This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/29066f5d-ecc1-4927-95c1-e1a8df8f9897/0/1498141819112B8446C2D4A3111F53038F05DBE9.mft
File: 1498141819112B8446C2D4A3111F53038F05DBE9.mft (raw, json)
Hash identifier: ymvbAwCy7eXryt4aJ6UcEykbFWABlTm3OFLIKrs2V3E=
Subject key identifier: 46:91:A2:E1:24:F3:2A:C6:E8:26:62:1F:7F:DA:FF:5A:62:FC:1C:CD
Authority key identifier: 14:98:14:18:19:11:2B:84:46:C2:D4:A3:11:1F:53:03:8F:05:DB:E9
Certificate issuer: /CN=1498141819112b8446c2d4a3111f53038f05dbe9
Certificate serial: 6DF02AAA9C47992AA122D436D3A35EC602A89BF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FJgUGBkRK4RGwtSjER9TA48F2-k.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/29066f5d-ecc1-4927-95c1-e1a8df8f9897/0/1498141819112B8446C2D4A3111F53038F05DBE9.mft
Manifest number: 015B
Signing time: Tue 03 Feb 2026 21:12:26 +0000
Manifest this update: Tue 03 Feb 2026 21:07:26 +0000
Manifest next update: Wed 04 Feb 2026 22:25:26 +0000
Files and hashes: 1: 3138352e39312e3131332e302f32342d3234203d3e20323134323038.roa (hash: qSSu/jTa9CtmAhgZlrJ1s4QldXeKp0EqfLu29FuP5Zs=)
2: 1498141819112B8446C2D4A3111F53038F05DBE9.crl (hash: IZ4nVk3AMC88Pn+0cY3gRZWnpNcIx4PxnsoA2uMMPZ8=)
3: 3138352e39312e3131342e302f32342d3234203d3e20323132323338.roa (hash: O3+fkuGYHEGuJgzobwksf3BrAnxvmElLOiQKqynfHQQ=)
4: 3138352e39312e3131322e302f32342d3234203d3e203230343733.roa (hash: uQR2ZEBSc/gm5nc4UWXss03+GuSFprtiONvs7ml01aQ=)
5: 3138352e39312e3131352e302f32342d3234203d3e2034363337.roa (hash: ck91ILJJRhGrU5dcx7s2t1suhnGyLbRTekoZlADPXPE=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/29066f5d-ecc1-4927-95c1-e1a8df8f9897/0/1498141819112B8446C2D4A3111F53038F05DBE9.crl
rsync://rsync.paas.rpki.ripe.net/repository/29066f5d-ecc1-4927-95c1-e1a8df8f9897/0/1498141819112B8446C2D4A3111F53038F05DBE9.mft
rsync://rpki.ripe.net/repository/DEFAULT/FJgUGBkRK4RGwtSjER9TA48F2-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Feb 2026 19:43:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:f0:2a:aa:9c:47:99:2a:a1:22:d4:36:d3:a3:5e:c6:02:a8:9b:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1498141819112b8446c2d4a3111f53038f05dbe9
Validity
Not Before: Feb 3 21:07:26 2026 GMT
Not After : Feb 4 22:25:26 2026 GMT
Subject: CN=4691A2E124F32AC6E826621F7FDAFF5A62FC1CCD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:a3:2f:1e:fc:74:f3:55:a8:8f:40:86:f8:78:
49:d0:23:69:17:fd:98:d8:d2:ea:3d:64:ad:66:be:
60:41:26:3b:36:c1:8a:69:d9:c8:da:04:14:48:9f:
2f:7a:9e:26:be:e5:44:4c:30:34:4f:e0:d2:2a:60:
43:c6:00:6d:87:f0:a0:82:02:00:95:12:3e:24:49:
73:c3:74:f9:0e:bb:90:5b:f0:39:85:0f:0f:9f:13:
48:7a:28:d6:3b:67:16:ea:27:35:ff:3f:97:9c:1a:
f2:52:1f:77:01:8a:28:e5:70:11:34:63:f6:0b:d9:
cb:22:bd:f6:20:2c:ed:b5:37:da:da:12:18:12:9f:
2e:c3:a4:84:23:1b:69:3c:6a:4f:c3:e2:7d:d9:c3:
32:af:3d:28:9c:cd:0a:2b:2d:7e:ed:93:52:ec:0a:
25:6b:e4:eb:77:14:37:dc:7f:c6:b4:b4:00:68:53:
54:1f:72:62:d9:4d:b5:d5:34:fd:19:c8:a9:48:18:
82:cb:0c:3b:97:d3:be:1c:a1:90:2e:5b:6a:c9:0d:
4e:a3:85:5a:e8:b5:50:76:e3:ab:af:62:71:55:a0:
f3:84:9a:b3:9d:1a:59:68:ba:27:c7:d1:fa:c9:17:
07:39:72:26:9c:02:76:be:30:30:e6:db:54:81:21:
f5:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:91:A2:E1:24:F3:2A:C6:E8:26:62:1F:7F:DA:FF:5A:62:FC:1C:CD
X509v3 Authority Key Identifier:
keyid:14:98:14:18:19:11:2B:84:46:C2:D4:A3:11:1F:53:03:8F:05:DB:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/29066f5d-ecc1-4927-95c1-e1a8df8f9897/0/1498141819112B8446C2D4A3111F53038F05DBE9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FJgUGBkRK4RGwtSjER9TA48F2-k.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/29066f5d-ecc1-4927-95c1-e1a8df8f9897/0/1498141819112B8446C2D4A3111F53038F05DBE9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:2b:a3:24:0a:ca:d2:a5:db:1e:c5:60:a7:9d:87:57:f8:78:
f7:07:f5:a2:67:2e:30:4b:eb:51:90:7f:27:95:9a:84:e5:a3:
a0:e9:63:bb:df:98:00:85:5f:07:17:a3:27:64:1b:fc:eb:54:
7f:c6:48:36:2b:c1:24:d7:18:d1:c0:7e:7b:f8:75:6a:08:47:
63:9a:52:d3:e6:6f:2f:e1:c4:40:01:7c:be:7c:f6:2f:d6:b1:
df:21:21:f8:b1:f6:47:d3:39:c0:8a:a5:62:a0:41:7d:d6:35:
36:8e:e2:9e:f6:a7:b9:e4:61:b9:c8:5a:be:12:d8:cc:bf:7f:
42:d5:bd:99:43:e8:26:65:dd:3a:e5:25:84:c6:92:73:d9:84:
85:b8:cb:c7:2c:11:d9:8d:cb:23:60:41:65:3a:59:d4:27:97:
97:af:4f:d8:95:d1:f9:11:73:06:83:99:fd:ee:ba:0c:c6:16:
b8:f1:fd:da:73:42:82:38:c0:ab:b7:a2:7f:18:45:af:3d:1a:
22:bb:08:0e:80:38:2b:30:2f:06:64:1b:ef:5b:0f:71:1c:9e:
10:7b:a5:74:1c:af:5b:4c:c2:d7:ac:df:60:52:8a:13:27:97:
02:e6:4a:bc:db:d8:33:11:6c:90:cc:8b:b6:7e:e8:67:c0:99:
1c:ae:cd:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 4 02:16:47 2026 by rpki-client