This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/87kHgdu-vbjsQrr2ZIgFnqWGaqw.mft
File:                     87kHgdu-vbjsQrr2ZIgFnqWGaqw.mft (raw, json)
Hash identifier:          JPGr8W6yX8iW+EEQYRnfY0lLfTGF5OItac0gII68L4k=
Subject key identifier:   61:D1:B0:A3:D9:26:ED:B0:CD:E8:AA:B9:17:CD:0C:0D:94:3E:2F:A2
Authority key identifier: F3:B9:07:81:DB:BE:BD:B8:EC:42:BA:F6:64:88:05:9E:A5:86:6A:AC
Certificate issuer:       /CN=f3b90781dbbebdb8ec42baf66488059ea5866aac
Certificate serial:       019BF651915A4DDD7AED860E884AF185782B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/87kHgdu-vbjsQrr2ZIgFnqWGaqw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/87kHgdu-vbjsQrr2ZIgFnqWGaqw.mft
Manifest number:          097E
Signing time:             Sun 25 Jan 2026 18:01:39 +0000
Manifest this update:     Sun 25 Jan 2026 18:01:39 +0000
Manifest next update:     Mon 26 Jan 2026 18:01:39 +0000
Files and hashes:         1: 06XUCJMT07KfXMH10GGCj5wEbAw.roa (hash: EgHdwMOgNylzVaIS1PHOHRnXwiOAytji7pJB66LjXYc=)
                          2: 87kHgdu-vbjsQrr2ZIgFnqWGaqw.crl (hash: K18muVpNqYvNum5mNhuaZ6ypj/bwwndoau6fWN3jmOQ=)
                          3: BTJzW0cyJnm3gOVHNjV6jn9aIRE.roa (hash: VWm9Zf270UZNJJ0FAQ1IEKbRWwfLrnZq1cNtrFR5b6U=)
                          4: WFKY5S3JEQ7Bnr9_U-2Ry0udwLQ.roa (hash: fSBLesAAtR+VxH91LhsUX54ddGl+GGLe6PyGSsyj77Q=)
                          5: bNSTLmAd_NIyCsQeeMYvIeRAEeM.roa (hash: k+yE5PrtofGaHem4WOpHAIKjDh/WIjo33qvbhPmIE5I=)
                          6: jWrQWxU_htSVFKc3r-gsjIqKyK8.roa (hash: 155qzeQlRhVHXfpXCRqK6ZR2jbaxRLl0EHy1IGUr6Uk=)
                          7: o-t9v30roQgEmAMMQrIN0GWWHTM.roa (hash: BDRjhS+R9h4zRZxBIv6pBvO1F0/r0pyiN4YZozbXmzs=)
                          8: oujn_bgR2P0PhEZCax5BiO_oVf4.roa (hash: JeulLAWLMZsbKOX1qSlzlZW6BLtojE/TzKdL/Yu5wSQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/87kHgdu-vbjsQrr2ZIgFnqWGaqw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/87kHgdu-vbjsQrr2ZIgFnqWGaqw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/87kHgdu-vbjsQrr2ZIgFnqWGaqw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f6:51:91:5a:4d:dd:7a:ed:86:0e:88:4a:f1:85:78:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3b90781dbbebdb8ec42baf66488059ea5866aac
        Validity
            Not Before: Jan 25 18:01:39 2026 GMT
            Not After : Jan 26 18:01:39 2026 GMT
        Subject: CN=61d1b0a3d926edb0cde8aab917cd0c0d943e2fa2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d1:5e:13:80:4f:b5:f0:88:2f:27:1c:a4:56:
                    a1:50:81:e9:0a:44:0b:ca:94:89:0b:e7:71:85:40:
                    57:75:f7:1f:fc:16:2a:a2:fe:4e:b8:c3:f3:76:34:
                    71:df:48:ab:8c:2e:62:6b:ca:5f:ed:68:06:04:18:
                    ab:cf:52:8c:c4:f8:8c:43:7f:6f:04:0c:6d:2f:fa:
                    25:ce:48:d4:e2:bd:1f:8c:56:d9:88:22:ab:0b:84:
                    33:99:f8:46:9b:c4:64:f3:58:ab:3a:ef:fe:f2:0e:
                    59:dc:26:28:42:af:3f:de:1e:b7:36:c9:cf:1b:34:
                    5e:8b:0c:e3:19:f9:e0:b5:e2:d0:ba:ac:ed:a1:70:
                    35:dc:bd:a9:b6:e5:50:ed:e8:4d:1d:2f:6a:5e:e9:
                    8e:a4:7c:cf:db:2f:a0:b6:8d:59:2f:61:8d:78:cc:
                    57:48:7a:2c:47:b1:f3:fe:62:d6:c1:5b:27:fa:fb:
                    b4:83:db:29:78:41:e0:92:67:56:0e:f5:6f:65:14:
                    ff:27:ea:a7:e7:e1:bd:98:d9:00:12:05:a6:9b:ab:
                    f4:ab:4a:76:8e:6c:5c:1a:0e:fe:97:0f:bf:f6:ef:
                    a1:e4:b2:7c:6f:62:6b:20:80:1a:f1:ac:73:3e:30:
                    4d:c2:62:71:68:b7:f7:93:f5:e0:46:39:a3:61:e1:
                    7e:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:D1:B0:A3:D9:26:ED:B0:CD:E8:AA:B9:17:CD:0C:0D:94:3E:2F:A2
            X509v3 Authority Key Identifier:
                keyid:F3:B9:07:81:DB:BE:BD:B8:EC:42:BA:F6:64:88:05:9E:A5:86:6A:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/87kHgdu-vbjsQrr2ZIgFnqWGaqw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/87kHgdu-vbjsQrr2ZIgFnqWGaqw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/87kHgdu-vbjsQrr2ZIgFnqWGaqw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:e8:ad:2b:f8:66:32:50:57:fe:00:d0:b8:2d:a6:70:60:96:
         a1:c2:3c:d0:e4:9c:d3:d1:ae:79:85:a8:8d:bd:9a:f5:3d:1b:
         04:21:0a:b3:4b:95:91:a6:e8:1d:0e:ca:aa:56:7b:20:49:a1:
         5d:b5:2b:7a:fa:ea:54:29:e9:13:ae:fe:18:d0:26:97:b3:98:
         c9:83:5e:1f:91:fe:1c:06:2c:d6:e5:8a:b3:dd:54:60:0e:af:
         af:6b:5a:5a:4f:09:56:f3:65:99:c8:d9:d2:bc:de:65:03:a6:
         c1:d0:c2:33:8e:40:63:4f:85:08:81:fb:03:7d:f3:a5:41:02:
         70:20:96:83:44:ea:ef:36:b2:33:6d:4a:ae:51:bf:d0:7c:ce:
         ec:bf:2c:71:19:b6:4b:c4:a6:d2:8a:72:a0:c4:15:a9:4d:96:
         3b:99:30:da:37:c4:f9:83:d7:b2:b2:e1:82:7d:c7:5d:fa:8c:
         f4:eb:fd:40:d2:8b:23:02:79:10:d7:7a:1d:56:60:a0:52:0f:
         a6:fe:ad:52:7e:7f:92:98:14:c7:f7:a2:49:bc:50:bd:0e:3d:
         89:3f:1b:04:92:20:2d:35:a9:84:3c:33:ad:b3:d3:e8:82:b6:
         66:ab:09:a5:94:9d:49:cf:38:75:20:d4:e8:e2:b3:d6:bd:69:
         5b:32:9e:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:52:02 2026 by rpki-client