This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/0/883931AAB8B1363015BC8FDDF0B582321767440A.mft
File: 883931AAB8B1363015BC8FDDF0B582321767440A.mft (raw, json)
Hash identifier: dJS+v6ItAydFtzDmNQoLzlqcB3jpEJhx3exaIy6DO94=
Subject key identifier: 99:5B:6A:98:74:8B:19:4E:C5:62:7F:07:3C:D9:18:AD:50:9A:A1:C7
Authority key identifier: 88:39:31:AA:B8:B1:36:30:15:BC:8F:DD:F0:B5:82:32:17:67:44:0A
Certificate issuer: /CN=883931aab8b1363015bc8fddf0b582321767440a
Certificate serial: 57307A0EA416695FA0806AA020EE4076B3981D75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iDkxqrixNjAVvI_d8LWCMhdnRAo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/0/883931AAB8B1363015BC8FDDF0B582321767440A.mft
Manifest number: 2A
Signing time: Mon 26 Jan 2026 01:52:06 +0000
Manifest this update: Mon 26 Jan 2026 01:47:06 +0000
Manifest next update: Tue 27 Jan 2026 03:25:06 +0000
Files and hashes: 1: 883931AAB8B1363015BC8FDDF0B582321767440A.crl (hash: 1AOHuFC6ilN/rX+qw9GuNQoHasNOEyZGJjbXe9GQfKU=)
2: AS213605.asa (hash: vDTrzMEAXQDX/rAJbwqFTc96En0LeH2npreVsst7mlA=)
3: 323030313a3637383a3533633a3a2f34382d3438203d3e20313534313835.roa (hash: ToBUFvUom+h4rbM7uZ7L3aEUItGSsZaFzls2rQ5hJzY=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/0/883931AAB8B1363015BC8FDDF0B582321767440A.crl
rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/0/883931AAB8B1363015BC8FDDF0B582321767440A.mft
rsync://rpki.ripe.net/repository/DEFAULT/iDkxqrixNjAVvI_d8LWCMhdnRAo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 01:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:30:7a:0e:a4:16:69:5f:a0:80:6a:a0:20:ee:40:76:b3:98:1d:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=883931aab8b1363015bc8fddf0b582321767440a
Validity
Not Before: Jan 26 01:47:06 2026 GMT
Not After : Jan 27 03:25:06 2026 GMT
Subject: CN=995B6A98748B194EC5627F073CD918AD509AA1C7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:0b:37:61:82:65:73:e1:75:f3:c0:ef:7e:ef:
d2:8c:ac:6d:e2:b6:f2:cb:53:61:41:b9:75:6e:c6:
bd:ce:b5:ce:50:a0:2b:95:aa:38:2d:75:9c:55:fd:
10:c2:48:a2:d7:09:5f:5e:f7:a4:e4:d4:bc:64:c6:
4d:bf:b8:cd:24:10:e7:8e:f4:9d:78:2e:1c:11:e7:
ae:70:f0:58:70:9c:e6:af:ad:7f:7e:14:0e:e0:cd:
d6:56:58:43:14:c0:d9:0f:8b:68:3f:84:34:dc:2d:
de:ce:44:c9:a1:8d:15:a3:46:f1:45:11:2e:5d:95:
82:8f:30:51:dc:12:82:fb:92:d6:89:86:89:3a:3e:
95:de:1e:50:1f:fd:f7:a1:42:cb:2d:a4:1a:74:50:
65:cd:52:47:77:c4:a4:18:fc:48:99:e0:d9:91:3c:
50:8e:84:63:89:e1:a4:7a:98:bb:4f:e8:3f:7b:32:
a0:2e:6a:b3:73:dc:65:60:ac:01:f2:55:4b:16:aa:
7d:a6:0e:a8:2c:a2:2c:d1:ec:f9:7b:91:60:72:a8:
8d:dd:85:53:85:fe:e1:97:77:88:f3:95:0d:e7:32:
87:2e:b3:31:a7:cd:1a:29:33:54:fb:df:48:cb:99:
a6:58:92:90:74:1d:7c:11:7e:94:13:6c:7d:57:56:
25:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:5B:6A:98:74:8B:19:4E:C5:62:7F:07:3C:D9:18:AD:50:9A:A1:C7
X509v3 Authority Key Identifier:
keyid:88:39:31:AA:B8:B1:36:30:15:BC:8F:DD:F0:B5:82:32:17:67:44:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/0/883931AAB8B1363015BC8FDDF0B582321767440A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iDkxqrixNjAVvI_d8LWCMhdnRAo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/0/883931AAB8B1363015BC8FDDF0B582321767440A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:86:f8:99:f8:b2:f2:2d:da:dd:14:e3:a3:90:f7:8f:7e:ea:
ac:82:47:21:6d:95:ad:46:3c:cb:51:f4:cc:bd:80:00:74:0a:
4d:e3:88:1e:4b:92:f6:d0:98:b6:44:b3:6c:61:e0:d7:c2:e5:
f5:13:21:12:20:4d:af:34:1b:74:39:80:26:95:ef:6a:8e:20:
41:1f:90:36:4c:62:c2:38:ad:cc:37:e0:1a:93:70:b8:01:c4:
0e:50:bf:8e:43:e4:1e:09:ae:6f:b6:60:d0:4f:38:3a:ff:41:
dc:0a:8d:b4:52:9c:47:2b:60:09:8a:38:95:65:22:a6:de:72:
ce:95:58:b8:2b:c8:ac:d0:7f:17:e5:5e:b0:c3:05:31:0b:2f:
01:4b:39:50:1d:e6:88:60:4e:65:18:ae:b2:eb:ee:2f:37:9f:
e1:83:57:c1:fb:52:36:10:d5:41:36:81:8e:ab:d0:09:5f:7f:
c9:d3:6c:93:81:17:41:8f:96:5f:da:fc:42:52:aa:d2:40:58:
c1:fa:91:e1:37:32:c0:48:5d:8e:a4:36:74:ca:03:f7:43:6b:
e5:4c:5d:79:37:e7:83:cb:84:bb:99:b5:91:8c:c4:49:6b:1f:
26:18:28:be:cc:c0:df:ed:cf:47:5a:af:0a:bc:f0:65:f7:ba:
8f:28:f4:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 09:40:29 2026 by rpki-client