This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/eb3427-3a9e-47af-a8f4-4b81d62c3b53/1/dBjDbQQYIfhrONMiPUP-XNsgEaA.mft
File:                     dBjDbQQYIfhrONMiPUP-XNsgEaA.mft (raw, json)
Hash identifier:          VHHhXQiqZKKcNkJ2ggihzVeXhOvxh90N19O0EG8WuBs=
Subject key identifier:   EF:7E:62:04:18:0B:F1:0F:BC:9C:D5:8A:52:15:DB:A3:77:68:8F:CD
Authority key identifier: 74:18:C3:6D:04:18:21:F8:6B:38:D3:22:3D:43:FE:5C:DB:20:11:A0
Certificate issuer:       /CN=7418c36d041821f86b38d3223d43fe5cdb2011a0
Certificate serial:       019C42469B1808930CF7BE17CF7EE8D9009F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dBjDbQQYIfhrONMiPUP-XNsgEaA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/eb3427-3a9e-47af-a8f4-4b81d62c3b53/1/dBjDbQQYIfhrONMiPUP-XNsgEaA.mft
Manifest number:          0B0C
Signing time:             Mon 09 Feb 2026 12:00:49 +0000
Manifest this update:     Mon 09 Feb 2026 12:00:49 +0000
Manifest next update:     Tue 10 Feb 2026 12:00:49 +0000
Files and hashes:         1: OI678exd-nLeHUEfOxB3Wwb9ZJI.roa (hash: WlEEPa3tPqSDyIk1vz7Wm/A/Yv8DcUi3nrYAumkqlDc=)
                          2: dBjDbQQYIfhrONMiPUP-XNsgEaA.crl (hash: 6RPGmh6nQdTw+s2/hgUuFYjSP6fN1nDYlusW9xpIJ+U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/eb3427-3a9e-47af-a8f4-4b81d62c3b53/1/dBjDbQQYIfhrONMiPUP-XNsgEaA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/eb3427-3a9e-47af-a8f4-4b81d62c3b53/1/dBjDbQQYIfhrONMiPUP-XNsgEaA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dBjDbQQYIfhrONMiPUP-XNsgEaA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:46:9b:18:08:93:0c:f7:be:17:cf:7e:e8:d9:00:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7418c36d041821f86b38d3223d43fe5cdb2011a0
        Validity
            Not Before: Feb  9 12:00:49 2026 GMT
            Not After : Feb 10 12:00:49 2026 GMT
        Subject: CN=ef7e6204180bf10fbc9cd58a5215dba377688fcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:cb:a0:6b:33:8d:71:ea:88:e2:1a:c5:ca:a8:
                    98:50:2b:8e:d4:b3:5d:d0:2a:24:47:e7:29:5b:43:
                    44:c3:23:f7:88:f3:80:f1:b5:f2:ae:f8:27:e9:0f:
                    7c:92:0c:19:88:77:77:c1:d4:83:c8:39:f2:aa:11:
                    7f:46:d3:15:40:5f:d7:03:e5:ab:9b:09:9e:1a:60:
                    bd:b2:42:ee:91:ad:24:d5:cc:12:f2:bd:dd:50:3b:
                    8b:55:f7:85:16:53:03:99:a2:ff:b3:80:83:17:e9:
                    71:fe:72:ff:8f:66:f3:18:10:62:36:88:98:e5:e2:
                    8d:4d:88:2d:6c:07:8f:7d:d4:a9:60:38:47:a6:e3:
                    9c:88:20:44:f7:1a:8b:97:22:d6:c4:38:93:e3:34:
                    62:a1:7d:f5:40:28:b4:7b:73:a9:7c:11:d8:e7:52:
                    4d:67:25:88:d6:fb:ae:9f:cd:a3:17:69:b9:9f:40:
                    a6:fb:ec:c3:0d:c5:7c:7a:78:94:84:a8:4f:e6:bf:
                    37:4d:7d:f9:b6:51:93:24:bf:19:02:19:aa:89:fc:
                    4e:15:7d:b0:be:4f:ba:03:f7:cc:b1:3c:5a:46:55:
                    6c:ea:0e:56:2d:66:a8:4d:da:38:b6:77:53:ab:38:
                    38:3c:39:d5:8a:92:3c:0f:0a:98:39:ba:08:8c:fa:
                    da:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:7E:62:04:18:0B:F1:0F:BC:9C:D5:8A:52:15:DB:A3:77:68:8F:CD
            X509v3 Authority Key Identifier:
                keyid:74:18:C3:6D:04:18:21:F8:6B:38:D3:22:3D:43:FE:5C:DB:20:11:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dBjDbQQYIfhrONMiPUP-XNsgEaA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/eb3427-3a9e-47af-a8f4-4b81d62c3b53/1/dBjDbQQYIfhrONMiPUP-XNsgEaA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/eb3427-3a9e-47af-a8f4-4b81d62c3b53/1/dBjDbQQYIfhrONMiPUP-XNsgEaA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:45:d4:a4:16:d9:2a:a3:2b:bb:5b:9b:3f:78:2b:bd:3b:d2:
         bc:0f:d7:ae:47:6f:1b:8b:c1:58:2e:7a:ff:dc:d6:35:89:e5:
         cc:43:47:ee:7f:86:5c:df:9b:a3:5a:a6:41:53:45:b6:30:e3:
         d6:a1:e2:4a:7f:0e:b4:1b:d6:a2:08:17:23:40:41:6d:0d:f4:
         05:24:94:f4:90:39:97:87:4d:5d:8f:a2:29:db:df:ab:83:83:
         57:6f:18:76:41:b0:7b:4a:7e:c5:91:76:19:cc:33:b4:56:de:
         05:c9:17:72:3e:a3:e5:1c:33:85:3e:32:6c:bb:a2:db:fe:5e:
         f0:39:1b:60:7e:6d:cd:ef:95:bb:64:60:2c:91:c4:36:e5:06:
         5d:e8:5e:a7:23:25:27:68:34:bb:73:d2:21:d1:f0:0d:4f:06:
         75:33:8c:b8:a4:1d:39:38:a9:75:7a:ae:2f:bb:77:53:ce:de:
         b5:ac:61:c3:4e:f0:98:04:9a:09:de:24:29:9c:62:22:fc:98:
         78:91:2e:e5:cc:f4:ce:a0:43:b2:35:39:71:da:d7:15:96:71:
         c3:83:e8:02:7e:05:28:32:db:c7:d5:bd:f8:4a:77:16:a5:c8:
         e9:ce:d2:a0:bc:2f:33:2f:31:3b:b9:4e:5a:f6:f0:a4:db:bc:
         47:6b:62:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:43:51 2026 by rpki-client