This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.mft
File: _4IwmmgUZ4rXLj8xpP4CcvQL2YY.mft (raw, json)
Hash identifier: IGLhAC2m7zFN35fEZ1CmpfDlcMnVWM+mWjt+pwbOG2s=
Subject key identifier: EA:71:E1:2B:5E:1A:3B:6C:EA:A1:4B:95:C5:FB:FC:99:7A:60:CF:9C
Authority key identifier: FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86
Certificate issuer: /CN=ff82309a6814678ad72e3f31a4fe0272f40bd986
Certificate serial: 019BF3BDB45EF18CC68BB1F8B51420CEE5FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.mft
Manifest number: 1836
Signing time: Sun 25 Jan 2026 06:00:54 +0000
Manifest this update: Sun 25 Jan 2026 06:00:54 +0000
Manifest next update: Mon 26 Jan 2026 06:00:54 +0000
Files and hashes: 1: 03O0jZn7lN2mHmMTT2gtEGmj1y4.roa (hash: LZZ62LxpHcKOfneaidWdiu/OACBH7cjnkz/u3c3icno=)
2: 9Apk7z1Y_gJ_rG8_9HRdvAGRDtc.roa (hash: G28Shyl2LUNFSI8lNP9RFb8LXMXTC2Jm6p1S4Grsi0I=)
3: ARLz7Zks6T2ea2WJuFF8R65OsN4.roa (hash: EuNQEWpBjjFCuwDTuWkj3hxC9qM3sJIuMmnx6xbp4NA=)
4: C8YxW6-LhOiDL16FS-ipYIi3JkM.roa (hash: /H+TbI8OfuJWR5cIC2JHJEulz1QCaz1yL07g3o5neLM=)
5: CPo3voyKhNOsXHmXzF5o-hs-HPA.roa (hash: peJ83/Tl3vvRNS+T4a8JciT2OMJU95iOpg8lTZEv+U0=)
6: GaEBEb_ouXprDavXJKQvOXZ9gNk.roa (hash: rDd3E1G5L6hUFhu3Edl2WebaS1ZhbGZFE1GPndPAP3s=)
7: GfMPNhFLhmqnawsjqQy5BpzadGk.roa (hash: pK4EPBqZkYKq6xfSmPI/msruoe5VONRBfWbL6xFM7Gg=)
8: H8GAoslYRV8h3Hy--jlQzmT0N-U.roa (hash: XX8tu9VsQeyjrKRcxncdSaLdc2YIZdIAjvttKj6rklU=)
9: HMhWhNobOEPkN3MtaOvVXJjeyzU.roa (hash: 9VQQBJmuzLR1o/OSn+Mpj75Rdl8wKqyNnKeja8g+OEo=)
10: HlGVjN7etqeTYz5KNfDty1vwl9s.roa (hash: F5PL/iRv4PWVl9yuJ7nn29rt1Os5b+fBG5lTLrQTUPY=)
11: ICbtZe-McTFZdI3qhYtOeZDxa74.roa (hash: js1dzZORO0tvQXJUJOO00odskYzdQVMEYF5HcqBFxww=)
12: KX-73MWtdrd1wR5SylLVXNRo-HY.roa (hash: UKVIx8JwdvKDxrN8stZ/ip0UjFqF+amD4teVAAzHmvE=)
13: KnRc_VMCR5tzgj3_XzZc21HvgRs.roa (hash: aFCLRyo9ZlWGal7jGwZY+Bb+MXwfBr9j67nygUj1XZQ=)
14: KySMxnvF90PjpBprfeEW8zLJBsQ.roa (hash: 09+AS3+Vj5/qH+7uma3i3M0Di8vIqcUIDLvOelFcjJs=)
15: LE2awT7rVhTgn1binznSNNNqBKw.roa (hash: 5L4jHaTQ3Ysq4fdiPU8q1opHiwb0D25zJy6KhXBqiZQ=)
16: QJxbOK_00ICL24h1uRjuo3GbyiI.roa (hash: /706whWQ3ST/KlzD42n/41A8kEnHqJ1lVJ4bmV5FV04=)
17: SZzrnuS1RCrsdHTdFWXBsZImyns.roa (hash: w1qGRKwdDCKtNZz2wd8EqGLZ0kdoQChLKbQRPmKZw+c=)
18: S_d_flsuECmBoZE2ypIGuMWEWIE.roa (hash: Z1nWJRsLQx+8tlO/rlKwJw1qJnATj0MrfqC6UyIXi4A=)
19: XTp2Q_X9IPYiKxjwerz6gv4CZ1A.roa (hash: xs/xW47uPV3PFyZM/56JVPLFLoywp7b6YdV2aLzUF3c=)
20: YlxMB1ZZ-ow203ws5UgFMDiy-aw.roa (hash: AUEoKkZI29uogZ3xQ0ZfV6IUpZXozQCkx7EKfEnNRlI=)
21: _4IwmmgUZ4rXLj8xpP4CcvQL2YY.crl (hash: SJYXqQMlTRNw8hSA3oR00P+pQFfIzPjvqEc/e4qqtjk=)
22: _ruYevJ63B-p43DIzRavuNMUlYs.roa (hash: l0rE7WZAdFwmxD+supN3BOtIVuER0ViiwOmnyckP2eo=)
23: dpxEinRdBv7pBsTvTmmA7q6ijYY.roa (hash: WofSwLLMLG2R+QuEn/nLcdpXj+QzXi1Ndksp1TdGTdE=)
24: gwqrQRv7waRAkJikbIP3xJ5Xd8s.roa (hash: sOdnGbvBxW/Gj+cgrcqPDsIz6r7hHDgKTrdy1S7thtk=)
25: jeh4vYD8SS_iRYnBFEthez5BxZA.roa (hash: K8fVnsJwSRZ/NZDiy45rPMJ2FNI6AFvB3GzV4XzCGYY=)
26: oIWU__MTWZao_gHIFZZj-Owq8ZI.roa (hash: tD/q3hixssgoJOuCWAHJyl21GNVAxJUCj1hVH/ziNXI=)
