This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/abcc07-9a60-49f6-a1ef-8d52902ac830/1/87qQxx60ywFpyUhD5ccv13dQGQY.mft
File:                     87qQxx60ywFpyUhD5ccv13dQGQY.mft (raw, json)
Hash identifier:          YN0CHVIyeHP2dTkC3niPC5LOCH++jkiNm6K8LFscXQE=
Subject key identifier:   A6:D7:B2:09:4E:A7:A2:9D:F5:0A:22:69:93:F7:0E:86:6B:3C:C2:23
Authority key identifier: F3:BA:90:C7:1E:B4:CB:01:69:C9:48:43:E5:C7:2F:D7:77:50:19:06
Certificate issuer:       /CN=f3ba90c71eb4cb0169c94843e5c72fd777501906
Certificate serial:       019C41A192D43B54D66B992DD354CB1E8593
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/87qQxx60ywFpyUhD5ccv13dQGQY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/abcc07-9a60-49f6-a1ef-8d52902ac830/1/87qQxx60ywFpyUhD5ccv13dQGQY.mft
Manifest number:          1667
Signing time:             Mon 09 Feb 2026 09:00:33 +0000
Manifest this update:     Mon 09 Feb 2026 09:00:33 +0000
Manifest next update:     Tue 10 Feb 2026 09:00:33 +0000
Files and hashes:         1: 87qQxx60ywFpyUhD5ccv13dQGQY.crl (hash: EATrApxnDOBxEAHEsgjCqu+7h3TILPxIGFeWN4+WRyI=)
                          2: HFbNCHkvFA8jkd2sknvleLz36Tg.roa (hash: fi2cqyuRcru8EJ7IltLtB/qriwTw+zg8CNvhM51ultA=)
                          3: UKaxkQEqDefi6Q-PAxV70oCO_r8.roa (hash: U/xm0eOwS2N25g8rhsisLKcIXoZW3KuS4QAYfKx9zWg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/abcc07-9a60-49f6-a1ef-8d52902ac830/1/87qQxx60ywFpyUhD5ccv13dQGQY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/abcc07-9a60-49f6-a1ef-8d52902ac830/1/87qQxx60ywFpyUhD5ccv13dQGQY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/87qQxx60ywFpyUhD5ccv13dQGQY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 09:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:a1:92:d4:3b:54:d6:6b:99:2d:d3:54:cb:1e:85:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3ba90c71eb4cb0169c94843e5c72fd777501906
        Validity
            Not Before: Feb  9 09:00:33 2026 GMT
            Not After : Feb 10 09:00:33 2026 GMT
        Subject: CN=a6d7b2094ea7a29df50a226993f70e866b3cc223
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:bd:37:65:50:ab:c5:c5:b7:b7:43:11:ec:48:
                    3b:ed:83:32:58:49:d7:32:6d:32:3d:e9:e5:a8:be:
                    df:28:dc:ff:13:43:cd:1a:d2:81:bc:f0:89:8c:b4:
                    58:25:cc:e8:21:19:80:39:07:63:43:bb:45:40:78:
                    7d:47:ea:68:87:31:d2:98:57:63:99:2e:9a:f8:c8:
                    c2:85:13:9b:82:19:6d:33:7e:e7:c3:35:ea:9a:0a:
                    1d:02:88:7b:3c:e8:73:a0:ed:bb:ce:70:49:39:ba:
                    18:43:d7:ee:cc:e8:4a:ba:e4:a1:a8:4f:49:ab:5d:
                    e9:c6:91:3f:9a:7d:be:9b:20:2b:49:33:e2:ea:46:
                    1d:35:08:b9:8e:a5:54:90:08:67:20:d8:08:7e:3f:
                    44:55:1b:25:ab:5d:0b:3e:46:73:b0:86:07:99:97:
                    af:f9:21:2a:ba:0e:4c:cc:81:29:b9:28:87:5b:f2:
                    cf:ea:e0:92:f9:d1:42:ff:ff:8f:fe:a5:ec:56:02:
                    de:cb:cb:0e:5d:32:87:57:d9:93:28:ba:b5:7e:17:
                    7a:d8:68:8a:9f:0c:a7:df:a9:5b:87:c4:3e:f1:70:
                    92:06:07:a5:c4:8a:28:cd:a5:04:5b:7c:5d:08:71:
                    81:d4:3b:bb:d8:ec:9a:b2:92:8a:68:bd:b6:3a:2b:
