This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.mft
File: A1EE5D09A0F5D0D87611013175C62E35777DA926.mft (raw, json)
Hash identifier: jKP7/N2gi9OCJhXkhPmo4PaJKxk7s0oHEAK7jsZ9/xw=
Subject key identifier: 22:E5:CF:BE:8E:72:DC:E8:72:F3:9D:97:1E:EA:E7:14:1F:5D:1F:44
Authority key identifier: A1:EE:5D:09:A0:F5:D0:D8:76:11:01:31:75:C6:2E:35:77:7D:A9:26
Certificate issuer: /CN=A1EE5D09A0F5D0D87611013175C62E35777DA926
Certificate serial: 20E8F534FA4F4C9078F3D7A32E20B75D0502D20A
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.mft
Manifest number: 030E
Signing time: Mon 26 Jan 2026 00:16:39 +0000
Manifest this update: Mon 26 Jan 2026 00:11:39 +0000
Manifest next update: Tue 27 Jan 2026 03:49:39 +0000
Files and hashes: 1: 326131343a373538313a393230303a3a2f34302d3438203d3e20323039313039.roa (hash: pMn1lmNiSpZ9TgFB+IRiwlTd7+lbxKBF0vBWWTkkXYs=)
2: 326131343a373538313a393032303a3a2f34342d3438203d3e203339373533.roa (hash: 0nNVfH0UNkgevPAH9ITuwY5tE24LlYCDjFx46F3vtM0=)
3: 326131343a373538313a393031303a3a2f34342d3438203d3e20313430393135.roa (hash: 34CzDRdWck3x5QdKwY21JLn4ljy5X8PbpWV6VL1UPl8=)
4: 326131343a373538313a393030303a3a2f33382d3338203d3e20323135333634.roa (hash: coziJfcvV7NZzAVbts1JQ6BKxT5yxFwdbwzsra8WCDw=)
5: 326131343a373538313a393065653a3a2f34382d3438203d3e20323135333634.roa (hash: 5IFSShC1J1DPKr9fgEjy0DHzTqmR8W17B+sGrWUb29Q=)
6: 326131343a373538313a393130613a3a2f34382d3438203d3e20323135313438.roa (hash: g9TWsQZsTWz7mSDp6Y61gNZDSwAn6dADsEyVm1AJtlU=)
7: 326131343a373538313a393330303a3a2f34302d3438203d3e20323039313039.roa (hash: TWxboGw6/lxhoMiWiDnyOg4O9SxsEOXusyizWuah2wo=)
8: 326131343a373538313a6666303a3a2f34382d3438203d3e20323135333634.roa (hash: nCwmmbP9gIjoEy95/v504iaQnyadcB1V8SB+J8/exJE=)
9: 326131343a373538313a393165303a3a2f34382d3438203d3e20323135333634.roa (hash: 2aDuD/D+lIpzPYcnGpfR3f4GvH7bzD6tXNlt4SzLv7s=)
10: 326131343a373538313a393130303a3a2f34382d3438203d3e20323134383431.roa (hash: TejNBoLvDqd6zzS1lptpFez+EdbwzXYJ6yM06vDQ9j0=)
11: 326131343a373538313a393230303a3a2f34302d3430203d3e203134343437.roa (hash: wCZcPZ1Lk7X2Qee1qTSfN0RGP0Z21kPGqT0D7sgtD64=)
12: 326131343a373538313a393030303a3a2f34342d3438203d3e20323135333634.roa (hash: a41Xyu+1QM63sJBLjRXDXCMByy5FuK1D59e4kuksRCE=)
13: 326131343a373538313a393165313a3a2f34382d3438203d3e20323135333634.roa (hash: F9b5BNgK8TO7NWcYalz+qyjvcxyYqlq+/TYg6mk1sTI=)
14: 326131343a373538313a393061303a3a2f34332d3438203d3e203134343437.roa (hash: jsviVwthOZBlV5+oRRFYDUvQF+OHc4iDYR8PVPHLwkA=)
15: 326131343a373538313a393066653a3a2f34382d3438203d3e20323135333634.roa (hash: MyeYfbLc0//rjwnR8ZJ3TnxqQq4JflTHlrUTLQvk3gU=)
16: 326131343a373538313a393230303a3a2f34302d3438203d3e203134343437.roa (hash: kZ5VHXe1kAhX5tvSZsX77jhReBFDdvoZNrdYu896udw=)
17: 326131343a373538313a393066663a3a2f34382d3438203d3e20323135363137.roa (hash: JYfFIGSSsdhSc4V2wOJu9QFkSSC76MmCAjKsdTBmtQA=)
