This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/88175a-12c8-4590-82e0-3c6f88c914b1/1/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.mft
File:                     J9hkDDBRB3ZqZG-_jsgdtFzh8kk.mft (raw, json)
Hash identifier:          R0FjGW2HtGza71ReVsLYrP8c2XIz8U+Z6uABznyCnyE=
Subject key identifier:   FA:B2:95:03:14:F7:6E:84:A5:A0:2D:6A:ED:40:E3:11:E1:28:57:B2
Authority key identifier: 27:D8:64:0C:30:51:07:76:6A:64:6F:BF:8E:C8:1D:B4:5C:E1:F2:49
Certificate issuer:       /CN=27d8640c305107766a646fbf8ec81db45ce1f249
Certificate serial:       019C420F893AEEDF530867F785F4603247DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/88175a-12c8-4590-82e0-3c6f88c914b1/1/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.mft
Manifest number:          166A
Signing time:             Mon 09 Feb 2026 11:00:40 +0000
Manifest this update:     Mon 09 Feb 2026 11:00:40 +0000
Manifest next update:     Tue 10 Feb 2026 11:00:40 +0000
Files and hashes:         1: 6H-9AoNqSrBI_cHU_8jwycSpvuQ.roa (hash: KiQDrwuKHeqxHDHuFUTDtaD1ZiwMGGrMOy/IRx+eThE=)
                          2: J9hkDDBRB3ZqZG-_jsgdtFzh8kk.crl (hash: bpvn+TBIXy2ltYBVrLJT+z/+BHfYq4oZvUyzzzk8IVc=)
                          3: _zWse9VeR2Ks8Tmud0pKUxt54Rs.roa (hash: nVGx0eRXA+P6cmYQPgwiiD4iTa2vIfOtyuiTU3+mtfo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/88175a-12c8-4590-82e0-3c6f88c914b1/1/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/88175a-12c8-4590-82e0-3c6f88c914b1/1/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:0f:89:3a:ee:df:53:08:67:f7:85:f4:60:32:47:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27d8640c305107766a646fbf8ec81db45ce1f249
        Validity
            Not Before: Feb  9 11:00:40 2026 GMT
            Not After : Feb 10 11:00:40 2026 GMT
        Subject: CN=fab2950314f76e84a5a02d6aed40e311e12857b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:52:b1:5f:4c:2b:3f:6a:96:13:97:95:13:8c:
                    30:66:c4:e2:d9:f7:ce:e1:66:ac:6d:92:e3:a7:82:
                    45:9e:e1:d3:20:3d:e7:df:db:2e:37:e3:d4:12:fe:
                    99:f5:f6:cc:c1:03:85:17:a5:48:bb:81:38:bb:01:
                    f8:c9:fe:b7:75:23:aa:19:67:6e:68:9e:0a:14:68:
                    5b:4e:11:57:b7:8a:5f:0c:8a:ae:b3:01:35:40:83:
                    63:6e:0e:bb:30:16:88:af:12:a8:be:f1:df:20:18:
                    5a:d6:32:f5:cd:c6:1a:e8:fc:f0:b8:d6:d5:2b:a9:
                    a9:b7:06:48:30:fd:5e:76:09:b0:17:5a:76:93:3c:
                    28:7c:be:ba:3b:62:bb:9a:1f:86:1c:b0:22:fd:db:
                    23:16:ba:d3:1e:a1:ad:f9:60:1c:1a:a9:9c:f5:6a:
                    30:9c:75:e9:ee:73:c0:b9:6b:61:88:de:9e:22:d1:
                    cf:73:39:ae:d7:c4:b5:c7:3d:55:3b:32:9f:a7:21:
                    c9:65:93:35:30:e9:4e:3e:13:89:f9:aa:37:ce:8c:
                    ea:f5:be:c0:8c:77:91:0d:b7:c5:c9:59:46:0e:dc:
                    52:5b:e5:14:cd:d8:e0:8a:82:0e:be:84:c8:f5:c5:
                    85:b2:21:95:22:e8:38:a4:8b:f8:1d:ce:ea:a0:8d:
                    67:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:B2:95:03:14:F7:6E:84:A5:A0:2D:6A:ED:40:E3:11:E1:28:57:B2
            X509v3 Authority Key Identifier:
                keyid:27:D8:64:0C:30:51:07:76:6A:64:6F:BF:8E:C8:1D:B4:5C:E1:F2:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/88175a-12c8-4590-82e0-3c6f88c914b1/1/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/88175a-12c8-4590-82e0-3c6f88c914b1/1/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:31:61:d1:4b:64:8e:19:b2:e8:2c:99:98:0e:5c:03:b5:4b:
         60:d1:b9:3e:26:09:a3:05:20:f4:65:c5:55:9e:24:09:75:15:
         b7:9a:38:fe:be:1e:08:ed:4a:06:93:07:6b:54:63:cb:75:ee:
         8b:a1:35:f4:be:75:b8:dd:25:96:22:a9:92:1f:98:ee:9c:c7:
         61:05:55:b7:27:61:5c:1d:69:87:1f:67:cc:71:b7:51:17:9d:
         d3:b3:9f:cc:25:d9:34:8e:d1:b1:2c:5d:9e:76:2f:17:bf:4b:
         c1:f8:bb:14:ab:b0:53:cc:9a:51:eb:58:e7:22:b0:33:eb:8f:
         6c:8d:f4:87:36:a6:b4:ab:6b:02:9a:66:47:7d:70:aa:d1:8d:
         b2:db:0b:e3:39:2a:25:a7:55:2c:bc:eb:f4:29:1e:df:cd:81:
         eb:a1:71:c5:3a:e1:40:7e:19:57:7e:31:03:4b:a0:77:5d:ef:
         41:b0:4f:dc:37:d2:34:04:63:1c:14:7f:88:7d:f4:84:11:a1:
         c6:b8:0c:22:ba:1e:d3:06:36:7b:19:f0:48:59:e1:36:f4:a0:
         42:7f:10:d6:37:33:89:f2:fb:08:85:33:5b:30:cc:92:14:3f:
         7c:ba:b4:db:37:ba:fc:ca:ee:06:a3:09:d9:0c:f1:04:bb:44:
         2e:07:c7:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:55:43 2026 by rpki-client