This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.mft
File: dQhHX_DY7JYDNgFuDgQiGpjl7PI.mft (raw, json)
Hash identifier: AUU6syntKIacuZk1l+ljE+Pk4fAKHvJSwz2bFk/9Ots=
Subject key identifier: BA:F4:22:1B:07:B2:EE:61:32:CC:74:88:8B:32:2D:C8:F2:89:A7:1E
Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Certificate serial: 019BF499100DF29D4420A142D36C7A4140AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.mft
Manifest number: 1068
Signing time: Sun 25 Jan 2026 10:00:30 +0000
Manifest this update: Sun 25 Jan 2026 10:00:30 +0000
Manifest next update: Mon 26 Jan 2026 10:00:30 +0000
Files and hashes: 1: 1-OFiNLlRzB9gQ8rsqUmStAURmZE.roa (hash: quk6uhyttW/EQZVx4h/mLlD4R/KssH6i1p34w64L7zg=)
2: 1HgN1jwalcG4P8feVb04KhuFrV0.roa (hash: /w9O4XbKLbxExGjrImzaWfj09XVEcX3nuVWjs3rYjs4=)
3: 1Waoar8xJafvNKM98KbPPpZpO10.roa (hash: FVUFHFwDvFIi/NS+ywIKrLhu+WhKWGoQsTo08Z+OPm0=)
4: 1bcAiDqSjg40EzVO4ytfDWpkSvE.roa (hash: 43VS4CRnWISMDMLy+6UcYdAY7CkwReNLiVh5H8h6WqU=)
5: 3bMwKPGkCpUYdK3M6gxRPzbeOlE.roa (hash: 79Ubn1LP4gtqzeIby6w27GXFentkt53aRIvCQoznPKw=)
6: 4Hry2GHWIQNsyjQrTIx9fQN6gB4.roa (hash: gzVtaF4oZV0YS7EVbW+xgNO11PuUAiMDYx+s9V8pZcs=)
7: 4T3IbnYh4saIcnPZM7_bM8SrdUk.roa (hash: bQElEoR/i/ETSq5yQpPm2JLHUn2xQq3oHlgi8Prxj7o=)
8: 7-kZwIf-1CZXDB44xUuaCP_Yybc.roa (hash: lHpoHnKawYdj1fXu/RtDDjT+nd/iV6bmYgCdfSCr1vU=)
9: 7ZDTLwuc17GtsZsMN1ExkVk2x9U.roa (hash: bN7rx+fuzGGRqgrRx4HiLqHFyL7jp2FUiYn5hgrI+gI=)
10: Cg5-4-MPHdR8rHLYCSeMDcuN3WA.roa (hash: Cib4HxTsrIRtaj55BTF6+WAR6MahtZRAFeprgaqN1EU=)
11: DbHsIS1wsGD5VENgKaURW87eGBM.roa (hash: Pg7LFkTLHIS+tij3rt6g9Emn9DJ6nvCMWnQoCISIDpo=)
12: DpKOrE_cvDpYUUmh7MvwmGOWBPk.roa (hash: HH9fYr3P6DqXc1+m5cKoAOtNDzmk8tYbfKtERsO0Vok=)
13: En94w1aoQT2Df-plLIO5o_mJDiE.roa (hash: T1Z8KGa2hhTOXx23lLVrR7iImIAiFGfiumitd/czjbE=)
14: G1copBYS9CmMlX2FVwkbhIhbgBo.roa (hash: iiTpPKuQy+sIvxdb8BIjv61/rd0bo75wTrkKcwU7rb4=)
15: GfvrudqQtadcfEHpprwynTfNYIA.roa (hash: ReY30DmSZMs/0/wYnNlZrGqTcQIT5Z9nTZMHFV2s+iY=)
