This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.mft
File: 0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.mft (raw, json)
Hash identifier: 6EavsD6yg4VVK1ZO0eaBrNy4wQycwBVttkPvbTsKN7c=
Subject key identifier: D9:19:57:99:10:36:ED:FD:8A:72:18:06:DB:F2:86:9A:93:F9:04:F5
Authority key identifier: 0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3
Certificate issuer: /CN=0d7ffae300def0876bf84890fb6ea17be841a4d3
Certificate serial: 14DEE27B8CACCCD7560A4D329287DC633C93936F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.mft
Manifest number: 025C
Signing time: Sat 31 Jan 2026 02:54:52 +0000
Manifest this update: Sat 31 Jan 2026 02:49:52 +0000
Manifest next update: Sun 01 Feb 2026 03:50:52 +0000
Files and hashes: 1: 38352e3131372e3233302e302f32342d3234203d3e2035303635.roa (hash: 8/mMTd8OI6hx+rEazKaA5i9flVTt9So8wwSfFF6xpVo=)
2: 38352e3131372e3232392e302f32342d3234203d3e203138353236.roa (hash: VL0qbnMthkW/z4M9i7RCycr128NaCWPDKcNp8MPhOx8=)
3: 0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl (hash: FRbWZ0cCtaYezTO/NPqYGOjYg5nFt8KwBzwg0ZVs3+I=)
4: 38352e3131372e3232382e302f32342d3234203d3e20323134343538.roa (hash: rcAG2FX2+ZD0Qb1+KeZK9os832Q7CwzkoxVHQi9yY7k=)
5: 3138352e3231332e3234382e302f32342d3234203d3e20323035383836.roa (hash: ODfn5/rpX0/qAWjZsS/cv+gVh3kFgfI7CdBECTg9zww=)
6: 3139342e33342e3235342e302f32342d3234203d3e203531383532.roa (hash: za0HM3w55tiDFbhPrhUh3FtVd5oKhUm8JuFZ8lH0DiA=)
7: 3138352e3231332e3234392e302f32342d3234203d3e203235313938.roa (hash: RAmqdtOqt2GXnv4T7A8gAKdg4H2+TG5CqjE3/MvQxnU=)
8: 38352e3131372e3233312e302f32342d3234203d3e20323133373234.roa (hash: ohyXGo6Fwg3029u2hdROae+jQf4VI2skgvLUXH3jI8w=)
9: 38352e3131372e3232392e302f32342d3234203d3e20313439313037.roa (hash: Mdj3IIZJ097ibJGhSOfHP4GOBLdG4jAp1zNpVSxesFg=)
10: 3138352e3231332e3235302e302f32342d3234203d3e20323032383238.roa (hash: cvWbud/Q3B4zVr3PrPYyxiTjcQyvCffxgDgg+5VMZYE=)
11: 3138352e3231332e3235312e302f32342d3234203d3e20323032373336.roa (hash: k9NutrpE73eF9M1MGDaqB2MjGcD60li8mT4JnvFIELA=)
12: 3139342e33342e3235332e302f32342d3234203d3e2035303635.roa (hash: tD+eYvXQsGkCcpnz6s7EBRYpOf8Iu4vdb3Qy27wUI6g=)
13: 3138352e3231332e3235312e302f32342d3234203d3e20393834.roa (hash: A919/Bekrj6rZbVlRAQ3zY8i9Bm4Qio6XVxQpWLOfQM=)
14: 3138352e3231332e3234382e302f32342d3234203d3e203235313938.roa (hash: sZxo3uMJdWqVPeybtzRbPRus3n/g4Q3Q2K1jBCVUZj0=)
15: 3139342e33342e3235352e302f32342d3234203d3e20313431393638.roa (hash: iQ9RYSqOmsvIqARX4nqI9wEFn//drkKsHCDo7XaSdTU=)
16: 3139342e33342e3235322e302f32342d3234203d3e203439353831.roa (hash: CdOWg7XQ7TdzzLDF2E3vbhyf4TDBRs7VuKir2QIc0i4=)
