This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.mft
File: 2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.mft (raw, json)
Hash identifier: alzLtAYH8ScImnPipPvxHx+m75R8/R4AXgqvACVFHKY=
Subject key identifier: F4:DD:95:30:3C:AE:FF:10:40:15:80:BB:B3:D9:DC:AD:95:8D:90:2F
Authority key identifier: 2F:0F:1B:C6:7D:D2:B9:A7:E2:54:56:38:C1:73:D5:EC:06:0C:27:D0
Certificate issuer: /CN=a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355
Certificate serial: 0FA94B0123E0397249AC957A2205E22B1C8B5959
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.mft
Manifest number: 077B
Signing time: Mon 26 Jan 2026 10:11:00 +0000
Manifest this update: Mon 26 Jan 2026 10:06:00 +0000
Manifest next update: Tue 27 Jan 2026 10:38:00 +0000
Files and hashes: 1: 323630323a663939323a66663a3a2f34382d3438203d3e203633333930.roa (hash: HhVByOYrx2S9pHnEb1O7wXoTQ+/5YLny6hPGL1uYyM8=)
2: 323630323a663939323a66373a3a2f34382d3438203d3e2030.roa (hash: vzUfgaw6t33aMyp+BMlfruWNIdCIRwsxwR92D/70/Gg=)
3: 323630323a663939323a63303a3a2f34342d3438203d3e203236303432.roa (hash: Fgcu73F4DxRvaLksBuPTG0jHcKxfTvgmmVGQl4chyzs=)
4: 323630323a663939323a66333a3a2f34382d3438203d3e203333333837.roa (hash: NUE/UX3oXJFnmyAE2FoTGPVQs404K4mf9BK/aBACO14=)
5: 323630323a663939323a66363a3a2f34382d3438203d3e203236323836.roa (hash: ion8ML+Yfv2dxyo0ppsgmr/V3XUxA9UrqDHj/Zke1A0=)
6: 323630323a663939323a35303a3a2f34342d3438203d3e20313939393539.roa (hash: s0tjGNQz3a0IJwtqI+yV2w0ziifnk/CWeyQrn3w3/qg=)
7: 323630323a663939323a39303a3a2f34342d3438203d3e2030.roa (hash: NC2ZhEPelpHdoSSljxfD6WpRWcBV8zPEY0f/OMUilVM=)
8: 323630323a663939323a36303a3a2f34342d3438203d3e20313532393030.roa (hash: HWpzvbc2LzEmXxoT+kul7X4owcauEKJHusM+Ir+9R/w=)
9: 323630323a663939323a62303a3a2f34342d3438203d3e20323134363330.roa (hash: PHjDJexK/Eklx6InBXxOBTRmjtOGLIjGAGFc7gbqZb8=)
10: 323630323a663939323a66613a3a2f34382d3439203d3e203430363736.roa (hash: sRvK25+z4/XzVzRz/NRjDVLoeu4AhidYEGZ8Z4be+vU=)
11: 323630323a663939323a66343a3a2f34382d3438203d3e20323038363939.roa (hash: tl8M/rg4fzRj4HcLbXbMPjG2fJQE/fLu0oqk+/bvTJ4=)
12: 323630323a663939323a66643a3a2f34382d3438203d3e20343031383132.roa (hash: 59uZAy7XXfBP2lTYymBUstkE3+Fixf8c03kHK/e8F/o=)
13: 323630323a663939323a66633a3a2f34382d3438203d3e20343031383132.roa (hash: WWuZlGD19cauNNFGP8lkHygPrhsjx/40EDpoW/B2wUc=)
14: 32332e3137302e3231362e302f32342d3234203d3e203538323032.roa (hash: xsTimzkeTJXF4Nr71zJnv2bONR0iZSrLPJdDzaLfkdY=)
15: 323630323a663939323a66323a3a2f34382d3438203d3e20323733323032.roa (hash: +regh0iXnX1+G7oho+N8MToCO88rnVaGwW232okUqZA=)
16: 323630323a663939323a61303a3a2f34342d3438203d3e2030.roa (hash: TsDzPexWiyW7o35YhRgMnmXGuAARZmgF1yTYqL8wkn4=)
17: 2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.crl (hash: ea/985fK3N1GUNp5PdpyA8rM+EfKIOrApKGA//OZFeQ=)
