This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/338212-38a7-468d-b874-351ab9f236b0/1/J97R2QxNUraHECO8cSltCKmMTNs.mft
File:                     J97R2QxNUraHECO8cSltCKmMTNs.mft (raw, json)
Hash identifier:          t95QfZDN/7k2WPScJSmU/oNw7lVshN4BBrDCkIVP5lM=
Subject key identifier:   13:4F:0C:35:33:21:D0:41:ED:AB:F7:98:64:AE:C5:BC:3E:E4:64:F3
Authority key identifier: 27:DE:D1:D9:0C:4D:52:B6:87:10:23:BC:71:29:6D:08:A9:8C:4C:DB
Certificate issuer:       /CN=27ded1d90c4d52b6871023bc71296d08a98c4cdb
Certificate serial:       019C4390C26981ED6DD9869DB8EE41258CBF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J97R2QxNUraHECO8cSltCKmMTNs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/338212-38a7-468d-b874-351ab9f236b0/1/J97R2QxNUraHECO8cSltCKmMTNs.mft
Manifest number:          0DD2
Signing time:             Mon 09 Feb 2026 18:01:26 +0000
Manifest this update:     Mon 09 Feb 2026 18:01:26 +0000
Manifest next update:     Tue 10 Feb 2026 18:01:26 +0000
Files and hashes:         1: 9eN7qSejmD6NfaFbsmt0-Q4AgoA.roa (hash: EthJtYsvDPJskDLNQI0HAM0yvVrJhOQozB0uYpm7BsE=)
                          2: J97R2QxNUraHECO8cSltCKmMTNs.crl (hash: uq1wC46RSx5yyMmxJCTmu1oTqzShyngAhZSNhloegJU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/338212-38a7-468d-b874-351ab9f236b0/1/J97R2QxNUraHECO8cSltCKmMTNs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/338212-38a7-468d-b874-351ab9f236b0/1/J97R2QxNUraHECO8cSltCKmMTNs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J97R2QxNUraHECO8cSltCKmMTNs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:90:c2:69:81:ed:6d:d9:86:9d:b8:ee:41:25:8c:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27ded1d90c4d52b6871023bc71296d08a98c4cdb
        Validity
            Not Before: Feb  9 18:01:26 2026 GMT
            Not After : Feb 10 18:01:26 2026 GMT
        Subject: CN=134f0c353321d041edabf79864aec5bc3ee464f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:cd:50:70:92:3a:22:18:b1:99:1e:d3:7d:6b:
                    47:e2:97:06:a6:f5:c8:f6:65:f0:c7:57:f1:a2:30:
                    33:6f:4f:af:63:ce:52:7d:b8:37:52:77:d7:24:60:
                    57:69:af:3b:2c:39:90:90:be:91:f8:7a:39:4f:14:
                    7c:df:3a:71:cf:46:48:2e:12:c4:6a:0b:ce:ef:d3:
                    37:f8:a0:46:af:fc:73:ca:a9:4f:61:8e:3a:6a:bf:
                    08:a9:14:e6:fe:5b:fc:91:58:2d:48:e4:b2:68:33:
                    c7:6b:cf:f7:d4:c3:c4:01:a1:e7:ae:a4:9d:16:30:
                    b3:81:6b:4b:e9:25:69:d0:ec:81:61:be:40:fa:0f:
                    c5:a4:0b:73:48:29:90:dd:1d:38:e2:52:88:81:6a:
                    ca:68:38:6b:c7:ac:00:c3:0b:1e:25:89:67:13:f4:
                    78:7c:66:76:84:5f:ab:43:54:69:88:c8:65:4a:e9:
                    7e:fd:04:22:62:c3:31:c6:7f:93:4f:20:7c:83:8a:
                    87:86:32:0f:f2:d3:69:4a:f6:5b:57:b8:ef:10:f8:
                    e6:a7:ea:78:ad:e5:9d:87:f8:dc:b9:e0:a4:82:55:
                    a4:07:7b:c9:0e:05:dc:72:11:8f:5a:20:bb:b8:b0:
                    21:41:a4:45:0f:b6:63:1e:26:bf:02:20:61:5e:29:
                    45:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:4F:0C:35:33:21:D0:41:ED:AB:F7:98:64:AE:C5:BC:3E:E4:64:F3
            X509v3 Authority Key Identifier:
                keyid:27:DE:D1:D9:0C:4D:52:B6:87:10:23:BC:71:29:6D:08:A9:8C:4C:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J97R2QxNUraHECO8cSltCKmMTNs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/338212-38a7-468d-b874-351ab9f236b0/1/J97R2QxNUraHECO8cSltCKmMTNs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/338212-38a7-468d-b874-351ab9f236b0/1/J97R2QxNUraHECO8cSltCKmMTNs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:5c:fd:64:2a:6a:87:5c:d7:73:b6:5f:47:ad:23:fc:8d:09:
         de:77:c2:05:e0:1e:3d:6e:47:56:1b:68:ae:de:ca:78:41:55:
         37:01:7b:39:37:4c:dc:41:91:6c:ce:db:64:d9:62:5d:3b:7b:
         9c:70:30:f3:6d:23:c5:19:a9:1f:dd:e9:a4:7e:10:ed:5c:4f:
         af:af:b7:fa:29:44:5b:b5:d8:f4:11:03:9f:89:10:ac:15:b0:
         1e:98:7a:90:af:ec:b6:ca:4d:05:4b:e1:ef:8c:82:fe:96:8e:
         9d:0d:ce:ae:4f:9e:81:8b:ff:00:04:29:ad:8e:7c:4b:37:bc:
         6f:74:57:76:e6:fe:ac:f4:54:e8:b1:f6:f0:a4:be:cd:1c:10:
         73:e9:41:f2:bc:3e:44:84:4c:ed:cc:4b:db:5e:79:a9:be:26:
         60:83:4b:88:f4:1c:83:0b:f5:1e:c9:b9:b3:12:db:10:a2:c8:
         7e:ca:18:fb:73:6a:35:49:46:56:40:e3:8d:c1:76:1c:25:68:
         67:f8:a4:fa:5a:4d:01:0b:a0:4f:96:37:f4:4f:93:83:1e:21:
         c5:fd:08:d2:39:f9:f7:f8:a1:5a:28:07:b2:81:a3:c1:28:bf:
         81:fd:d8:65:cd:7f:4c:1d:23:87:3e:d4:ff:5b:6c:85:cc:f6:
         4e:5b:cb:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:17:39 2026 by rpki-client