This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.mft
File: D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.mft (raw, json)
Hash identifier: NEczQd0IM541uAG37s0R514FyT1s2wpYigUaFSeC2Sk=
Subject key identifier: 09:3F:EC:7C:56:FF:5F:67:32:58:54:D6:B9:E1:67:88:C7:7E:EB:FB
Authority key identifier: D5:4D:44:3B:67:C1:CC:5E:A1:B5:44:6E:A0:64:3C:AC:3A:7A:8B:2C
Certificate issuer: /CN=D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C
Certificate serial: 42DDDD9C94EF3501640B52FC692EBEE83C9893A7
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.mft
Manifest number: 0185
Signing time: Sun 18 Jan 2026 04:00:20 +0000
Manifest this update: Sun 18 Jan 2026 03:55:20 +0000
Manifest next update: Mon 19 Jan 2026 07:44:20 +0000
Files and hashes: 1: 326130363a313238333a383930313a3a2f34382d313238203d3e20323134323035.roa (hash: ZxaQKtSoKlgJmO3J3XqDtpxRpsMoDdJh04xqfrfCdBY=)
2: B113B31E9F01A2F41870E8C77492B18EBA830E07.cer (hash: JzF8XjB0fni5yBDysCm0o21oitRpChxvDEyC3UobsJo=)
3: 5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.cer (hash: E+mLqx7rEgzkPAUn5rJoLra7vStPRhm9ryAmKBFIvQ0=)
4: 326130363a313238333a383030333a3a2f34382d313238203d3e20323131303636.roa (hash: hYctHpFLZLrdZbOQKdUp5gBu76GVnDNrzAlSQDHkf8o=)
5: 326130363a313238333a383030303a3a2f33362d3438203d3e20323135313437.roa (hash: 1HZdS5easOTzXqx+g13vhM2s0dAHymCGMDkKOH0yoVM=)
6: 326130363a313238333a626434303a3a2f34322d313238203d3e20323130373936.roa (hash: NS2/G+GE49Imka70FRvnrWigl/cu3jsnXcP9mUuT9+I=)
7: 326130363a313238333a383930323a3a2f34382d313238203d3e20323132373730.roa (hash: 1Mq7zwNWFVrFO4xAnw5YP+F5xNQQ0SyBjbZkZrxTF84=)
8: 326130363a313238333a383930353a3a2f34382d313238203d3e20323134303333.roa (hash: huX32HgMgk4Y2C020+tWpyikLyAfVZ2TMuvxXCD12N4=)
9: 326130363a313238333a383930303a3a2f34302d313238203d3e20323133343133.roa (hash: w6mEbr64LdAB6p4ChAQnVfiw39Sxb+bv0QiR3+vbqY0=)
10: D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.crl (hash: mZTuwptyBe0QTytI8eewmQiXgRV0+WkJ5lFlPBpG2vM=)
11: 326130363a313238333a383930363a3a2f34382d313238203d3e20323134303333.roa (hash: SDzB93ZmXL/9JaeiFrClXOKOMdMaPjQdBjiuTrcER6c=)
12: 326130363a313238333a383966303a3a2f34342d313238203d3e20323134303333.roa (hash: VPyKJTdMnGQqSuzFbkFQ60iQgNT+2pht93oF2htafCQ=)
13: D36546790928F44FF74C564231471FA1D8D2A97B.cer (hash: Yk51yNZZDrc+NxDYYI7+6vxfYJuE5Kc7CvebjeR4bSQ=)
14: 326130363a313238333a383030323a3a2f34382d3438203d3e20323135313437.roa (hash: B3lCmzbMTTF4JEYaqxL5SocH8KSyx1ZOaOngpc1c9xY=)
15: 326130363a313238333a633131303a3a2f34342d3438203d3e20323135313437.roa (hash: +z0Qc7b7Pm0YyOUO4LNkttIVrmFKBrkfbPc/zfrDGTk=)
16: 326130363a313238333a633131663a3a2f34382d313238203d3e20323131303636.roa (hash: MNB/IgLpAkC8BkMxVhMNWcW04HjOlc0Y//dSW/FFyhU=)
