This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/3/B52300C5AE6278B608E231E431C3DD0EAF6A6BC2.mft
File: B52300C5AE6278B608E231E431C3DD0EAF6A6BC2.mft (raw, json)
Hash identifier: /Mofn38qPWP75OmxtsXajZFS9Gmwaf6Gl2+2gi3zMik=
Subject key identifier: 5B:01:40:91:0E:37:AA:A0:72:36:FF:26:15:5F:B4:03:C7:F5:8F:6B
Authority key identifier: B5:23:00:C5:AE:62:78:B6:08:E2:31:E4:31:C3:DD:0E:AF:6A:6B:C2
Certificate issuer: /CN=B52300C5AE6278B608E231E431C3DD0EAF6A6BC2
Certificate serial: 1007E2EF921D66679227DB00BA54119A9C203268
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B52300C5AE6278B608E231E431C3DD0EAF6A6BC2.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/3/B52300C5AE6278B608E231E431C3DD0EAF6A6BC2.mft
Manifest number: 36
Signing time: Tue 20 Jan 2026 15:05:02 +0000
Manifest this update: Tue 20 Jan 2026 15:00:02 +0000
Manifest next update: Wed 21 Jan 2026 16:48:02 +0000
Files and hashes: 1: 326131343a373538313a393966323a3a2f34382d3438203d3e20323134333434.roa (hash: Oe9b7D8DtLCyHfTEelgxQzMm3GoJ4G9/0gwwATaJfro=)
2: 326131343a373538313a393966333a3a2f34382d3438203d3e20323134333434.roa (hash: J6emFQdlETu7H0STfMe+srRexcrGlCk0y+BgTI9eJls=)
3: 326131343a373538313a393966313a3a2f34382d3438203d3e20323134333434.roa (hash: uczfpozVS217kWRATgpEenuL/t1nbJiCmQMwvAEpV8o=)
4: B52300C5AE6278B608E231E431C3DD0EAF6A6BC2.crl (hash: xuW+UEZ3G/CTdK0lIuWv1Ku28Cu/Gy4Nk9r+GBDPxwg=)
5: 326131343a373538313a393930333a3a2f34382d3438203d3e20323134333434.roa (hash: odpWIoGfrHyjA/EqLrY/tj6kKgasd1C7YcR9JizUkBA=)
6: 326131343a373538313a393966353a3a2f34382d3438203d3e20323134333434.roa (hash: HcA7KRdnBWzY7hEKVhGFuUdyfwcYU7b6FuC/duUcRFU=)
7: 326131343a373538313a393930323a3a2f34382d3438203d3e20323134333434.roa (hash: TyFBqgR7vYeMd4/BuVueO5zwkcDAg7G5uk0/d+OPki0=)
8: 326131343a373538313a393930313a3a2f34382d3438203d3e20323134333434.roa (hash: a3vn+r3Xd1ZweP+VfXPkybQsxnlpFwKhPGkq1Aja1ws=)
9: 326131343a373538313a393938383a3a2f34382d3438203d3e20323134333434.roa (hash: dhPIT0Huo/8bMcCCD9CENzV8Oc7GRGv2lkOyyJSz4lY=)
10: 326131343a373538313a393930343a3a2f34382d3438203d3e20323134333434.roa (hash: JSmiAu7ed33+J2eg2ZQ/ocsiovRypTOUdvXbpKPSbI8=)
11: 326131343a373538313a393930353a3a2f34382d3438203d3e20323134333434.roa (hash: WvJ+nlXPCuTRZnP7e6XF03QrjAocsMrvYbQ3ZQ/eNBY=)
12: 326131343a373538313a393966343a3a2f34382d3438203d3e20323134333434.roa (hash: spTh8DstCVqtG/UUp5lMqUt7m9/HXGTEzcFQEa7vRbE=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/3/B52300C5AE6278B608E231E431C3DD0EAF6A6BC2.crl
rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/3/B52300C5AE6278B608E231E431C3DD0EAF6A6BC2.mft
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B52300C5AE6278B608E231E431C3DD0EAF6A6BC2.cer
