This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/406991-5be3-4a05-acb2-1ad47ccd2d9a/1/ieIaK4oluXG9t0GgquMlmSMEGU4.mft
File: ieIaK4oluXG9t0GgquMlmSMEGU4.mft (raw, json)
Hash identifier: AsW95mbb+sj8Xx3kl8GU802Dsp311Zs+SeuR1dWbUM8=
Subject key identifier: E0:78:E4:1B:15:33:2A:38:D9:66:81:E3:3D:CA:6C:64:83:1B:35:39
Authority key identifier: 89:E2:1A:2B:8A:25:B9:71:BD:B7:41:A0:AA:E3:25:99:23:04:19:4E
Certificate issuer: /CN=89e21a2b8a25b971bdb741a0aae325992304194e
Certificate serial: 019BF688222E42C048B9E49DE444FB3B083B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ieIaK4oluXG9t0GgquMlmSMEGU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/406991-5be3-4a05-acb2-1ad47ccd2d9a/1/ieIaK4oluXG9t0GgquMlmSMEGU4.mft
Manifest number: 17F9
Signing time: Sun 25 Jan 2026 19:01:15 +0000
Manifest this update: Sun 25 Jan 2026 19:01:15 +0000
Manifest next update: Mon 26 Jan 2026 19:01:15 +0000
Files and hashes: 1: ZhzWzsv1esuDg2--HsFJsoBVczM.roa (hash: aJg+/l3uu6d+sWISGNiUNa/6bWNNVpESm/Si0FjXGJY=)
2: dkhQ_UaK7KYvlzpQ9GDq8JVLYXM.roa (hash: Hysc5ZKIFwdVr2e/1RLMNiLyLDj0bzccSLkW/4M0Q+o=)
3: fhcZVexRF5qaj_1pM8ahhSdfydc.roa (hash: EkiQ4ssRbjZx+/2UZU++Ez1X9Vz4f0hPt2rcl2HCQAQ=)
4: ieIaK4oluXG9t0GgquMlmSMEGU4.crl (hash: MZcO13nPa74bHLpNAaCf0244FcNZ7LEP2EdwiweGARI=)
5: nYWrF9Km5Z2bdnEGENFIysthFYY.roa (hash: 9Sz8hqL9rh1yiVyW8AkvB82GifJEOrPjylm2DNyZ1lA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/406991-5be3-4a05-acb2-1ad47ccd2d9a/1/ieIaK4oluXG9t0GgquMlmSMEGU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/406991-5be3-4a05-acb2-1ad47ccd2d9a/1/ieIaK4oluXG9t0GgquMlmSMEGU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ieIaK4oluXG9t0GgquMlmSMEGU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 13:21:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f6:88:22:2e:42:c0:48:b9:e4:9d:e4:44:fb:3b:08:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89e21a2b8a25b971bdb741a0aae325992304194e
Validity
Not Before: Jan 25 19:01:15 2026 GMT
Not After : Jan 26 19:01:15 2026 GMT
Subject: CN=e078e41b15332a38d96681e33dca6c64831b3539
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:2e:5f:1f:b8:b6:26:15:07:00:b3:7d:88:80:
a0:48:89:7a:24:80:0a:92:42:4f:6f:1c:34:07:9f:
48:da:24:62:76:fa:6d:18:e7:dd:38:20:4d:39:bf:
fa:92:a0:9d:13:3b:19:b9:ca:92:1f:88:aa:b6:fb:
66:3f:c6:f2:2c:9c:23:b4:6a:e3:ca:ce:87:0c:59:
42:58:74:0e:27:84:cb:a9:7d:f1:23:a1:dd:c7:31:
fc:7e:ef:c5:00:08:52:e7:ea:43:8c:45:26:fa:5d:
dd:0c:ce:f2:49:8c:de:24:ed:86:c0:9c:69:ef:37:
3d:72:00:a9:b0:6b:7e:9c:a0:69:1c:3b:68:e5:25:
21:4a:9d:2c:f8:d9:1f:f4:ad:1a:58:68:9c:7c:35:
c0:4b:15:40:d6:63:fc:98:38:3f:39:f9:60:f8:85:
e6:4e:4e:b6:3c:f6:eb:cd:e5:da:3d:c3:56:6a:3c:
62:b2:f4:05:61:4a:0c:04:1e:52:75:24:41:3c:28:
0b:0e:0c:5a:ce:50:fb:d6:cb:2d:79:4c:f3:4d:b1:
73:bd:33:eb:13:05:38:2b:41:26:45:9c:78:a1:c3:
35:8c:73:2c:a4:f0:e1:83:80:0b:74:11:20:7e:8a:
44:7e:64:5d:17:5e:0e:73:16:c0:2b:57:79:23:4a:
a1:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:78:E4:1B:15:33:2A:38:D9:66:81:E3:3D:CA:6C:64:83:1B:35:39
X509v3 Authority Key Identifier:
keyid:89:E2:1A:2B:8A:25:B9:71:BD:B7:41:A0:AA:E3:25:99:23:04:19:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ieIaK4oluXG9t0GgquMlmSMEGU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/406991-5be3-4a05-acb2-1ad47ccd2d9a/1/ieIaK4oluXG9t0GgquMlmSMEGU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/406991-5be3-4a05-acb2-1ad47ccd2d9a/1/ieIaK4oluXG9t0GgquMlmSMEGU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:47:01:10:07:85:13:64:3f:69:04:b0:6f:a1:42:81:fc:43:
31:7c:42:0b:98:4f:ba:97:10:68:24:93:df:37:bf:e5:b0:d3:
48:93:eb:8e:15:c3:e0:92:b0:ac:35:c2:19:ad:50:02:43:2e:
d3:00:78:93:0c:b3:bb:c1:7d:c2:3b:28:0f:91:50:34:77:0a:
a4:7c:68:8c:89:6e:31:1b:2a:dd:9e:e8:92:2b:40:ad:20:ab:
59:d2:ea:9d:06:dc:d5:8f:f1:b5:16:81:22:be:b5:de:ac:44:
59:18:57:12:50:8d:a5:ce:5d:11:4e:21:ae:f7:fd:37:49:cb:
1d:8f:92:46:1a:6c:74:36:73:fe:42:a0:91:89:65:09:53:87:
be:36:78:c8:0b:90:96:48:59:1b:d7:f7:37:cb:e5:11:2a:2d:
2e:0f:d5:e3:c9:23:59:8f:f9:da:b4:b3:40:9d:cd:c6:6d:5c:
b7:1c:44:78:c1:9b:64:6d:0b:d9:29:81:06:a9:15:9d:98:d0:
d5:f4:17:7c:79:16:e7:23:e8:56:26:d7:f3:a0:a4:e5:0d:21:
c8:06:87:b2:85:28:08:07:e1:98:43:fb:cb:a1:a0:2e:61:64:
fd:92:c2:5e:58:76:81:f2:8f:f1:f0:55:0c:a1:af:db:ad:27:
76:3e:16:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:35:42 2026 by rpki-client