18: 326131343a373538313a393062303a3a2f34342d3438203d3e203134343437.roa (hash: 0s1d24KMFu1kYJPCMrebtn4XcHECqVsweN9wGCszluU=)
19: 326131343a373538313a393063303a3a2f34342d3438203d3e203134343437.roa (hash: 1KwjyQC5mQq96/1cZ1aeVWaWGIQIpF6Ei+ZSWIfd5WM=)
20: A1EE5D09A0F5D0D87611013175C62E35777DA926.crl (hash: yK80n0Ar4Byx0bYmroYU+2kH/qzDJoe/v0ZWV87K+H8=)
21: 326131343a373538313a393061303a3a2f34332d3438203d3e20323135333634.roa (hash: imEjvtvCCz1eqwuI8/eFHCFB+WwTlJEDfPXRombfVNU=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.crl
rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.mft
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.cer
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:e8:f5:34:fa:4f:4c:90:78:f3:d7:a3:2e:20:b7:5d:05:02:d2:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A1EE5D09A0F5D0D87611013175C62E35777DA926
Validity
Not Before: Jan 26 00:11:39 2026 GMT
Not After : Jan 27 03:49:39 2026 GMT
Subject: CN=22E5CFBE8E72DCE872F39D971EEAE7141F5D1F44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:1e:f3:c9:60:6c:8c:dd:ca:96:f4:e3:58:cf:
07:3e:57:9b:05:a8:9c:24:0f:49:2e:9c:66:17:c3:
fe:77:17:b2:2a:7c:8b:71:ca:95:c3:11:87:86:af:
0f:52:cf:4c:08:1f:02:b6:b8:f4:98:2b:bf:15:1d:
92:ea:78:d9:6e:da:b0:6d:45:d6:12:01:8d:c5:aa:
f8:78:de:37:a9:88:26:71:54:d6:a9:8e:bb:59:57:
85:55:f4:6e:e2:b8:e1:6c:67:de:b5:e0:e3:30:22:
58:0a:a3:16:57:ab:33:05:dc:b1:0d:7f:dc:8f:a4:
08:77:3c:f0:d7:51:a4:c3:d5:5e:60:1f:16:92:8e:
9d:63:18:67:23:eb:85:81:fa:eb:ef:ee:35:14:92:
a8:be:d2:cc:85:52:ed:94:de:34:88:9d:c0:2e:13:
6f:37:57:fd:bd:52:7f:bb:fa:18:a7:e4:b8:0d:d2:
f9:d2:44:84:c0:4a:b8:05:09:43:04:4a:2a:77:f2:
af:62:69:35:b7:c7:8b:97:3e:10:1b:51:4d:74:43:
6b:ec:1f:1d:90:59:2e:99:ee:0e:3e:77:6f:5e:74:
d3:93:2b:ff:87:ef:35:61:d4:05:7a:96:50:8b:70:
60:ee:1e:a7:4d:c0:7f:7b:47:b2:df:d4:0c:32:58:
fb:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:E5:CF:BE:8E:72:DC:E8:72:F3:9D:97:1E:EA:E7:14:1F:5D:1F:44
X509v3 Authority Key Identifier:
keyid:A1:EE:5D:09:A0:F5:D0:D8:76:11:01:31:75:C6:2E:35:77:7D:A9:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:65:47:b4:ab:e3:7f:81:26:4c:3c:db:db:53:49:ba:2a:ff:
63:9a:9f:89:f9:e1:bf:b0:e7:91:b0:6c:cf:91:00:81:4b:91:
66:95:bb:06:1a:82:2a:17:e6:aa:76:f8:cd:57:6e:eb:12:07:
e9:72:39:dd:b1:e6:98:30:4e:a8:5d:c8:5a:93:55:f9:ef:77:
3b:9d:80:9b:d7:11:28:fd:99:eb:46:5f:60:ac:b8:ad:eb:f3:
d1:98:ee:56:77:39:82:48:ef:42:29:bb:7d:f9:2f:9b:b6:d2:
83:75:0c:2f:fd:b0:6c:b0:0d:4e:9d:91:2b:47:9b:a2:61:67:
1d:cf:9b:b3:6d:63:67:bd:34:ae:91:3c:48:b5:1d:ec:b2:53:
9b:dc:b8:a7:23:08:f0:dd:2e:96:d5:05:9c:9d:e9:20:87:7b:
65:fd:6d:a5:7d:1e:95:57:88:af:48:c2:8f:3b:26:49:7c:77:
70:c6:69:1b:f0:7a:46:48:72:f3:75:ba:b6:d6:04:52:34:1c:
3f:d0:7f:f4:62:2e:c3:d1:fc:65:38:b5:7b:da:ad:54:56:fb:
e4:41:28:82:e9:d8:c7:d3:36:b5:42:1b:67:01:21:c3:aa:ff:
34:41:46:12:53:ba:da:88:89:8e:d9:2c:9e:7b:78:43:6d:16:
7c:7c:db:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 08:05:17 2026 by rpki-client