This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/1/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.mft
File: 0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.mft (raw, json)
Hash identifier: 513PFXHlnQhgKC+vOvTc4wrrvZZhC5uvHUfMtLGwI5U=
Subject key identifier: BF:55:A0:5B:BB:99:38:0E:16:B5:F5:BF:AD:96:B9:68:34:A0:6D:60
Authority key identifier: 0E:4E:BC:43:1E:35:13:FC:3F:64:1D:B8:80:E2:B2:FE:1D:04:0A:30
Certificate issuer: /CN=0E4EBC431E3513FC3F641DB880E2B2FE1D040A30
Certificate serial: 4789AB537D2E7FFB3C8C9C1CC0FDC744329DC0D6
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/1/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.mft
Manifest number: 0540
Signing time: Sun 01 Feb 2026 21:03:51 +0000
Manifest this update: Sun 01 Feb 2026 20:58:51 +0000
Manifest next update: Tue 03 Feb 2026 00:33:51 +0000
Files and hashes: 1: 0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.crl (hash: 4osxKlAv3NFCVrQ83Qw7qBxec1Xocz5Fjmrc251hDnA=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/1/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.crl
rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/1/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.mft
rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.cer
rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.crl
rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.mft
rsync://rpki.ripe.net/repository/DEFAULT/mKh8rVtxCJCpUo8Wb0ICOTgk5rg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Feb 2026 00:33:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:89:ab:53:7d:2e:7f:fb:3c:8c:9c:1c:c0:fd:c7:44:32:9d:c0:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0E4EBC431E3513FC3F641DB880E2B2FE1D040A30
Validity
Not Before: Feb 1 20:58:51 2026 GMT
Not After : Feb 3 00:33:51 2026 GMT
Subject: CN=BF55A05BBB99380E16B5F5BFAD96B96834A06D60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:00:b0:64:28:42:c3:80:4b:b6:2a:64:7b:f3:
46:8e:6d:3c:9b:24:30:f6:91:44:5f:2d:98:18:f4:
05:c4:1a:f9:3e:94:d1:e1:9e:86:b9:8d:48:e6:36:
73:60:8b:d7:d3:29:73:b9:e7:a4:a2:63:70:80:04:
9c:98:fe:7c:a8:fa:fa:13:f8:14:f3:08:8d:80:b2:
d0:d0:fa:7b:0a:e3:d6:85:fe:49:ff:aa:c5:a6:6e:
41:69:fe:08:5d:b4:d3:b9:7e:b0:74:bf:e0:55:04:
5e:00:bc:00:c0:14:2c:ef:7c:7f:1e:bd:1e:f3:49:
e5:8f:5d:4f:77:6e:b3:d1:76:0b:c4:9b:c1:4e:59:
d1:3a:14:64:c5:3b:de:ee:2e:33:b6:8e:f1:47:35:
7d:ae:19:1e:e1:a3:0e:2d:94:71:a8:2a:ed:cd:6b:
14:c4:44:11:07:6d:38:7f:9e:cd:7a:8e:dc:07:15:
99:a0:c2:12:19:98:1b:56:c3:cd:9a:d9:7f:aa:11:
a5:d5:dc:ef:e2:77:18:86:fc:c4:c9:bc:92:8f:f5:
0f:40:06:8c:a0:36:3c:3d:0b:4e:cc:97:a2:e1:ca:
dd:be:0e:d4:07:22:0f:72:03:6e:58:bb:10:f2:c3:
4d:24:bf:d8:d3:cd:11:99:b4:ae:79:cd:24:bc:4d:
bb:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:55:A0:5B:BB:99:38:0E:16:B5:F5:BF:AD:96:B9:68:34:A0:6D:60
X509v3 Authority Key Identifier:
keyid:0E:4E:BC:43:1E:35:13:FC:3F:64:1D:B8:80:E2:B2:FE:1D:04:0A:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/1/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/1/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:65:ca:4e:03:44:14:de:2c:a9:ee:23:a0:8f:6e:c6:2d:2e:
ca:e1:5a:68:26:99:53:9c:cb:28:17:46:10:63:16:f8:e9:8b:
e6:64:75:10:d6:36:09:c8:88:a9:f6:04:01:52:6e:04:22:da:
35:c5:7f:fa:47:57:ae:aa:8f:38:6b:ad:6b:35:31:57:70:ed:
a3:5b:e1:72:37:f0:a0:67:57:f3:9e:ba:4c:27:57:a1:74:0d:
69:ba:e5:5b:9e:e9:fc:48:d9:36:f6:fd:bf:3f:c2:03:06:ae:
60:9e:13:f5:99:86:b0:c5:f3:66:c9:a8:d6:60:f4:c5:c2:2b:
2d:b4:55:37:87:72:2a:77:12:12:c2:03:af:1f:9f:39:f2:4f:
13:10:6c:33:b2:eb:0a:55:95:8e:8f:b3:ea:57:73:62:d8:c8:
e7:90:c7:15:06:9d:d5:73:96:0a:f4:8a:d8:d4:f5:8a:21:96:
27:7e:35:a9:62:04:6b:e2:85:c5:f3:8f:f2:17:60:10:00:62:
aa:3b:a6:6c:34:8c:bc:b7:47:a6:bc:47:bd:27:e7:da:0b:6a:
7f:7f:14:5d:03:4f:b2:93:d7:ec:c6:33:c3:69:06:0b:eb:aa:
89:06:6d:06:9b:68:ca:d1:86:90:d5:3d:af:10:9e:83:4f:a6:
07:ee:f8:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 12:46:55 2026 by rpki-client