This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2285be6f-5111-4c3c-8254-d2e415510284/1/6E57E27AC23C8932C53853BF557B28CD590488AC.mft
File: 6E57E27AC23C8932C53853BF557B28CD590488AC.mft (raw, json)
Hash identifier: 1T/wsYLoqary9q7NiLH/yflopxpM9L6I3ZuVgbHYZ5Y=
Subject key identifier: 36:A3:BF:AF:89:3F:11:EB:EE:E8:94:EC:EB:4E:49:68:06:B5:21:70
Authority key identifier: 6E:57:E2:7A:C2:3C:89:32:C5:38:53:BF:55:7B:28:CD:59:04:88:AC
Certificate issuer: /CN=6E57E27AC23C8932C53853BF557B28CD590488AC
Certificate serial: 1D535DA83256BF94DA18B9BAE1E683B579B33FB1
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/6E57E27AC23C8932C53853BF557B28CD590488AC.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2285be6f-5111-4c3c-8254-d2e415510284/1/6E57E27AC23C8932C53853BF557B28CD590488AC.mft
Manifest number: C7
Signing time: Tue 20 Jan 2026 14:41:54 +0000
Manifest this update: Tue 20 Jan 2026 14:36:54 +0000
Manifest next update: Wed 21 Jan 2026 15:49:54 +0000
Files and hashes: 1: 6E57E27AC23C8932C53853BF557B28CD590488AC.crl (hash: gRuGwYEOzPwwrTXXtFCEPxz5G/Wo5qpyyQGR480TCVw=)
2: 326131343a373538333a663330303a3a2f34302d3438203d3e20323035303038.roa (hash: Pw4yBx8L2Vx0/YJcoRiVJ2ZHCDI/+/xVhxU2P0lxb8w=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2285be6f-5111-4c3c-8254-d2e415510284/1/6E57E27AC23C8932C53853BF557B28CD590488AC.crl
rsync://rsync.paas.rpki.ripe.net/repository/2285be6f-5111-4c3c-8254-d2e415510284/1/6E57E27AC23C8932C53853BF557B28CD590488AC.mft
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/6E57E27AC23C8932C53853BF557B28CD590488AC.cer
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Jan 2026 15:30:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:53:5d:a8:32:56:bf:94:da:18:b9:ba:e1:e6:83:b5:79:b3:3f:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6E57E27AC23C8932C53853BF557B28CD590488AC
Validity
Not Before: Jan 20 14:36:54 2026 GMT
Not After : Jan 21 15:49:54 2026 GMT
Subject: CN=36A3BFAF893F11EBEEE894ECEB4E496806B52170
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:67:c5:a6:65:bf:85:61:38:c2:44:b0:0b:d5:
56:d4:1d:ff:0b:82:c6:39:2f:6a:ec:63:3d:5e:6e:
d5:ee:1f:92:af:b5:5a:1f:dd:b7:b6:68:a1:c1:75:
a6:93:63:dc:e2:a6:c2:0d:0d:20:34:40:a7:a3:f0:
16:b6:f6:7b:f0:bc:97:af:92:c7:d3:53:06:7e:71:
24:34:c3:ca:d3:19:bc:4d:63:70:41:27:9b:b9:46:
3c:7b:bd:b0:0e:2f:ac:c1:fb:03:e1:d0:b2:9b:c6:
70:e8:d8:4f:76:df:b3:78:5c:85:fc:2d:a9:61:59:
cc:0c:4b:8a:19:52:57:82:a1:01:e8:2a:f2:31:93:
f0:94:fe:44:af:da:b2:51:e7:5f:55:88:01:2e:31:
2a:9c:0c:48:43:bd:6a:f9:3d:1f:da:8d:75:74:7e:
f4:ec:7e:97:8a:2f:99:06:be:e1:e6:ea:48:fa:27:
22:2e:8f:ef:9f:8a:80:9a:c3:78:50:45:d0:10:c5:
89:ec:3a:44:63:ee:0c:84:20:56:02:67:2b:28:b2:
c4:d3:0c:bd:a9:06:9c:36:20:2d:7f:ac:7d:29:07:
f0:04:67:2a:cd:8b:d6:ba:76:1e:81:0f:5c:7a:c0:
41:cb:04:be:85:fd:5a:5c:af:c5:9d:65:35:aa:1f:
8c:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:A3:BF:AF:89:3F:11:EB:EE:E8:94:EC:EB:4E:49:68:06:B5:21:70
X509v3 Authority Key Identifier:
