This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.mft
File: CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.mft (raw, json)
Hash identifier: eWSdlCIE6Z4SDyA2YO3eQsEsCudt4XPCBiyZDldw56s=
Subject key identifier: AB:EB:BA:22:93:04:74:80:9F:94:B3:CB:B5:7A:CD:3C:A1:8A:7A:18
Authority key identifier: CB:29:A7:76:69:DF:5A:7A:5C:B5:06:D8:39:EE:8A:A4:33:7C:CA:AC
Certificate issuer: /CN=cb29a77669df5a7a5cb506d839ee8aa4337ccaac
Certificate serial: 6683440B2AB02D4C27A2781844B9FBCA5E4C6DA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yymndmnfWnpctQbYOe6KpDN8yqw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.mft
Manifest number: 019B
Signing time: Wed 21 Jan 2026 06:36:17 +0000
Manifest this update: Wed 21 Jan 2026 06:31:17 +0000
Manifest next update: Thu 22 Jan 2026 10:02:17 +0000
Files and hashes: 1: 326130663a336363333a313030303a3a2f33362d3336203d3e203630373335.roa (hash: ad3eCylfdMfYW/Id31ooquQQLvZwumdWGj+lszfaEsA=)
2: 326130663a336363333a343030303a3a2f34342d3434203d3e20323032333036.roa (hash: fxbR5GcPyoWqODdA3f1yyd4v8P4uCsBii+08ii9bg1w=)
3: 326130663a336363333a3a2f33362d3336203d3e203630373335.roa (hash: qgpa17rXBGEZyX0zTURKp2TS7HA9WA0LAdj3r9yq+jg=)
4: 326130663a336363353a3a2f33322d3332203d3e20323037393336.roa (hash: yq+hWHhfyocRCOJbnYGyzdHlkfHxXD4gPxuVgEPCc0g=)
5: 3139342e3132342e3233372e302f32342d3234203d3e203539383133.roa (hash: Wt7cVymDfWBwMzR8hqsJLmmyo1G55vHli1MG8ova8P4=)
6: CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.crl (hash: joqWPgKL1WGpHi22XgJZCJhGWrSBuOhIQzOHLuDn9eo=)
7: 326130663a336363363a3a2f33322d3332203d3e203630373335.roa (hash: Bvg0bczZRvr0hNeXj13n0Q8N1O34FXLeiihKmXvd96c=)
8: 326130663a336363343a3a2f33322d3332203d3e20323037393336.roa (hash: sUFXVk5mJuzGXi+txvF0jHfWX/7COhdmW+wdhnGLLbA=)
9: 326130663a336363313a3a2f33322d3332203d3e20323037393336.roa (hash: 4eRihxuyWrFmyrmWNHP+q80BiQuGj/+XTMKJH0kDcVI=)
10: 3139342e3132342e3233362e302f32342d3234203d3e203630373335.roa (hash: lmVh0tkdqz2ZaktlfIJzzJLuyL6wItEcUEPI+PVNqdo=)
11: 3139342e3132342e3233342e302f32342d3234203d3e20323135323338.roa (hash: YqdxBxvtFsmv3SRDqoqxfde+W6U0yY2qSrj/R13SbuM=)
12: 3139342e3132342e3233352e302f32342d3234203d3e20323037393336.roa (hash: MbX2Jo3+qNy9yJ51qumhhpSA5fjjpKXnL9+Ixdd7q/M=)
13: 326130663a336363373a3a2f33322d3332203d3e203539383133.roa (hash: 0XA7loK9zcLZ4LH8gJRLIhKhFochpbrC40dXD0XEE/8=)
14: 326130663a336363323a3a2f33322d3332203d3e20323037393336.roa (hash: bLMKUTu2LDh7TH4JEFo2TwGKCx3JiqqNy6hRd14etMM=)
15: 326130663a336363333a323030303a3a2f33362d3336203d3e203630373335.roa (hash: hZUNrJfyUHgUntGAqdSVlBaE4wglKTi9y0zmmly1bMY=)
