This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/466aab-a470-4344-a367-547be4cfa457/1/dbeVBmFQocNn2rzPaclwqwxyMhU.mft
File:                     dbeVBmFQocNn2rzPaclwqwxyMhU.mft (raw, json)
Hash identifier:          t6Sx6iHfxDX92ORGDbEwiXtSMuzv41DkZZMTm4EXeVE=
Subject key identifier:   D2:E9:2D:44:A8:46:F9:4E:66:76:60:2B:8F:CE:16:D1:C1:FA:0C:D8
Authority key identifier: 75:B7:95:06:61:50:A1:C3:67:DA:BC:CF:69:C9:70:AB:0C:72:32:15
Certificate issuer:       /CN=75b795066150a1c367dabccf69c970ab0c723215
Certificate serial:       019BFC1C1B5C0CC719DC9FE2B21B60C191A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dbeVBmFQocNn2rzPaclwqwxyMhU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/466aab-a470-4344-a367-547be4cfa457/1/dbeVBmFQocNn2rzPaclwqwxyMhU.mft
Manifest number:          0BD2
Signing time:             Mon 26 Jan 2026 21:00:58 +0000
Manifest this update:     Mon 26 Jan 2026 21:00:58 +0000
Manifest next update:     Tue 27 Jan 2026 21:00:58 +0000
Files and hashes:         1: 0T8fcmm1hsNnOmqM2PEgoAyliqU.roa (hash: 9ZfWKoxYg5iUkW9bq0QBmY+p7hBHHw7kGA3tl6yyKw0=)
                          2: FLA5zAJXuRYhVvLbMvHegLVx03k.roa (hash: ALcLJ5P9PXv6U4nYIysJQ7DHdsSCbcTf30882RyAGwc=)
                          3: QLKMe_jElWZCYxaDhAzkorlz3LQ.roa (hash: vuhA+iGQjke4jhUjZeVHGZ6IY30SRz7Sp3mzEHAQJQs=)
                          4: TSfqyIUxAgfu2d6E5vUEde-a71w.roa (hash: m9pFo8gt/WhMRWsNe6yus9/BFb/kzFEfeC7Fbw2hXyw=)
                          5: dbeVBmFQocNn2rzPaclwqwxyMhU.crl (hash: 3GFhHbIQdmta6kdJsEBBCkxf3T4CHtVthWYezf+rqF8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/466aab-a470-4344-a367-547be4cfa457/1/dbeVBmFQocNn2rzPaclwqwxyMhU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/466aab-a470-4344-a367-547be4cfa457/1/dbeVBmFQocNn2rzPaclwqwxyMhU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dbeVBmFQocNn2rzPaclwqwxyMhU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 20:39:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fc:1c:1b:5c:0c:c7:19:dc:9f:e2:b2:1b:60:c1:91:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75b795066150a1c367dabccf69c970ab0c723215
        Validity
            Not Before: Jan 26 21:00:58 2026 GMT
            Not After : Jan 27 21:00:58 2026 GMT
        Subject: CN=d2e92d44a846f94e6676602b8fce16d1c1fa0cd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:49:9a:ae:4c:fc:f3:63:fb:9e:ee:a3:7c:a8:
                    0c:89:7b:45:e2:66:04:1b:6e:25:ab:3a:70:ca:83:
                    57:20:24:11:a5:95:63:78:98:f9:b6:e8:20:e7:e8:
                    03:b9:ae:90:44:32:03:9a:a0:87:2d:e1:21:57:05:
                    41:79:48:9c:b4:39:4b:52:8c:75:00:58:df:c7:63:
                    99:cf:67:13:ed:8d:e0:ac:1a:81:3b:f9:f1:c9:db:
                    2c:63:61:b2:a4:f5:73:8d:0f:f7:8a:cc:a6:ca:31:
                    2c:36:63:6e:59:45:4e:f8:ed:00:39:a7:20:12:6f:
                    8f:ca:4b:cf:d6:02:5a:4e:2b:91:c3:37:c4:a0:55:
                    23:1d:8b:6a:94:4a:0c:77:6a:bf:bd:ce:cd:4a:75:
                    03:fe:2a:1e:9b:ac:2b:ed:2c:81:f7:2e:00:9a:db:
                    35:d9:2a:c6:44:56:4c:ee:81:04:17:19:b3:d3:2f:
                    4b:44:20:90:bd:7d:4e:e1:43:34:69:66:f7:5a:73:
                    94:cf:14:1e:61:36:43:ee:59:8f:0f:38:90:39:99:
                    0e:28:6c:5c:5a:cc:b2:8a:a2:77:f8:bf:4a:19:c5:
                    37:a6:ea:9b:26:1a:b9:8e:87:eb:a8:d0:84:29:b3:
                    ec:95:4b:8f:e3:a8:db:3c:64:94:51:50:fd:66:2a:
                    8f:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:E9:2D:44:A8:46:F9:4E:66:76:60:2B:8F:CE:16:D1:C1:FA:0C:D8
            X509v3 Authority Key Identifier:
                keyid:75:B7:95:06:61:50:A1:C3:67:DA:BC:CF:69:C9:70:AB:0C:72:32:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dbeVBmFQocNn2rzPaclwqwxyMhU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/466aab-a470-4344-a367-547be4cfa457/1/dbeVBmFQocNn2rzPaclwqwxyMhU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/466aab-a470-4344-a367-547be4cfa457/1/dbeVBmFQocNn2rzPaclwqwxyMhU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:79:ae:4b:43:4d:f0:03:f3:6b:18:1e:1c:6a:8a:82:81:0a:
         30:79:2d:9b:77:db:d0:be:95:d6:12:90:3e:d6:15:2b:84:c6:
         d8:25:6f:9c:a2:5d:31:ad:12:2a:c9:92:36:63:37:21:1e:a4:
         a3:a6:ec:1e:ef:bd:2d:e9:f4:60:54:a2:a9:ec:54:57:90:8a:
         bc:b8:de:55:92:c7:8b:62:38:7d:07:8e:5d:44:03:9d:89:f1:
         81:8c:99:3b:c9:f1:e4:de:ab:f9:9e:f3:5d:dc:b5:bb:98:27:
         78:be:73:d7:ac:22:13:e3:9c:44:99:9d:0d:11:7b:8f:56:2b:
         a7:b3:73:d0:2e:b8:39:5b:08:a1:a0:66:ec:5f:d4:b8:00:84:
         0a:59:51:3c:58:24:97:9b:20:ea:1b:9f:61:55:cd:6c:6a:74:
         46:28:ce:2e:a9:c3:c2:4b:ad:f4:d1:a9:26:fc:55:1f:63:73:
         ee:9f:27:ca:be:2e:2b:e0:b2:08:78:e9:d3:79:ab:55:20:4d:
         34:ec:fa:79:31:da:ff:96:54:77:40:c6:03:84:94:5a:ba:20:
         2d:90:0d:6e:9c:d1:0e:1f:c3:f0:7c:60:3c:62:c2:1b:94:b6:
         e6:eb:0f:2a:51:f3:5e:fa:80:61:45:25:e4:5b:dd:cd:57:30:
         02:bd:7c:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 04:46:24 2026 by rpki-client