16: HEEBNvj21luiVf4won7bq4ZQmKE.roa (hash: udPIy2ibL7Vj2lt8/UkNkqdezAjsD65iSObaDZOKY84=)
17: HSTLkhClz6LRADHXHrCQqqSC04s.roa (hash: s8VSLrC5qvSowdJpecSp5doTo7LDHBtmqawdvNkdw/I=)
18: J5hS-MwRa0Pp1Ax-eXmJXTFPUAI.roa (hash: 0OShF4FaS2H4QHgvZ8CoH/llz34UbR5B713YVNSs1JE=)
19: JHqDa2vRI-wqNg_Y5rLnrSHRvVI.roa (hash: lz//lyPSLWsPEiRIqlog1rZYWW/jlzMOrQAdZj8R60c=)
20: JxkpyyP7d_E-0Cii8CW-5t4BsM0.roa (hash: djpZA96AI3V3aNYhwLJeVpkRf9KyT2JvxMUQr+bsTOg=)
21: KBQCvdZ1Fih2U9PEnXZaHYZQKaQ.roa (hash: aJ2vN0uyC0Hga0lux0w4oAz9DV1ub2HSd8DIya7fmtI=)
22: LnnTovLuI750TfHC0xewXl7THNU.roa (hash: gnERhSsWK3S4zKeNtNnqJoJ8yYwpR1CtZ/z7wQ+Xm1A=)
23: Mo6sIY942w2mOqA6gHPZH1sJxvo.roa (hash: 9P+/MkpETdsVTSW8OwDRt3drUzJjpiPwqRoL7GY/yIg=)
24: NWx-3VRYiVj3rInpt0GC-j6Bk1w.roa (hash: aPMqHiIhFTors8hWctYIEhCCvjVaLha58IZgbJT4DOs=)
25: NoaqM1r-voUvMtXV6c0v9imMsKQ.roa (hash: tA7iKs3kzLEd7cgCrqMemYC62LPi9vTpaH4xuxgWkP4=)
26: QwXJQ-gW-nj7udxCnL15rUHQAAk.roa (hash: 4JkftfFeA+8MJJ74ERDuye4yAiHABdPHlYQTJhofoC8=)
27: RBYeJvnG9BPaoKCf3GTmvizALJY.roa (hash: kRi3zgBMSsciFNO/2eaRHyq4otB+Mdoc4y1HYeeA5rw=)
28: SFMYlN0Z7j7jTfVInMfOAfp757A.roa (hash: 61Le/u2BZHTj8JLBDMpSTN47fQq6QVqFLHjwtsxh4go=)
29: SQTK66WzLAK8TXDSG7HMSsqFAn8.roa (hash: 1jt/Bil6UdOScDCfuLlT86C9WZy4s6/vQGzui9lZXx4=)
30: U6PmbsElL-7MtijxdO0BAbrah0Q.roa (hash: Ofq7OHaNVfJq1ZxKrOfI0SrMBFQRCEoouCi2oXZEPBM=)
31: Ub75tOZdOg2xdvFErJ88k7KaSUs.roa (hash: AsFVQQMMcv5/BxrT0qGoB9Hl+vwn3+3VyS/clSKWb8w=)
32: WzVSfSCn9MA71szaeG3UuHYtodU.roa (hash: kWQzLXCD3ayRG08QODIsJik0zppGZ5zBgdeluY209BY=)
33: Xf46Pw2tgmQ6pve1qLg9BZ7i_dI.roa (hash: D+T6tWOFOaWIc3tUG494jBawlfeKBbjhnuioC/+eLKw=)
34: XpKA71gUP1e7UUjZfSVd57bX570.roa (hash: 6PtbKEpVQwlUQzyUCiZ3HIGqzJT0phPeJKaGDFOYcU4=)
35: Z_byLoGDwDVZ1uuZ26kOsOZN0HY.roa (hash: bKumZUvmKCZ3xxOhEBADxpM32rg2Z2evEh7LsRdeEbk=)
36: aU79596Umtw5a2Y_Rg03LRPN1BA.roa (hash: Bph1g6U7CLK3f0xOwmuRbjpNfRPSDtTfRbBVZmBYogI=)
37: b3obsj7bhISGV2ic8E0aogm2GNk.roa (hash: HS7Xi+YLjjvjjAzScsRz2J0IByu2Q4w1qMjo4TBFOow=)
