This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.mft
File: 24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.mft (raw, json)
Hash identifier: pMFyhodRdgBHXocKR6Z4cIVCfGdbQpwH7IPPY5zi6MA=
Subject key identifier: 89:1C:E3:C5:48:17:5F:0B:95:62:61:4D:B6:28:9F:2E:4A:95:60:1C
Authority key identifier: 24:E5:37:88:BD:4E:FA:23:B1:A8:20:7B:7E:74:A8:E1:CC:67:7B:00
Certificate issuer: /CN=24e53788bd4efa23b1a8207b7e74a8e1cc677b00
Certificate serial: 713AFEAC74947E11EB265D5E696EE3CE781C2AF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JOU3iL1O-iOxqCB7fnSo4cxnewA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.mft
Manifest number: 0548
Signing time: Thu 29 Jan 2026 10:57:36 +0000
Manifest this update: Thu 29 Jan 2026 10:52:36 +0000
Manifest next update: Fri 30 Jan 2026 14:47:36 +0000
Files and hashes: 1: 34362e3138332e33302e302f32342d3234203d3e203631333137.roa (hash: pxnqedD3kuwz1m+9x0q4e9R46P3xXGAP6tM7JZr4zqQ=)
2: 34362e3138332e33312e302f32342d3234203d3e20313734.roa (hash: 3Z7e+5TwzBef1b9VYHjpmL+5jzamN8gXYO/wLKWP7lA=)
3: 24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.crl (hash: LtQyYtBG4Bj6ldG6mEQXamGohSuJJ589z/2blnumBfs=)
4: 34362e3138332e32382e302f32342d3234203d3e203239383032.roa (hash: kUcJYnZDGTlKIzzpmv1f5LvT/3qyw3JDmGespkIKDl8=)
5: 34362e3138332e32372e302f32342d3234203d3e20323132323338.roa (hash: MBTQi0HOcbTwY/4fQl+vTOHLOQ2FmR/EhBIZ6Dj3u14=)
6: 34362e3138332e32352e302f32342d3234203d3e203633303233.roa (hash: 4jq0qwMJqWtfRUuzz3vPyKHtua4FM5/8Y3cvVGfTKBM=)
7: 34362e3138332e32352e302f32342d3234203d3e20323132323338.roa (hash: lxi2m0tJ4IwcIv1Qu/mxuwgzf8BGdtHdxfKNM9mKZEQ=)
8: 34362e3138332e32382e302f32342d3234203d3e203631333137.roa (hash: EQc8ZSWRYu3w3yABE1KT+uLZnchUtUDhUBMKc9gsz8U=)
9: 34362e3138332e32342e302f32342d3234203d3e20313432313436.roa (hash: U6sIE1tc5XNg8Vw7jnbxLLCNANnB9wH3voxb1FhuZwc=)
10: 34362e3138332e33302e302f32342d3234203d3e203239383032.roa (hash: 72nHdO4b4bTlOVAl3qEYnqrejyz7ta1anmrlcAXdAWw=)
11: 34362e3138332e32362e302f32342d3234203d3e2039303039.roa (hash: ckwThy9Ftd6Jb/nTbj53dd12b3F3RSR9Etp8JSW5svM=)
12: 34362e3138332e32392e302f32342d3234203d3e20383334.roa (hash: cCNMl/j8O4+QWokqGu7uLfEk807f860f4W6iD80yDww=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.crl
rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.mft
