This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/iUkoo5YnzV7l-XW9iXwtd1qymUA.mft
File: iUkoo5YnzV7l-XW9iXwtd1qymUA.mft (raw, json)
Hash identifier: 0KLJRpWg/VuQEaMTYZ9+YO3tOKIJ3QxJSIP6EcThDS8=
Subject key identifier: 71:95:97:58:35:D9:C2:F8:6B:70:64:DA:B7:22:51:E9:F9:99:28:0B
Authority key identifier: 89:49:28:A3:96:27:CD:5E:E5:F9:75:BD:89:7C:2D:77:5A:B2:99:40
Certificate issuer: /CN=894928a39627cd5ee5f975bd897c2d775ab29940
Certificate serial: 019BF688427816C9F285ED2158DCC83C10E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iUkoo5YnzV7l-XW9iXwtd1qymUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/iUkoo5YnzV7l-XW9iXwtd1qymUA.mft
Manifest number: 15E2
Signing time: Sun 25 Jan 2026 19:01:23 +0000
Manifest this update: Sun 25 Jan 2026 19:01:23 +0000
Manifest next update: Mon 26 Jan 2026 19:01:23 +0000
Files and hashes: 1: AFQC7jHnRlCUVKp9-Y8DclCs6sw.roa (hash: K8ES0stF0B9nVEj6mDlZTMrk2WtUAQbBdwAem6tOZGY=)
2: Io_ZVHvCyR6E0UkrByDPhBSjf28.roa (hash: GgHe68vIGWEdGtgi9K1dWLKGMpr22uj5DBtVFq/PEt8=)
3: Sw3TBAZfbT7g9hIziOAVbID_LK0.roa (hash: GcVNx3s7JTViQrTy69Sa/cOemh0RTv4+/HNRQpVhgG8=)
4: UBRxr2nYR9E7znMInZ4kkE77leM.roa (hash: n5idYROewwRPTbiKVI2bzv8U9KgMAq8Hw16uWVfkjtA=)
5: ZgTKdwUh3SurmRUa8dm-u_MWcXw.roa (hash: qRP4wuFNa16Ds9pfHaXqX+aH3Ub6klNpQNjHeuFx6D8=)
6: iUkoo5YnzV7l-XW9iXwtd1qymUA.crl (hash: IF/ZsZCWspyhZR1pS9UAMrisplkRCiuVCrW1rgBjNj8=)
7: iXVTxxd-VzfNWG_h6FSR8aDfAh0.roa (hash: TCBBqFimvaPYoPwM3u7pi0MqQ4jMKUyoiDLkS/Ux7PI=)
8: pBq3W9xPZuycWXuqkD961L-mWtw.roa (hash: UcttI+nS2NhvK4pCjq/sa+PPYwZRzwG7hdOjojDGC14=)
9: qOJN9omToo0C3f14D69g26kolF0.roa (hash: ID+RWAeZnySlCvlcenhMVT/bVoxf+6Y//DrxiQaW6/A=)
10: uRRMYgnu-bZBG9baaLWfUi4PBns.roa (hash: JWxuXbyBJNwH97SXL3KmtOQUktUGRxMlosbaF3EpabU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/iUkoo5YnzV7l-XW9iXwtd1qymUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/iUkoo5YnzV7l-XW9iXwtd1qymUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/iUkoo5YnzV7l-XW9iXwtd1qymUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 13:21:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f6:88:42:78:16:c9:f2:85:ed:21:58:dc:c8:3c:10:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=894928a39627cd5ee5f975bd897c2d775ab29940
Validity
Not Before: Jan 25 19:01:23 2026 GMT
Not After : Jan 26 19:01:23 2026 GMT
Subject: CN=7195975835d9c2f86b7064dab72251e9f999280b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:fd:7f:a1:d6:a3:7d:e0:53:1a:64:17:5b:a0:
85:71:23:91:45:2c:22:b0:95:c8:10:d8:bc:17:4c:
a8:fc:e9:db:db:f1:d4:38:a4:be:8d:d1:72:96:75:
e0:a4:1e:96:a2:ee:c7:9b:f5:32:c3:5e:ad:62:9d:
50:f5:04:61:de:5d:0b:6b:72:12:87:3c:88:e4:05:
72:fe:20:01:e1:02:0f:b1:43:73:87:0f:1e:49:52:
11:76:26:9a:2b:31:10:cf:f6:ad:18:87:c4:fb:f4:
62:a3:ca:9c:21:29:c9:cb:3c:33:bb:3a:70:a7:58:
df:e5:06:9a:19:0d:01:22:40:95:58:7f:87:87:9e:
a2:09:b5:fe:95:49:2f:e7:6c:40:10:50:58:2b:66:
a0:25:85:59:51:ba:7a:24:1c:60:ce:7f:52:f5:14:
16:ca:10:4a:ff:e3:e3:0d:07:df:4f:6e:f3:09:3f:
ef:7b:58:f7:c8:3d:58:b1:9b:a9:96:d7:2f:70:1f:
7a:e4:10:de:54:d3:60:2f:9b:37:8e:f6:dc:da:61:
0a:b2:19:79:cb:1a:d8:1f:f2:b8:97:eb:73:f4:41:
ed:9a:13:3e:39:d2:02:78:4e:ad:5b:77:29:c9:7e:
56:f6:62:21:14:33:77:80:1b:04:91:62:6c:63:8d:
53:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:95:97:58:35:D9:C2:F8:6B:70:64:DA:B7:22:51:E9:F9:99:28:0B
X509v3 Authority Key Identifier:
keyid:89:49:28:A3:96:27:CD:5E:E5:F9:75:BD:89:7C:2D:77:5A:B2:99:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iUkoo5YnzV7l-XW9iXwtd1qymUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/iUkoo5YnzV7l-XW9iXwtd1qymUA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/iUkoo5YnzV7l-XW9iXwtd1qymUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:f7:3a:53:4f:da:05:d0:21:9c:0b:9a:f0:c3:ca:ad:ad:48:
23:35:04:88:97:d7:a2:97:7d:7a:3c:29:8c:ba:42:1d:02:ab:
b6:2e:23:5a:7a:42:5f:a5:68:c9:54:22:b6:64:38:fb:96:ad:
a3:aa:07:a6:43:b7:a8:c1:af:9f:24:c7:5a:4f:0f:24:f8:e4:
c8:1b:8b:d9:54:80:5b:de:7e:0c:86:e9:7b:0f:5a:66:22:2c:
88:a5:c7:80:0d:d7:af:58:89:15:a9:eb:f2:d4:e3:ba:ec:f4:
42:fa:63:8a:0b:49:d0:5d:df:2e:8e:61:30:91:b0:35:01:cf:
98:4f:ff:cb:c6:96:13:b4:74:e5:0e:9d:45:99:f1:45:ac:e3:
41:f3:77:5e:c2:17:12:8a:d0:35:79:75:c9:8d:8e:8a:3c:fa:
93:e7:61:ae:60:ce:8e:4a:1c:73:01:fe:6b:03:4e:ec:32:30:
43:54:b2:96:78:02:07:2d:5f:0b:8b:88:b5:97:80:52:e7:0a:
9f:92:55:ee:dd:ee:a2:fd:84:fc:c1:20:2b:26:17:b6:72:ad:
2d:cd:2e:e9:39:a4:6f:6c:22:82:a2:98:55:3a:4d:75:dc:85:
ee:e2:f9:9a:28:f1:a7:ef:6b:e1:fe:4c:6c:88:dc:ee:af:37:
9b:67:a0:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:51:03 2026 by rpki-client