This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/87kHgdu-vbjsQrr2ZIgFnqWGaqw.mft
File: 87kHgdu-vbjsQrr2ZIgFnqWGaqw.mft (raw, json)
Hash identifier: XPBXOvIZzuhQ3rvHPYFeHlpXQJzzE61JxRhKCd4XRsI=
Subject key identifier: C2:5B:AC:A3:48:25:03:5B:BD:AE:E9:AD:60:E0:C0:90:A8:98:6C:CC
Authority key identifier: F3:B9:07:81:DB:BE:BD:B8:EC:42:BA:F6:64:88:05:9E:A5:86:6A:AC
Certificate issuer: /CN=f3b90781dbbebdb8ec42baf66488059ea5866aac
Certificate serial: 019BFA2E63E39C85586076A0A8CCD8A6D1E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/87kHgdu-vbjsQrr2ZIgFnqWGaqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/87kHgdu-vbjsQrr2ZIgFnqWGaqw.mft
Manifest number: 0980
Signing time: Mon 26 Jan 2026 12:01:42 +0000
Manifest this update: Mon 26 Jan 2026 12:01:42 +0000
Manifest next update: Tue 27 Jan 2026 12:01:42 +0000
Files and hashes: 1: 06XUCJMT07KfXMH10GGCj5wEbAw.roa (hash: EgHdwMOgNylzVaIS1PHOHRnXwiOAytji7pJB66LjXYc=)
2: 87kHgdu-vbjsQrr2ZIgFnqWGaqw.crl (hash: T/ip45fzZ2Hs/+1IUeP2Z1+HGJgSEhDe7IGplAuZ5co=)
3: BTJzW0cyJnm3gOVHNjV6jn9aIRE.roa (hash: VWm9Zf270UZNJJ0FAQ1IEKbRWwfLrnZq1cNtrFR5b6U=)
4: WFKY5S3JEQ7Bnr9_U-2Ry0udwLQ.roa (hash: fSBLesAAtR+VxH91LhsUX54ddGl+GGLe6PyGSsyj77Q=)
5: bNSTLmAd_NIyCsQeeMYvIeRAEeM.roa (hash: k+yE5PrtofGaHem4WOpHAIKjDh/WIjo33qvbhPmIE5I=)
6: jWrQWxU_htSVFKc3r-gsjIqKyK8.roa (hash: 155qzeQlRhVHXfpXCRqK6ZR2jbaxRLl0EHy1IGUr6Uk=)
7: o-t9v30roQgEmAMMQrIN0GWWHTM.roa (hash: BDRjhS+R9h4zRZxBIv6pBvO1F0/r0pyiN4YZozbXmzs=)
8: oujn_bgR2P0PhEZCax5BiO_oVf4.roa (hash: JeulLAWLMZsbKOX1qSlzlZW6BLtojE/TzKdL/Yu5wSQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/87kHgdu-vbjsQrr2ZIgFnqWGaqw.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/87kHgdu-vbjsQrr2ZIgFnqWGaqw.mft
rsync://rpki.ripe.net/repository/DEFAULT/87kHgdu-vbjsQrr2ZIgFnqWGaqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 10:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:fa:2e:63:e3:9c:85:58:60:76:a0:a8:cc:d8:a6:d1:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3b90781dbbebdb8ec42baf66488059ea5866aac
Validity
Not Before: Jan 26 12:01:42 2026 GMT
Not After : Jan 27 12:01:42 2026 GMT
Subject: CN=c25baca34825035bbdaee9ad60e0c090a8986ccc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:01:ec:8e:db:f4:e2:44:f8:e1:c9:c3:29:1c:
de:84:cc:dc:d9:9d:77:e0:2d:1f:95:59:95:90:15:
8b:85:96:5d:f3:fd:ce:bb:c7:ce:6b:73:ec:3c:c6:
b9:5d:fe:27:65:a6:d4:01:5b:2b:b2:f3:d3:45:43:
32:fd:c7:8f:50:3d:22:92:67:07:a9:a3:05:4e:d6:
4c:eb:6b:6a:c1:60:73:99:ef:a4:bd:dc:a9:44:56:
08:2c:df:9b:14:a8:2c:d8:9a:50:e1:e0:2c:7a:be:
c2:66:75:4b:3b:3a:ad:72:1e:3c:e6:cd:4f:9f:57:
a7:4a:36:d3:c9:83:2b:41:ce:22:69:9a:3e:49:52:
cd:71:e9:ed:a3:78:bb:0c:c1:35:c2:59:0b:67:58:
8a:47:30:9d:fa:b0:de:44:7a:31:52:c6:77:8d:f6:
f4:35:43:ca:75:e5:3f:62:40:c5:88:50:dd:0a:68:
68:34:b1:bd:50:c5:d3:62:ee:04:fa:e1:70:46:2c:
69:ca:ad:c0:b2:f6:93:57:0b:26:6c:3c:d0:74:ad:
91:05:ed:51:96:c0:a5:cf:de:89:45:6e:52:90:8f:
12:56:57:bb:19:ef:32:54:21:5f:ad:36:19:e6:4a:
