This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/b862d3-6844-46f7-bd98-83bc797278e2/1/87KAXYd27t63qky-WvVozbJin8I.mft
File:                     87KAXYd27t63qky-WvVozbJin8I.mft (raw, json)
Hash identifier:          eyi0fE745oI/u/M5V0tX6K787nupr03uW4G8D5K/4WU=
Subject key identifier:   86:D2:56:07:CE:E4:19:92:6C:FE:40:80:E4:47:4C:39:D7:60:30:41
Authority key identifier: F3:B2:80:5D:87:76:EE:DE:B7:AA:4C:BE:5A:F5:68:CD:B2:62:9F:C2
Certificate issuer:       /CN=f3b2805d8776eedeb7aa4cbe5af568cdb2629fc2
Certificate serial:       019BF2E24E7F179402D1AC49DEAA3730D4F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/87KAXYd27t63qky-WvVozbJin8I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/b862d3-6844-46f7-bd98-83bc797278e2/1/87KAXYd27t63qky-WvVozbJin8I.mft
Manifest number:          111C
Signing time:             Sun 25 Jan 2026 02:01:15 +0000
Manifest this update:     Sun 25 Jan 2026 02:01:15 +0000
Manifest next update:     Mon 26 Jan 2026 02:01:15 +0000
Files and hashes:         1: 87KAXYd27t63qky-WvVozbJin8I.crl (hash: ez8RwF96xLjsHojUJOztZTwPlZyE+PuHpGsP73sSB1E=)
                          2: AspI11raW1W04hjS-S4dOvg7DJ0.roa (hash: vyR9bLbU9Kq6oSRsp+g4vq54T/skGcryAaf7JnoUv/A=)
                          3: Kt_KSYrDgcjqIw-tzOf1SsEuolE.roa (hash: iGYT2jk0/nojybC7EhwbZ+9UI5BCjZA3DlRVN4V+qoM=)
                          4: cLMf5Wd9_XCFE1K-8kc5wZs2Fi4.roa (hash: c7+KWt1SdxMn3TTxEN2hC0zORqA9HzBlfBHlbXmPphA=)
                          5: ehqv0V2Mxbz4tpd2nZ-H0adSaEo.roa (hash: 02XO0vXOdnlzhqYHTi75uxwmBCYXsERvvoqfOYq0+7M=)
                          6: uYwmLI9IgXoeBYgIJ67lD4M9yaw.roa (hash: KF+AYbOaxFn3R/9fgqU1GbRgcGguP9S+XNTb3CR98gw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/b862d3-6844-46f7-bd98-83bc797278e2/1/87KAXYd27t63qky-WvVozbJin8I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/b862d3-6844-46f7-bd98-83bc797278e2/1/87KAXYd27t63qky-WvVozbJin8I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/87KAXYd27t63qky-WvVozbJin8I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 02:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f2:e2:4e:7f:17:94:02:d1:ac:49:de:aa:37:30:d4:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3b2805d8776eedeb7aa4cbe5af568cdb2629fc2
        Validity
            Not Before: Jan 25 02:01:15 2026 GMT
            Not After : Jan 26 02:01:15 2026 GMT
        Subject: CN=86d25607cee419926cfe4080e4474c39d7603041
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:58:e6:74:73:ff:19:3f:b9:c3:a5:19:a5:5d:
                    e6:ac:6d:16:b5:19:e4:94:a7:24:8f:11:78:3d:f6:
                    e1:4e:3f:f2:86:d2:31:a9:9a:5b:74:ca:91:13:bd:
                    d1:9b:2a:db:3f:ea:32:cf:07:17:46:42:a9:14:08:
                    e1:35:c5:bb:60:4e:10:2c:54:3d:0f:dc:14:be:41:
                    0d:b0:fc:6b:17:47:e7:e9:b5:55:7b:ba:44:1c:3d:
                    9d:80:9f:6b:20:9c:54:c5:a4:c3:4f:e8:3b:e9:a1:
                    fe:4f:cf:b0:3d:97:64:ee:9a:ee:25:08:eb:70:8c:
                    44:6e:47:31:60:aa:14:0a:86:09:78:95:ef:82:58:
                    72:75:d6:58:7c:b5:3d:04:96:e6:fb:27:ff:4b:5c:
                    96:6c:3e:c8:70:09:41:18:49:00:08:36:80:a9:01:
                    1c:68:a4:ed:ff:17:9e:bb:7e:ac:83:1e:4c:d9:62:
                    f2:9e:61:24:ee:da:32:9b:9e:14:ea:b8:a5:12:61:
                    de:e3:74:9c:87:a5:03:24:ed:d2:ce:e1:b7:e4:94:
                    e6:3b:51:6f:2a:1c:83:f4:ab:62:aa:3b:47:db:ea:
                    70:ef:b1:1d:6b:4f:4d:bc:e6:5d:c3:88:18:92:76:
                    d5:95:4a:a6:c1:1f:2f:1d:6f:93:fb:f4:e7:73:48:
                    25:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:D2:56:07:CE:E4:19:92:6C:FE:40:80:E4:47:4C:39:D7:60:30:41
            X509v3 Authority Key Identifier:
                keyid:F3:B2:80:5D:87:76:EE:DE:B7:AA:4C:BE:5A:F5:68:CD:B2:62:9F:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/87KAXYd27t63qky-WvVozbJin8I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/b862d3-6844-46f7-bd98-83bc797278e2/1/87KAXYd27t63qky-WvVozbJin8I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/b862d3-6844-46f7-bd98-83bc797278e2/1/87KAXYd27t63qky-WvVozbJin8I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:52:11:2d:70:98:d9:71:6f:1c:17:8f:71:54:08:db:4d:a3:
         8a:96:f6:89:fc:7a:6a:48:97:8e:71:27:02:c0:47:fb:5e:d3:
         c4:29:ff:5e:92:8f:cb:c1:5f:ec:ba:d0:78:44:8c:90:c4:ed:
         f0:f0:e2:ff:e5:88:0a:99:14:70:12:04:97:c9:25:67:7b:e7:
         1f:0a:b8:86:8c:a7:08:bf:87:4d:bd:14:69:cb:cc:4b:b8:f2:
         5d:54:58:47:61:cb:0e:19:df:96:ae:ee:ec:f0:e2:b6:01:23:
         c5:a7:41:02:2d:1a:2f:0c:44:f9:80:a3:c2:af:81:ef:12:5e:
         11:c8:50:46:0b:16:23:3a:53:45:d0:6c:c3:e1:ae:32:b2:e3:
         42:d3:21:f8:4f:5b:71:d7:df:a8:5e:d8:bd:d2:c8:13:b2:d1:
         f3:af:b0:63:45:76:18:06:20:04:5a:db:8d:b2:ef:0d:67:f2:
         99:a4:74:15:b4:22:f8:13:44:09:f3:6e:e5:e2:87:42:ce:8e:
         a8:93:fe:cd:48:c8:9b:81:96:96:33:ad:f6:59:95:27:28:97:
         4c:23:b8:54:18:5d:25:b6:83:dd:65:65:9f:42:40:cc:8d:29:
         40:b7:1c:8c:a3:bf:6e:2f:a7:0b:d6:3f:1e:40:f8:42:23:2c:
         1c:96:d1:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:45:41 2026 by rpki-client