This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/0b647f-a6e5-46f3-b99c-b09b9385d727/1/J9BIQ8TzpOdmlNs8-_m-Optnxpk.mft
File:                     J9BIQ8TzpOdmlNs8-_m-Optnxpk.mft (raw, json)
Hash identifier:          hXksMzf6x5b3APlxgARyDWariPOgzxsgYNGAixq2+mk=
Subject key identifier:   C5:AE:FF:46:FC:0B:97:F4:39:0C:72:D3:96:D1:2D:11:16:24:26:44
Authority key identifier: 27:D0:48:43:C4:F3:A4:E7:66:94:DB:3C:FB:F9:BE:3A:9B:67:C6:99
Certificate issuer:       /CN=27d04843c4f3a4e76694db3cfbf9be3a9b67c699
Certificate serial:       019C43900F6212CC37E1CA9186DDC872658A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J9BIQ8TzpOdmlNs8-_m-Optnxpk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/0b647f-a6e5-46f3-b99c-b09b9385d727/1/J9BIQ8TzpOdmlNs8-_m-Optnxpk.mft
Manifest number:          180F
Signing time:             Mon 09 Feb 2026 18:00:40 +0000
Manifest this update:     Mon 09 Feb 2026 18:00:40 +0000
Manifest next update:     Tue 10 Feb 2026 18:00:40 +0000
Files and hashes:         1: J9BIQ8TzpOdmlNs8-_m-Optnxpk.crl (hash: S0JhxmbNYs8d9b5htfzJUxPX2fE8szYYvZGjSTYTXu4=)
                          2: q2cMBXCMV2TKXbIKxSlGdHYqSnQ.roa (hash: 8gAaZY+bZ3BGIX0aq+TEUyX+bxVegXyhlIPRaI0W4hI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/0b647f-a6e5-46f3-b99c-b09b9385d727/1/J9BIQ8TzpOdmlNs8-_m-Optnxpk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/0b647f-a6e5-46f3-b99c-b09b9385d727/1/J9BIQ8TzpOdmlNs8-_m-Optnxpk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J9BIQ8TzpOdmlNs8-_m-Optnxpk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:90:0f:62:12:cc:37:e1:ca:91:86:dd:c8:72:65:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27d04843c4f3a4e76694db3cfbf9be3a9b67c699
        Validity
            Not Before: Feb  9 18:00:40 2026 GMT
            Not After : Feb 10 18:00:40 2026 GMT
        Subject: CN=c5aeff46fc0b97f4390c72d396d12d1116242644
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:6b:ef:b6:21:9d:d0:41:a1:1c:9c:fb:f7:54:
                    16:6d:49:11:2e:34:c7:37:16:ce:1b:65:53:d7:e0:
                    74:ce:c8:4d:a2:af:d7:f5:a7:af:8f:71:9d:6b:72:
                    ae:59:ee:5a:d5:d7:73:9b:5c:db:54:39:2a:4c:1e:
                    40:28:7e:11:a4:10:8e:ad:da:d0:64:1a:1c:c0:71:
                    aa:05:6e:ea:f1:a5:2f:8e:96:32:4c:1c:87:ba:91:
                    6c:96:96:f0:5b:68:2e:58:db:f5:59:1b:9f:69:d6:
                    56:2e:24:f7:6d:b8:b1:db:08:31:b4:9f:5f:d7:00:
                    68:28:34:dd:49:25:ba:02:85:14:21:5c:46:95:c6:
                    57:ca:5b:8a:84:9e:29:f5:8f:d3:ef:ca:cd:a0:97:
                    f0:c8:2f:c5:d8:a3:a2:4c:0e:b7:c3:eb:d7:cb:cd:
                    08:e6:fb:b6:d4:79:2a:d3:3c:ec:1f:2c:9d:85:6e:
                    84:89:37:4a:e6:7d:f0:b2:cb:6f:9a:c4:4b:43:88:
                    b4:f5:6d:51:88:41:15:6d:b5:a0:54:2b:e5:1d:ba:
                    d9:04:66:57:69:c5:31:05:a1:ed:0a:dc:bb:0d:14:
                    86:75:da:80:ff:26:26:2f:60:df:8b:a1:8c:d8:d6:
                    eb:5e:b3:eb:25:8c:94:6e:d6:8f:37:59:48:8a:6f:
                    89:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:AE:FF:46:FC:0B:97:F4:39:0C:72:D3:96:D1:2D:11:16:24:26:44
