This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/26fb11-2d00-4e7b-b297-5212db9754f4/1/89hcR9C31txd3aCFcrZFTBBZUSw.mft
File:                     89hcR9C31txd3aCFcrZFTBBZUSw.mft (raw, json)
Hash identifier:          6ymuAhURMo9Vyv9gwfiaNRXbh3S7UZG4ZzBqcTWvuJI=
Subject key identifier:   76:6D:89:19:D7:B8:D0:5E:B3:90:90:9F:B8:BA:EB:60:D4:15:54:D2
Authority key identifier: F3:D8:5C:47:D0:B7:D6:DC:5D:DD:A0:85:72:B6:45:4C:10:59:51:2C
Certificate issuer:       /CN=f3d85c47d0b7d6dc5ddda08572b6454c1059512c
Certificate serial:       019BF7D2557A631E553B67F5A9836FD42D8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/89hcR9C31txd3aCFcrZFTBBZUSw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/26fb11-2d00-4e7b-b297-5212db9754f4/1/89hcR9C31txd3aCFcrZFTBBZUSw.mft
Manifest number:          0D56
Signing time:             Mon 26 Jan 2026 01:01:55 +0000
Manifest this update:     Mon 26 Jan 2026 01:01:55 +0000
Manifest next update:     Tue 27 Jan 2026 01:01:55 +0000
Files and hashes:         1: 89hcR9C31txd3aCFcrZFTBBZUSw.crl (hash: thxLdYZVXkRZVNnEkzNNljfKUFhL3vCemk4hF8fUQcE=)
                          2: GJT01x6wwyCftHtrWIvsmyjBIms.roa (hash: ASc7SzAK6h3bsHuxvUa3vat9chLP4lA8Av0u9oM1Qs4=)
                          3: P-YnCSUtnumn2hA16AWMoL57X4s.roa (hash: eWTWw5vjur+Hdp0k4MV5xWgnd5LJ3YCF0WihFpndkIA=)
                          4: X3mascigLmZbak7QiDBSbbs3vrA.roa (hash: IylgO/sA2hsrQIbGafFY3tsGMHKTB8LlFvuICdNIo44=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/26fb11-2d00-4e7b-b297-5212db9754f4/1/89hcR9C31txd3aCFcrZFTBBZUSw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/26fb11-2d00-4e7b-b297-5212db9754f4/1/89hcR9C31txd3aCFcrZFTBBZUSw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/89hcR9C31txd3aCFcrZFTBBZUSw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 01:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f7:d2:55:7a:63:1e:55:3b:67:f5:a9:83:6f:d4:2d:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3d85c47d0b7d6dc5ddda08572b6454c1059512c
        Validity
            Not Before: Jan 26 01:01:55 2026 GMT
            Not After : Jan 27 01:01:55 2026 GMT
        Subject: CN=766d8919d7b8d05eb390909fb8baeb60d41554d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d6:46:fb:d2:2d:d1:30:a7:8a:06:a4:d1:eb:
                    12:87:e3:1d:66:db:36:b5:f1:1d:e5:4a:44:54:c5:
                    71:0a:c3:6c:50:7c:c5:c7:7c:8a:17:98:6c:d2:fe:
                    06:d4:7d:49:c1:51:18:35:80:6d:85:fc:44:74:3a:
                    7c:a6:e5:d4:99:ca:0d:74:8e:0a:02:42:05:4c:fa:
                    68:69:c4:3a:a8:50:e9:f0:e9:06:e4:39:55:6f:16:
                    44:20:f6:51:c4:2b:19:c4:55:8c:42:91:14:8b:32:
                    e5:a6:10:99:82:28:c5:ad:0a:fb:48:93:99:34:e3:
                    14:4c:7c:48:65:15:61:80:b6:86:1a:96:79:ec:f2:
                    bd:cd:aa:73:e7:6c:3b:0e:55:93:de:7f:3f:f2:b1:
                    5c:d4:c5:30:dd:61:4b:5d:3a:8f:05:6d:62:80:e3:
                    a3:49:85:da:6a:32:3b:32:2b:c8:4d:49:fb:02:c7:
                    27:dc:43:9c:75:37:1d:0d:99:bc:9c:2f:df:80:42:
                    08:a9:f9:b4:41:57:e0:34:18:1d:1b:ad:bb:d4:61:
                    6a:ba:f4:13:82:fe:38:62:c9:b4:ec:ad:60:3c:df:
                    30:b2:f2:c9:64:1a:04:41:43:88:20:96:db:39:42:
                    14:8d:12:84:89:89:a2:b8:7c:e7:d9:7e:9f:0e:9e:
                    f1:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:6D:89:19:D7:B8:D0:5E:B3:90:90:9F:B8:BA:EB:60:D4:15:54:D2
            X509v3 Authority Key Identifier:
                keyid:F3:D8:5C:47:D0:B7:D6:DC:5D:DD:A0:85:72:B6:45:4C:10:59:51:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/89hcR9C31txd3aCFcrZFTBBZUSw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/26fb11-2d00-4e7b-b297-5212db9754f4/1/89hcR9C31txd3aCFcrZFTBBZUSw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/26fb11-2d00-4e7b-b297-5212db9754f4/1/89hcR9C31txd3aCFcrZFTBBZUSw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:01:8b:11:fe:91:cb:61:7d:79:6b:1a:ab:c5:52:5a:8d:c6:
         2d:f6:23:be:e7:26:77:b1:7d:22:54:f0:57:21:7f:fd:e9:6f:
         a2:69:11:9a:03:30:2d:05:cf:4f:d1:29:6f:0d:5a:63:f4:3e:
         0e:7b:90:a6:b2:f1:66:d3:87:5b:ba:d8:27:0a:b0:64:79:2f:
         20:14:23:ba:95:bf:8c:96:de:eb:13:22:1d:1c:82:ab:88:d0:
         84:98:0d:bb:76:f5:cf:c7:7e:fe:9b:2e:93:63:fc:3d:3d:94:
         03:dc:f0:4c:1f:85:a6:17:4e:b7:e8:25:b5:19:b8:7e:d2:26:
         fc:dc:6b:2d:85:2d:01:d6:4e:e1:20:f8:65:ed:b1:c9:db:53:
         4e:7b:de:33:cf:e4:65:6c:5a:59:9d:5f:1e:87:a4:6e:37:f4:
         85:4a:f0:98:4e:10:60:27:ba:02:d8:41:02:fb:e7:a4:b0:71:
         72:ce:b0:c6:0c:25:dd:07:df:a0:be:4e:6c:a4:2f:b1:23:33:
         3c:35:15:86:d6:a0:f3:60:39:cd:35:37:ab:d6:e4:f0:be:5d:
         8e:d8:cf:11:0a:00:0f:94:c5:ee:eb:da:59:b4:9b:5d:a2:11:
         5c:c8:f5:f0:b3:32:46:3f:85:e0:17:8e:13:57:e2:0a:f0:d0:
         c4:d7:53:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 09:28:45 2026 by rpki-client