This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/0cd949-f4b7-48d9-a0c6-fda8a13ca1d7/1/mowynYdjwp8pkxq7uBlfl1A4KYs.mft
File:                     mowynYdjwp8pkxq7uBlfl1A4KYs.mft (raw, json)
Hash identifier:          vLRS2agE5NT077RkSIRu5dGXWClVvwRbqYtVoMgBx9w=
Subject key identifier:   72:1F:9C:46:51:48:8A:91:0F:B7:5D:66:C2:26:05:90:1F:6A:34:73
Authority key identifier: 9A:8C:32:9D:87:63:C2:9F:29:93:1A:BB:B8:19:5F:97:50:38:29:8B
Certificate issuer:       /CN=9a8c329d8763c29f29931abbb8195f975038298b
Certificate serial:       019BF650AA96238C59B663E3B7DCE0D848FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mowynYdjwp8pkxq7uBlfl1A4KYs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/0cd949-f4b7-48d9-a0c6-fda8a13ca1d7/1/mowynYdjwp8pkxq7uBlfl1A4KYs.mft
Manifest number:          04E0
Signing time:             Sun 25 Jan 2026 18:00:40 +0000
Manifest this update:     Sun 25 Jan 2026 18:00:40 +0000
Manifest next update:     Mon 26 Jan 2026 18:00:40 +0000
Files and hashes:         1: DEtJZBXl24UTmKRuIq3pxJtnaOw.roa (hash: MndJAH2T2Jh63p0lxR3Y6bgJbjAqRwsstx6Rzo2dgCo=)
                          2: mowynYdjwp8pkxq7uBlfl1A4KYs.crl (hash: TTW8bLQ5hpHbxP7mKrWO4WZz9aWe6tf/r1zDCoGeikc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/0cd949-f4b7-48d9-a0c6-fda8a13ca1d7/1/mowynYdjwp8pkxq7uBlfl1A4KYs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/0cd949-f4b7-48d9-a0c6-fda8a13ca1d7/1/mowynYdjwp8pkxq7uBlfl1A4KYs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mowynYdjwp8pkxq7uBlfl1A4KYs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 18:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f6:50:aa:96:23:8c:59:b6:63:e3:b7:dc:e0:d8:48:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a8c329d8763c29f29931abbb8195f975038298b
        Validity
            Not Before: Jan 25 18:00:40 2026 GMT
            Not After : Jan 26 18:00:40 2026 GMT
        Subject: CN=721f9c4651488a910fb75d66c22605901f6a3473
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:f0:45:4d:16:05:6f:4d:68:a6:9a:04:42:bc:
                    55:99:1c:0b:87:6a:06:19:ed:13:78:46:05:7d:33:
                    4d:ec:cb:f0:e4:41:ad:07:01:06:0b:e9:a5:69:2a:
                    06:76:5c:55:94:4a:c6:76:39:4b:98:c0:28:72:55:
                    ff:8b:a6:37:ad:e8:3f:c9:d5:51:13:91:83:12:6b:
                    b2:a4:05:db:a1:45:a6:3f:07:3b:e7:b1:3e:55:c9:
                    c9:cb:0c:36:c3:2c:d9:7d:e0:89:aa:d2:d6:83:fe:
                    92:3f:46:af:d6:cb:85:81:31:ad:9e:86:5d:94:42:
                    aa:a3:51:a5:b5:eb:a7:72:2c:98:ec:85:0f:cc:f0:
                    07:7b:1d:ee:8b:f4:87:b5:95:57:55:92:31:4c:41:
                    02:0a:f3:0f:ce:e4:54:92:ca:3c:c0:80:d1:ab:bf:
                    41:f6:ff:8a:87:fb:f8:40:90:5f:17:00:ff:73:63:
                    ad:14:4f:82:d7:aa:0a:1a:13:a9:5d:74:7f:e1:a6:
                    12:c9:3b:59:8c:96:2b:b0:4d:4d:a0:02:82:d1:51:
                    60:9c:63:ad:ed:e7:21:f7:36:4d:15:83:0d:24:cf:
                    3d:16:54:cc:36:e2:3c:7f:99:b0:90:c4:76:c6:61:
                    33:dd:f4:58:fc:be:53:0a:86:64:c2:6a:e4:d1:20:
