This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.mft
File: T4rqLwJfSVvqzufOWoggUZ3aE3A.mft (raw, json)
Hash identifier: QGVVWKOgyDrUxfT1mUtwAZ4aYHBeWFNyiuPuQho0Uh0=
Subject key identifier: D3:D6:15:B4:06:D3:E6:F1:DC:AA:2C:1B:30:E0:81:57:9C:1B:FF:BF
Authority key identifier: 4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
Certificate issuer: /CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Certificate serial: 019BD76B8C65D93636A93D7FE8887B74B289
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.mft
Manifest number: 1877
Signing time: Mon 19 Jan 2026 18:01:48 +0000
Manifest this update: Mon 19 Jan 2026 18:01:48 +0000
Manifest next update: Tue 20 Jan 2026 18:01:48 +0000
Files and hashes: 1: 1zpG2CVrxsMORx6-f7bFYATXDp8.roa (hash: ZOZ+1A/5qrE+UhYF92TopbAqYAeLlDGmriRx3ZRkiq8=)
2: 3DKyG4yqxD-RCxqPWmT7N7olh-A.roa (hash: PJ5W+9gaDI7CdrxxRKkNpvIJyqlsEgvjqhtTWlW7+xo=)
3: 4BT3ESnzNjCT2x59JVbAAXxSXAY.roa (hash: O8CcngTVUlHleqwd4kGt0w16qDAwdr4oH0nwRI5FfLI=)
4: 67Hu1VCqZOSeOiCM6FEEFd3iXlE.roa (hash: Him9pl9KpdgeG8GWKYKiLJdFav7i0xf6FzUlhcxDHRg=)
5: AQd6696DS58WSqKOJB3_PgGA6ww.roa (hash: LGXodTKuNu4kXpvG5ujn8tNfaAjmgD5yZwsMvUZmhpE=)
6: DFqAchiwJnzlSG4eyo-vOSeRNeI.roa (hash: N2RIPmZbJ5fy1derB4IMwjZbzNeDMo48frV/EdBPTzc=)
7: Ezkbpw5h6Yu188ximBXledMTyHY.roa (hash: EUfk52t0TP+il+Ji1SToM3ssr1h7ZowDd/it1ELPNV0=)
8: M96SaOtXf2BYyJPHvAneKZXSlX4.roa (hash: Fjx5Jib6Xzn9dBAanulC/6wjKgvgmy9B+Oq0M30jiGo=)
9: N0E_F_u9h5bIU-j9MGpdicwRJM4.roa (hash: 23BfC+EZdJUIXPiNf0+Gr0wVhGOB4qpNJ1OtcS1XZzc=)
10: NQ3alsbcYrDD3Id4_ZbBebDtKMQ.roa (hash: R7bDblUywN+L5+T5OsDfB/grAiWD1P3KTdK+6VLq0W8=)
11: Np-SgsMbvNtUeV1Q78-Ul_LgtAI.roa (hash: FpZOxRp9m2d8Wj5Wy6a90uOf4hQ5Liav+WcFTy+XdBk=)
12: T4rqLwJfSVvqzufOWoggUZ3aE3A.crl (hash: 0ayCCdd0689qsUceGLG8tR7b3Xzad/0/Kih8S9pZ5pc=)
13: UW3uCirPlSHTXeq2kWhdNXEEF_A.roa (hash: SLhda1CULfByTMm1GHCHLQiMUOu4j8DhX2dtlcfjO6M=)
14: VN50qPmCSRJQKSBjaEb5QHgh3cs.roa (hash: cNaZJTeqwF8/FkLWXoN90z2GLPg/OBZXGTQ11wMXSy0=)
15: Xuqx5oGqcGji8i6eRxh5BEu5LZ8.roa (hash: FzmK5Vp8CaSv6xG3M6XIDAgAasDprb9CAyV3YNNYDt4=)
16: ZrACWZQMbi6NxGaCnX9YMBCOCN8.roa (hash: OlqjwKoWnqX+XWjymWXMgysC4FA6tYi6yFNdSVG5cWA=)
17: fEr16b1lvokT-7p2GF-BJ0nwjqw.roa (hash: 4kMeEbpMFnB2cA2N94f/QrIzzEsMpOa1QK/37ueLqzY=)
18: iGAec5WLgxQuZO87yGrv6vRcxNk.roa (hash: qbtBIjuoPTdaV1pke2Rgv7Qz00a7lyCwRwSyFcFeCb8=)
19: kSRDcXV5BduSfvL7CkkTWshA1dU.roa (hash: tuGJ9p+esAzUMHyIoxPT4iHzxY3yItPA7UzoeT2/0vQ=)
20: mkAVPuJI8QOGwHX046ylOVj6YeQ.roa (hash: cHuseTitZM61+PjKXgr2SvysGLK0bdK5xs/hORXpxOQ=)
21: okpXovGo8Qws_PPRtlsVVUmZZzA.roa (hash: 4oR/V429uTC5kWQN94QEJqxEv4CSp9VQuHnF9qGLwmM=)