keyid:6E:57:E2:7A:C2:3C:89:32:C5:38:53:BF:55:7B:28:CD:59:04:88:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/2285be6f-5111-4c3c-8254-d2e415510284/1/6E57E27AC23C8932C53853BF557B28CD590488AC.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/6E57E27AC23C8932C53853BF557B28CD590488AC.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2285be6f-5111-4c3c-8254-d2e415510284/1/6E57E27AC23C8932C53853BF557B28CD590488AC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:f4:b0:4e:42:74:75:ed:b3:ea:9a:b2:5e:8f:81:dd:96:e6:
66:cb:d2:8a:ad:f4:7d:a8:ed:24:1d:9d:bd:3a:ff:fe:fe:6f:
30:a8:8f:57:f5:65:5c:bb:cd:f4:47:7f:ec:41:89:f0:40:40:
33:dd:a4:66:42:2f:4a:0a:17:c6:22:f2:f5:ff:00:f9:fe:a7:
68:bf:5d:05:47:1e:e0:08:6f:49:77:79:75:c8:e1:a9:01:a4:
19:59:92:c0:b8:14:36:01:c8:59:5d:89:ae:db:30:5e:6e:b9:
9c:5c:81:dd:8f:24:38:75:24:59:46:73:41:43:86:b1:47:83:
82:3b:c8:39:76:8f:2f:69:ca:5c:1e:d4:30:80:58:7d:34:1e:
ef:13:16:e9:1f:db:64:40:c2:1f:30:29:51:a1:ec:ae:9f:c1:
5a:06:aa:1e:91:fa:0a:9d:fd:25:21:d9:9e:04:f2:77:78:8b:
d1:c4:43:0a:a7:19:82:94:ee:f3:1a:e6:70:1a:1c:fa:f0:6b:
2f:8e:06:46:06:4d:69:0f:94:3e:c4:81:25:df:2c:d8:63:ac:
c3:20:19:df:8f:67:e4:f4:54:bb:94:66:d8:3c:b2:f1:c0:1f:
43:a9:30:1b:3f:43:54:d1:e8:10:8c:0c:4b:e4:7a:df:92:57:
53:88:ce:bb
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgIUHVNdqDJWv5TaGLm64eaDtXmzP7EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkU1N0UyN0FDMjNDODkzMkM1Mzg1M0JGNTU3QjI4Q0Q1
OTA0ODhBQzAeFw0yNjAxMjAxNDM2NTRaFw0yNjAxMjExNTQ5NTRaMDMxMTAvBgNV
BAMTKDM2QTNCRkFGODkzRjExRUJFRUU4OTRFQ0VCNEU0OTY4MDZCNTIxNzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeZ8WmZb+FYTjCRLAL1VbUHf8L
gsY5L2rsYz1ebtXuH5KvtVof3be2aKHBdaaTY9zipsINDSA0QKej8Ba29nvwvJev
ksfTUwZ+cSQ0w8rTGbxNY3BBJ5u5Rjx7vbAOL6zB+wPh0LKbxnDo2E9237N4XIX8
LalhWcwMS4oZUleCoQHoKvIxk/CU/kSv2rJR519ViAEuMSqcDEhDvWr5PR/ajXV0
fvTsfpeKL5kGvuHm6kj6JyIuj++fioCaw3hQRdAQxYnsOkRj7gyEIFYCZysossTT
DL2pBpw2IC1/rH0pB/AEZyrNi9a6dh6BD1x6wEHLBL6F/Vpcr8WdZTWqH4ypAgMB
AAGjggKCMIICfjAdBgNVHQ4EFgQUNqO/r4k/Eevu6JTs605JaAa1IXAwHwYDVR0j
BBgwFoAUblfiesI8iTLFOFO/VXsozVkEiKwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMjI4NWJlNmYtNTExMS00YzNjLTgyNTQtZDJlNDE1NTEw
Mjg0LzEvNkU1N0UyN0FDMjNDODkzMkM1Mzg1M0JGNTU3QjI4Q0Q1OTA0ODhBQy5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy
OTktYjA3OS0zMDllZDk3ZjM4MjQvMC82RTU3RTI3QUMyM0M4OTMyQzUzODUzQkY1
NTdCMjhDRDU5MDQ4OEFDLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF
BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
LzIyODViZTZmLTUxMTEtNGMzYy04MjU0LWQyZTQxNTUxMDI4NC8xLzZFNTdFMjdB
QzIzQzg5MzJDNTM4NTNCRjU1N0IyOENENTkwNDg4QUMubWZ0MBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF
ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAb9LBO
QnR17bPqmrJej4HdluZmy9KKrfR9qO0kHZ29Ov/+/m8wqI9X9WVcu830R3/sQYnw
QEAz3aRmQi9KChfGIvL1/wD5/qdov10FRx7gCG9Jd3l1yOGpAaQZWZLAuBQ2AchZ
XYmu2zBebrmcXIHdjyQ4dSRZRnNBQ4axR4OCO8g5do8vacpcHtQwgFh9NB7vExbp
H9tkQMIfMClRoeyun8FaBqoekfoKnf0lIdmeBPJ3eIvRxEMKpxmClO7zGuZwGhz6
8GsvjgZGBk1pD5Q+xIEl3yzYY6zDIBnfj2fk9FS7lGbYPLLxwB9DqTAbP0NU0egQ
jAxL5HrfkldTiM67
-----END CERTIFICATE-----
Generated at Tue Jan 20 23:52:50 2026 by rpki-client