This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/03fd0b76-7243-4b26-9760-cc07b94bfe23/1/258D1CE0CB76A986E56C7A90A66BA7DC72F5952A.mft
File: 258D1CE0CB76A986E56C7A90A66BA7DC72F5952A.mft (raw, json)
Hash identifier: fgK8wmXVM7fZEGgD0jNYS8Ftd/AEAPEdXZi/OLbA3/U=
Subject key identifier: 6C:D0:19:94:A8:32:4D:31:96:64:77:49:BA:18:A1:32:51:D0:4C:FC
Authority key identifier: 25:8D:1C:E0:CB:76:A9:86:E5:6C:7A:90:A6:6B:A7:DC:72:F5:95:2A
Certificate issuer: /CN=258D1CE0CB76A986E56C7A90A66BA7DC72F5952A
Certificate serial: 0B2223836B06D06A21863A522A9E6639BEED3A05
Authority info access: rsync://rpki.axivora.net/repo/Axivora-Net/2/258D1CE0CB76A986E56C7A90A66BA7DC72F5952A.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/03fd0b76-7243-4b26-9760-cc07b94bfe23/1/258D1CE0CB76A986E56C7A90A66BA7DC72F5952A.mft
Manifest number: 95
Signing time: Tue 10 Feb 2026 20:03:40 +0000
Manifest this update: Tue 10 Feb 2026 19:58:40 +0000
Manifest next update: Wed 11 Feb 2026 20:55:40 +0000
Files and hashes: 1: 326131343a373538303a3737303a3a2f34342d3438203d3e20323133383931.roa (hash: woLwL0VEJzWnepdsx0zvpMFwwJXef1WYeYkaz1KcaHg=)
2: 326131343a373538303a3737353a3a2f34382d3438203d3e203136353039.roa (hash: LbzBckLICgXq7UKYaeP/CXL1PXD0JCr+a84omRC/7VY=)
3: 326131343a373538303a3737373a3a2f34382d3438203d3e203134363138.roa (hash: RTK2m9QZnNSKC5ZVcuz7+tdRZKTs7/hzcAu/hXd2ZTc=)
4: 326131343a373538303a3737373a3a2f34382d3438203d3e203136353039.roa (hash: xvnqSl1qLoVMIEzXN9sXRb87iGsN7N/pVeZWynFQufE=)
5: 258D1CE0CB76A986E56C7A90A66BA7DC72F5952A.crl (hash: TTDkPZCAiW5F9/Jh5i8T8NvFS+ispweS37YCxz3x+Ko=)
6: 326131343a373538303a3737353a3a2f34382d3438203d3e203134363138.roa (hash: MfUF2laHihcgibdMapv7JAFGkNEIH6JIdDfIW/lhqFE=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/03fd0b76-7243-4b26-9760-cc07b94bfe23/1/258D1CE0CB76A986E56C7A90A66BA7DC72F5952A.crl
rsync://rsync.paas.rpki.ripe.net/repository/03fd0b76-7243-4b26-9760-cc07b94bfe23/1/258D1CE0CB76A986E56C7A90A66BA7DC72F5952A.mft
rsync://rpki.axivora.net/repo/Axivora-Net/2/258D1CE0CB76A986E56C7A90A66BA7DC72F5952A.cer
rsync://rpki.axivora.net/repo/Axivora-Net/2/F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.crl
rsync://rpki.axivora.net/repo/Axivora-Net/2/F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.mft
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.cer
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Feb 2026 17:43:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:22:23:83:6b:06:d0:6a:21:86:3a:52:2a:9e:66:39:be:ed:3a:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=258D1CE0CB76A986E56C7A90A66BA7DC72F5952A
