This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.mft
File: _4IwmmgUZ4rXLj8xpP4CcvQL2YY.mft (raw, json)
Hash identifier: i7eKoy1L8V7zbSwh9dKdAvGpzYmuxO+6to+lQqks8w4=
Subject key identifier: A3:5A:9B:D7:3C:9C:3C:6F:55:09:8D:4F:02:05:9E:7C:9F:78:E2:8B
Authority key identifier: FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86
Certificate issuer: /CN=ff82309a6814678ad72e3f31a4fe0272f40bd986
Certificate serial: 019BF988DC24C61F8CC2A6D79432914F65F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.mft
Manifest number: 1839
Signing time: Mon 26 Jan 2026 09:00:54 +0000
Manifest this update: Mon 26 Jan 2026 09:00:54 +0000
Manifest next update: Tue 27 Jan 2026 09:00:54 +0000
Files and hashes: 1: 03O0jZn7lN2mHmMTT2gtEGmj1y4.roa (hash: LZZ62LxpHcKOfneaidWdiu/OACBH7cjnkz/u3c3icno=)
2: 9Apk7z1Y_gJ_rG8_9HRdvAGRDtc.roa (hash: G28Shyl2LUNFSI8lNP9RFb8LXMXTC2Jm6p1S4Grsi0I=)
3: ARLz7Zks6T2ea2WJuFF8R65OsN4.roa (hash: EuNQEWpBjjFCuwDTuWkj3hxC9qM3sJIuMmnx6xbp4NA=)
4: C8YxW6-LhOiDL16FS-ipYIi3JkM.roa (hash: /H+TbI8OfuJWR5cIC2JHJEulz1QCaz1yL07g3o5neLM=)
5: CPo3voyKhNOsXHmXzF5o-hs-HPA.roa (hash: peJ83/Tl3vvRNS+T4a8JciT2OMJU95iOpg8lTZEv+U0=)
6: GaEBEb_ouXprDavXJKQvOXZ9gNk.roa (hash: rDd3E1G5L6hUFhu3Edl2WebaS1ZhbGZFE1GPndPAP3s=)
7: GfMPNhFLhmqnawsjqQy5BpzadGk.roa (hash: pK4EPBqZkYKq6xfSmPI/msruoe5VONRBfWbL6xFM7Gg=)
8: H8GAoslYRV8h3Hy--jlQzmT0N-U.roa (hash: XX8tu9VsQeyjrKRcxncdSaLdc2YIZdIAjvttKj6rklU=)
9: HMhWhNobOEPkN3MtaOvVXJjeyzU.roa (hash: 9VQQBJmuzLR1o/OSn+Mpj75Rdl8wKqyNnKeja8g+OEo=)
10: HlGVjN7etqeTYz5KNfDty1vwl9s.roa (hash: F5PL/iRv4PWVl9yuJ7nn29rt1Os5b+fBG5lTLrQTUPY=)
11: ICbtZe-McTFZdI3qhYtOeZDxa74.roa (hash: js1dzZORO0tvQXJUJOO00odskYzdQVMEYF5HcqBFxww=)
12: KX-73MWtdrd1wR5SylLVXNRo-HY.roa (hash: UKVIx8JwdvKDxrN8stZ/ip0UjFqF+amD4teVAAzHmvE=)
13: KnRc_VMCR5tzgj3_XzZc21HvgRs.roa (hash: aFCLRyo9ZlWGal7jGwZY+Bb+MXwfBr9j67nygUj1XZQ=)
14: KySMxnvF90PjpBprfeEW8zLJBsQ.roa (hash: 09+AS3+Vj5/qH+7uma3i3M0Di8vIqcUIDLvOelFcjJs=)
15: LE2awT7rVhTgn1binznSNNNqBKw.roa (hash: 5L4jHaTQ3Ysq4fdiPU8q1opHiwb0D25zJy6KhXBqiZQ=)
16: QJxbOK_00ICL24h1uRjuo3GbyiI.roa (hash: /706whWQ3ST/KlzD42n/41A8kEnHqJ1lVJ4bmV5FV04=)
17: SZzrnuS1RCrsdHTdFWXBsZImyns.roa (hash: w1qGRKwdDCKtNZz2wd8EqGLZ0kdoQChLKbQRPmKZw+c=)
18: S_d_flsuECmBoZE2ypIGuMWEWIE.roa (hash: Z1nWJRsLQx+8tlO/rlKwJw1qJnATj0MrfqC6UyIXi4A=)
19: XTp2Q_X9IPYiKxjwerz6gv4CZ1A.roa (hash: xs/xW47uPV3PFyZM/56JVPLFLoywp7b6YdV2aLzUF3c=)
20: YlxMB1ZZ-ow203ws5UgFMDiy-aw.roa (hash: AUEoKkZI29uogZ3xQ0ZfV6IUpZXozQCkx7EKfEnNRlI=)
21: _4IwmmgUZ4rXLj8xpP4CcvQL2YY.crl (hash: Nm2qfrpWi+aav/NuyQoLx1EgdRn4ZRQERrKCW6MrDzE=)
22: _ruYevJ63B-p43DIzRavuNMUlYs.roa (hash: l0rE7WZAdFwmxD+supN3BOtIVuER0ViiwOmnyckP2eo=)
23: dpxEinRdBv7pBsTvTmmA7q6ijYY.roa (hash: WofSwLLMLG2R+QuEn/nLcdpXj+QzXi1Ndksp1TdGTdE=)
24: gwqrQRv7waRAkJikbIP3xJ5Xd8s.roa (hash: sOdnGbvBxW/Gj+cgrcqPDsIz6r7hHDgKTrdy1S7thtk=)
25: jeh4vYD8SS_iRYnBFEthez5BxZA.roa (hash: K8fVnsJwSRZ/NZDiy45rPMJ2FNI6AFvB3GzV4XzCGYY=)
26: oIWU__MTWZao_gHIFZZj-Owq8ZI.roa (hash: tD/q3hixssgoJOuCWAHJyl21GNVAxJUCj1hVH/ziNXI=)
