This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/69f3f3-0faa-465f-aa7a-d71ca19f989e/1/dbmC6rpECM2UGJn1zuwdpqZ8XEk.mft
File:                     dbmC6rpECM2UGJn1zuwdpqZ8XEk.mft (raw, json)
Hash identifier:          betkZ61k1yRujAf4G6D4r9oW8T5zWgOThe39EmOynGE=
Subject key identifier:   73:3B:21:FD:9E:EE:7E:48:73:53:23:8E:BA:FE:75:14:50:70:D7:1E
Authority key identifier: 75:B9:82:EA:BA:44:08:CD:94:18:99:F5:CE:EC:1D:A6:A6:7C:5C:49
Certificate issuer:       /CN=75b982eaba4408cd941899f5ceec1da6a67c5c49
Certificate serial:       019C42B475690462EAED9E2F78C16A96DCB2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dbmC6rpECM2UGJn1zuwdpqZ8XEk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/69f3f3-0faa-465f-aa7a-d71ca19f989e/1/dbmC6rpECM2UGJn1zuwdpqZ8XEk.mft
Manifest number:          1810
Signing time:             Mon 09 Feb 2026 14:00:48 +0000
Manifest this update:     Mon 09 Feb 2026 14:00:48 +0000
Manifest next update:     Tue 10 Feb 2026 14:00:48 +0000
Files and hashes:         1: 21dEdElNkV3wCunznBThEBlJcX4.roa (hash: 5wxxdJq/NDV1f9XwNpVa9dOVitTrL0/8VPX3yplDJdQ=)
                          2: dbmC6rpECM2UGJn1zuwdpqZ8XEk.crl (hash: Q3/pI53gz3lBhvmyHyJnqu7ejXZPUCJhoYRhZc1K3gs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/69f3f3-0faa-465f-aa7a-d71ca19f989e/1/dbmC6rpECM2UGJn1zuwdpqZ8XEk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/69f3f3-0faa-465f-aa7a-d71ca19f989e/1/dbmC6rpECM2UGJn1zuwdpqZ8XEk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dbmC6rpECM2UGJn1zuwdpqZ8XEk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:b4:75:69:04:62:ea:ed:9e:2f:78:c1:6a:96:dc:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75b982eaba4408cd941899f5ceec1da6a67c5c49
        Validity
            Not Before: Feb  9 14:00:48 2026 GMT
            Not After : Feb 10 14:00:48 2026 GMT
        Subject: CN=733b21fd9eee7e487353238ebafe75145070d71e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:be:2d:94:fc:37:fe:fb:a8:87:9a:8e:eb:de:
                    25:e4:ca:cf:e7:06:c8:5d:57:93:96:af:db:69:64:
                    c5:21:e5:c8:81:43:2e:b6:aa:57:1d:f6:26:52:42:
                    9d:cb:b9:3b:c6:3e:84:d1:ea:fb:b7:41:db:e8:f9:
                    4a:39:ac:73:0d:cf:91:2a:a3:86:a6:eb:63:b2:09:
                    c8:c8:14:35:c5:7e:2e:08:c3:15:37:a9:c7:fa:be:
                    38:cd:cf:93:f6:14:b5:66:3c:6e:09:8d:49:0f:8c:
                    4f:19:b2:58:80:2c:00:b5:4c:6b:6a:e7:38:ad:b6:
                    f1:e9:6f:e5:b9:5c:21:0b:1d:66:2e:c9:5e:02:60:
                    55:61:35:e4:9b:8a:0c:ce:66:0c:15:be:55:23:42:
                    2b:d5:c5:1b:0f:5a:33:af:5a:e8:67:56:59:42:90:
                    3c:11:b3:25:6d:16:46:2c:f0:00:0a:59:91:4b:c5:
                    f5:43:4b:30:b9:c4:28:50:a7:c6:32:db:26:5b:95:
                    69:ca:a7:fa:12:b6:d6:0b:9b:c3:af:3e:61:c6:47:
                    ac:dc:b9:d4:02:67:86:fd:96:2e:1e:69:7f:73:85:
                    79:18:01:69:a4:e1:ba:df:86:12:21:cb:db:42:5f:
                    0a:2c:52:5a:2a:8d:33:c5:df:18:54:78:9b:92:e0:
                    7a:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:3B:21:FD:9E:EE:7E:48:73:53:23:8E:BA:FE:75:14:50:70:D7:1E
            X509v3 Authority Key Identifier:
                keyid:75:B9:82:EA:BA:44:08:CD:94:18:99:F5:CE:EC:1D:A6:A6:7C:5C:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dbmC6rpECM2UGJn1zuwdpqZ8XEk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/69f3f3-0faa-465f-aa7a-d71ca19f989e/1/dbmC6rpECM2UGJn1zuwdpqZ8XEk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/69f3f3-0faa-465f-aa7a-d71ca19f989e/1/dbmC6rpECM2UGJn1zuwdpqZ8XEk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:dd:1a:36:09:eb:50:3c:0a:86:96:01:2c:c0:49:90:cd:4d:
         94:22:c7:a8:69:21:e0:63:61:9b:56:17:82:4f:2b:77:03:ca:
         e8:73:48:79:e3:02:d0:35:e9:bc:3f:4b:71:8d:d9:f8:f1:83:
         65:62:a2:a6:80:7b:2f:43:aa:68:33:bc:06:18:9f:ca:7e:db:
         90:7d:29:06:8d:d5:8b:65:5f:39:92:08:2f:3b:96:0b:10:82:
         a8:fa:9c:45:55:05:17:f9:f3:ef:34:17:a1:27:9f:9c:12:93:
         67:6d:39:77:cc:b5:35:99:a8:42:1a:6a:16:e6:0a:f5:b1:33:
         81:b2:8e:3d:2b:f5:46:9a:cf:54:61:1e:0b:e9:1e:3f:a9:a7:
         7c:3b:01:6e:0a:b6:35:4a:2c:3f:0a:eb:30:3c:20:1d:ff:86:
         ef:b8:af:95:8e:5f:03:9a:81:25:09:a5:7e:04:f9:ba:15:fc:
         1c:dd:56:00:a1:27:de:eb:1d:f1:ce:30:16:6a:c9:a1:31:ff:
         39:bf:19:24:3c:20:63:ba:b2:52:84:20:d8:60:77:da:bf:5c:
         3a:11:e5:22:10:f0:48:c5:c2:41:a3:0f:df:f6:4f:dd:e6:51:
         29:49:02:ba:22:82:3d:af:a0:bc:77:91:67:2e:0d:7d:ad:fd:
         00:30:f0:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:53:57 2026 by rpki-client