This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/0b87ee-1064-4137-8490-02fa218d14f8/1/dbvImtBCDee1vC3TL-o7l5-t4Cc.mft
File:                     dbvImtBCDee1vC3TL-o7l5-t4Cc.mft (raw, json)
Hash identifier:          OylvmL1dmDVB+J+w3ImoUd8QgL1kgTxq6wgTaueS6yE=
Subject key identifier:   93:3C:58:F1:FF:58:E2:7F:13:AE:3A:B1:C5:0B:8F:8F:C0:B0:F4:39
Authority key identifier: 75:BB:C8:9A:D0:42:0D:E7:B5:BC:2D:D3:2F:EA:3B:97:9F:AD:E0:27
Certificate issuer:       /CN=75bbc89ad0420de7b5bc2dd32fea3b979fade027
Certificate serial:       019B247632E01B8025A512901AD2C4EF6A9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dbvImtBCDee1vC3TL-o7l5-t4Cc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/0b87ee-1064-4137-8490-02fa218d14f8/1/dbvImtBCDee1vC3TL-o7l5-t4Cc.mft
Manifest number:          0E0C
Signing time:             Tue 16 Dec 2025 00:01:24 +0000
Manifest this update:     Tue 16 Dec 2025 00:01:24 +0000
Manifest next update:     Wed 17 Dec 2025 00:01:24 +0000
Files and hashes:         1: dNIjhcgOmJl_uqUY3ufEirea4-I.roa (hash: gkwMMNbP4H2f7PZtpLojDcOWvuhbyLZWIbK4WgzSXOU=)
                          2: dbvImtBCDee1vC3TL-o7l5-t4Cc.crl (hash: 6mUFAWS2E7I+Wgd3opfapQXTZB0hsbets5LAeLdCivE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/0b87ee-1064-4137-8490-02fa218d14f8/1/dbvImtBCDee1vC3TL-o7l5-t4Cc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/0b87ee-1064-4137-8490-02fa218d14f8/1/dbvImtBCDee1vC3TL-o7l5-t4Cc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dbvImtBCDee1vC3TL-o7l5-t4Cc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 17 Dec 2025 00:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:24:76:32:e0:1b:80:25:a5:12:90:1a:d2:c4:ef:6a:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75bbc89ad0420de7b5bc2dd32fea3b979fade027
        Validity
            Not Before: Dec 16 00:01:24 2025 GMT
            Not After : Dec 17 00:01:24 2025 GMT
        Subject: CN=933c58f1ff58e27f13ae3ab1c50b8f8fc0b0f439
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:f0:e4:95:06:e4:73:f7:50:cb:2a:f7:0e:de:
                    56:f3:40:b0:fb:6f:14:d8:87:31:62:70:04:47:59:
                    9b:48:12:ca:9c:da:6a:d6:93:c8:e5:4b:d0:7f:56:
                    a1:4b:9b:8e:a9:7f:16:07:7d:bf:1c:89:d5:26:ee:
                    1a:25:86:cd:f4:12:3f:5d:07:f9:5f:11:f5:28:a8:
                    f3:c4:ae:83:d9:b8:f9:12:a0:d2:fa:1b:ec:6e:ab:
                    cc:5c:f5:fb:be:59:45:af:d1:42:86:d6:e1:19:aa:
                    df:3b:e5:be:07:10:53:55:68:a9:61:aa:ae:16:58:
                    d5:0e:3c:70:1f:cb:16:ff:58:dd:ca:9f:5b:ad:0f:
                    55:d2:ef:6f:69:1d:6c:d4:7a:98:43:81:66:a9:3e:
                    f3:2b:9c:00:a3:5f:54:41:15:a5:b7:49:b0:95:a8:
                    0d:ae:9a:81:8d:47:83:e0:a5:43:f9:6a:4f:4f:a5:
                    7b:f0:43:fc:f7:df:32:4f:32:df:f5:a0:fd:27:cd:
                    9e:2d:62:5c:e8:37:8b:bf:ad:e6:c6:a4:80:65:88:
                    b3:32:69:00:b1:f5:42:38:b3:be:10:61:ba:51:7f:
                    22:70:f9:14:e3:d5:8d:3a:2c:b3:d5:e5:ec:4a:7e:
                    f1:c7:f6:58:15:b0:c7:e4:d1:bd:a0:9e:f0:92:b3:
