This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft
File: IQIbJSIimXv-M7fksxWsjV4GeVQ.mft (raw, json)
Hash identifier: 4Y3NnLTRuTx2vtBg3FP49+DWVd0nRmo96kG2N0YT1Q8=
Subject key identifier: 11:80:99:70:21:83:90:11:1A:E8:26:F7:BA:1A:1B:CB:4F:7A:97:B7
Authority key identifier: 21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54
Certificate issuer: /CN=21021b252222997bfe33b7e4b315ac8d5e067954
Certificate serial: 019BF2064CFC0A9BFB8546B5B404600A9F62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft
Manifest number: 1579
Signing time: Sat 24 Jan 2026 22:00:57 +0000
Manifest this update: Sat 24 Jan 2026 22:00:57 +0000
Manifest next update: Sun 25 Jan 2026 22:00:57 +0000
Files and hashes: 1: 1-bwPNRa4hIuOmCXigFym4QuSvEg.roa (hash: T8k2dmI9vUTRjZrs4X4YE5xctVuURXzRhcAJw5O14+A=)
2: 590jpJtvHm4aq9pkOcasjjPKR5w.roa (hash: wNrNH6FKCaxwz0q75agrzuG0OijfKBZxBY6JT4ecZe4=)
3: 5C9_ixUcHdAFSFNXrsPXYEsthX8.roa (hash: EJq268SpN9myvhA37sM5KIFt2t6hL5j65NEljkhYCyk=)
4: 6cbxuMM6JMarkDQr6QohwZr_bLM.roa (hash: loJQ7YmdWvDMrlwR+VxEec0IBAymiKq+SltA1Yw9ets=)
5: IQIbJSIimXv-M7fksxWsjV4GeVQ.crl (hash: 9MUgiaSvZv1wS3rXBh2xR3cpIqiqE9IFHmwOD9o3oLI=)
6: J3IUrppUQEJ9AlNcJD-MFxypKxI.roa (hash: uezq13xnHYoK43g5cZL4HFTwsYHZzWtKo0PDmpYGYzc=)
7: JwGIhxBirCT1TThWLT1cTyUlK2w.roa (hash: j7qYR9S/lN//eMY3sGuOe0xYcwHCPWhI4hm/BCoxt5c=)
8: OYlH95cJwavdZvWPD2OKDHAiTLc.roa (hash: BWL9nE74GQlUmW8EmNYK3RjJ9VZYHqxaunAVG9GH6bg=)
9: REV3W8PYUxFJpyQqeipP60uquIM.roa (hash: R/O4LVj/Nn1LD5Jt4pXt5pWCeAyMFWEfHCC2WmVvLdo=)
10: SSwmkO4bAa3Cf5CCG9FUvkP7lr0.roa (hash: Ha81Wfoc35Apd2MzoqOASambEnENvmJSJQLlpgCS2Bc=)
11: Tv21UJ7ytJOyOPKpUbJcsfcz7lg.roa (hash: R5S9kl+hHU1Moq3UfwZ59OY1nQwhi4UuliZUdnWHawA=)
12: V7t9HoQFq6tA2kgolQRcRfuRldU.roa (hash: hielByb8U0KHIxejo6mEN1esKRKu+XesjxBKkhAqRLc=)
13: bE94TCIYTfIl9kzaHRXzNiQoftE.roa (hash: 4j0TvOQTsGRxrK5ktDw/14Kxmma5Wvzi7ywS8WE8N44=)
14: c_cWOPcEQMft8Aer9o0bFFTuzpw.roa (hash: 3Xhi5i/L7JVUSZVPSdHXaHOfLiEna+V7BTZ9aCjfTKo=)
15: i_CapsG6EXIlo7hs2M2bjbUXRbE.roa (hash: +sXOWob0idLEKLvec5gYyEKYRnesgUnVyZvyzvC+SkU=)
16: l6HrdleVhy2ogO9R43FSLGOYE-0.roa (hash: I66ExL815Wc0ZDz47aWr6Q06u4QEOdOCM1yWi8w7a+g=)
17: libApNypfBDQd2xwXgzAI8hwEYs.roa (hash: 85uC1OhXAH8nIsIB5OKlWaHMqc+2tP9WlO+RfiiV8sU=)
18: lsMaKp3sC1c5czFXsxQDmNP9xmk.roa (hash: Dsgi94SjJOM3Yr7EX5Jzgm7yi1UrHtc8raZxtMY1V+E=)
19: m1yBz4RNqu4HwIJUFHN9eMdiX7Y.roa (hash: BDic+DDp9D84u0MlugmEZf/EDqOwVo1Ck4FCtwm/eIw=)
20: mWZu0c3ccvwxHHlT9SVTQ6oiDK0.roa (hash: brqoqJsgc5iiFOBbdYvb+I1IyHssIw8FjziyxDUxro8=)
21: sjKCh1UvwSo9gh78pswXrzhmgjY.roa (hash: Epfh/sLFIRezmkfoL01G62gt9D+LHrhjRtivmeX3aV0=)
22: trnZsePT4aG-KTCZxjcSxSR1ufY.roa (hash: /5+dzAAN+A0ooVs+3qzdB6EtpFGea8R5ILZY8ARUEc8=)
