This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/2/B3F1737E90F240D7ABB33C72F84D71482FE62679.mft
File: B3F1737E90F240D7ABB33C72F84D71482FE62679.mft (raw, json)
Hash identifier: Ri5+K89jnXwFu49zmJCl/sJeIkHjavNVq7y+KpJBg8A=
Subject key identifier: 8E:AD:0F:91:30:F6:71:8D:3C:0C:1D:6F:90:09:F9:6E:6B:28:08:DE
Authority key identifier: B3:F1:73:7E:90:F2:40:D7:AB:B3:3C:72:F8:4D:71:48:2F:E6:26:79
Certificate issuer: /CN=B3F1737E90F240D7ABB33C72F84D71482FE62679
Certificate serial: 1B3B62E4B58565D72EB414CC3A7F36EF31A70DFC
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/B3F1737E90F240D7ABB33C72F84D71482FE62679.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/2/B3F1737E90F240D7ABB33C72F84D71482FE62679.mft
Manifest number: 010F
Signing time: Mon 19 Jan 2026 08:36:44 +0000
Manifest this update: Mon 19 Jan 2026 08:31:44 +0000
Manifest next update: Tue 20 Jan 2026 09:56:44 +0000
Files and hashes: 1: 326130373a353463373a353939393a3a2f34382d3438203d3e20323136343535.roa (hash: SvnI/kKkXn3yiVhNqVKN9Taah5WCLs8Rw+D4PBjSrbo=)
2: B3F1737E90F240D7ABB33C72F84D71482FE62679.crl (hash: fkdW7QZswklc46O6gacug8pwA4WTWsdx7vlmWGSxy90=)
3: 326130373a353463373a356666653a3a2f34382d3438203d3e20323135353737.roa (hash: FG+PaaelFQQTh0Pl3BlClI1RFrk+FdkeBozLHlfkasU=)
4: 326130373a353463373a356630303a3a2f34342d3434203d3e20323135353737.roa (hash: x50UL+Ve3n2XGikbTbQdFLaQIWslIjcJnasiyHq58lM=)
5: 326130373a353463373a353030303a3a2f33362d3336203d3e20323136343535.roa (hash: dERySCDhc3+rlKwMAYMhD9XvddhhgSjXbVZeRoj98gc=)
6: 326130373a353463373a356631303a3a2f34382d3438203d3e20323135353737.roa (hash: 7mCuwzfIey+Hcqy/Vhuj4zUx9bQcgkzpUeh+UNvlKO4=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/2/B3F1737E90F240D7ABB33C72F84D71482FE62679.crl
rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/2/B3F1737E90F240D7ABB33C72F84D71482FE62679.mft
rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/B3F1737E90F240D7ABB33C72F84D71482FE62679.cer
rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl
rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Jan 2026 09:56:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:3b:62:e4:b5:85:65:d7:2e:b4:14:cc:3a:7f:36:ef:31:a7:0d:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B3F1737E90F240D7ABB33C72F84D71482FE62679
Validity
Not Before: Jan 19 08:31:44 2026 GMT
Not After : Jan 20 09:56:44 2026 GMT
Subject: CN=8EAD0F9130F6718D3C0C1D6F9009F96E6B2808DE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a9:52:6e:b4:4b:d8:36:b8:0c:86:08:96:fc:
0a:4e:0d:d0:72:9d:cd:12:70:e9:fa:66:be:6d:a2:
d0:9d:e4:ec:45:c2:c0:ad:85:2c:88:2d:7f:3d:db:
6f:da:d2:48:4c:a9:7e:7f:a6:4c:73:8e:01:82:0c:
b0:a3:cb:c9:62:d3:bf:c0:bd:ee:e2:43:7f:2a:18:
b1:15:22:07:5c:78:5e:bb:4d:a8:4a:46:c8:15:56:
98:f2:76:63:19:2e:53:c5:3d:0f:eb:b7:f1:f8:c8:
76:ea:87:52:06:d0:52:7a:54:32:e9:1d:e1:23:cc:
97:70:86:84:9f:49:0f:37:d4:9c:b4:d8:b0:7d:a7:
cd:f1:5d:72:a6:13:fa:62:89:c3:44:2b:31:c4:45:
ee:ab:22:ba:f6:c1:06:46:62:88:a1:56:7f:94:b9:
71:cf:51:e7:ba:ba:50:57:3b:1f:05:f7:ab:9d:4e:
af:30:9a:31:69:36:8a:4e:f8:00:aa:41:55:8b:15:
d7:30:2c:c5:03:63:f8:52:b3:26:90:fc:27:c6:70:
2d:46:31:94:62:8f:83:b7:52:07:c3:e4:ac:78:04:
c3:0a:91:af:39:3a:c9:27:fb:b3:02:1a:f8:aa:de:
99:d7:8e:d7:22:15:cf:44:bb:ac:24:f9:6d:b2:fe:
