This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft
File: IQIbJSIimXv-M7fksxWsjV4GeVQ.mft (raw, json)
Hash identifier: M7sjv637XdbnoXOVAUdny5VVEKzvIUs2R3Hwh7AUREs=
Subject key identifier: 6A:9B:4D:01:D4:14:42:17:E4:24:8B:20:DC:AB:50:7C:B9:89:3C:0F
Authority key identifier: 21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54
Certificate issuer: /CN=21021b252222997bfe33b7e4b315ac8d5e067954
Certificate serial: 019BF3F4A6A2B7A6C8AE285DB288766D3C53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft
Manifest number: 157A
Signing time: Sun 25 Jan 2026 07:00:55 +0000
Manifest this update: Sun 25 Jan 2026 07:00:55 +0000
Manifest next update: Mon 26 Jan 2026 07:00:55 +0000
Files and hashes: 1: 1-bwPNRa4hIuOmCXigFym4QuSvEg.roa (hash: T8k2dmI9vUTRjZrs4X4YE5xctVuURXzRhcAJw5O14+A=)
2: 590jpJtvHm4aq9pkOcasjjPKR5w.roa (hash: wNrNH6FKCaxwz0q75agrzuG0OijfKBZxBY6JT4ecZe4=)
3: 5C9_ixUcHdAFSFNXrsPXYEsthX8.roa (hash: EJq268SpN9myvhA37sM5KIFt2t6hL5j65NEljkhYCyk=)
4: 6cbxuMM6JMarkDQr6QohwZr_bLM.roa (hash: loJQ7YmdWvDMrlwR+VxEec0IBAymiKq+SltA1Yw9ets=)
5: IQIbJSIimXv-M7fksxWsjV4GeVQ.crl (hash: dm6vTzpCIu95iLKEv26fU3GY9Rxj0PinV6yrHCtg/L4=)
6: J3IUrppUQEJ9AlNcJD-MFxypKxI.roa (hash: uezq13xnHYoK43g5cZL4HFTwsYHZzWtKo0PDmpYGYzc=)
7: JwGIhxBirCT1TThWLT1cTyUlK2w.roa (hash: j7qYR9S/lN//eMY3sGuOe0xYcwHCPWhI4hm/BCoxt5c=)
8: OYlH95cJwavdZvWPD2OKDHAiTLc.roa (hash: BWL9nE74GQlUmW8EmNYK3RjJ9VZYHqxaunAVG9GH6bg=)
9: REV3W8PYUxFJpyQqeipP60uquIM.roa (hash: R/O4LVj/Nn1LD5Jt4pXt5pWCeAyMFWEfHCC2WmVvLdo=)
10: SSwmkO4bAa3Cf5CCG9FUvkP7lr0.roa (hash: Ha81Wfoc35Apd2MzoqOASambEnENvmJSJQLlpgCS2Bc=)
11: Tv21UJ7ytJOyOPKpUbJcsfcz7lg.roa (hash: R5S9kl+hHU1Moq3UfwZ59OY1nQwhi4UuliZUdnWHawA=)
12: V7t9HoQFq6tA2kgolQRcRfuRldU.roa (hash: hielByb8U0KHIxejo6mEN1esKRKu+XesjxBKkhAqRLc=)
13: bE94TCIYTfIl9kzaHRXzNiQoftE.roa (hash: 4j0TvOQTsGRxrK5ktDw/14Kxmma5Wvzi7ywS8WE8N44=)
14: c_cWOPcEQMft8Aer9o0bFFTuzpw.roa (hash: 3Xhi5i/L7JVUSZVPSdHXaHOfLiEna+V7BTZ9aCjfTKo=)
15: i_CapsG6EXIlo7hs2M2bjbUXRbE.roa (hash: +sXOWob0idLEKLvec5gYyEKYRnesgUnVyZvyzvC+SkU=)
16: l6HrdleVhy2ogO9R43FSLGOYE-0.roa (hash: I66ExL815Wc0ZDz47aWr6Q06u4QEOdOCM1yWi8w7a+g=)
17: libApNypfBDQd2xwXgzAI8hwEYs.roa (hash: 85uC1OhXAH8nIsIB5OKlWaHMqc+2tP9WlO+RfiiV8sU=)
18: lsMaKp3sC1c5czFXsxQDmNP9xmk.roa (hash: Dsgi94SjJOM3Yr7EX5Jzgm7yi1UrHtc8raZxtMY1V+E=)
19: m1yBz4RNqu4HwIJUFHN9eMdiX7Y.roa (hash: BDic+DDp9D84u0MlugmEZf/EDqOwVo1Ck4FCtwm/eIw=)
20: mWZu0c3ccvwxHHlT9SVTQ6oiDK0.roa (hash: brqoqJsgc5iiFOBbdYvb+I1IyHssIw8FjziyxDUxro8=)
21: sjKCh1UvwSo9gh78pswXrzhmgjY.roa (hash: Epfh/sLFIRezmkfoL01G62gt9D+LHrhjRtivmeX3aV0=)
22: trnZsePT4aG-KTCZxjcSxSR1ufY.roa (hash: /5+dzAAN+A0ooVs+3qzdB6EtpFGea8R5ILZY8ARUEc8=)