rsync://rpki.ripe.net/repository/DEFAULT/JOU3iL1O-iOxqCB7fnSo4cxnewA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Jan 2026 12:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:3a:fe:ac:74:94:7e:11:eb:26:5d:5e:69:6e:e3:ce:78:1c:2a:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24e53788bd4efa23b1a8207b7e74a8e1cc677b00
Validity
Not Before: Jan 29 10:52:36 2026 GMT
Not After : Jan 30 14:47:36 2026 GMT
Subject: CN=891CE3C548175F0B9562614DB6289F2E4A95601C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:03:4c:e7:35:7b:b9:c1:0e:b9:6a:e9:db:b6:
97:08:a4:5c:d4:51:74:2e:b9:3a:98:c7:c2:8c:7f:
52:43:91:fb:0f:b7:55:f4:de:80:dd:dc:7c:37:4c:
5a:a0:e5:46:44:72:51:f1:1d:5c:d2:c7:47:81:15:
a1:2f:a1:dc:a3:d0:18:60:e5:7e:eb:0f:a9:be:67:
17:a3:f2:bb:79:a6:e4:b3:e8:34:e7:4a:dd:b1:a7:
23:be:6a:94:db:2d:f0:23:eb:5e:df:80:9e:34:85:
b6:36:e8:5e:cf:9d:8c:62:00:7c:c2:97:22:8d:1a:
f0:7d:80:1d:6a:a0:53:83:82:e2:80:94:3e:09:e9:
01:9e:be:ce:b4:43:f5:f7:46:09:0a:9d:6a:13:63:
39:02:a0:58:38:fd:c1:70:f6:8f:8e:e3:4c:33:ec:
6e:28:db:79:15:46:d6:2a:d8:27:f7:97:86:0d:eb:
d0:8b:64:ef:f6:ab:ff:75:67:a8:fa:e1:1c:0e:cd:
16:f3:6c:0d:f8:0f:26:93:9d:f7:8e:fc:51:5c:8e:
87:90:3e:d3:c9:91:7f:e5:1c:cc:ca:75:fd:2e:a6:
24:8e:6d:81:00:71:d1:b8:fa:ba:de:a4:8a:fa:7e:
d6:8d:44:6e:5f:7c:05:a0:70:3d:45:88:e2:f4:e9:
e3:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:1C:E3:C5:48:17:5F:0B:95:62:61:4D:B6:28:9F:2E:4A:95:60:1C
X509v3 Authority Key Identifier:
keyid:24:E5:37:88:BD:4E:FA:23:B1:A8:20:7B:7E:74:A8:E1:CC:67:7B:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JOU3iL1O-iOxqCB7fnSo4cxnewA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:8f:6f:97:96:44:4d:dd:6a:2b:19:87:8b:f4:76:85:46:3d:
66:32:0c:91:95:39:6c:7f:a3:87:40:f8:0a:0c:d5:77:29:f6:
6b:c1:1b:50:e5:b5:0f:20:e3:48:0e:2a:29:47:37:f6:d7:cd:
8d:f2:56:1f:56:0e:97:a8:1c:07:a3:02:03:bb:d9:09:47:4d:
31:1c:23:93:02:66:cc:a0:b9:fd:96:0a:62:5a:06:b7:06:34:
6f:9b:2b:35:cb:9f:16:b6:a1:39:fe:30:65:e8:b1:ce:98:bf:
b2:2e:66:96:48:d2:87:7b:33:cd:8b:5f:3d:0e:75:a6:24:ab:
a1:6e:6f:79:0d:83:ae:ae:cb:51:ab:03:ce:dc:e0:03:d0:2f:
ea:74:7c:23:5e:09:76:44:27:92:a7:8d:61:75:a6:09:fe:c1:
f1:26:be:99:da:9a:84:7a:bb:f8:73:e3:13:6b:61:c8:f4:e5:
4e:ec:e0:af:dd:83:ba:c4:ea:0a:05:a6:d4:f3:3d:3b:0e:22:
bb:ab:a3:5a:dc:aa:95:f2:3f:ad:4a:19:78:08:1c:a2:b9:17:
c2:a2:79:4a:97:bd:c3:13:e9:63:c3:7c:e1:fa:73:2b:fb:34:
5c:44:3e:18:37:33:82:e7:7f:7b:b9:28:c8:b2:e5:1f:51:ee:
d8:78:72:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 29 19:24:42 2026 by rpki-client