16: 326130663a336363303a3a2f33322d3332203d3e20323037393336.roa (hash: E+WPtm+HS9AVsakqcLrBjACoAm/NbChhrd4PG4s+X5o=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.crl
rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.mft
rsync://rpki.ripe.net/repository/DEFAULT/yymndmnfWnpctQbYOe6KpDN8yqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Jan 2026 10:02:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:83:44:0b:2a:b0:2d:4c:27:a2:78:18:44:b9:fb:ca:5e:4c:6d:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb29a77669df5a7a5cb506d839ee8aa4337ccaac
Validity
Not Before: Jan 21 06:31:17 2026 GMT
Not After : Jan 22 10:02:17 2026 GMT
Subject: CN=ABEBBA22930474809F94B3CBB57ACD3CA18A7A18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:11:7c:bb:25:34:60:d6:c7:c0:19:40:cf:a2:
ee:ec:53:b9:cc:c2:02:4f:60:9a:a8:20:ec:04:0f:
f3:7d:b3:4d:b1:71:d5:e5:b1:29:25:50:5c:9d:81:
b6:44:eb:37:80:c2:49:ca:07:3a:52:e1:2c:b0:f5:
d7:42:67:b9:bc:a4:7e:8e:b6:33:de:b7:75:d8:2a:
da:cd:17:cd:4c:d8:95:65:ff:ec:31:79:30:f5:0d:
44:64:60:4b:ec:94:b2:fb:ca:4c:2a:94:cc:05:13:
61:f6:ce:fe:b0:95:f0:be:f7:03:3e:91:61:0e:2a:
10:20:0b:fe:1d:0f:69:f3:76:13:1a:9a:66:a1:43:
87:a4:42:b5:e2:6a:32:16:a2:12:71:85:8f:cd:b4:
e7:ec:5d:6b:31:31:ab:db:6e:28:f4:31:96:1e:31:
eb:8d:ea:0a:ad:dc:fa:c0:59:32:14:30:6a:8e:b6:
1a:57:4b:72:52:b6:6a:4b:68:81:d2:15:05:04:bd:
ab:73:9c:2d:20:ef:b8:02:3d:fb:68:b5:ab:cf:c4:
b7:41:ef:49:49:a9:39:5b:ea:e1:9f:1d:fa:6d:74:
eb:7f:d3:9c:1c:d7:d1:71:53:cf:d2:0b:a4:92:71:
58:41:1d:6d:48:00:25:4e:38:cf:6b:0a:f1:a6:c4:
f0:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:EB:BA:22:93:04:74:80:9F:94:B3:CB:B5:7A:CD:3C:A1:8A:7A:18
X509v3 Authority Key Identifier:
keyid:CB:29:A7:76:69:DF:5A:7A:5C:B5:06:D8:39:EE:8A:A4:33:7C:CA:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yymndmnfWnpctQbYOe6KpDN8yqw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:95:61:42:94:97:9a:2e:44:ff:36:95:10:3b:e1:4e:91:12:
ff:51:d7:8d:41:63:e1:3b:48:18:fa:90:c9:4b:fb:b0:be:8c:
50:77:7d:ad:ec:f8:09:db:a1:66:da:0e:66:40:0f:07:1b:cc:
91:6b:37:4f:46:d8:e0:5e:cd:d9:71:99:61:90:e6:78:71:cb:
8c:17:e1:09:27:e7:56:e9:8c:be:df:4f:2c:10:16:08:43:1f:
66:98:4d:ba:1a:ed:27:58:e0:51:b6:6c:34:41:25:a2:e9:92:
71:da:38:fb:56:87:49:76:ff:c0:0b:41:8c:93:cd:da:01:e3:
1d:76:b1:f8:74:7a:7d:47:3e:59:2f:54:b1:46:e6:65:52:9e:
9f:a6:78:f0:50:d1:f3:23:ec:16:a7:9b:d7:d6:c2:e4:00:be:
92:91:26:13:d3:93:21:73:c7:90:c7:d6:f8:8e:b8:bb:31:8d:
61:6d:ca:1c:3d:0d:3d:9b:a6:f8:9f:d9:f7:14:e8:fb:dd:a8:
76:44:21:eb:7a:5c:b1:8d:31:40:c8:c9:05:ce:e8:77:fd:4a:
d5:81:f2:34:0f:97:a0:ba:33:41:92:2d:8f:ae:4a:d0:b0:1f:
6f:4f:54:74:35:b6:7f:f0:bc:06:f2:70:10:c5:82:44:e4:04:
88:d5:c4:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 18:47:59 2026 by rpki-client