This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/832147-310e-4bb5-99da-e99a8dc30255/1/J9VOSniNaWei7vOmaSYiYm9U760.mft
File:                     J9VOSniNaWei7vOmaSYiYm9U760.mft (raw, json)
Hash identifier:          aYegbrNQgexUf83Z5kupCNcorA7UOueao4RdDGXB9nU=
Subject key identifier:   DB:B9:E8:F9:86:8F:E8:FE:CF:DF:28:9A:88:DD:16:5F:30:B9:D8:A0
Authority key identifier: 27:D5:4E:4A:78:8D:69:67:A2:EE:F3:A6:69:26:22:62:6F:54:EF:AD
Certificate issuer:       /CN=27d54e4a788d6967a2eef3a6692622626f54efad
Certificate serial:       019C42EB410EB7EC6E869274F62CD6AD5D7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J9VOSniNaWei7vOmaSYiYm9U760.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/832147-310e-4bb5-99da-e99a8dc30255/1/J9VOSniNaWei7vOmaSYiYm9U760.mft
Manifest number:          0D38
Signing time:             Mon 09 Feb 2026 15:00:39 +0000
Manifest this update:     Mon 09 Feb 2026 15:00:39 +0000
Manifest next update:     Tue 10 Feb 2026 15:00:39 +0000
Files and hashes:         1: J9VOSniNaWei7vOmaSYiYm9U760.crl (hash: 0ll0OVQPODUZtXCu9cjWTmcKiWB0emq9YE/7zdh74ZE=)
                          2: tDGcwqlaTPnixLkEemSY0dR8oEE.roa (hash: dntAFtICbpLiWSfID0C/faNT0VRienZetlVV8mxC9ro=)
                          3: zm911m8cc8YZZfJbwYQ5aTAaoOY.roa (hash: ReJF3cVbfAIqGPp+g2zOsYcwozrF/qsi8DLjV5pxna8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/832147-310e-4bb5-99da-e99a8dc30255/1/J9VOSniNaWei7vOmaSYiYm9U760.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/832147-310e-4bb5-99da-e99a8dc30255/1/J9VOSniNaWei7vOmaSYiYm9U760.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J9VOSniNaWei7vOmaSYiYm9U760.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:eb:41:0e:b7:ec:6e:86:92:74:f6:2c:d6:ad:5d:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27d54e4a788d6967a2eef3a6692622626f54efad
        Validity
            Not Before: Feb  9 15:00:39 2026 GMT
            Not After : Feb 10 15:00:39 2026 GMT
        Subject: CN=dbb9e8f9868fe8fecfdf289a88dd165f30b9d8a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:f5:55:c7:7a:cb:4e:f3:ba:78:c9:01:d3:74:
                    63:45:73:b8:00:36:6f:63:f8:e3:b8:c7:c1:01:a6:
                    74:ad:8d:05:9a:25:67:eb:4a:58:b1:1b:7d:24:4b:
                    fa:65:8c:26:43:ca:f4:0b:f5:a2:2b:53:0c:c6:3e:
                    b1:eb:3e:d5:43:4e:a8:bc:bf:7a:cb:bd:7e:f9:00:
                    a3:21:60:c6:9d:57:0c:d0:24:b9:19:e5:b5:7c:40:
                    7f:c2:16:1a:ef:62:98:5a:f5:dd:db:b9:5c:e5:40:
                    34:0e:d5:d5:84:c2:b1:93:b4:b9:f2:d3:c6:39:4f:
                    ff:f1:f0:6b:9d:76:58:a8:85:9a:41:bd:73:61:12:
                    39:32:22:60:87:7b:c7:64:d0:45:0f:f0:7f:b7:c7:
                    73:fe:ff:10:25:51:4b:a0:2b:b5:61:cb:79:d0:62:
                    06:7c:1e:39:2d:b6:09:ef:b3:6f:77:9d:f2:27:9d:
                    ec:f5:7e:2e:84:a7:73:c2:70:9c:f3:ea:7b:1c:c7:
                    3c:f3:7e:7d:26:40:a6:1e:37:4a:96:56:c2:52:76:
                    e2:1a:b3:f8:25:2f:bb:75:6d:5f:80:48:a9:06:57:
                    fb:19:95:c5:07:fc:dd:c0:1c:0d:08:ab:9d:40:8e:
                    c9:3f:a3:e8:51:83:e6:86:71:88:d6:85:f6:6f:2a:
                    7f:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:B9:E8:F9:86:8F:E8:FE:CF:DF:28:9A:88:DD:16:5F:30:B9:D8:A0
            X509v3 Authority Key Identifier:
                keyid:27:D5:4E:4A:78:8D:69:67:A2:EE:F3:A6:69:26:22:62:6F:54:EF:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J9VOSniNaWei7vOmaSYiYm9U760.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/832147-310e-4bb5-99da-e99a8dc30255/1/J9VOSniNaWei7vOmaSYiYm9U760.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/832147-310e-4bb5-99da-e99a8dc30255/1/J9VOSniNaWei7vOmaSYiYm9U760.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:aa:25:3a:f0:94:4c:4c:cb:21:6f:6f:6e:ac:40:f0:45:ed:
         89:99:07:4c:c0:58:2a:58:cc:5e:fb:39:0f:e3:40:5d:5f:62:
         d6:ba:89:c4:aa:54:72:63:b9:37:fb:81:2c:7e:3b:e0:dd:1e:
         82:b4:2c:eb:e5:89:d1:1c:d7:5d:50:b2:54:c1:3c:20:d5:ac:
         45:ba:51:4a:74:48:db:02:f8:fd:ae:cc:ae:d9:54:68:b2:d3:
         fb:0a:68:be:33:ba:34:07:44:06:d3:fa:90:32:d9:d6:dc:c0:
         77:ab:86:87:fc:4a:e5:3f:db:54:bd:22:01:da:60:04:bf:c7:
         90:91:96:88:40:54:58:5f:48:6a:ac:4a:8e:28:af:ff:6d:0f:
         8b:a0:ba:21:b5:99:ed:89:17:41:a0:12:71:67:58:bf:a4:56:
         15:49:85:87:0b:5a:4c:48:46:8b:18:bd:c6:98:ab:eb:a7:2d:
         c4:4f:c8:bf:fb:fa:61:11:e8:31:bc:39:a5:9f:b5:72:44:75:
         ee:59:a6:66:85:f3:f5:d3:c9:61:b1:a8:57:fe:a7:39:1b:ad:
         0d:22:8c:cd:ac:00:83:1d:52:90:10:5d:97:82:d0:05:6c:89:
         66:90:c6:de:5a:48:b9:62:48:27:e1:51:bc:77:3c:45:55:0a:
         2e:d0:fc:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:28:59 2026 by rpki-client