This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.mft File: 87VkazYDeZJMttnD2ZZpzn87LKI.mft (raw, json) Hash identifier: NgtttTBNYYnnGmqNMMPJFPvcd0AmRcUqB58hlmGYoaI= Subject key identifier: 49:7B:0B:32:C9:11:08:17:6E:EA:EB:EB:6B:AC:3D:B9:32:13:81:4E Authority key identifier: F3:B5:64:6B:36:03:79:92:4C:B6:D9:C3:D9:96:69:CE:7F:3B:2C:A2 Certificate issuer: /CN=f3b5646b360379924cb6d9c3d99669ce7f3b2ca2 Certificate serial: 019BF6BEF154D6C0EE2D8F2AFA0E0E6ED590 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/87VkazYDeZJMttnD2ZZpzn87LKI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.mft Manifest number: 17F3 Signing time: Sun 25 Jan 2026 20:01:07 +0000 Manifest this update: Sun 25 Jan 2026 20:01:07 +0000 Manifest next update: Mon 26 Jan 2026 20:01:07 +0000 Files and hashes: 1: 87VkazYDeZJMttnD2ZZpzn87LKI.crl (hash: oMwdF0extLsLv8wAC1F4gdVMNw1riBnKobyuqKteP0A=) 2: K2pv1joH33JGXTFgdf1GvHFNyOI.roa (hash: ZEpuJAN3j9YTqui19t7uNFdffmnYfLWbwWbEMfD7KU0=) 3: Qa4j2vggkqNGhqUJxufFEhTXf1Q.roa (hash: /qjjWw69vtyAWOv6PADeDd1WN8SkDOm5Fp4obHAorbY=) 4: R7B3oum7BpCTPNvgBRsQX2z2FVg.roa (hash: 1yQXxJ0NPuLrgm3ZJmbrNpelz2efuDlLTtJpmLa5Lyk=) 5: b470Y8D-LyTq_9_AQrtWwIG1GtU.roa (hash: nOWmpviy/236qMTiNZKfN8s+LeOU6GzEwsaYJPTlSts=) 6: h1UT6NFg3ZpYeiiCgHRBp-1U-NA.roa (hash: Xy3UzarjqLczIZsj3TWwqdDs3SH1huHxF+E73HFRf1M=) 7: o8eX56TS1SQhGzwJAmHIqx0vW0U.roa (hash: DbuFGcW2GBDvibRV74wfir2bnFicP07zDNDVvnpsCHw=) 8: smEJ6hLs20YbGMTT0hsZU0Olco8.roa (hash: 64a/5YDgJXJtCa0mUs/71cssAkwI0Nj2x00SBWT2qXI=) 9: w0B2Gqbwfzp_NJu2rxJWtvJ41DE.roa (hash: AOaMAW39Y9aDj5YPj7EZWpYQeaBZN2RRoty+ksqKsB0=) 10: z-UevhOt9DbJ3mo4g9NjEb9nzTg.roa (hash: IuS71qLi3haAYiRwxpMdF13P+Vv7zxjdP29UxCKm7CU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.mft rsync://rpki.ripe.net/repository/DEFAULT/87VkazYDeZJMttnD2ZZpzn87LKI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:be:f1:54:d6:c0:ee:2d:8f:2a:fa:0e:0e:6e:d5:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3b5646b360379924cb6d9c3d99669ce7f3b2ca2 Validity Not Before: Jan 25 20:01:07 2026 GMT Not After : Jan 26 20:01:07 2026 GMT Subject: CN=497b0b32c91108176eeaebeb6bac3db93213814e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:7a:ae:7e:b6:01:81:47:f8:4b:29:6c:5b:1c: e5:3c:de:4c:07:3d:60:89:df:f3:38:c5:81:dc:1f: e9:cb:77:8d:ac:3d:b3:f7:13:03:f4:d2:60:1e:3d: a5:9c:d5:ac:a4:b5:81:00:24:e0:b6:9a:be:19:9c: 28:07:7e:ee:05:35:da:52:8c:ab:39:96:8a:bd:ac: bf:47:3e:e5:07:a2:46:f3:9e:0c:fe:45:75:d4:3d: 1a:70:f3:f2:96:5f:5a:a9:ba:8c:05:a5:69:eb:26: e9:b0:62:f4:f5:8a:22:2d:0f:db:d6:5c:c3:ec:f1: 73:97:56:72:ad:63:e4:6a:b1:12:dd:fb:71:2c:ce: 9a:4c:c8:8b:5a:2e:c4:eb:1b:4c:6c:67:2c:7b:6b: 26:31:0a:16:15:f5:46:cd:d9:59:1a:34:3f:e0:6b: c3:da:67:1b:51:d0:24:ef:13:f9:40:bf:0c:73:dc: c2:e1:47:65:bd:d4:c5:60:a0:f1:4b:bf:a7:da:a5: a0:db:ee:e6:ec:e4:58:54:94:40:59:c3:5c:f8:77: 84:22:3b:21:c9:90:28:2d:ba:fe:bc:76:81:51:17: 