18: 323630323a663939323a35303a3a2f34342d3438203d3e203430363736.roa (hash: izLerJCXQHRMj4EuHnpJKhCKBCsakjo+L9Seyo/D9Sg=)
19: 323630323a663939323a65303a3a2f34342d3438203d3e203333333837.roa (hash: JcXzbGu5aoqW4eGRLqUocgWZf+gjmi1jki466ucPd4g=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/b915810d-b97a-4696-955d-495d5d12c3b5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/b915810d-b97a-4696-955d-495d5d12c3b5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 27 Jan 2026 10:38:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:a9:4b:01:23:e0:39:72:49:ac:95:7a:22:05:e2:2b:1c:8b:59:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355
Validity
Not Before: Jan 26 10:06:00 2026 GMT
Not After : Jan 27 10:38:00 2026 GMT
Subject: CN=F4DD95303CAEFF10401580BBB3D9DCAD958D902F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:16:cc:c5:8c:a9:c5:c9:18:31:1b:6b:34:54:
9c:a9:d4:31:db:fe:e2:29:1d:50:27:86:35:9c:0c:
54:9f:44:b5:26:f1:7c:3c:92:c0:50:62:85:d6:42:
6c:cf:22:bb:5e:86:97:eb:a2:07:0f:74:2e:99:ab:
86:36:cf:ca:f8:5f:46:8e:90:15:66:62:cc:af:be:
c3:c3:fb:98:94:98:af:4c:57:86:ac:a3:41:fd:71:
c5:22:72:cd:69:92:88:2d:05:db:25:8f:48:ce:0a:
40:0e:f8:10:4f:5e:7d:a9:e0:f2:44:90:ea:60:c2:
e7:2d:c5:bd:d3:cf:14:df:33:5b:1e:46:81:51:92:
d1:3b:ce:58:64:03:f7:4b:1a:08:01:b6:c5:8b:b9:
0b:b3:c5:24:7d:7e:7e:4b:17:db:2d:d2:da:ae:6a:
7a:94:3c:cd:53:2a:8c:07:43:f4:28:dd:91:d5:a2:
95:4c:26:cf:56:aa:46:08:d2:32:dd:ed:5e:3b:4e:
af:ed:b5:65:05:c6:01:d2:fb:04:9e:8f:00:ba:4e:
96:47:c3:d4:b7:ea:fc:53:fd:b3:0d:d3:50:b4:69:
c3:90:72:15:49:42:f7:9f:0f:86:61:85:b5:ed:fe:
78:0e:cf:28:b3:d1:cd:c9:1e:da:3b:5c:3d:08:76:
eb:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:DD:95:30:3C:AE:FF:10:40:15:80:BB:B3:D9:DC:AD:95:8D:90:2F
X509v3 Authority Key Identifier:
keyid:2F:0F:1B:C6:7D:D2:B9:A7:E2:54:56:38:C1:73:D5:EC:06:0C:27:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:7d:3e:a8:54:e2:ec:d4:51:2e:fd:fe:26:86:55:7d:c4:a1:
c8:3e:df:ab:69:17:33:bf:f5:01:f6:b1:47:d6:2f:03:e1:95:
e2:1c:78:a6:48:67:17:53:1b:39:49:45:48:5a:6e:bc:90:79:
31:64:fe:e4:da:df:fd:16:e8:85:62:93:30:56:94:9a:da:c7:
76:86:29:99:72:bd:e4:7f:3d:46:a5:8d:e6:b7:7a:17:1f:4f:
8c:19:84:5e:38:5e:95:3f:b0:ec:9f:3f:01:32:c2:e6:82:3e:
5c:ae:21:91:72:a8:b0:f2:16:45:2e:1d:11:8b:09:40:ca:04:
7c:72:0b:35:c7:61:4f:c5:43:e0:a4:71:b7:ab:94:f1:89:a6:
fa:18:30:99:9e:f9:3d:82:d5:17:e9:f5:01:8b:c0:fe:99:f3:
ed:57:00:38:5b:a3:62:89:d5:a5:53:73:a8:24:be:2e:81:3c:
a1:19:7a:9e:26:6c:e0:61:ef:a6:b4:f6:54:31:d6:ae:e5:3b:
78:04:e2:d9:35:20:e0:b8:cb:79:e7:ed:85:b2:c8:08:35:6c:
d7:c4:4d:00:8d:e6:e4:46:82:de:45:3b:bc:1d:0b:ec:db:f2:
44:1d:a5:d9:a8:61:bb:17:39:28:d7:50:f3:9f:64:95:06:86:
e3:70:d5:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 20:29:36 2026 by rpki-client