9f:7e:2e:ec:dd:62:c5:76:9c:a9:36:0e:7f:2b:33:
d6:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:5B:AC:A3:48:25:03:5B:BD:AE:E9:AD:60:E0:C0:90:A8:98:6C:CC
X509v3 Authority Key Identifier:
keyid:F3:B9:07:81:DB:BE:BD:B8:EC:42:BA:F6:64:88:05:9E:A5:86:6A:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/87kHgdu-vbjsQrr2ZIgFnqWGaqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/87kHgdu-vbjsQrr2ZIgFnqWGaqw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/87kHgdu-vbjsQrr2ZIgFnqWGaqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:8f:e6:cf:fa:c2:31:40:65:71:d9:43:d1:cb:e6:ca:fb:fb:
3a:e0:f5:cc:dd:f2:fe:f3:5b:89:80:29:89:08:fd:6e:59:72:
18:05:30:ac:a2:04:d3:9f:69:df:b3:82:70:72:8c:5e:b0:cd:
9b:44:fb:9e:40:41:2d:1d:d8:b2:d1:17:9c:bd:7a:43:53:31:
0f:dc:f8:e6:8b:fc:95:b8:ba:fe:f3:2e:dc:f4:44:c9:7b:77:
20:64:24:b6:2a:53:4d:09:0f:ef:eb:6f:28:a3:7b:76:90:ea:
49:de:74:a7:43:d1:76:7d:bf:47:9f:21:4a:06:0d:87:af:c8:
34:46:b0:76:b4:6d:95:25:23:df:48:98:ad:0d:5c:8b:e4:ae:
e5:b3:a7:73:c5:e9:61:22:19:58:14:34:a9:b2:f9:78:32:19:
17:cf:a3:f6:aa:15:ad:b0:80:0e:d0:dc:af:c7:eb:10:2a:5a:
10:97:29:23:6e:8f:30:94:ff:66:87:be:6b:a9:98:bf:e3:ad:
56:aa:41:3e:ca:90:fc:2e:15:bf:ec:c0:ff:d3:1e:5d:32:60:
7f:da:a6:35:99:88:5e:43:87:09:5d:c7:86:1f:96:96:9c:07:
b8:f6:38:66:22:a9:f1:99:6e:91:e0:28:d5:5f:c9:d0:4b:e1:
72:3b:a3:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv6LmPjnIVYYHagqMzYptHgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzYjkwNzgxZGJiZWJkYjhlYzQyYmFmNjY0ODgwNTllYTU4
NjZhYWMwHhcNMjYwMTI2MTIwMTQyWhcNMjYwMTI3MTIwMTQyWjAzMTEwLwYDVQQD
EyhjMjViYWNhMzQ4MjUwMzViYmRhZWU5YWQ2MGUwYzA5MGE4OTg2Y2NjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlgHsjtv04kT44cnDKRzehMzc2Z13
4C0flVmVkBWLhZZd8/3Ou8fOa3PsPMa5Xf4nZabUAVsrsvPTRUMy/cePUD0ikmcH
qaMFTtZM62tqwWBzme+kvdypRFYILN+bFKgs2JpQ4eAser7CZnVLOzqtch485s1P
n1enSjbTyYMrQc4iaZo+SVLNcento3i7DME1wlkLZ1iKRzCd+rDeRHoxUsZ3jfb0
NUPKdeU/YkDFiFDdCmhoNLG9UMXTYu4E+uFwRixpyq3AsvaTVwsmbDzQdK2RBe1R
lsClz96JRW5SkI8SVle7Ge8yVCFfrTYZ5kqffi7s3WLFdpypNg5/KzPWyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMJbrKNIJQNbva7prWDgwJComGzMMB8GA1UdIwQY
MBaAFPO5B4Hbvr247EK69mSIBZ6lhmqsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvODdrSGdkdS12YmpzUXJyMlpJZ0ZucVdHYXF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi84YzU4MDgtMzE2NS00MWRjLTkwYTAt
M2VmNWViN2M4NTk4LzEvODdrSGdkdS12YmpzUXJyMlpJZ0ZucVdHYXF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi84YzU4MDgtMzE2NS00MWRjLTkwYTAtM2VmNWViN2M4NTk4
LzEvODdrSGdkdS12YmpzUXJyMlpJZ0ZucVdHYXF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa4/mz/rC
MUBlcdlD0cvmyvv7OuD1zN3y/vNbiYApiQj9bllyGAUwrKIE059p37OCcHKMXrDN
m0T7nkBBLR3YstEXnL16Q1MxD9z45ov8lbi6/vMu3PREyXt3IGQktipTTQkP7+tv
KKN7dpDqSd50p0PRdn2/R58hSgYNh6/INEawdrRtlSUj30iYrQ1ci+Su5bOnc8Xp
YSIZWBQ0qbL5eDIZF8+j9qoVrbCADtDcr8frECpaEJcpI26PMJT/Zoe+a6mYv+Ot
VqpBPsqQ/C4Vv+zA/9MeXTJgf9qmNZmIXkOHCV3Hhh+WlpwHuPY4ZiKp8ZlukeAo
1V/J0Evhcjujfw==
-----END CERTIFICATE-----
Generated at Mon Jan 26 17:01:38 2026 by rpki-client