22: qyFRBJyuib1PnIx-vXa3UO6rHbk.roa (hash: ttUZYHflFlcNbkH75tZXAFD7K0f4LBSVLHQuKhH+hJo=)
23: sZQD0TfJ8HC_2qGUYRIygeuNHq0.roa (hash: KOmrBoIDja+ViB1TQrWYGvEgnzLPHGkGzbBf9gl0eY0=)
24: wl3GFHoVFq2V6agPvVTqKcV6mcw.roa (hash: kC952UxlZ4u8JejZZo0O0+1EVkE3lenB3kDD7eQXlTY=)
25: xh9-cYUUKhW8R7RtZCiBjbPkinU.roa (hash: KHkDJpMlqbbJXAmtu6AWC6oa3xuKdiclk8iuepf/pBc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Jan 2026 18:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:d7:6b:8c:65:d9:36:36:a9:3d:7f:e8:88:7b:74:b2:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Validity
Not Before: Jan 19 18:01:48 2026 GMT
Not After : Jan 20 18:01:48 2026 GMT
Subject: CN=d3d615b406d3e6f1dcaa2c1b30e081579c1bffbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:89:f3:07:74:e3:a3:06:0b:4b:84:35:7a:4f:
61:b3:04:3b:56:5a:fb:32:be:66:d5:e5:45:88:13:
83:4a:c6:b5:6e:d0:18:4e:4b:7b:0a:8c:d4:bf:21:
a4:04:17:c3:6e:30:41:36:99:2f:60:5c:6b:36:4f:
c2:af:fc:ae:d6:e3:5a:f5:df:df:20:3b:d5:68:62:
cc:4e:62:b6:88:c7:78:9c:a2:b6:3a:3a:fa:bd:5d:
39:27:a8:a7:b5:e7:73:97:71:bc:b1:21:f1:6c:fa:
6f:7e:74:02:00:15:74:a4:de:9c:9b:ff:bc:e5:d6:
01:06:a7:14:ff:fa:09:a8:f4:c8:f8:e7:27:e7:27:
d1:6e:30:4d:8d:10:5c:f1:71:3e:c9:10:d2:51:b8:
f1:c4:d2:37:e7:4a:59:09:47:3c:10:b3:11:88:a1:
6a:9d:92:e1:c5:16:fa:a2:2a:2d:b9:4a:f8:56:0d:
3d:f3:60:21:65:43:b1:81:2f:f3:87:55:98:47:4b:
d3:1e:ad:a0:42:ad:d8:45:9c:48:1b:6d:81:54:3d:
b3:6f:97:a8:64:f4:67:58:5c:35:80:a3:9b:b5:5b:
1d:82:7f:ef:b3:ff:ed:0b:fa:9b:ee:ad:83:49:a2:
68:4e:d4:6b:30:8a:a8:61:69:58:66:88:24:7b:4b:
b7:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:D6:15:B4:06:D3:E6:F1:DC:AA:2C:1B:30:E0:81:57:9C:1B:FF:BF
X509v3 Authority Key Identifier:
keyid:4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:7e:32:e3:cb:00:f2:43:0c:3f:bb:53:1e:81:6b:4f:db:48:
1c:3e:8e:7e:44:cc:81:6c:8a:b9:36:cc:a2:c3:3f:5a:c8:42:
58:f4:6f:f7:0f:ad:07:b7:27:d1:db:15:f6:19:18:8e:0d:92:
15:a4:ce:42:d7:29:cf:46:ed:1d:e4:25:a7:41:3c:b9:84:91:
a9:9e:9d:03:69:3b:f1:51:6c:46:d5:57:6c:e9:08:c6:b7:95:
85:8c:35:61:13:1f:cd:5c:3b:b5:17:e7:18:00:e7:31:89:6e:
54:6b:7e:bf:0e:5a:ee:de:54:d7:36:a6:51:08:7b:23:0a:92:
1b:a4:7a:55:7c:3c:13:cf:92:34:27:4e:87:2c:1c:84:c4:ef:
50:02:3e:6b:b4:3a:b7:e4:4d:4d:31:e0:6f:a7:0d:d1:70:84:
0f:eb:c5:3c:54:fd:fd:44:eb:1f:29:7a:b6:c8:88:7c:16:33:
56:63:34:12:60:ea:08:12:d0:25:d1:cd:a2:8a:f7:02:d9:86:
5b:45:3e:4a:84:bd:19:75:b4:56:5e:6e:06:1b:e8:00:90:b9:
72:8b:94:0d:df:ae:62:27:39:10:4b:5e:53:22:d0:4f:d8:06:
4c:2a:a7:e4:ae:e6:04:57:5e:8e:76:79:e7:91:0b:ee:37:f4:
17:c2:22:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 01:00:54 2026 by rpki-client