP16ADnMgaUR/KQoKL9qV7+IsX+Mhms+AB1hWKTfodpmh5GjGVw5/BT2cvq
rtuJGHT5lRG9RQs77/nohdTIOHgGKv9TfRwcAoskg/U51/u1GVPpmR5YKFrQocTR
/iVNJd5SMuz3s4PZ0CdsN9X3lQql2QyA69Kf5PrUOeHEfBmycsEvtXXwYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFObCqecQypRqxe/4H/BZs2kvzRITMB8GA1UdIwQY
MBaAFNARPdXQdZwDAJOAFAxmjrvR+cFoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEJFOTFkQjFuQU1BazRBVURHYU91OUg1d1dnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS82OTE0Y2UtNjZjMi00MjM4LTkyYjct
YTJkNjM2ZjMyNWU2LzEvMEJFOTFkQjFuQU1BazRBVURHYU91OUg1d1dnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS82OTE0Y2UtNjZjMi00MjM4LTkyYjctYTJkNjM2ZjMyNWU2
LzEvMEJFOTFkQjFuQU1BazRBVURHYU91OUg1d1dnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJfMk9kRu
2bHQLSGcol2+2XsMvE1fyBOYKZxj1VJdNwSD9AH75iREujhppzsV1rFciHHX3Oaf
+QFDqyXFeLL21Jj6iVs8rXu61Udzrkm+XEY/F/WPKyMxHnmAkgQuqV2+zZwje/nG
A2eEqaCbuAE4CtBe9yvfjxd4Q4/YCsecJDe1oKxsKuHfgrT+ig49iFC+d1uc1IsQ
rA+HNJj9JrISAQPRRFlH8lHL2S5HD097pEduHDTJvDJieoQwGJwzYe9pd4H5Nv1h
EqqcMsJe1xKDjKnnXxqCAfLA1VS3stUkvMzn3BDKtMiyC7+JVB8nA6M5KX6GENoz
0mqarIwk0SKZ4g==
-----END CERTIFICATE-----
Generated at Sun Jan 25 21:29:21 2026 by rpki-client