38: cK89N5HfyZS7jF6HhZwkXV8Y2Bo.roa (hash: JcqlClpjnKH1fpiTqdXi9LCmWrDRy3adS44+Dzy+IYc=)
39: dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl (hash: X/3D5INBotU9Aor1DzOb1rdM/WVqIqzu3vVvrvRY2yg=)
40: dwnSi6hIkl-B0bCu7DnKPlNZzLg.roa (hash: sXUyQ4gvIeZM16LhUWSfjJwXhynuc9X7oDXpD7bSzjI=)
41: hOBQ2pkA-0KSRD9W7HYv7T_EUBs.roa (hash: WyYXRQPNi7imcTjkFnUupixWz7zRkOa+LoRgnw8jDP0=)
42: hSaax3PNMqT-lY0FA2NBN-L2Y6k.roa (hash: TL8+SkkJk80gm8fQRrJdTYhaB9ZhdsTEkaDJpoXwUDg=)
43: hdJu7f4kSdt-uKkfr1zrXBPa9Ks.roa (hash: GG98Q1bl7OyANKUpp9Wym8WZdgAzVgCTFjDl+3fraHo=)
44: hs7UjWv_36Zyjiol2fhZVpdxnrw.roa (hash: I5NbXUDF0WgFjA2XZZ6Uzv6rmmNPNQowTBKmtDFFOHc=)
45: iuklIzN3cd1myy3SDGqaIIPCfVQ.roa (hash: 3qfnX7bi5LJVGXxA1CUbsRAXKqiE2M+t9Nh2aQQGCqc=)
46: jypXh21hN7YdEpy4dXX0h1grdhA.roa (hash: 2PCWogNS3NDeaLLtCqO6S4RyV1g0zZ01LBa4NOA2iZI=)
47: oFcv4p7EMaZn_-HTYsk7xa8PwmQ.roa (hash: MzH0iIY/I1hIFF9okU9QCTKwly5r1itDctKvuw+/5AM=)
48: o_xmKrPL1_AoZs8GvOPm1dKIyhY.roa (hash: bZaaKprcnpy1yZ3w1Gq+0Y+GwujtgYnOL+MJw5ekemQ=)
49: qeIYeI4kLeYu7uLRbJocCx_1loA.roa (hash: KvfJJDGtnxUjjU8tM6px0TBivGi+lJc09QKLwJtVPXE=)
50: rby-gGvDas1Xa9334DJTczkmtYc.roa (hash: h/3pkwNZ0gwBP4ba5gjKhseXzTn04Qnwy4D9dTEdSQ8=)
51: voN8vwWvhtrarGbETBOSasXNWSI.roa (hash: ceFvyVvNqry/EnDK9LeHP842A/ozch+GOGZX3poJEIE=)
52: wwKe_5nbJkCZEay725-TDTyy8Og.roa (hash: pMdRZjm2+fkkArj9Ia/EQLb5RslFHxVSqKZVI19kX04=)
53: xSlSopVrA7ar-AzHU43kvDoRkZo.roa (hash: EIL/MjiMscFzU/GPSjw2hRcZh5VxPz7Q7L9p0rCpFC0=)
54: xtsdMsyk002qfF3jIDsOOIwPf58.roa (hash: OcuaPeFEZzFGGp0t/Q7RlUFdkUOuvpjJGoKZbeYJ8m8=)
55: z3gn7O2ArUfbRH7IibkSmLe4aaQ.roa (hash: OBFHoWbMgkm2Gitpb2oBEMkW3r4uU6S8dgFs2hCVQO4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 10:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f4:99:10:0d:f2:9d:44:20:a1:42:d3:6c:7a:41:40:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Validity
Not Before: Jan 25 10:00:30 2026 GMT
Not After : Jan 26 10:00:30 2026 GMT
