This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/c63b6c-6aad-4a74-807c-10e13d43f0dd/1/0JjpB8Y0V-bKYoHf4pfZcr_9qAU.mft
File:                     0JjpB8Y0V-bKYoHf4pfZcr_9qAU.mft (raw, json)
Hash identifier:          jlG2hbunh3LzVAYwJHU5OqgTpP/urQR8iL64a/fNbl0=
Subject key identifier:   9D:D2:2E:02:43:FD:9D:12:CC:E3:A4:1F:63:4B:5A:C2:B0:7F:0C:D8
Authority key identifier: D0:98:E9:07:C6:34:57:E6:CA:62:81:DF:E2:97:D9:72:BF:FD:A8:05
Certificate issuer:       /CN=d098e907c63457e6ca6281dfe297d972bffda805
Certificate serial:       019C4246B3D742EE06BE915C9E8EEB30A2D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0JjpB8Y0V-bKYoHf4pfZcr_9qAU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/c63b6c-6aad-4a74-807c-10e13d43f0dd/1/0JjpB8Y0V-bKYoHf4pfZcr_9qAU.mft
Manifest number:          133C
Signing time:             Mon 09 Feb 2026 12:00:55 +0000
Manifest this update:     Mon 09 Feb 2026 12:00:55 +0000
Manifest next update:     Tue 10 Feb 2026 12:00:55 +0000
Files and hashes:         1: 0JjpB8Y0V-bKYoHf4pfZcr_9qAU.crl (hash: DjDZ41jlK/wWfxMGZR1O/vMzcnxWpW4wymKIUppJ+RE=)
                          2: _vTGMoMd2OUixFc93cU4_AKUok0.roa (hash: 8AD33t0BoeAy789bxPf6MIdbPtyMKTJZlywsC+bTttg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/c63b6c-6aad-4a74-807c-10e13d43f0dd/1/0JjpB8Y0V-bKYoHf4pfZcr_9qAU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/c63b6c-6aad-4a74-807c-10e13d43f0dd/1/0JjpB8Y0V-bKYoHf4pfZcr_9qAU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0JjpB8Y0V-bKYoHf4pfZcr_9qAU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:46:b3:d7:42:ee:06:be:91:5c:9e:8e:eb:30:a2:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d098e907c63457e6ca6281dfe297d972bffda805
        Validity
            Not Before: Feb  9 12:00:55 2026 GMT
            Not After : Feb 10 12:00:55 2026 GMT
        Subject: CN=9dd22e0243fd9d12cce3a41f634b5ac2b07f0cd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:ce:cf:5b:fc:28:7a:7e:56:56:f4:d2:38:25:
                    7a:ed:c1:29:36:af:81:b7:f5:66:3d:1f:27:0f:64:
                    96:7d:92:ce:0b:fc:71:9f:06:fd:0e:f4:7d:a0:56:
                    8c:c8:01:7a:12:d9:d7:57:99:7f:62:51:7f:1e:50:
                    83:b7:c6:26:08:2b:a3:e5:6d:3d:30:72:9a:c2:16:
                    86:f2:c2:27:86:36:b0:f9:f1:07:47:9a:76:36:71:
                    b0:b3:05:53:9d:37:81:61:91:44:26:dd:40:e8:f9:
                    60:58:8e:1d:47:12:4b:8f:ad:4a:a8:3c:30:df:c7:
                    1f:28:db:a4:f2:03:f6:a8:fc:35:2a:57:97:02:ee:
                    c8:47:fc:d0:e9:ce:4f:b5:43:f4:56:f9:09:f9:2a:
                    c1:b3:a0:3b:da:b1:b3:14:4a:85:96:50:c9:60:b0:
                    47:1b:32:67:5d:26:c6:43:0c:d8:cc:46:99:95:88:
                    39:ca:e6:a9:47:5f:d9:ca:f0:d1:92:3b:1c:36:78:
                    67:8b:1a:ea:18:f2:40:44:bb:9a:f2:31:9c:15:a8:
                    df:2e:a3:a6:d6:3d:71:d1:dc:c5:ea:f6:f5:e9:c6:
                    d6:2a:dd:16:ea:14:f3:55:5b:4c:41:33:0d:34:6a:
                    5b:a2:83:33:3b:bf:1c:92:02:bc:07:fe:b7:ce:4d:
                    ab:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:D2:2E:02:43:FD:9D:12:CC:E3:A4:1F:63:4B:5A:C2:B0:7F:0C:D8