                    c0:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:1F:9C:46:51:48:8A:91:0F:B7:5D:66:C2:26:05:90:1F:6A:34:73
            X509v3 Authority Key Identifier:
                keyid:9A:8C:32:9D:87:63:C2:9F:29:93:1A:BB:B8:19:5F:97:50:38:29:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mowynYdjwp8pkxq7uBlfl1A4KYs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/0cd949-f4b7-48d9-a0c6-fda8a13ca1d7/1/mowynYdjwp8pkxq7uBlfl1A4KYs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/0cd949-f4b7-48d9-a0c6-fda8a13ca1d7/1/mowynYdjwp8pkxq7uBlfl1A4KYs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:2b:93:b7:10:1f:68:82:18:05:64:92:db:b9:01:31:d3:98:
         83:88:8c:cb:3c:ca:23:70:ad:16:af:6b:66:a4:b1:98:a8:6f:
         61:47:fe:cf:1b:be:f0:79:dd:c6:e5:75:8c:69:67:82:6a:78:
         79:1e:d8:6d:a3:cf:5d:f5:ca:14:d6:66:a2:f0:37:60:07:9d:
         9e:0c:a0:d7:83:13:a9:06:69:d9:0d:ee:99:30:91:c8:78:fc:
         39:bc:e7:8f:14:70:34:14:8c:d8:0f:5d:3f:bf:c4:4f:a4:5b:
         2b:72:ff:2f:51:03:43:1a:34:6e:38:dd:49:8c:7b:bd:f4:c6:
         ae:2b:d4:f8:6c:30:43:27:3c:3d:b4:d7:5b:46:42:3b:7b:c9:
         3d:7b:ad:5d:1a:cb:ce:49:de:2c:4c:3b:51:67:41:3a:cd:53:
         94:aa:4d:43:e0:94:10:b0:3b:ec:64:99:d7:08:9f:fb:51:09:
         34:0b:8a:26:11:8d:fc:8f:0a:bb:6d:7c:1f:e8:90:48:23:6e:
         53:8a:24:21:3b:4e:01:31:de:6e:fb:51:06:f0:50:ea:e7:35:
         1f:ee:70:52:da:14:39:83:f8:89:d7:e6:d2:ff:f7:08:bb:0b:
         a1:0e:31:e4:a2:35:c9:ca:ae:46:61:f5:9b:f6:d4:34:02:d3:
         a2:4e:55:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv2UKqWI4xZtmPjt9zg2Ej8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhOGMzMjlkODc2M2MyOWYyOTkzMWFiYmI4MTk1Zjk3NTAz
ODI5OGIwHhcNMjYwMTI1MTgwMDQwWhcNMjYwMTI2MTgwMDQwWjAzMTEwLwYDVQQD
Eyg3MjFmOWM0NjUxNDg4YTkxMGZiNzVkNjZjMjI2MDU5MDFmNmEzNDczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyvBFTRYFb01oppoEQrxVmRwLh2oG
Ge0TeEYFfTNN7Mvw5EGtBwEGC+mlaSoGdlxVlErGdjlLmMAoclX/i6Y3reg/ydVR
E5GDEmuypAXboUWmPwc757E+VcnJyww2wyzZfeCJqtLWg/6SP0av1suFgTGtnoZd
lEKqo1GlteunciyY7IUPzPAHex3ui/SHtZVXVZIxTEECCvMPzuRUkso8wIDRq79B
9v+Kh/v4QJBfFwD/c2OtFE+C16oKGhOpXXR/4aYSyTtZjJYrsE1NoAKC0VFgnGOt
7ech9zZNFYMNJM89FlTMNuI8f5mwkMR2xmEz3fRY/L5TCoZkwmrk0SDAQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHIfnEZRSIqRD7ddZsImBZAfajRzMB8GA1UdIwQY
MBaAFJqMMp2HY8KfKZMau7gZX5dQOCmLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbW93eW5ZZGp3cDhwa3hxN3VCbGZsMUE0S1lzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS8wY2Q5NDktZjRiNy00OGQ5LWEwYzYt
ZmRhOGExM2NhMWQ3LzEvbW93eW5ZZGp3cDhwa3hxN3VCbGZsMUE0S1lzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS8wY2Q5NDktZjRiNy00OGQ5LWEwYzYtZmRhOGExM2NhMWQ3
LzEvbW93eW5ZZGp3cDhwa3hxN3VCbGZsMUE0S1lzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkyuTtxAf
aIIYBWSS27kBMdOYg4iMyzzKI3CtFq9rZqSxmKhvYUf+zxu+8HndxuV1jGlngmp4
eR7YbaPPXfXKFNZmovA3YAedngyg14MTqQZp2Q3umTCRyHj8ObznjxRwNBSM2A9d
P7/ET6RbK3L/L1EDQxo0bjjdSYx7vfTGrivU+GwwQyc8PbTXW0ZCO3vJPXutXRrL
zkneLEw7UWdBOs1TlKpNQ+CUELA77GSZ1wif+1EJNAuKJhGN/I8Ku218H+iQSCNu
U4okITtOATHebvtRBvBQ6uc1H+5wUtoUOYP4idfm0v/3CLsLoQ4x5KI1ycquRmH1
m/bUNALTok5Vlw==
-----END CERTIFICATE-----
Generated at Mon Jan 26 03:11:32 2026 by rpki-client