17: 326130363a313238333a383930343a3a2f34382d313238203d3e20323134373632.roa (hash: NbESZTGbsnyViyuGLC+8sRHMyf8Ojiq0F9ioTriEM2E=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.crl
rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.mft
rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer
rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl
rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Jan 2026 06:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:dd:dd:9c:94:ef:35:01:64:0b:52:fc:69:2e:be:e8:3c:98:93:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C
Validity
Not Before: Jan 18 03:55:20 2026 GMT
Not After : Jan 19 07:44:20 2026 GMT
Subject: CN=093FEC7C56FF5F67325854D6B9E16788C77EEBFB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:bb:ba:28:6c:23:09:dd:63:18:a9:6d:7e:d4:
02:2d:7d:88:b2:65:9e:89:8a:bc:ff:cf:57:30:be:
c1:bf:1c:37:61:f4:0a:66:97:2a:53:d1:04:79:f7:
6c:2d:76:7a:b0:30:af:9a:4a:bf:1e:a1:1c:27:fd:
42:9c:c3:e2:74:a1:19:36:10:e3:09:c1:18:1e:6a:
f2:04:7e:bd:a5:f1:0e:e8:4e:6d:89:4d:09:b0:e5:
9e:59:b2:70:57:f1:8d:e0:81:4b:68:b1:ab:c5:13:
28:0d:f8:f9:8f:ad:41:dd:68:f8:d5:f5:ed:1b:f3:
10:52:07:c9:24:71:22:8e:01:bd:b5:5f:21:ad:35:
b2:9c:6b:99:29:db:84:ed:22:b2:a9:5c:7d:f1:f6:
6f:5a:cc:d6:ec:36:b4:49:7e:65:fe:cf:3b:8c:50:
25:8c:ac:a1:78:a4:a7:64:fc:68:d2:08:60:80:68:
eb:17:fc:1e:e5:d0:94:ee:8a:d0:7c:b2:c6:65:f5:
80:c1:4e:95:10:e7:b8:bb:ac:6e:4a:41:ca:0b:c4:
60:6e:01:8f:5a:fb:0a:49:31:ba:a0:ae:5c:f3:ed:
17:93:f0:0a:35:a4:b5:8e:8f:91:6f:63:59:fa:7d:
9d:d8:5c:30:ee:42:92:ed:1b:33:44:b9:e1:47:a0:
5d:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:3F:EC:7C:56:FF:5F:67:32:58:54:D6:B9:E1:67:88:C7:7E:EB:FB
X509v3 Authority Key Identifier:
keyid:D5:4D:44:3B:67:C1:CC:5E:A1:B5:44:6E:A0:64:3C:AC:3A:7A:8B:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:04:b9:19:36:64:df:95:a5:ab:e0:c6:66:f2:ef:c9:58:4a:
33:b7:93:43:dc:6f:30:89:05:e5:01:69:6e:54:4d:5b:89:34:
38:cb:60:84:90:6f:53:e8:8f:ca:30:73:35:99:57:12:b0:d1:
29:91:eb:e6:3d:90:eb:23:9d:1a:56:50:87:65:e1:45:62:f6:
c6:38:58:84:bc:b0:02:2d:e0:89:15:20:98:f2:df:11:ec:79:
9c:56:b6:2a:5e:ca:3f:85:a9:5b:e1:6b:03:1b:46:74:7d:61:
c2:8a:31:d1:ac:1e:7e:91:15:bb:6a:92:c4:46:dd:e2:ce:59:
97:cb:0f:8b:f0:a0:0d:50:e0:5c:b7:74:6c:bc:15:95:e3:7f:
90:d0:04:90:d4:85:47:85:fe:9b:87:fc:d7:a5:90:38:53:01:
23:4e:a5:f6:c1:81:23:50:8f:27:9d:fa:b0:35:20:41:4f:1b:
06:b5:7b:bb:7f:f9:22:0d:62:ec:55:5e:01:00:9e:e7:0a:4e:
49:5a:8a:34:f1:57:77:de:42:b6:4e:c1:f7:fb:35:bb:74:12:
7f:5d:c7:13:e7:b7:09:8d:fc:8d:02:f8:80:c8:bc:2d:37:35:
62:5d:97:57:e9:50:3c:61:31:8b:f1:c2:64:9d:1e:0e:a9:c6:
01:fc:bc:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 12:07:55 2026 by rpki-client