This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/0b87ee-1064-4137-8490-02fa218d14f8/1/dbvImtBCDee1vC3TL-o7l5-t4Cc.mft File: dbvImtBCDee1vC3TL-o7l5-t4Cc.mft (raw, json) Hash identifier: vHHyTuHtPiwRp0AEH1G/vfCa25cJ8GnOP2xUC5QI7EY= Subject key identifier: A9:62:C2:DD:65:D8:0D:D6:09:9D:5A:9D:80:13:56:44:B8:DF:DA:CB Authority key identifier: 75:BB:C8:9A:D0:42:0D:E7:B5:BC:2D:D3:2F:EA:3B:97:9F:AD:E0:27 Certificate issuer: /CN=75bbc89ad0420de7b5bc2dd32fea3b979fade027 Certificate serial: 019B7FA7A918765FC7BAB2C0E6D9E9DDDA44 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dbvImtBCDee1vC3TL-o7l5-t4Cc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/0b87ee-1064-4137-8490-02fa218d14f8/1/dbvImtBCDee1vC3TL-o7l5-t4Cc.mft Manifest number: 0E3C Signing time: Fri 02 Jan 2026 17:00:52 +0000 Manifest this update: Fri 02 Jan 2026 17:00:52 +0000 Manifest next update: Sat 03 Jan 2026 17:00:52 +0000 Files and hashes: 1: SKNgL9EtUSHtY6XWC1t8-mkwb8s.roa (hash: qbcYTlDoQlcLT8kuTCFoE2vVHnFviJrGXzlocQtB00Q=) 2: dbvImtBCDee1vC3TL-o7l5-t4Cc.crl (hash: n3MGAWGsYkpoGOzAOm7AyC5qQoxiAsewIC3gvtW2BvU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/0b87ee-1064-4137-8490-02fa218d14f8/1/dbvImtBCDee1vC3TL-o7l5-t4Cc.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/0b87ee-1064-4137-8490-02fa218d14f8/1/dbvImtBCDee1vC3TL-o7l5-t4Cc.mft rsync://rpki.ripe.net/repository/DEFAULT/dbvImtBCDee1vC3TL-o7l5-t4Cc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 12:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:a7:a9:18:76:5f:c7:ba:b2:c0:e6:d9:e9:dd:da:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75bbc89ad0420de7b5bc2dd32fea3b979fade027 Validity Not Before: Jan 2 17:00:52 2026 GMT Not After : Jan 3 17:00:52 2026 GMT Subject: CN=a962c2dd65d80dd6099d5a9d80135644b8dfdacb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:72:2c:f0:f2:26:d1:c7:63:96:5f:52:a3:10: 47:00:87:0b:e0:d9:9c:61:9f:2b:79:bd:21:f4:da: df:86:65:ad:39:a4:5b:1b:00:b4:19:57:b7:a1:17: 45:cc:ba:7d:fe:88:ee:99:75:44:cf:d0:f0:b9:94: d3:45:0f:73:02:84:20:97:ff:be:7d:2b:f8:65:6f: 34:67:90:57:3a:fb:fd:8e:5a:f1:9f:f7:91:62:b3: c2:1b:07:4d:25:68:6b:56:8a:a6:72:34:fe:2b:48: 63:cd:8c:13:4d:7f:84:a7:de:4f:2a:2e:ea:83:69: e2:71:81:05:7e:91:32:5e:4b:55:a4:e6:b3:82:a0: 7a:61:c2:99:d7:57:db:63:ee:e4:ba:fa:b5:2f:9c: a8:b5:25:57:e9:f2:24:c9:31:7e:72:d1:d8:a9:c9: 3a:14:89:93:84:96:31:48:ab:85:33:ad:1c:16:4c: 15:e7:65:38:79:be:52:09:d0:d3:4d:10:2c:8f:93: b8:1d:ad:83:e8:dc:5a:53:65:3a:5f:88:45:0f:b5: bb:2e:72:00:1e:5f:f4:03:2d:c4:dc:7f:ae:a3:cd: 39:31:e2:da:88:60:49:6f:e7:a9:54:59:a7:29:96: 29:cd:df:d5:3e:2b:b2:fb:41:3d:ef:1f:b3:71:27: 8e:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:62:C2:DD:65:D8:0D:D6:09:9D:5A:9D:80:13:56:44:B8:DF:DA:CB X509v3 Authority Key Identifier: keyid:75:BB:C8:9A:D0:42:0D:E7:B5:BC:2D:D3:2F:EA:3B:97:9F:AD:E0:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dbvImtBCDee1vC3TL-o7l5-t4Cc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0b87ee-1064-4137-8490-02fa218d14f8/1/dbvImtBCDee1vC3TL-o7l5-t4Cc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0b87ee-1064-4137-8490-02fa218d14f8/1/dbvImtBCDee1vC3TL-o7l5-t4Cc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:28:97:2c:05:be:f4:43:c8:df:20:79:75:ff:89:7f:24:c7: ae:6e:c3:9d:3a:6d:47:49:08:55:b9:63:46:eb:ce:7e:ae:bc: 79:8c:60:c1:38:b8:12:3b:70:11:45:36:32:68:52:c3:1e:1d: 51:cb:1a:34:f6:26:25:f6:a4:76:d3:45:d9:e1:a8:59:46:fe: 3e:cc:7c:a6:ff:bf:b3:40:be:56:ab:e3:c6:7e:94:0f:06:02: 54:57:62:31:af:a3:e6:36:9e:89:6d:ef:cd:a3:c6:64:43:ef: fe:91:0e:4a:f7:b1:08:7f:4a:94:6c:bc:fa:a8:7d:28:77:dc: 0c:88:43:d5:03:a6:37:16:60:06:6f:f1:e0:04:d7:f1:b3:04: 2a:09:b0:6e:ca:9b:03:ea:65:93:eb:18:ce:78:31:d0:90:2f: a6:52:a2:2a:2e:96:f0:f1:6f:44:0a:58:15:10:77:37:1a:ba: 41:2c:2a:56:7b:45:47:66:2c:96:91:26:f6:50:cb:2a:b8:2e: 99:b3:c3:a1:c6:0c:17:36:92:66:4b:91:f2:4b:bc:6c:a6:2d: b1:93:b0:9d:32:cd:b9:cb:61:bd:3e:f1:c7:63:4f:1e:59:97: e6:3f:2e:53:76:f9:42:82:4a:c3:92:b2:ef:55:cc:7d:9f:a1: 35:da:2a:ca -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt/p6kYdl/HurLA5tnp3dpEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1YmJjODlhZDA0MjBkZTdiNWJjMmRkMzJmZWEzYjk3OWZh ZGUwMjcwHhcNMjYwMTAyMTcwMDUyWhcNMjYwMTAzMTcwMDUyWjAzMTEwLwYDVQQD EyhhOTYyYzJkZDY1ZDgwZGQ2MDk5ZDVhOWQ4MDEzNTY0NGI4ZGZkYWNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuHIs8PIm0cdjll9SoxBHAIcL4Nmc YZ8reb0h9NrfhmWtOaRbGwC0GVe3oRdFzLp9/ojumXVEz9DwuZTTRQ9zAoQgl/++ fSv4ZW80Z5BXOvv9jlrxn/eRYrPCGwdNJWhrVoqmcjT+K0hjzYwTTX+Ep95PKi7q g2nicYEFfpEyXktVpOazgqB6YcKZ11fbY+7kuvq1L5yotSVX6fIkyTF+ctHYqck6 FImThJYxSKuFM60cFkwV52U4eb5SCdDTTRAsj5O4Ha2D6NxaU2U6X4hFD7W7LnIA Hl/0Ay3E3H+uo805MeLaiGBJb+epVFmnKZYpzd/VPiuy+0E97x+zcSeObwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKliwt1l2A3WCZ1anYATVkS439rLMB8GA1UdIwQY MBaAFHW7yJrQQg3ntbwt0y/qO5efreAnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZGJ2SW10QkNEZWUxdkMzVEwtbzdsNS10NENjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8wYjg3ZWUtMTA2NC00MTM3LTg0OTAt MDJmYTIxOGQxNGY4LzEvZGJ2SW10QkNEZWUxdkMzVEwtbzdsNS10NENjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS8wYjg3ZWUtMTA2NC00MTM3LTg0OTAtMDJmYTIxOGQxNGY4 LzEvZGJ2SW10QkNEZWUxdkMzVEwtbzdsNS10NENjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuyiXLAW+ 9EPI3yB5df+JfyTHrm7DnTptR0kIVbljRuvOfq68eYxgwTi4EjtwEUU2MmhSwx4d UcsaNPYmJfakdtNF2eGoWUb+Psx8pv+/s0C+Vqvjxn6UDwYCVFdiMa+j5jaeiW3v zaPGZEPv/pEOSvexCH9KlGy8+qh9KHfcDIhD1QOmNxZgBm/x4ATX8bMEKgmwbsqb A+plk+sYzngx0JAvplKiKi6W8PFvRApYFRB3Nxq6QSwqVntFR2YslpEm9lDLKrgu mbPDocYMFzaSZkuR8ku8bKYtsZOwnTLNucthvT7xx2NPHlmX5j8uU3b5QoJKw5Ky 71XMfZ+hNdoqyg== -----END CERTIFICATE-----Generated at Fri Jan 2 20:05:14 2026 by rpki-client