                    e8:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:3C:58:F1:FF:58:E2:7F:13:AE:3A:B1:C5:0B:8F:8F:C0:B0:F4:39
            X509v3 Authority Key Identifier:
                keyid:75:BB:C8:9A:D0:42:0D:E7:B5:BC:2D:D3:2F:EA:3B:97:9F:AD:E0:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dbvImtBCDee1vC3TL-o7l5-t4Cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0b87ee-1064-4137-8490-02fa218d14f8/1/dbvImtBCDee1vC3TL-o7l5-t4Cc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0b87ee-1064-4137-8490-02fa218d14f8/1/dbvImtBCDee1vC3TL-o7l5-t4Cc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:99:5c:7e:e1:9c:72:45:cc:7e:82:44:04:8b:02:a3:0a:1c:
         3e:df:88:b1:f2:e4:fa:9f:4f:9a:a4:f0:20:48:5b:4f:2d:d9:
         d4:62:6a:ea:c5:94:d5:e5:da:24:52:15:bc:c1:08:9d:9a:ee:
         53:4f:e6:4b:20:2c:21:81:d5:98:1b:55:91:1d:2d:f6:29:80:
         c8:fd:33:b8:85:3e:95:9f:ee:8a:b7:70:15:d6:ba:f3:e8:1f:
         b4:30:33:9a:9c:56:30:69:eb:02:93:d3:ad:c3:90:a2:13:38:
         dd:ce:3b:ad:0a:8e:88:2d:18:df:a6:f9:4a:f9:1a:6d:b8:e9:
         7b:0a:36:2a:d1:17:5b:eb:be:5b:05:3e:b1:6d:51:87:21:f0:
         79:15:4f:c8:d4:77:d3:21:13:3e:ab:ca:8e:32:16:12:db:d6:
         17:73:08:24:22:7b:c7:c7:4a:9c:8f:94:94:d3:69:3e:e8:4e:
         7a:d0:a1:7d:2d:6c:92:21:68:3b:17:16:43:0f:af:25:64:c3:
         2b:c1:47:24:27:02:6d:31:50:6d:2b:79:94:26:3c:c0:5b:15:
         93:c6:3f:67:5e:10:12:d2:c5:3c:a1:3f:2d:7d:b4:80:92:d1:
         59:3d:b8:16:c1:c5:61:85:64:d4:75:2b:f8:db:44:4d:94:99:
         d6:e4:e1:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZskdjLgG4AlpRKQGtLE72qcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1YmJjODlhZDA0MjBkZTdiNWJjMmRkMzJmZWEzYjk3OWZh
ZGUwMjcwHhcNMjUxMjE2MDAwMTI0WhcNMjUxMjE3MDAwMTI0WjAzMTEwLwYDVQQD
Eyg5MzNjNThmMWZmNThlMjdmMTNhZTNhYjFjNTBiOGY4ZmMwYjBmNDM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8vDklQbkc/dQyyr3Dt5W80Cw+28U
2IcxYnAER1mbSBLKnNpq1pPI5UvQf1ahS5uOqX8WB32/HInVJu4aJYbN9BI/XQf5
XxH1KKjzxK6D2bj5EqDS+hvsbqvMXPX7vllFr9FChtbhGarfO+W+BxBTVWipYaqu
FljVDjxwH8sW/1jdyp9brQ9V0u9vaR1s1HqYQ4FmqT7zK5wAo19UQRWlt0mwlagN
rpqBjUeD4KVD+WpPT6V78EP8998yTzLf9aD9J82eLWJc6DeLv63mxqSAZYizMmkA
sfVCOLO+EGG6UX8icPkU49WNOiyz1eXsSn7xx/ZYFbDH5NG9oJ7wkrPo/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJM8WPH/WOJ/E646scULj4/AsPQ5MB8GA1UdIwQY
MBaAFHW7yJrQQg3ntbwt0y/qO5efreAnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGJ2SW10QkNEZWUxdkMzVEwtbzdsNS10NENjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8wYjg3ZWUtMTA2NC00MTM3LTg0OTAt
MDJmYTIxOGQxNGY4LzEvZGJ2SW10QkNEZWUxdkMzVEwtbzdsNS10NENjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS8wYjg3ZWUtMTA2NC00MTM3LTg0OTAtMDJmYTIxOGQxNGY4
LzEvZGJ2SW10QkNEZWUxdkMzVEwtbzdsNS10NENjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApplcfuGc
ckXMfoJEBIsCowocPt+IsfLk+p9PmqTwIEhbTy3Z1GJq6sWU1eXaJFIVvMEInZru
U0/mSyAsIYHVmBtVkR0t9imAyP0zuIU+lZ/uirdwFda68+gftDAzmpxWMGnrApPT
rcOQohM43c47rQqOiC0Y36b5Svkabbjpewo2KtEXW+u+WwU+sW1RhyHweRVPyNR3
0yETPqvKjjIWEtvWF3MIJCJ7x8dKnI+UlNNpPuhOetChfS1skiFoOxcWQw+vJWTD
K8FHJCcCbTFQbSt5lCY8wFsVk8Y/Z14QEtLFPKE/LX20gJLRWT24FsHFYYVk1HUr
+NtETZSZ1uThPQ==
-----END CERTIFICATE-----
Generated at Tue Dec 16 07:01:22 2025 by rpki-client