            X509v3 Authority Key Identifier:
                keyid:27:D0:48:43:C4:F3:A4:E7:66:94:DB:3C:FB:F9:BE:3A:9B:67:C6:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J9BIQ8TzpOdmlNs8-_m-Optnxpk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/0b647f-a6e5-46f3-b99c-b09b9385d727/1/J9BIQ8TzpOdmlNs8-_m-Optnxpk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/0b647f-a6e5-46f3-b99c-b09b9385d727/1/J9BIQ8TzpOdmlNs8-_m-Optnxpk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:5f:b6:45:0c:81:b8:99:36:2e:a3:89:48:a8:c3:c4:ec:17:
         bc:b6:53:4e:68:c5:51:f3:e5:2b:ca:c6:49:cc:5c:28:04:6d:
         b1:42:70:b5:65:59:e3:36:f6:28:d8:cb:2c:e0:67:5a:9b:72:
         ec:4a:2a:b5:e0:41:60:01:f0:ec:46:39:46:a5:02:13:eb:60:
         1a:1c:af:05:6b:f2:64:1d:3b:bd:6d:8f:3d:76:e8:9a:a5:e7:
         23:88:40:ee:79:df:31:79:cc:a1:e2:0e:4c:8d:48:24:dd:dd:
         ed:9e:3e:17:da:e5:a9:c6:55:44:61:fc:86:be:a8:08:d6:bb:
         79:85:4a:ef:8c:5a:65:e1:a6:fb:9b:d7:93:3b:bc:35:1f:6b:
         aa:e8:85:f8:a7:21:ce:f8:68:e3:4d:7b:91:30:0e:42:7c:86:
         19:5b:3b:66:01:cf:75:0e:39:b2:96:6a:e1:cb:45:59:83:59:
         f7:fb:d9:ef:26:36:45:e1:38:4f:7d:1e:bd:e0:44:f9:ed:80:
         3b:06:39:2a:5b:d1:aa:47:d8:34:59:1b:af:45:13:c8:bd:04:
         36:c9:10:65:96:1a:a1:6b:f5:03:1d:89:4e:9f:83:12:d2:36:
         18:e3:7c:74:15:65:a4:34:d5:33:d8:73:de:ea:7e:52:fa:43:
         b1:00:f0:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxDkA9iEsw34cqRht3IcmWKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3ZDA0ODQzYzRmM2E0ZTc2Njk0ZGIzY2ZiZjliZTNhOWI2
N2M2OTkwHhcNMjYwMjA5MTgwMDQwWhcNMjYwMjEwMTgwMDQwWjAzMTEwLwYDVQQD
EyhjNWFlZmY0NmZjMGI5N2Y0MzkwYzcyZDM5NmQxMmQxMTE2MjQyNjQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA02vvtiGd0EGhHJz791QWbUkRLjTH
NxbOG2VT1+B0zshNoq/X9aevj3Gda3KuWe5a1ddzm1zbVDkqTB5AKH4RpBCOrdrQ
ZBocwHGqBW7q8aUvjpYyTByHupFslpbwW2guWNv1WRufadZWLiT3bbix2wgxtJ9f
1wBoKDTdSSW6AoUUIVxGlcZXyluKhJ4p9Y/T78rNoJfwyC/F2KOiTA63w+vXy80I
5vu21Hkq0zzsHyydhW6EiTdK5n3wsstvmsRLQ4i09W1RiEEVbbWgVCvlHbrZBGZX
acUxBaHtCty7DRSGddqA/yYmL2Dfi6GM2NbrXrPrJYyUbtaPN1lIim+J8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMWu/0b8C5f0OQxy05bRLREWJCZEMB8GA1UdIwQY
MBaAFCfQSEPE86TnZpTbPPv5vjqbZ8aZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjlCSVE4VHpwT2RtbE5zOC1fbS1PcHRueHBrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy8wYjY0N2YtYTZlNS00NmYzLWI5OWMt
YjA5YjkzODVkNzI3LzEvSjlCSVE4VHpwT2RtbE5zOC1fbS1PcHRueHBrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy8wYjY0N2YtYTZlNS00NmYzLWI5OWMtYjA5YjkzODVkNzI3
LzEvSjlCSVE4VHpwT2RtbE5zOC1fbS1PcHRueHBrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdF+2RQyB
uJk2LqOJSKjDxOwXvLZTTmjFUfPlK8rGScxcKARtsUJwtWVZ4zb2KNjLLOBnWpty
7EoqteBBYAHw7EY5RqUCE+tgGhyvBWvyZB07vW2PPXbomqXnI4hA7nnfMXnMoeIO
TI1IJN3d7Z4+F9rlqcZVRGH8hr6oCNa7eYVK74xaZeGm+5vXkzu8NR9rquiF+Kch
zvho4017kTAOQnyGGVs7ZgHPdQ45spZq4ctFWYNZ9/vZ7yY2ReE4T30eveBE+e2A
OwY5KlvRqkfYNFkbr0UTyL0ENskQZZYaoWv1Ax2JTp+DEtI2GON8dBVlpDTVM9hz
3up+UvpDsQDwAQ==
-----END CERTIFICATE-----
Generated at Mon Feb 9 23:53:07 2026 by rpki-client