27: pqUBqyEmVVML0BM_ewsCtfyonSk.roa (hash: uEBUHJ7oFcA5jlrDagyVhwCyviNbnVl0AKqwX5P3CdI=)
28: sXgsa6T3NAB6i1KeqSDiFVhhP1s.roa (hash: i+YZOhpBovqBdBfvkiV0CT/GOhT7cj7T2xeF57v5Yeo=)
29: u-jTq7V7o4tV_1iSTVTBhhp10sc.roa (hash: lTrK0cCPg99+tmELZUxahlVYu0LQsdsfIv0AzudQCF8=)
30: ucGvxSuq6kylzukAk70M82M_8n0.roa (hash: t8bHG7Z2Z/Z9l/shv65x5PeQozhnZKhaapyL11cJVuQ=)
31: vd-PSvK2I4pGXKBuVtu4Qd_H4v4.roa (hash: Bi5b9l/7rwXewS7llWhzVi0eYYMadFBlA63KWV2kSlA=)
32: vi-a-w5edFRb54vKD4DsHUtZXMk.roa (hash: EXJoRyrjvG0UdQGwtX97RCn5KpIrCkSRY8togfXm5Yk=)
33: yT1hexyLHS2DwS_5x6NFbxR-bTw.roa (hash: 5x41FW1Qtljmqrx6g3WCie+5bNcqPVjQcU0e0sjDv04=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.mft
rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 09:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f9:88:dc:24:c6:1f:8c:c2:a6:d7:94:32:91:4f:65:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff82309a6814678ad72e3f31a4fe0272f40bd986
Validity
Not Before: Jan 26 09:00:54 2026 GMT
Not After : Jan 27 09:00:54 2026 GMT
Subject: CN=a35a9bd73c9c3c6f55098d4f02059e7c9f78e28b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:33:b8:61:30:62:4d:56:cf:b9:78:4d:e2:43:
4a:d7:5d:77:68:8e:09:33:2d:15:99:f5:2b:96:32:
ae:d8:7f:a9:7b:25:83:76:9b:df:7c:ee:0b:18:ff:
0b:43:02:ec:b8:de:d1:d5:d5:f6:f2:c5:b4:9f:03:
c8:20:5f:16:f0:74:ae:77:f7:af:31:ed:3b:b2:da:
4a:63:5d:36:e2:6b:89:bd:7a:54:59:3e:33:1a:e5:
1b:bf:96:82:8e:f5:0b:66:11:6a:0f:2f:0a:d3:29:
72:cb:dd:ed:72:63:f3:02:7b:cf:06:74:7a:f3:09:
b2:0d:c0:be:9e:c1:23:cd:ec:88:cb:59:65:03:c9:
cd:33:88:3f:11:e4:c7:c6:4f:56:22:18:4a:56:fe:
43:71:ed:53:44:a7:a6:da:1d:4e:a4:ef:c6:b4:85:
e1:e6:68:29:61:37:3d:bb:14:8a:8e:e0:3b:73:87:
16:3e:18:1c:11:ac:8c:9d:3f:b1:02:4b:6d:94:ca:
4f:b8:6f:fb:ee:2d:fd:5d:be:da:24:01:c8:4e:13:
18:8f:39:62:1e:b2:da:68:ea:8f:1e:62:b8:e3:93:
3f:1f:c4:27:94:e7:0a:3e:97:37:c7:ea:24:cd:97:
ae:d2:90:0d:b1:43:bf:6e:73:53:40:09:a4:aa:1c:
da:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:5A:9B:D7:3C:9C:3C:6F:55:09:8D:4F:02:05:9E:7C:9F:78:E2:8B
X509v3 Authority Key Identifier:
keyid:FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:5d:25:4d:b9:29:59:ee:90:33:b4:e7:1f:ad:be:c6:c1:a2:
88:c5:ca:9a:88:f3:fb:08:44:38:21:ec:b6:d8:fe:03:0e:5b:
89:a6:87:de:8d:fc:f9:94:75:b4:6f:8a:43:5e:5a:7a:36:78:
e0:d1:35:97:08:8f:6b:c7:cc:6b:2b:4a:6c:a4:20:ee:a2:66:
77:e2:c5:73:02:55:d4:56:dc:51:0f:9c:96:26:01:77:9a:31:
e9:f4:3a:e3:c7:0c:ad:8d:41:4a:14:ea:97:bb:65:3b:53:ca:
e5:77:e8:b7:f7:c2:15:73:28:30:a2:1a:44:dd:0b:28:f7:d9:
41:c3:f0:c6:5c:40:04:08:e4:eb:da:09:f7:7c:f6:ec:e5:68:
0a:ac:7b:c1:41:07:33:66:78:57:80:05:dc:10:0a:2c:9c:ab:
32:0a:38:f7:9d:0f:87:b2:96:14:c2:3f:42:1c:f6:55:1f:14:
97:fa:d8:d5:fa:f7:7d:75:e1:3f:ee:4e:27:50:37:b9:15:ae:
af:e1:21:39:6b:d0:ae:2c:75:7d:37:0e:00:c8:14:73:1c:f4:
6a:c8:5a:65:24:f9:b1:ea:c6:fd:eb:fa:dc:30:97:aa:4d:92:
f1:53:06:02:55:9b:e9:29:0d:68:ce:a9:d5:30:81:a6:5d:a2:
9a:16:13:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 15:28:43 2026 by rpki-client