                    ec:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:D7:B2:09:4E:A7:A2:9D:F5:0A:22:69:93:F7:0E:86:6B:3C:C2:23
            X509v3 Authority Key Identifier:
                keyid:F3:BA:90:C7:1E:B4:CB:01:69:C9:48:43:E5:C7:2F:D7:77:50:19:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/87qQxx60ywFpyUhD5ccv13dQGQY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/abcc07-9a60-49f6-a1ef-8d52902ac830/1/87qQxx60ywFpyUhD5ccv13dQGQY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/abcc07-9a60-49f6-a1ef-8d52902ac830/1/87qQxx60ywFpyUhD5ccv13dQGQY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:a4:0d:94:45:e8:18:31:bf:7c:20:de:68:b2:8a:3d:b5:16:
         2b:0c:03:db:2f:5c:35:4b:48:a2:0b:62:0c:25:91:0d:a6:96:
         41:1d:69:78:03:a0:4e:ce:93:e0:6a:93:dd:0d:84:ea:bd:5c:
         46:cc:72:6c:36:79:57:02:df:e1:be:4a:0d:27:ec:be:a1:c1:
         01:bd:78:12:bf:2c:9a:06:ec:3e:7e:24:df:cd:bf:d6:e4:17:
         1d:23:13:26:90:47:d2:92:c6:30:71:d1:36:60:71:a8:92:09:
         27:10:7a:61:2a:1e:0a:9e:78:cc:9f:43:98:d2:e9:30:a1:fd:
         a6:72:9f:28:db:8e:50:7f:0e:8f:ef:59:7e:61:86:fb:57:d6:
         8c:1d:2a:f9:9f:b2:87:0a:03:c7:05:ad:50:ed:54:cd:77:6a:
         0c:43:d7:bb:7d:ad:a6:41:af:5f:b6:3c:4f:4d:71:c3:65:c1:
         16:0d:69:8c:4a:6a:1e:dd:c2:9a:32:ba:dc:03:68:50:18:63:
         36:e5:b6:b6:1b:7d:f0:2e:36:ab:f3:36:eb:8f:54:70:09:e3:
         c3:57:de:c2:e4:4c:2e:8a:7f:86:dc:71:af:8f:ee:77:7c:8f:
         04:d6:8b:0a:ce:5a:fe:32:7e:82:71:a5:fd:ad:e7:d5:4b:b9:
         cf:8f:c6:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxBoZLUO1TWa5kt01TLHoWTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzYmE5MGM3MWViNGNiMDE2OWM5NDg0M2U1YzcyZmQ3Nzc1
MDE5MDYwHhcNMjYwMjA5MDkwMDMzWhcNMjYwMjEwMDkwMDMzWjAzMTEwLwYDVQQD
EyhhNmQ3YjIwOTRlYTdhMjlkZjUwYTIyNjk5M2Y3MGU4NjZiM2NjMjIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8703ZVCrxcW3t0MR7Eg77YMyWEnX
Mm0yPenlqL7fKNz/E0PNGtKBvPCJjLRYJczoIRmAOQdjQ7tFQHh9R+pohzHSmFdj
mS6a+MjChRObghltM37nwzXqmgodAoh7POhzoO27znBJOboYQ9fuzOhKuuShqE9J
q13pxpE/mn2+myArSTPi6kYdNQi5jqVUkAhnINgIfj9EVRslq10LPkZzsIYHmZev
+SEqug5MzIEpuSiHW/LP6uCS+dFC//+P/qXsVgLey8sOXTKHV9mTKLq1fhd62GiK
nwyn36lbh8Q+8XCSBgelxIoozaUEW3xdCHGB1Du72OyaspKKaL22OivsfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKbXsglOp6Kd9QoiaZP3DoZrPMIjMB8GA1UdIwQY
MBaAFPO6kMcetMsBaclIQ+XHL9d3UBkGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvODdxUXh4NjB5d0ZweVVoRDVjY3YxM2RRR1FZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9hYmNjMDctOWE2MC00OWY2LWExZWYt
OGQ1MjkwMmFjODMwLzEvODdxUXh4NjB5d0ZweVVoRDVjY3YxM2RRR1FZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS9hYmNjMDctOWE2MC00OWY2LWExZWYtOGQ1MjkwMmFjODMw
LzEvODdxUXh4NjB5d0ZweVVoRDVjY3YxM2RRR1FZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE6QNlEXo
GDG/fCDeaLKKPbUWKwwD2y9cNUtIogtiDCWRDaaWQR1peAOgTs6T4GqT3Q2E6r1c
RsxybDZ5VwLf4b5KDSfsvqHBAb14Er8smgbsPn4k382/1uQXHSMTJpBH0pLGMHHR
NmBxqJIJJxB6YSoeCp54zJ9DmNLpMKH9pnKfKNuOUH8Oj+9ZfmGG+1fWjB0q+Z+y
hwoDxwWtUO1UzXdqDEPXu32tpkGvX7Y8T01xw2XBFg1pjEpqHt3CmjK63ANoUBhj
NuW2tht98C42q/M2649UcAnjw1fewuRMLop/htxxr4/ud3yPBNaLCs5a/jJ+gnGl
/a3n1Uu5z4/GpQ==
-----END CERTIFICATE-----
Generated at Mon Feb 9 16:55:31 2026 by rpki-client