27: pqUBqyEmVVML0BM_ewsCtfyonSk.roa (hash: uEBUHJ7oFcA5jlrDagyVhwCyviNbnVl0AKqwX5P3CdI=)
28: sXgsa6T3NAB6i1KeqSDiFVhhP1s.roa (hash: i+YZOhpBovqBdBfvkiV0CT/GOhT7cj7T2xeF57v5Yeo=)
29: u-jTq7V7o4tV_1iSTVTBhhp10sc.roa (hash: lTrK0cCPg99+tmELZUxahlVYu0LQsdsfIv0AzudQCF8=)
30: ucGvxSuq6kylzukAk70M82M_8n0.roa (hash: t8bHG7Z2Z/Z9l/shv65x5PeQozhnZKhaapyL11cJVuQ=)
31: vd-PSvK2I4pGXKBuVtu4Qd_H4v4.roa (hash: Bi5b9l/7rwXewS7llWhzVi0eYYMadFBlA63KWV2kSlA=)
32: vi-a-w5edFRb54vKD4DsHUtZXMk.roa (hash: EXJoRyrjvG0UdQGwtX97RCn5KpIrCkSRY8togfXm5Yk=)
33: yT1hexyLHS2DwS_5x6NFbxR-bTw.roa (hash: 5x41FW1Qtljmqrx6g3WCie+5bNcqPVjQcU0e0sjDv04=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.mft
rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 06:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f3:bd:b4:5e:f1:8c:c6:8b:b1:f8:b5:14:20:ce:e5:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff82309a6814678ad72e3f31a4fe0272f40bd986
Validity
Not Before: Jan 25 06:00:54 2026 GMT
Not After : Jan 26 06:00:54 2026 GMT
Subject: CN=ea71e12b5e1a3b6ceaa14b95c5fbfc997a60cf9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:1e:93:fb:cf:33:26:66:76:e2:42:fe:a8:e5:
86:48:27:8f:d2:93:f6:0d:a5:e0:06:e7:a6:20:b6:
3e:48:da:c1:0e:9a:a4:07:5a:98:48:25:92:3e:5f:
22:d1:e7:fe:f2:18:74:c7:a6:3b:6d:2c:1c:3e:18:
36:31:0f:28:f2:8c:2e:49:f7:25:61:d4:7b:6d:17:
0e:9b:6d:1f:fe:24:7a:65:6a:48:4f:ea:93:11:4b:
22:e3:40:ad:14:e9:64:23:e8:e0:2f:e5:fb:ab:d7:
2c:78:4e:95:46:8f:5d:a9:25:30:62:b5:8e:c9:45:
0b:2f:1a:85:76:3e:12:db:cc:2b:f4:19:0f:04:31:
03:1b:c0:72:b7:3c:5c:bc:87:0d:3a:97:e0:aa:7c:
03:3d:e2:d4:b4:12:7f:dc:d3:c9:05:30:f8:4f:f9:
ed:49:76:2e:ee:8f:8d:3f:bf:28:9e:ba:2c:0e:7c:
91:cb:54:8c:82:17:f2:36:87:69:58:33:fb:28:2b:
22:10:b8:b9:98:30:1a:ae:e7:cf:99:4f:09:da:b5:
5a:be:a3:37:5e:6e:9f:05:21:7f:60:d4:98:9c:0e:
38:9f:ca:83:60:a0:f0:38:e1:31:0c:7f:ec:af:b8:
40:89:bb:79:f8:c7:0f:4d:91:56:34:17:f6:ff:02:
6b:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:71:E1:2B:5E:1A:3B:6C:EA:A1:4B:95:C5:FB:FC:99:7A:60:CF:9C
X509v3 Authority Key Identifier:
keyid:FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:1f:dd:44:ab:2d:07:03:0e:ba:db:85:8e:78:e5:a6:34:ed:
cb:e4:57:98:3a:6b:7c:c7:1c:94:d8:28:f6:81:30:b0:80:03:
9d:42:91:6b:67:81:a8:2c:0e:0e:d4:3a:de:f1:2e:67:cb:25:
08:1d:d2:6a:8c:86:e3:6f:4f:45:e9:55:0e:23:2e:b7:6b:98:
30:eb:e7:c2:9b:12:11:d6:2a:e7:86:41:bb:70:01:29:14:9e:
83:47:51:df:9a:9f:a0:85:4a:0b:48:7b:b0:92:5b:b5:e7:a8:
c5:4f:94:9f:5e:bc:e7:07:65:c6:50:a4:d8:f0:03:03:ce:79:
4d:29:71:c0:68:b3:57:1d:2c:3a:78:47:bd:43:63:24:5b:e5:
36:7b:40:54:87:1b:45:28:34:59:8a:26:ca:25:c4:76:cc:3f:
59:c1:77:8c:8d:29:f4:87:84:12:ed:d5:8c:38:b9:ad:81:eb:
eb:15:6a:b2:7e:af:12:02:85:13:0f:24:b8:38:fd:9f:a0:24:
db:cc:f3:58:85:be:05:f7:41:86:69:14:29:00:74:fd:94:8f:
5c:41:d9:1f:bb:4f:6c:77:51:15:b7:f4:1f:95:64:ee:d5:cf:
9b:d3:cb:aa:88:62:0c:1e:e6:e8:5f:56:c8:f0:45:27:79:a0:
60:a3:70:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:46:30 2026 by rpki-client