This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/0b87ee-1064-4137-8490-02fa218d14f8/1/dbvImtBCDee1vC3TL-o7l5-t4Cc.mft
File:                     dbvImtBCDee1vC3TL-o7l5-t4Cc.mft (raw, json)
Hash identifier:          /o3QfE80oAaMzkaNvb1LGP+jJ6/HfzIKwu/E9AmC62E=
Subject key identifier:   43:73:AA:7C:DF:6F:57:B1:CF:FC:3C:88:7D:63:BD:68:D6:D7:7F:A9
Authority key identifier: 75:BB:C8:9A:D0:42:0D:E7:B5:BC:2D:D3:2F:EA:3B:97:9F:AD:E0:27
Certificate issuer:       /CN=75bbc89ad0420de7b5bc2dd32fea3b979fade027
Certificate serial:       019C42B476D5096A015D80013FF192FEAE5C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dbvImtBCDee1vC3TL-o7l5-t4Cc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/0b87ee-1064-4137-8490-02fa218d14f8/1/dbvImtBCDee1vC3TL-o7l5-t4Cc.mft
Manifest number:          0EA1
Signing time:             Mon 09 Feb 2026 14:00:48 +0000
Manifest this update:     Mon 09 Feb 2026 14:00:48 +0000
Manifest next update:     Tue 10 Feb 2026 14:00:48 +0000
Files and hashes:         1: SKNgL9EtUSHtY6XWC1t8-mkwb8s.roa (hash: qbcYTlDoQlcLT8kuTCFoE2vVHnFviJrGXzlocQtB00Q=)
                          2: dbvImtBCDee1vC3TL-o7l5-t4Cc.crl (hash: cRYgQQZDqnCiZblQcZJ7A3skINYG1vv5AxKoWOsFwmE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/0b87ee-1064-4137-8490-02fa218d14f8/1/dbvImtBCDee1vC3TL-o7l5-t4Cc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/0b87ee-1064-4137-8490-02fa218d14f8/1/dbvImtBCDee1vC3TL-o7l5-t4Cc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dbvImtBCDee1vC3TL-o7l5-t4Cc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:b4:76:d5:09:6a:01:5d:80:01:3f:f1:92:fe:ae:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75bbc89ad0420de7b5bc2dd32fea3b979fade027
        Validity
            Not Before: Feb  9 14:00:48 2026 GMT
            Not After : Feb 10 14:00:48 2026 GMT
        Subject: CN=4373aa7cdf6f57b1cffc3c887d63bd68d6d77fa9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f6:ec:a8:61:6f:5e:02:df:fc:8c:0e:fe:32:
                    00:7c:30:95:3f:a1:df:0a:38:7f:be:88:ef:cc:5e:
                    8b:ea:95:eb:90:e3:a3:56:7f:70:7d:b3:22:38:b0:
                    25:bf:58:81:25:de:22:f2:ae:ea:6f:01:01:8d:86:
                    1b:24:e4:50:a5:6a:f0:bc:f8:75:68:53:51:ec:74:
                    e6:93:c4:90:88:db:58:79:05:d4:f6:3d:ce:36:82:
                    72:e5:ce:1e:e7:68:db:75:b1:6e:5f:6d:08:d0:2f:
                    48:10:e7:27:e4:95:57:d8:cd:d7:4d:f9:71:75:4b:
                    d9:1f:96:f0:60:1d:b5:13:ac:90:49:d1:a0:f8:15:
                    93:19:61:77:67:5f:bf:b6:2a:ca:ba:53:ee:41:77:
                    1c:b8:c5:db:02:5b:ad:13:80:da:66:00:5f:65:34:
                    cf:50:e9:89:3d:43:fd:33:62:e2:e4:a4:97:d9:4e:
                    c3:c7:f4:a6:ff:5d:75:08:38:1d:ce:e4:9d:79:f0:
                    71:81:71:74:f8:6c:ba:e1:aa:02:b8:88:02:be:41:
                    2c:f8:01:74:2a:71:51:30:fc:60:ec:29:c4:c1:47:
                    9b:20:21:b3:01:b2:7a:98:be:07:22:19:87:02:ec:
                    78:0d:d0:ed:18:64:da:a7:73:5d:63:8e:17:ce:a2:
                    58:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:73:AA:7C:DF:6F:57:B1:CF:FC:3C:88:7D:63:BD:68:D6:D7:7F:A9
            X509v3 Authority Key Identifier:
                keyid:75:BB:C8:9A:D0:42:0D:E7:B5:BC:2D:D3:2F:EA:3B:97:9F:AD:E0:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dbvImtBCDee1vC3TL-o7l5-t4Cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0b87ee-1064-4137-8490-02fa218d14f8/1/dbvImtBCDee1vC3TL-o7l5-t4Cc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0b87ee-1064-4137-8490-02fa218d14f8/1/dbvImtBCDee1vC3TL-o7l5-t4Cc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:f1:4a:b7:d0:aa:c2:ed:09:9c:1f:61:ce:e9:15:d3:29:08:
         87:c5:05:b4:87:4f:5c:9c:07:75:5c:57:55:17:61:ff:c1:13:
         87:bc:e7:79:de:1d:47:be:0b:c3:c7:22:7d:ad:1f:45:76:28:
         62:b8:c0:38:7c:0a:e6:0b:ee:6e:c4:8d:f5:9f:34:f5:d0:c3:
         d2:1e:b0:b2:81:1e:82:59:c5:ed:9d:8a:c4:19:07:98:55:f3:
         80:b7:47:7d:cf:5c:e3:b9:6e:33:28:43:d0:56:e5:44:2e:25:
         ce:89:d8:37:71:6c:5b:29:ab:04:7a:a4:32:5f:fd:ca:f0:29:
         33:68:f7:1c:3a:86:6b:ab:58:22:d4:33:72:d3:a4:2e:63:19:
         a5:e6:ed:f0:3a:92:49:75:fa:75:d2:ce:6d:10:b9:7f:44:7f:
         c9:28:04:24:22:5c:ae:09:2b:1a:41:f9:fc:cc:12:d3:b3:1a:
         e4:6b:9f:4c:d3:95:09:bf:fc:d8:99:72:fa:cc:b6:5a:06:7b:
         0f:82:4f:9e:3c:bd:88:78:2d:cb:a5:80:b7:0e:10:b8:ed:f9:
         a6:58:fa:98:06:a4:4e:63:a7:bf:b1:8b:bb:c6:7d:2a:06:62:
         ce:b0:a3:53:4a:8b:60:7b:3a:e2:3a:97:40:aa:be:7a:b6:f2:
         dd:bc:2f:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:48:30 2026 by rpki-client