17: 3138352e3231332e3234392e302f32342d3234203d3e20343030393039.roa (hash: 4O3foUV7f18NUYJQaeBYgK+aW1lr+7o+ea8CcQjVzCw=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl
rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.mft
rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Feb 2026 03:50:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:de:e2:7b:8c:ac:cc:d7:56:0a:4d:32:92:87:dc:63:3c:93:93:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d7ffae300def0876bf84890fb6ea17be841a4d3
Validity
Not Before: Jan 31 02:49:52 2026 GMT
Not After : Feb 1 03:50:52 2026 GMT
Subject: CN=D91957991036EDFD8A721806DBF2869A93F904F5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:3e:47:d7:0e:a5:bf:41:b8:b5:75:bc:ba:00:
fa:a6:36:99:c4:b7:57:c0:fa:61:7d:5d:93:94:89:
3f:14:b4:e1:e3:c9:28:c0:37:d3:8c:ba:9e:27:00:
ce:a8:a7:ed:63:1e:5e:10:f5:98:22:cd:4f:3d:f6:
e7:83:93:04:c8:cb:1d:fc:aa:86:f8:72:73:7f:68:
ae:0e:54:15:50:3c:5b:54:f8:c9:7c:4e:8f:40:56:
15:d3:65:75:c7:f6:4b:38:7a:30:d6:2b:a8:ff:87:
db:f3:a8:60:0a:e5:19:81:73:83:3a:11:26:ee:cb:
fa:19:1d:14:8b:e5:8b:a5:8f:56:6e:9c:05:d3:c2:
40:df:3f:ab:b9:09:8b:c0:da:c5:13:27:dd:37:8c:
cc:51:66:36:86:e0:e4:54:80:69:06:ba:c1:a4:89:
c0:8d:03:48:aa:d4:ba:be:dd:6f:27:e4:04:10:01:
11:ce:2a:03:27:6f:fe:f9:d1:31:d9:b9:7b:c0:86:
e8:a2:47:53:8d:be:03:db:43:11:18:f2:66:b4:64:
02:71:17:0a:66:80:76:57:7c:64:b7:9d:93:74:32:
71:9a:17:7b:a0:7e:43:01:a1:1c:23:b5:94:a4:b2:
b4:85:29:a9:72:c2:b2:27:c3:35:f8:0c:8c:61:89:
6c:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:19:57:99:10:36:ED:FD:8A:72:18:06:DB:F2:86:9A:93:F9:04:F5
X509v3 Authority Key Identifier:
keyid:0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:18:0c:62:1b:81:f8:fd:e6:24:a6:65:10:2a:cb:c3:d6:c9:
3c:ec:b0:c6:ca:a3:82:26:d0:90:e6:ce:75:12:2e:9b:62:d1:
8c:bb:1c:c7:30:f6:02:e9:b6:9d:80:e4:ca:4b:55:86:b8:f5:
1b:d8:55:e3:51:ae:d1:cf:6f:5b:b5:46:74:2b:30:f1:84:33:
32:aa:9f:15:d4:38:e6:0f:f2:6e:f7:2c:da:58:6d:e2:81:53:
c8:c3:bb:b2:74:b2:25:dd:a3:25:b0:fd:95:b0:88:96:fe:e1:
bc:17:24:c5:fc:e2:b0:f5:1b:b6:da:84:d9:9a:fc:2c:13:1e:
b2:4f:9b:1e:8f:68:c8:62:a4:2a:1f:17:34:ba:ae:65:97:04:
af:cf:04:d0:63:cf:f2:51:a4:fb:06:1e:89:2e:ba:7c:26:bf:
93:8c:a5:5d:85:fb:cc:78:5c:dc:98:03:69:b1:a0:0a:fc:b6:
79:16:32:f0:cc:9f:d4:8a:48:f7:d7:f4:fa:8d:43:dd:c9:a9:
b3:b9:73:c8:f7:ff:ef:62:36:4a:d6:97:27:a5:54:d2:e0:da:
94:3f:33:0f:87:00:2c:4f:99:10:ad:48:88:59:80:26:1b:d3:
cb:59:64:e2:68:4b:cf:06:6d:61:e8:ed:93:03:13:26:b1:b7:
6d:61:79:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 31 17:06:13 2026 by rpki-client