This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/9/B6479E0904B301975B19D2BFF42BE08DBFD68D65.mft
File: B6479E0904B301975B19D2BFF42BE08DBFD68D65.mft (raw, json)
Hash identifier: R/DpLgU0GLlmZrJMxge17j4fYP6LoZRs9II3Fh/8oT0=
Subject key identifier: 25:6A:4B:E3:8C:D2:06:16:A8:95:86:A5:4C:30:11:60:37:8E:A6:3A
Authority key identifier: B6:47:9E:09:04:B3:01:97:5B:19:D2:BF:F4:2B:E0:8D:BF:D6:8D:65
Certificate issuer: /CN=B6479E0904B301975B19D2BFF42BE08DBFD68D65
Certificate serial: 39C33D7577A8E4E69E5147E2F436935D399A26F5
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/B6479E0904B301975B19D2BFF42BE08DBFD68D65.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/9/B6479E0904B301975B19D2BFF42BE08DBFD68D65.mft
Manifest number: 0119
Signing time: Wed 28 Jan 2026 21:38:08 +0000
Manifest this update: Wed 28 Jan 2026 21:33:08 +0000
Manifest next update: Fri 30 Jan 2026 01:31:08 +0000
Files and hashes: 1: 326130353a646663353a31303a3a2f34372d3437203d3e20323033303639.roa (hash: t/2Kihb52wxLH3GVF+LrphldGHxVkV2gtesMFke+X4A=)
2: B6479E0904B301975B19D2BFF42BE08DBFD68D65.crl (hash: AOwoDjsaG2m9FxVC+DrtQdQXKbhGHKlnDqxJojpj3Uc=)
3: 326130353a646663353a623030623a3a2f34382d3438203d3e20323033303639.roa (hash: pe/tp2bLBPulUkbhZe9b5ATBM6Rh5HMZWo4IJTXGPDU=)
4: 326130353a646663353a3a2f33322d3332203d3e20323033303639.roa (hash: 1TfiGVzOrsDaGT5s8N1oSkECX3MMsr3gXEgw7UF/3c0=)
5: 326130353a646663353a3a2f34372d3437203d3e20323033303639.roa (hash: tIjYpQd9GyWainiE9GzQFbd7ZqDFGn1arDb1AExxerU=)
6: 326130353a646663353a326630303a3a2f34302d3430203d3e20323033303639.roa (hash: ikPIiFRhFNPp4wzJn8w9YCg2eDdJG03INaF7Jeb4D9A=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/9/B6479E0904B301975B19D2BFF42BE08DBFD68D65.crl
rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/9/B6479E0904B301975B19D2BFF42BE08DBFD68D65.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/B6479E0904B301975B19D2BFF42BE08DBFD68D65.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Jan 2026 18:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:c3:3d:75:77:a8:e4:e6:9e:51:47:e2:f4:36:93:5d:39:9a:26:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B6479E0904B301975B19D2BFF42BE08DBFD68D65
Validity
Not Before: Jan 28 21:33:08 2026 GMT
Not After : Jan 30 01:31:08 2026 GMT
Subject: CN=256A4BE38CD20616A89586A54C301160378EA63A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:38:df:bf:43:96:27:61:c1:94:79:b2:12:d0:
6c:ca:10:2a:34:4c:be:64:00:e9:19:6a:f5:9e:30:
5a:0e:76:10:27:32:10:39:67:04:7b:5b:42:5b:92:
c2:79:9f:9b:b6:51:ec:e2:31:91:7a:f4:91:6d:d6:
42:5d:d7:50:ff:b8:70:dd:48:6e:00:42:71:58:a5:
50:f7:8a:1f:23:a7:bc:a3:5d:f5:dd:4d:ee:62:1c:
60:a4:44:20:85:2b:63:90:27:95:63:fb:53:1a:10:
c2:15:e3:6b:a1:15:64:a1:da:a1:18:44:43:13:4e:
8c:48:71:0c:52:f5:d0:d1:a5:f2:4f:c5:ce:36:1f:
71:9a:27:67:37:c1:ba:aa:f2:fd:26:73:44:6c:35:
c0:97:a0:49:d1:bf:6f:b4:b7:b0:39:a9:77:3c:3e:
40:1d:40:d9:c1:1d:07:ce:98:d7:4a:b3:a0:e8:32:
35:97:3f:50:6c:3a:e9:d5:8d:65:e7:25:eb:55:15:
e5:60:42:11:88:ee:09:af:23:5d:ca:8b:a7:6d:bd:
17:3d:25:a0:b7:0e:70:dd:51:6d:e1:3c:6b:47:4d:
49:68:6e:65:c7:1e:59:dc:60:4f:31:e1:c5:33:bf:
bc:85:45:5d:fa:5e:57:7e:db:13:3d:21:02:fb:31:
84:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:6A:4B:E3:8C:D2:06:16:A8:95:86:A5:4C:30:11:60:37:8E:A6:3A
X509v3 Authority Key Identifier:
keyid:B6:47:9E:09:04:B3:01:97:5B:19:D2:BF:F4:2B:E0:8D:BF:D6:8D:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/9/B6479E0904B301975B19D2BFF42BE08DBFD68D65.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/B6479E0904B301975B19D2BFF42BE08DBFD68D65.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/9/B6479E0904B301975B19D2BFF42BE08DBFD68D65.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:69:57:88:2c:fe:b1:d2:66:d1:ff:63:3d:56:9a:d2:68:cf:
e4:1b:7e:9f:a9:9e:51:f9:7e:0b:13:84:19:4b:63:bc:18:84:
6a:28:da:01:a1:73:e4:36:07:59:8b:6d:72:ff:e7:46:96:64:
dc:1b:15:53:dc:10:46:94:4e:e8:05:b7:c1:aa:85:38:a9:f3:
ad:1d:a5:00:d5:80:14:18:a8:a5:ca:c5:39:7d:4d:0c:4e:39:
00:9f:c5:aa:59:bc:10:14:bf:9e:a2:32:23:52:55:05:47:13:
5a:1c:88:07:ff:ce:6d:76:9e:a2:cf:8f:10:29:3c:57:59:4a:
a6:fe:ae:62:51:59:6a:b8:d9:d8:8b:6e:16:df:fd:d2:8e:9a:
3a:63:8f:30:87:2a:da:3b:33:be:86:c3:ba:c0:23:24:66:4b:
d6:51:d6:99:39:7d:17:72:53:0e:93:68:d2:16:97:cb:9a:a7:
fe:c7:b6:1a:92:cb:21:ff:f6:5e:0a:da:a3:44:4f:c0:7f:32:
0a:c9:5c:b7:e1:67:00:1c:2c:09:a7:4b:75:1d:73:8e:6b:a4:
c9:44:fd:01:05:76:e5:8e:13:40:1c:24:1a:15:6b:52:1a:14:
cc:16:e0:ff:dd:fe:b4:32:d2:d1:df:4a:ff:08:37:b5:2a:03:
00:22:92:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 29 05:23:30 2026 by rpki-client