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Jan 2026 15:30:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:07:e2:ef:92:1d:66:67:92:27:db:00:ba:54:11:9a:9c:20:32:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B52300C5AE6278B608E231E431C3DD0EAF6A6BC2
Validity
Not Before: Jan 20 15:00:02 2026 GMT
Not After : Jan 21 16:48:02 2026 GMT
Subject: CN=5B0140910E37AAA07236FF26155FB403C7F58F6B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b8:bb:00:45:60:42:ff:81:a6:b4:bd:02:0f:
d9:a7:74:94:b1:ea:a6:2d:0f:d9:5c:98:68:16:13:
ff:f1:37:73:3d:4c:08:24:6b:ba:1b:05:34:31:71:
10:08:cc:31:60:a6:cc:cb:2f:3c:67:94:a9:79:e8:
da:2b:51:94:6d:ad:0a:b3:77:3f:24:e8:13:5f:70:
30:7f:f2:b6:dc:48:bb:20:9c:55:b8:d2:6c:39:ab:
38:0f:4b:be:db:b2:b8:52:83:37:7d:d8:b9:80:3a:
8f:bf:ac:e1:49:e2:4f:5b:22:38:c9:89:c4:5e:92:
b4:fa:ea:f5:a0:eb:8e:f6:c9:86:cd:e5:4d:fb:8b:
fe:36:77:d2:b5:a8:76:94:84:88:20:df:0c:1e:da:
ce:3e:57:5e:4a:ed:c8:85:a2:4a:db:04:37:e3:a9:
54:bf:67:5b:22:f9:3f:38:b2:da:4a:3b:8f:d7:85:
18:b9:eb:87:ec:e0:5c:5e:cf:40:26:19:80:65:ef:
4e:92:85:98:2c:c2:3c:42:d5:34:19:3d:ee:27:1a:
23:13:47:f7:55:19:bd:fe:29:2b:8b:9a:3e:54:94:
78:47:a5:f8:4d:29:6f:ce:ae:09:be:40:96:e1:7e:
c3:6a:bf:1d:da:a9:82:fb:c3:62:75:da:3a:a3:47:
41:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:01:40:91:0E:37:AA:A0:72:36:FF:26:15:5F:B4:03:C7:F5:8F:6B
X509v3 Authority Key Identifier:
keyid:B5:23:00:C5:AE:62:78:B6:08:E2:31:E4:31:C3:DD:0E:AF:6A:6B:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/3/B52300C5AE6278B608E231E431C3DD0EAF6A6BC2.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B52300C5AE6278B608E231E431C3DD0EAF6A6BC2.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/3/B52300C5AE6278B608E231E431C3DD0EAF6A6BC2.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:5f:16:d5:a9:03:a1:78:6a:74:e3:0d:19:31:ff:33:1c:ce:
40:fb:f3:c4:83:2a:8b:b0:f0:cd:b1:82:94:76:32:d8:20:3a:
d8:c3:c9:ec:cc:f7:40:f3:76:d6:d2:75:1e:4c:32:0b:3c:2d:
72:01:87:51:ee:c1:f6:08:5e:e1:e8:52:07:dd:bd:75:47:58:
49:5b:24:c1:45:a3:cb:c4:c1:67:ab:cc:33:ef:54:08:5f:b7:
24:d2:d2:3c:72:79:75:47:0f:f4:95:d4:32:ff:00:e2:32:5c:
12:30:31:00:c6:bf:07:02:bf:c6:f0:ff:04:2b:44:90:94:d9:
38:1a:6f:df:80:14:eb:95:f6:48:33:0a:7e:7d:ec:71:50:35:
79:1c:ad:5d:d4:10:0b:ba:62:7a:52:d4:c2:28:f4:b5:66:bb:
39:4a:5a:2c:ae:84:73:e0:70:c7:5c:80:02:ea:06:5d:00:1c:
d8:e2:42:c8:0b:74:79:b6:bf:09:39:4b:01:db:64:48:c6:0e:
2d:11:5d:2c:94:99:4e:a5:da:95:65:a8:c0:1c:dd:04:6e:06:
71:10:f3:a6:1e:66:5b:e6:e1:1a:ae:d1:09:94:3a:87:32:a4:
c5:1e:36:37:92:a0:35:7b:52:84:41:4e:65:65:3b:36:6a:af:
58:51:d6:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 23:49:50 2026 by rpki-client