04:a8:92:f6:d9:1c:b7:0e:5e:bd:0b:ba:13:59:65: a7:98:7f:3a:49:13:e6:5d:3e:15:6f:5f:2c:d6:5b: d4:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:7B:0B:32:C9:11:08:17:6E:EA:EB:EB:6B:AC:3D:B9:32:13:81:4E X509v3 Authority Key Identifier: keyid:F3:B5:64:6B:36:03:79:92:4C:B6:D9:C3:D9:96:69:CE:7F:3B:2C:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/87VkazYDeZJMttnD2ZZpzn87LKI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:4d:47:67:fd:6d:35:a6:55:f3:46:ca:5a:9f:0d:f4:58:81: a8:77:b5:86:ef:18:db:a5:a2:30:6d:a8:6a:73:74:c3:7b:57: da:b4:85:c8:3b:13:4d:77:2d:82:7d:aa:6f:35:43:01:e0:7e: e9:37:2b:d3:1b:67:7a:bf:41:93:38:ae:7f:bf:7c:59:c3:26: 66:ad:1f:79:9b:f5:be:75:f9:78:0a:b3:e7:b0:18:fe:9d:d1: cf:9d:e6:3d:4e:ed:fb:08:fa:96:45:cf:96:cc:bc:60:ad:a4: 52:86:15:25:e6:0e:12:e2:10:c6:63:73:a0:0e:9f:db:7b:6b: 9b:3b:ed:5c:81:1e:46:ad:e8:9e:75:22:b2:83:a5:72:08:13: a0:d6:04:cc:f3:d2:50:69:50:c4:92:e6:e7:4f:70:da:ef:e0: a3:ec:39:9e:d0:00:55:29:16:46:28:57:52:b9:80:7e:3c:74: 01:43:1f:1c:c4:e0:28:26:c7:ce:a8:0f:3e:d2:52:9a:6f:ad: 72:ea:2e:d8:86:91:61:fa:53:53:90:1b:34:c3:a5:9f:d1:51: a6:77:a9:0b:9d:74:d3:a6:f1:a5:c3:d0:ac:e4:f4:83:b7:0c: 42:f9:05:9e:c7:fa:8c:91:f8:c6:d0:0c:8d:07:15:26:71:68: 2c:29:1d:fe -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2vvFU1sDuLY8q+g4ObtWQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzYjU2NDZiMzYwMzc5OTI0Y2I2ZDljM2Q5OTY2OWNlN2Yz YjJjYTIwHhcNMjYwMTI1MjAwMTA3WhcNMjYwMTI2MjAwMTA3WjAzMTEwLwYDVQQD Eyg0OTdiMGIzMmM5MTEwODE3NmVlYWViZWI2YmFjM2RiOTMyMTM4MTRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp3qufrYBgUf4SylsWxzlPN5MBz1g id/zOMWB3B/py3eNrD2z9xMD9NJgHj2lnNWspLWBACTgtpq+GZwoB37uBTXaUoyr OZaKvay/Rz7lB6JG854M/kV11D0acPPyll9aqbqMBaVp6ybpsGL09YoiLQ/b1lzD 7PFzl1ZyrWPkarES3ftxLM6aTMiLWi7E6xtMbGcse2smMQoWFfVGzdlZGjQ/4GvD 2mcbUdAk7xP5QL8Mc9zC4UdlvdTFYKDxS7+n2qWg2+7m7ORYVJRAWcNc+HeEIjsh yZAoLbr+vHaBURcEqJL22Ry3Dl69C7oTWWWnmH86SRPmXT4Vb18s1lvUVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEl7CzLJEQgXburr62usPbkyE4FOMB8GA1UdIwQY MBaAFPO1ZGs2A3mSTLbZw9mWac5/OyyiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvODdWa2F6WURlWkpNdHRuRDJaWnB6bjg3TEtJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy81NzJlYTYtMTQzNi00ZjI2LWFmNTct NTk3NTkxM2Y1MmM1LzEvODdWa2F6WURlWkpNdHRuRDJaWnB6bjg3TEtJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy81NzJlYTYtMTQzNi00ZjI2LWFmNTctNTk3NTkxM2Y1MmM1 LzEvODdWa2F6WURlWkpNdHRuRDJaWnB6bjg3TEtJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD01HZ/1t NaZV80bKWp8N9FiBqHe1hu8Y26WiMG2oanN0w3tX2rSFyDsTTXctgn2qbzVDAeB+ 6Tcr0xtner9Bkziuf798WcMmZq0feZv1vnX5eAqz57AY/p3Rz53mPU7t+wj6lkXP lsy8YK2kUoYVJeYOEuIQxmNzoA6f23trmzvtXIEeRq3onnUisoOlcggToNYEzPPS UGlQxJLm509w2u/go+w5ntAAVSkWRihXUrmAfjx0AUMfHMTgKCbHzqgPPtJSmm+t cuou2IaRYfpTU5AbNMOln9FRpnepC51006bxpcPQrOT0g7cMQvkFnsf6jJH4xtAM jQcVJnFoLCkd/g== -----END CERTIFICATE-----Generated at Mon Jan 26 04:44:43 2026 by rpki-client