c7:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:AD:0F:91:30:F6:71:8D:3C:0C:1D:6F:90:09:F9:6E:6B:28:08:DE
X509v3 Authority Key Identifier:
keyid:B3:F1:73:7E:90:F2:40:D7:AB:B3:3C:72:F8:4D:71:48:2F:E6:26:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/2/B3F1737E90F240D7ABB33C72F84D71482FE62679.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/B3F1737E90F240D7ABB33C72F84D71482FE62679.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/2/B3F1737E90F240D7ABB33C72F84D71482FE62679.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:d0:1a:3a:c9:06:c9:f3:f7:54:a8:87:62:c5:80:44:2a:33:
82:f2:f5:ca:e4:90:bd:e6:b1:b3:8a:3d:96:a8:bd:2c:1e:d6:
7d:00:99:ff:ae:e7:6b:92:3a:0b:8f:6d:74:f0:fd:ad:f3:ba:
ba:d1:60:33:47:1e:10:27:fb:52:a6:f8:97:17:8f:5f:0d:61:
7e:c8:4a:b4:11:48:3b:95:a7:5f:34:2b:7a:b3:d8:fd:37:c5:
f6:73:35:12:b5:bd:98:08:b8:3f:b8:67:6d:26:c9:96:29:18:
f7:ad:0d:8b:c4:87:5c:48:e0:ed:6d:fd:6f:fa:b6:45:ce:39:
2a:90:77:cd:6c:1e:5e:49:07:ff:af:b5:fe:67:63:fd:11:c8:
2f:4c:59:74:ad:79:cc:3b:d4:af:fd:a9:a4:fe:8b:27:30:c3:
f4:e7:ea:9d:fd:56:7f:d6:69:a5:cc:8a:c8:c3:c0:f7:76:7f:
78:48:a3:4a:90:bc:31:f2:ff:70:90:89:a5:ba:ff:be:ee:29:
3c:e2:80:4c:82:28:50:4b:09:5a:9d:8a:cb:0f:02:29:7c:29:
35:fe:86:f5:90:ff:a4:55:f9:e3:74:59:b0:81:8c:15:9a:fc:
d2:1d:07:a4:09:9c:8b:52:96:2b:b7:7e:e0:1c:62:ef:cf:73:
2a:48:be:e2
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgIUGzti5LWFZdcutBTMOn827zGnDfwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjNGMTczN0U5MEYyNDBEN0FCQjMzQzcyRjg0RDcxNDgy
RkU2MjY3OTAeFw0yNjAxMTkwODMxNDRaFw0yNjAxMjAwOTU2NDRaMDMxMTAvBgNV
BAMTKDhFQUQwRjkxMzBGNjcxOEQzQzBDMUQ2RjkwMDlGOTZFNkIyODA4REUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClqVJutEvYNrgMhgiW/ApODdBy
nc0ScOn6Zr5totCd5OxFwsCthSyILX8922/a0khMqX5/pkxzjgGCDLCjy8li07/A
ve7iQ38qGLEVIgdceF67TahKRsgVVpjydmMZLlPFPQ/rt/H4yHbqh1IG0FJ6VDLp
HeEjzJdwhoSfSQ831Jy02LB9p83xXXKmE/piicNEKzHERe6rIrr2wQZGYoihVn+U
uXHPUee6ulBXOx8F96udTq8wmjFpNopO+ACqQVWLFdcwLMUDY/hSsyaQ/CfGcC1G
MZRij4O3UgfD5Kx4BMMKka85Oskn+7MCGviq3pnXjtciFc9Eu6wk+W2y/scPAgMB
AAGjggKCMIICfjAdBgNVHQ4EFgQUjq0PkTD2cY08DB1vkAn5bmsoCN4wHwYDVR0j
BBgwFoAUs/FzfpDyQNerszxy+E1xSC/mJnkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTgyMWM0N2UtZTgxNS00MmRlLWJkNmItMTlhMmUxYWU1
NjRhLzIvQjNGMTczN0U5MEYyNDBEN0FCQjMzQzcyRjg0RDcxNDgyRkU2MjY3OS5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYTAwNGJhMS00MTliLTRk
YjUtYmJkMy01Y2NhNjMzY2FlM2YvNC9CM0YxNzM3RTkwRjI0MEQ3QUJCMzNDNzJG
ODRENzE0ODJGRTYyNjc5LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF
BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
LzU4MjFjNDdlLWU4MTUtNDJkZS1iZDZiLTE5YTJlMWFlNTY0YS8yL0IzRjE3MzdF
OTBGMjQwRDdBQkIzM0M3MkY4NEQ3MTQ4MkZFNjI2NzkubWZ0MBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF
ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBp0Bo6
yQbJ8/dUqIdixYBEKjOC8vXK5JC95rGzij2WqL0sHtZ9AJn/rudrkjoLj2108P2t
87q60WAzRx4QJ/tSpviXF49fDWF+yEq0EUg7ladfNCt6s9j9N8X2czUStb2YCLg/
uGdtJsmWKRj3rQ2LxIdcSODtbf1v+rZFzjkqkHfNbB5eSQf/r7X+Z2P9EcgvTFl0
rXnMO9Sv/amk/osnMMP05+qd/VZ/1mmlzIrIw8D3dn94SKNKkLwx8v9wkImluv++
7ik84oBMgihQSwlanYrLDwIpfCk1/ob1kP+kVfnjdFmwgYwVmvzSHQekCZyLUpYr
t37gHGLvz3MqSL7i
-----END CERTIFICATE-----
Generated at Tue Jan 20 01:42:13 2026 by rpki-client