23: uEdKtSEqLX5Iz_4fkxgMbr53LUE.roa (hash: dz0TqFesDk6dPWKdMZqZb11QZzW0a5NzIkgvjFU9Kbs=)
24: vQfybJN1vj3HPY9kWRsovScXZXI.roa (hash: ll+3viF1WTZimDNWVnvJ31MIidphJFjh34BpRL2uHLk=)
25: wyKENznEjqoTOu0kPDQ-ja6IOA0.roa (hash: XADEeG1QubSOLS5X6zAA6TQkPOdRj7Y6STFASKP2PIo=)
26: zT9J5b2waWVY1frWgok6rDhDEkA.roa (hash: kG62AdWQmKbNQrIhDYZwVRIR364hCu8diTI8HvtbVqM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Jan 2026 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f2:06:4c:fc:0a:9b:fb:85:46:b5:b4:04:60:0a:9f:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21021b252222997bfe33b7e4b315ac8d5e067954
Validity
Not Before: Jan 24 22:00:57 2026 GMT
Not After : Jan 25 22:00:57 2026 GMT
Subject: CN=11809970218390111ae826f7ba1a1bcb4f7a97b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:39:ae:e5:f6:62:10:23:08:93:ee:d0:92:47:
c6:8e:64:f2:23:1e:80:64:e1:be:c6:8d:07:d5:73:
71:20:0b:9e:64:de:ae:b7:e1:12:a1:e3:f8:02:c7:
2e:b4:bf:48:b0:1d:d6:b8:70:bf:2b:e7:60:20:12:
fd:7f:08:79:0b:c3:81:9c:2f:45:f2:e0:c8:98:df:
d5:6a:e3:98:47:51:17:19:d5:c8:5c:17:f1:37:a5:
65:37:5c:6a:98:ea:94:3e:fd:aa:0d:29:dd:a8:57:
20:9f:bb:50:a9:a0:28:c8:9b:96:28:34:20:a6:48:
88:a2:9d:22:6a:a4:76:28:a1:81:86:86:c3:6c:29:
c9:b2:74:a0:64:96:be:eb:30:f6:a0:aa:23:8e:e7:
d0:7d:68:0a:c9:77:d2:b2:2a:ff:00:5d:0a:2f:04:
4b:1d:fe:3e:2d:52:f5:9b:0f:c6:7c:ef:ce:42:93:
b6:92:77:04:a3:78:b2:de:89:28:49:63:82:43:08:
ee:87:39:17:a7:8a:80:30:2b:ae:30:ca:cb:a9:10:
64:66:8b:5b:c6:9f:8e:6f:76:e4:01:1a:dc:16:ce:
e1:78:29:8d:d1:fc:32:31:85:24:ff:2b:f2:b9:80:
fc:51:8a:e4:ab:b5:79:03:9d:e7:f9:da:fa:ed:bd:
f5:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:80:99:70:21:83:90:11:1A:E8:26:F7:BA:1A:1B:CB:4F:7A:97:B7
X509v3 Authority Key Identifier:
keyid:21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:bf:f9:78:0a:0e:49:c7:0e:46:89:ba:39:69:4d:70:ef:57:
a3:d5:64:e7:e5:1e:79:4d:6d:32:f5:a7:67:3a:4e:74:c9:1c:
af:10:4a:6a:d6:40:d2:50:0f:9c:26:03:a5:5b:3f:07:0a:55:
3a:03:37:53:42:18:21:1e:7b:ae:02:1c:ac:30:82:7f:a1:08:
98:87:1d:e0:1c:d4:84:9b:ca:7f:25:fd:b8:67:39:07:91:25:
f6:dc:c7:ad:fd:69:2c:ae:71:e6:8e:a9:c2:66:4b:e5:46:cc:
a4:62:64:9a:cd:d8:c2:3f:c3:f9:33:f3:0e:c2:c3:67:f0:c0:
77:ed:f8:83:a7:01:af:ab:00:24:6c:93:e3:e9:c1:c0:a1:56:
84:56:d1:31:07:df:8c:ee:4d:ba:33:56:10:8a:ae:f1:d7:0f:
06:0f:65:ca:c7:a1:dd:a0:fb:da:6a:c5:b3:90:9c:eb:30:26:
c9:75:c5:5b:95:7b:c0:a7:3e:a3:b4:40:d9:c5:02:16:94:27:
ae:14:2e:91:2e:cc:10:c3:79:53:79:5d:35:5f:46:40:71:27:
9a:04:ea:d5:37:22:ab:03:fc:b7:13:f9:70:28:e1:06:58:20:
5e:5a:91:c0:de:ca:12:5b:c8:ce:2b:9b:cf:57:24:64:e2:77:
d0:f6:86:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 01:51:32 2026 by rpki-client