            X509v3 Authority Key Identifier:
                keyid:D0:98:E9:07:C6:34:57:E6:CA:62:81:DF:E2:97:D9:72:BF:FD:A8:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0JjpB8Y0V-bKYoHf4pfZcr_9qAU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c63b6c-6aad-4a74-807c-10e13d43f0dd/1/0JjpB8Y0V-bKYoHf4pfZcr_9qAU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c63b6c-6aad-4a74-807c-10e13d43f0dd/1/0JjpB8Y0V-bKYoHf4pfZcr_9qAU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:bf:9b:48:7d:87:15:45:65:cc:68:57:ce:10:c0:19:9e:91:
         13:da:fb:06:1b:64:79:38:40:41:b2:5a:f0:e5:9a:81:cc:91:
         0b:78:19:74:d4:70:44:92:fa:83:de:7a:e9:67:c0:70:ff:ab:
         53:de:ff:51:b8:62:4b:83:1a:3e:de:31:00:06:c8:9f:7f:2f:
         4e:5f:61:a9:4b:3e:5d:8c:31:7e:dd:fa:5a:3f:aa:4c:8c:58:
         5e:b6:b5:b8:42:c8:1c:4d:53:49:a7:f7:32:2a:fd:96:e2:ec:
         98:78:3c:5c:ce:b2:5a:55:e3:d4:2e:cf:0b:d3:f9:00:0e:88:
         0c:ba:20:20:e5:80:1c:d0:12:3b:df:00:42:94:ae:ab:5b:be:
         e8:a7:ae:21:64:79:6b:9c:9f:0f:3b:2d:30:41:d2:bf:b1:83:
         7e:00:cf:90:cc:ce:17:22:40:3d:5e:1c:31:de:50:d9:a5:05:
         94:66:31:33:59:ee:1c:6b:b9:b6:3d:25:77:f1:f0:c7:a8:db:
         95:33:31:23:a7:dd:3a:b0:fc:a8:33:21:f0:b0:c5:87:92:ec:
         a6:78:26:fe:14:81:40:8c:33:94:c6:43:f5:fa:0b:87:7d:b1:
         b4:98:a3:b0:59:23:f3:ee:dc:51:b4:14:2f:4e:1b:72:d1:e6:
         13:2a:71:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCRrPXQu4GvpFcno7rMKLXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwOThlOTA3YzYzNDU3ZTZjYTYyODFkZmUyOTdkOTcyYmZm
ZGE4MDUwHhcNMjYwMjA5MTIwMDU1WhcNMjYwMjEwMTIwMDU1WjAzMTEwLwYDVQQD
Eyg5ZGQyMmUwMjQzZmQ5ZDEyY2NlM2E0MWY2MzRiNWFjMmIwN2YwY2Q4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA287PW/woen5WVvTSOCV67cEpNq+B
t/VmPR8nD2SWfZLOC/xxnwb9DvR9oFaMyAF6EtnXV5l/YlF/HlCDt8YmCCuj5W09
MHKawhaG8sInhjaw+fEHR5p2NnGwswVTnTeBYZFEJt1A6PlgWI4dRxJLj61KqDww
38cfKNuk8gP2qPw1KleXAu7IR/zQ6c5PtUP0VvkJ+SrBs6A72rGzFEqFllDJYLBH
GzJnXSbGQwzYzEaZlYg5yuapR1/ZyvDRkjscNnhnixrqGPJARLua8jGcFajfLqOm
1j1x0dzF6vb16cbWKt0W6hTzVVtMQTMNNGpbooMzO78ckgK8B/63zk2rGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ3SLgJD/Z0SzOOkH2NLWsKwfwzYMB8GA1UdIwQY
MBaAFNCY6QfGNFfmymKB3+KX2XK//agFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEpqcEI4WTBWLWJLWW9IZjRwZlpjcl85cUFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS9jNjNiNmMtNmFhZC00YTc0LTgwN2Mt
MTBlMTNkNDNmMGRkLzEvMEpqcEI4WTBWLWJLWW9IZjRwZlpjcl85cUFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOS9jNjNiNmMtNmFhZC00YTc0LTgwN2MtMTBlMTNkNDNmMGRk
LzEvMEpqcEI4WTBWLWJLWW9IZjRwZlpjcl85cUFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO7+bSH2H
FUVlzGhXzhDAGZ6RE9r7BhtkeThAQbJa8OWagcyRC3gZdNRwRJL6g9566WfAcP+r
U97/UbhiS4MaPt4xAAbIn38vTl9hqUs+XYwxft36Wj+qTIxYXra1uELIHE1TSaf3
Mir9luLsmHg8XM6yWlXj1C7PC9P5AA6IDLogIOWAHNASO98AQpSuq1u+6KeuIWR5
a5yfDzstMEHSv7GDfgDPkMzOFyJAPV4cMd5Q2aUFlGYxM1nuHGu5tj0ld/Hwx6jb
lTMxI6fdOrD8qDMh8LDFh5Lspngm/hSBQIwzlMZD9foLh32xtJijsFkj8+7cUbQU
L04bctHmEypxbw==
-----END CERTIFICATE-----
Generated at Mon Feb 9 16:56:36 2026 by rpki-client