This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/b862d3-6844-46f7-bd98-83bc797278e2/1/87KAXYd27t63qky-WvVozbJin8I.mft
File: 87KAXYd27t63qky-WvVozbJin8I.mft (raw, json)
Hash identifier: eyi0fE745oI/u/M5V0tX6K787nupr03uW4G8D5K/4WU=
Subject key identifier: 86:D2:56:07:CE:E4:19:92:6C:FE:40:80:E4:47:4C:39:D7:60:30:41
Authority key identifier: F3:B2:80:5D:87:76:EE:DE:B7:AA:4C:BE:5A:F5:68:CD:B2:62:9F:C2
Certificate issuer: /CN=f3b2805d8776eedeb7aa4cbe5af568cdb2629fc2
Certificate serial: 019BF2E24E7F179402D1AC49DEAA3730D4F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/87KAXYd27t63qky-WvVozbJin8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/b862d3-6844-46f7-bd98-83bc797278e2/1/87KAXYd27t63qky-WvVozbJin8I.mft
Manifest number: 111C
Signing time: Sun 25 Jan 2026 02:01:15 +0000
Manifest this update: Sun 25 Jan 2026 02:01:15 +0000
Manifest next update: Mon 26 Jan 2026 02:01:15 +0000
Files and hashes: 1: 87KAXYd27t63qky-WvVozbJin8I.crl (hash: ez8RwF96xLjsHojUJOztZTwPlZyE+PuHpGsP73sSB1E=)
2: AspI11raW1W04hjS-S4dOvg7DJ0.roa (hash: vyR9bLbU9Kq6oSRsp+g4vq54T/skGcryAaf7JnoUv/A=)
3: Kt_KSYrDgcjqIw-tzOf1SsEuolE.roa (hash: iGYT2jk0/nojybC7EhwbZ+9UI5BCjZA3DlRVN4V+qoM=)
4: cLMf5Wd9_XCFE1K-8kc5wZs2Fi4.roa (hash: c7+KWt1SdxMn3TTxEN2hC0zORqA9HzBlfBHlbXmPphA=)
5: ehqv0V2Mxbz4tpd2nZ-H0adSaEo.roa (hash: 02XO0vXOdnlzhqYHTi75uxwmBCYXsERvvoqfOYq0+7M=)
6: uYwmLI9IgXoeBYgIJ67lD4M9yaw.roa (hash: KF+AYbOaxFn3R/9fgqU1GbRgcGguP9S+XNTb3CR98gw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/b862d3-6844-46f7-bd98-83bc797278e2/1/87KAXYd27t63qky-WvVozbJin8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/b862d3-6844-46f7-bd98-83bc797278e2/1/87KAXYd27t63qky-WvVozbJin8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/87KAXYd27t63qky-WvVozbJin8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 02:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f2:e2:4e:7f:17:94:02:d1:ac:49:de:aa:37:30:d4:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3b2805d8776eedeb7aa4cbe5af568cdb2629fc2
Validity
Not Before: Jan 25 02:01:15 2026 GMT
Not After : Jan 26 02:01:15 2026 GMT
Subject: CN=86d25607cee419926cfe4080e4474c39d7603041
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:58:e6:74:73:ff:19:3f:b9:c3:a5:19:a5:5d:
e6:ac:6d:16:b5:19:e4:94:a7:24:8f:11:78:3d:f6:
e1:4e:3f:f2:86:d2:31:a9:9a:5b:74:ca:91:13:bd:
d1:9b:2a:db:3f:ea:32:cf:07:17:46:42:a9:14:08:
e1:35:c5:bb:60:4e:10:2c:54:3d:0f:dc:14:be:41:
0d:b0:fc:6b:17:47:e7:e9:b5:55:7b:ba:44:1c:3d:
9d:80:9f:6b:20:9c:54:c5:a4:c3:4f:e8:3b:e9:a1:
fe:4f:cf:b0:3d:97:64:ee:9a:ee:25:08:eb:70:8c:
44:6e:47:31:60:aa:14:0a:86:09:78:95:ef:82:58:
72:75:d6:58:7c:b5:3d:04:96:e6:fb:27:ff:4b:5c:
96:6c:3e:c8:70:09:41:18:49:00:08:36:80:a9:01:
1c:68:a4:ed:ff:17:9e:bb:7e:ac:83:1e:4c:d9:62:
f2:9e:61:24:ee:da:32:9b:9e:14:ea:b8:a5:12:61:
de:e3:74:9c:87:a5:03:24:ed:d2:ce:e1:b7:e4:94:
e6:3b:51:6f:2a:1c:83:f4:ab:62:aa:3b:47:db:ea:
70:ef:b1:1d:6b:4f:4d:bc:e6:5d:c3:88:18:92:76:
d5:95:4a:a6:c1:1f:2f:1d:6f:93:fb:f4:e7:73:48:
25:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:D2:56:07:CE:E4:19:92:6C:FE:40:80:E4:47:4C:39:D7:60:30:41
X509v3 Authority Key Identifier:
keyid:F3:B2:80:5D:87:76:EE:DE:B7:AA:4C:BE:5A:F5:68:CD:B2:62:9F:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/87KAXYd27t63qky-WvVozbJin8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/b862d3-6844-46f7-bd98-83bc797278e2/1/87KAXYd27t63qky-WvVozbJin8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/b862d3-6844-46f7-bd98-83bc797278e2/1/87KAXYd27t63qky-WvVozbJin8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:52:11:2d:70:98:d9:71:6f:1c:17:8f:71:54:08:db:4d:a3:
8a:96:f6:89:fc:7a:6a:48:97:8e:71:27:02:c0:47:fb:5e:d3:
c4:29:ff:5e:92:8f:cb:c1:5f:ec:ba:d0:78:44:8c:90:c4:ed:
f0:f0:e2:ff:e5:88:0a:99:14:70:12:04:97:c9:25:67:7b:e7:
1f:0a:b8:86:8c:a7:08:bf:87:4d:bd:14:69:cb:cc:4b:b8:f2:
5d:54:58:47:61:cb:0e:19:df:96:ae:ee:ec:f0:e2:b6:01:23:
c5:a7:41:02:2d:1a:2f:0c:44:f9:80:a3:c2:af:81:ef:12:5e:
11:c8:50:46:0b:16:23:3a:53:45:d0:6c:c3:e1:ae:32:b2:e3:
42:d3:21:f8:4f:5b:71:d7:df:a8:5e:d8:bd:d2:c8:13:b2:d1:
f3:af:b0:63:45:76:18:06:20:04:5a:db:8d:b2:ef:0d:67:f2:
99:a4:74:15:b4:22:f8:13:44:09:f3:6e:e5:e2:87:42:ce:8e:
a8:93:fe:cd:48:c8:9b:81:96:96:33:ad:f6:59:95:27:28:97:
4c:23:b8:54:18:5d:25:b6:83:dd:65:65:9f:42:40:cc:8d:29:
40:b7:1c:8c:a3:bf:6e:2f:a7:0b:d6:3f:1e:40:f8:42:23:2c:
1c:96:d1:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:45:41 2026 by rpki-client