Validity
Not Before: Feb 10 19:58:40 2026 GMT
Not After : Feb 11 20:55:40 2026 GMT
Subject: CN=6CD01994A8324D3196647749BA18A13251D04CFC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:87:cb:eb:ac:ab:be:7d:11:f0:41:02:91:a9:
f0:0f:92:49:19:d0:c1:9d:c2:78:9d:50:4d:0e:18:
d5:f1:8d:cc:07:2b:3c:e8:6b:da:42:b6:2c:86:22:
d4:8f:38:b7:8d:57:96:12:b0:2e:d7:6e:b5:7c:de:
ad:71:73:4f:ab:39:71:e5:c6:29:6b:fb:82:33:8e:
7b:cc:78:9c:01:0f:16:9e:46:33:53:92:18:f6:a1:
aa:8f:22:8b:12:ef:f4:c7:b0:14:cf:7c:6d:df:30:
a5:22:a0:87:a0:60:12:3b:4e:df:b7:a1:37:8d:49:
54:5e:db:fd:94:63:6b:29:9d:a8:c1:05:a6:30:6c:
9b:dc:59:a6:a8:c6:aa:b8:20:17:07:db:35:14:d7:
3e:20:56:09:47:25:75:7b:a3:20:9c:64:40:4f:de:
94:05:68:00:1a:22:7e:35:d7:0a:be:d7:70:ff:ea:
36:f5:db:f1:4c:39:59:8d:bf:fa:60:4d:6d:ab:d7:
88:1c:e5:d6:35:00:d7:5c:5c:9d:67:1f:52:1b:00:
31:68:01:a3:e5:95:3b:3d:d2:37:73:c0:51:9f:bc:
0e:67:d4:38:e9:80:cf:82:61:6a:31:5f:9f:c2:d3:
b4:7e:7e:e9:50:d1:10:55:76:fe:4e:9c:f2:1f:8a:
9e:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:D0:19:94:A8:32:4D:31:96:64:77:49:BA:18:A1:32:51:D0:4C:FC
X509v3 Authority Key Identifier:
keyid:25:8D:1C:E0:CB:76:A9:86:E5:6C:7A:90:A6:6B:A7:DC:72:F5:95:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/03fd0b76-7243-4b26-9760-cc07b94bfe23/1/258D1CE0CB76A986E56C7A90A66BA7DC72F5952A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.axivora.net/repo/Axivora-Net/2/258D1CE0CB76A986E56C7A90A66BA7DC72F5952A.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/03fd0b76-7243-4b26-9760-cc07b94bfe23/1/258D1CE0CB76A986E56C7A90A66BA7DC72F5952A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:3f:b1:75:b4:3f:fc:af:ff:ba:ee:93:7d:20:fc:46:a6:08:
10:51:27:7e:f0:c3:81:7b:6b:ac:dd:04:25:c5:3a:5e:19:16:
e7:a4:5f:b2:14:97:11:ab:b1:9a:bd:86:e4:b8:b3:51:bc:68:
5a:51:1c:c9:6c:30:d5:8f:f1:44:d1:a9:05:52:fd:63:d8:94:
4d:8a:22:94:de:08:68:7f:17:4a:f4:a1:51:24:68:2d:2e:07:
5b:42:cf:c9:d8:8f:5b:d2:1e:f1:08:58:3c:40:f6:88:7d:ac:
21:bc:05:eb:d7:ed:32:f9:74:56:54:47:ba:67:75:7f:49:f6:
fd:45:55:c2:f7:44:86:bc:bd:a0:26:31:e2:6f:39:f6:a6:23:
79:d0:81:70:69:ea:f0:0a:9a:c4:06:4c:d7:40:27:5c:a3:51:
17:cb:a9:2c:18:a0:f4:0c:43:08:11:e4:77:72:b2:74:ce:ef:
3a:4c:60:8b:ed:3b:5f:6f:e5:0a:54:3d:35:4d:76:3f:7b:fa:
3c:09:1e:2d:cf:a0:b4:1c:4d:b7:12:e3:73:96:05:44:88:50:
c1:2a:3b:87:bf:db:0f:e2:fa:4e:41:09:5f:e3:7a:74:fe:ce:
95:63:48:00:57:76:37:11:91:08:13:5e:5e:45:06:e2:69:4c:
2d:59:44:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 11 05:14:34 2026 by rpki-client