This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/1/71ADBCB805EEEE44A7FDC07CA54AD6610C81E1B3.mft
File: 71ADBCB805EEEE44A7FDC07CA54AD6610C81E1B3.mft (raw, json)
Hash identifier: T1qJgAGYdPdSE9YpNRMxXHVQuE8pxaZ7nq1N8dGwnKQ=
Subject key identifier: 89:AE:22:42:0C:A9:29:C3:D3:1B:D6:6A:FB:B6:26:D9:72:3A:C3:4D
Authority key identifier: 71:AD:BC:B8:05:EE:EE:44:A7:FD:C0:7C:A5:4A:D6:61:0C:81:E1:B3
Certificate issuer: /CN=71ADBCB805EEEE44A7FDC07CA54AD6610C81E1B3
Certificate serial: 691DD1A1A4A50B1748ECF2C98E3268A5DE3D5FAF
Authority info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/71ADBCB805EEEE44A7FDC07CA54AD6610C81E1B3.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/1/71ADBCB805EEEE44A7FDC07CA54AD6610C81E1B3.mft
Manifest number: 09
Signing time: Mon 09 Feb 2026 10:18:07 +0000
Manifest this update: Mon 09 Feb 2026 10:13:07 +0000
Manifest next update: Tue 10 Feb 2026 13:48:07 +0000
Files and hashes: 1: 71ADBCB805EEEE44A7FDC07CA54AD6610C81E1B3.crl (hash: uJzJyDpdUEUUnnuUqrI1+0kwfFFMiCdByUhNO0y6zTE=)
2: 326130623a346530373a353030303a3a2f34382d3438203d3e20323135363835.roa (hash: hC1tSwtk6P/n7XKD/XE88SOcdq8LuodINPa1HAhKd6c=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/1/71ADBCB805EEEE44A7FDC07CA54AD6610C81E1B3.crl
rsync://rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/1/71ADBCB805EEEE44A7FDC07CA54AD6610C81E1B3.mft
rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/71ADBCB805EEEE44A7FDC07CA54AD6610C81E1B3.cer
rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl
rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft
rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl
rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft
rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 13:25:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:1d:d1:a1:a4:a5:0b:17:48:ec:f2:c9:8e:32:68:a5:de:3d:5f:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71ADBCB805EEEE44A7FDC07CA54AD6610C81E1B3
Validity
Not Before: Feb 9 10:13:07 2026 GMT
Not After : Feb 10 13:48:07 2026 GMT
Subject: CN=89AE22420CA929C3D31BD66AFBB626D9723AC34D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f0:de:87:5f:fd:96:2b:20:fe:1a:48:d6:7a:
d6:ff:39:1a:6f:ba:bd:6b:d3:c1:7f:c9:4e:75:2f:
cf:37:3a:9e:c4:fd:f6:ac:c5:35:b2:91:83:6d:da:
1a:6e:c0:20:65:e4:56:72:b3:0b:af:c4:cc:e2:93:
b9:ad:88:9a:52:24:18:56:be:49:69:38:c6:f2:8d:
04:be:bc:a4:60:e2:c2:bb:8f:17:05:61:9c:25:b4:
5b:e6:27:d2:d8:32:65:f7:8b:15:aa:b3:18:71:0f:
5f:15:c3:33:67:a4:fb:d0:df:a3:33:43:75:bf:2d:
17:ac:2c:8d:73:6d:f4:43:40:48:34:f5:4d:1a:7f:
64:1b:52:0e:1e:39:b4:83:71:22:cd:af:3f:f5:8f:
8a:9c:06:a6:05:c1:94:f6:99:32:f1:75:1e:8d:7f:
33:5f:b9:87:8a:9b:2a:2d:d4:cd:99:95:13:26:b4:
77:e1:c6:d0:2c:c9:78:09:c4:ef:ff:f1:28:c4:0a:
5d:95:50:82:05:d1:c6:01:80:79:28:71:33:8b:ea:
93:3a:9c:94:58:20:b3:e9:a1:7a:b7:73:ec:0e:14:
e5:c9:cf:9d:5f:c1:cc:c0:4f:7a:1d:1f:c9:17:7c:
56:50:eb:9f:68:b5:9c:9a:02:97:63:c5:ec:02:e9:
37:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:AE:22:42:0C:A9:29:C3:D3:1B:D6:6A:FB:B6:26:D9:72:3A:C3:4D
X509v3 Authority Key Identifier:
keyid:71:AD:BC:B8:05:EE:EE:44:A7:FD:C0:7C:A5:4A:D6:61:0C:81:E1:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/1/71ADBCB805EEEE44A7FDC07CA54AD6610C81E1B3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/71ADBCB805EEEE44A7FDC07CA54AD6610C81E1B3.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/1/71ADBCB805EEEE44A7FDC07CA54AD6610C81E1B3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:8e:ec:31:ea:80:46:13:85:fb:fc:34:19:7a:d7:e9:28:e7:
62:3c:8a:74:d7:c7:ab:e1:ea:af:ba:d2:b3:7b:54:7c:4e:e8:
b1:40:08:56:eb:41:65:20:bc:ec:42:af:73:59:8d:f7:32:ac:
be:eb:ee:e8:ff:04:c3:0e:12:21:db:94:a2:10:39:a1:06:e8:
4a:0f:ef:49:e3:a4:35:b0:b6:82:d2:9e:69:28:99:3e:2b:fe:
bd:12:4e:e3:b2:7f:eb:6b:cc:eb:6c:02:36:c1:1d:e4:8e:e9:
af:50:b1:61:58:6d:16:ba:4c:88:34:df:dd:d7:40:71:2d:32:
55:b6:d7:df:00:9d:a6:7d:0a:e6:9a:6f:9b:f7:1e:e3:8e:94:
f9:9c:f1:d8:b2:6f:f5:a0:63:f5:d8:d9:7b:dc:a7:5e:5b:14:
d3:13:f0:07:03:74:b2:64:d8:e6:40:c0:82:72:c2:32:7a:9c:
b1:7d:06:6f:94:f6:07:3f:88:dd:86:d5:3b:a9:80:e2:e9:e1:
c9:81:bf:2d:c3:5c:92:71:12:4c:7e:85:70:d6:be:4e:cc:1c:
f3:65:3c:59:07:1e:6c:23:b0:f8:8d:74:ff:be:66:fc:dd:a9:
33:b2:a9:ce:ba:ee:fd:42:17:8f:b4:9d:8d:73:63:62:3e:ce:
9c:53:63:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 04:15:41 2026 by rpki-client