23: uEdKtSEqLX5Iz_4fkxgMbr53LUE.roa (hash: dz0TqFesDk6dPWKdMZqZb11QZzW0a5NzIkgvjFU9Kbs=)
24: vQfybJN1vj3HPY9kWRsovScXZXI.roa (hash: ll+3viF1WTZimDNWVnvJ31MIidphJFjh34BpRL2uHLk=)
25: wyKENznEjqoTOu0kPDQ-ja6IOA0.roa (hash: XADEeG1QubSOLS5X6zAA6TQkPOdRj7Y6STFASKP2PIo=)
26: zT9J5b2waWVY1frWgok6rDhDEkA.roa (hash: kG62AdWQmKbNQrIhDYZwVRIR364hCu8diTI8HvtbVqM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f3:f4:a6:a2:b7:a6:c8:ae:28:5d:b2:88:76:6d:3c:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21021b252222997bfe33b7e4b315ac8d5e067954
Validity
Not Before: Jan 25 07:00:55 2026 GMT
Not After : Jan 26 07:00:55 2026 GMT
Subject: CN=6a9b4d01d4144217e4248b20dcab507cb9893c0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d7:74:4c:f6:a5:16:c3:02:f2:f3:11:dc:f2:
21:33:5c:a4:0e:f8:3a:73:f4:12:e3:c9:fe:92:29:
1b:07:16:48:cf:4d:8e:af:72:1d:cc:34:43:26:12:
9d:1b:f8:65:82:c5:a9:6a:02:1b:18:33:ec:3d:1c:
09:75:27:83:3d:bc:40:d7:1d:7f:0f:34:76:3a:b8:
5d:45:d1:f0:9d:95:67:ea:68:20:8b:61:b4:c7:6c:
28:7f:96:e4:bf:a0:4c:d2:de:10:c5:f9:90:49:7e:
3c:83:27:f1:30:62:62:16:ce:e5:b3:24:4e:16:26:
b9:27:d5:cb:23:c0:24:1b:4f:8d:ae:78:74:52:c1:
f1:d5:c3:b2:63:e6:09:9a:a1:ed:66:b0:ef:9b:07:
a2:cf:d1:ee:3d:7c:fc:5e:04:aa:8f:60:b0:d5:23:
39:ff:7f:b9:41:2a:88:91:6b:d0:fd:97:31:98:fa:
07:6d:09:04:3c:da:d8:b6:80:5e:15:2e:71:f0:b9:
3d:72:34:c9:9b:c3:98:b8:9e:4b:05:9b:a7:7e:49:
76:7c:50:dc:3e:eb:bd:1a:51:4b:fe:3e:46:e4:ec:
73:e5:2d:49:d8:b0:a8:79:c7:a6:31:4f:18:32:50:
30:6b:29:d2:cc:cb:a8:77:c1:22:99:4d:b3:a4:be:
55:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:9B:4D:01:D4:14:42:17:E4:24:8B:20:DC:AB:50:7C:B9:89:3C:0F
X509v3 Authority Key Identifier:
keyid:21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:d2:e3:78:f7:8e:0a:d8:ed:07:cf:a8:5d:db:df:65:4d:08:
4a:8f:59:72:5d:a7:46:12:75:c4:2a:9b:ad:d7:45:12:71:dd:
aa:fa:99:ce:7f:c3:06:8c:5f:ff:ce:ea:8d:c8:c6:d1:29:6d:
3f:8b:6d:a2:34:f5:25:4b:bf:f7:a0:fc:56:15:a8:c2:fe:05:
ed:0b:70:cd:7d:8e:1f:84:8f:51:ca:44:76:d5:00:70:4a:c9:
92:71:d1:70:8e:2b:be:f3:3e:d1:4c:80:e1:ef:c0:94:54:3c:
f6:6a:75:c3:de:26:20:0f:dc:e8:b4:7f:f6:dd:b5:78:f7:0c:
3e:e5:4a:96:9d:4f:31:98:b7:b8:45:09:02:63:8a:9c:cc:55:
c9:8f:c2:b4:eb:a2:3b:90:30:9f:6b:98:7d:47:dc:2c:27:1c:
6d:1b:02:33:71:28:3e:f2:70:5e:d7:8b:4c:3c:df:26:93:25:
65:20:d1:b6:21:39:6b:e7:7e:d5:6d:0d:47:d1:13:35:f3:61:
db:a8:1e:79:6d:fa:b9:8d:72:2c:9c:ca:d2:99:66:7c:7e:ce:
0f:e4:b3:b3:ab:e7:b3:28:19:7d:3e:0c:49:ac:90:2c:9e:fb:
a2:5b:8c:04:b6:10:2a:96:0d:25:ea:0e:b6:7c:81:1e:5b:4a:
49:b9:26:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:46:21 2026 by rpki-client