Subject: CN=baf4221b07b2ee6132cc74888b322dc8f289a71e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:73:33:a7:25:eb:19:a2:63:43:1e:41:a2:d9:
5a:5e:bf:87:60:ab:5b:dc:8c:33:b5:a8:61:78:71:
2c:9a:bf:0d:e4:34:3c:f7:7b:05:41:6f:af:0b:7f:
c3:88:c2:f1:e6:96:86:52:b3:df:6d:fa:a7:db:13:
4b:9f:2c:00:f0:98:b7:de:94:3c:3e:e6:65:45:9e:
8e:5a:1f:7c:72:3a:9d:e4:e7:ca:1d:e1:22:85:67:
44:ab:da:8f:32:28:66:d6:ba:b8:6f:d2:5d:9d:12:
5c:78:20:a3:da:8b:65:69:f3:34:60:78:db:71:c1:
e1:e0:b2:94:7b:e2:89:8e:b6:27:a4:0d:db:91:78:
41:7e:2e:cc:22:77:a9:aa:32:50:29:fa:3d:e1:ed:
bb:bc:e9:35:17:86:ed:e9:da:2c:ae:68:db:e7:44:
9c:9f:c3:1b:cc:e5:f3:a3:c9:e0:9f:e8:f8:43:bb:
70:4d:fe:db:53:10:9e:17:59:21:7c:9c:3a:98:b2:
d4:f6:e8:d5:d0:4b:6a:2c:a0:d7:ef:8d:93:13:b4:
eb:e5:b5:2f:45:4e:78:e8:5d:6f:e2:37:64:5d:75:
92:6f:45:c3:6b:52:4e:2b:49:28:cf:25:4e:4d:36:
ac:35:38:83:8b:63:48:c7:34:96:33:d0:35:77:fe:
09:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:F4:22:1B:07:B2:EE:61:32:CC:74:88:8B:32:2D:C8:F2:89:A7:1E
X509v3 Authority Key Identifier:
keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:c2:1f:eb:12:46:14:99:ae:85:9c:f4:4f:96:c4:51:eb:c7:
f7:8c:b9:77:4d:a0:83:ac:6a:ed:ab:c6:fc:0f:25:a7:a7:88:
09:5b:bb:2c:54:e9:fb:ec:9e:cc:0e:52:b8:b4:4f:a4:a2:bc:
02:2c:6b:20:12:25:e3:33:70:d9:63:90:2e:32:9e:de:26:71:
24:3f:9f:5e:29:dc:41:ee:68:c9:d1:18:8c:1c:ee:53:54:bd:
29:64:6a:4a:94:58:50:e5:7c:3a:ed:8c:8c:89:8a:10:13:b8:
a4:c5:ef:74:ed:57:fa:af:f3:d7:8e:b5:70:6f:a8:7a:2c:c4:
57:0e:51:3b:d4:5b:f3:c9:fb:e3:7d:d5:41:7e:48:39:f8:ef:
14:de:c1:5a:4f:db:1c:fe:91:ce:b4:27:a6:5f:9c:eb:f7:18:
bf:b1:37:10:4d:d9:58:8b:58:68:97:88:2e:7c:85:00:8c:a3:
5b:09:63:e6:a5:98:4c:be:b2:f8:a9:85:c5:64:d2:38:68:fc:
3e:42:ba:da:9e:aa:ff:16:f6:c5:9e:38:b2:97:b5:4e:49:31:
98:f9:f9:63:7a:34:c9:ff:cf:cf:42:36:ee:02:82:1b:e4:14:
54:62:fb:6c:ec:ee:1c:80:a6:41:2a:e6:e1:e9:f2:1e:14:f5:
e2:7a:26:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:11:35 2026 by rpki-client