This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft
File: 1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft (raw, json)
Hash identifier: YLeY2tzwhvKXtOeawst8/DrpIaFMj8qETJSEusKNnhw=
Subject key identifier: 2B:75:7C:C1:F3:1B:88:6F:EB:C2:63:8A:22:6C:A6:B3:3F:69:A0:CF
Authority key identifier: 1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77
Certificate issuer: /CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377
Certificate serial: 78C35768FA8B2D96AE0CA00452ED5EA4C4990A96
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft
Manifest number: 0349
Signing time: Tue 13 Jan 2026 04:35:42 +0000
Manifest this update: Tue 13 Jan 2026 04:30:42 +0000
Manifest next update: Wed 14 Jan 2026 07:52:42 +0000
Files and hashes: 1: 326130663a383563313a3730313a3a2f34382d3438203d3e20323033353131.roa (hash: Tk4tJu5bvTD5dR9NoM2pYvWxSXCc2/x84lQAlZZqzIs=)
2: 326130663a383563313a3766343a3a2f34382d3438203d3e20323135323432.roa (hash: Sqqkf1ajVYDwVw2KSKZnr/tFVnDaWUIPFwaxuN/hzVk=)
3: 326130663a383563313a3766303a3a2f34382d3438203d3e20323033353131.roa (hash: F6VJOi3vW8ih7gU8rCzD7A7gIu39IHtVGsLlId1ILkM=)
4: 326130663a383563313a3766613a3a2f34382d3438203d3e20323135323432.roa (hash: 6WOlcQZh4GVBhjXWW5Oz90ldzq2Au8/SbNiLZze2zNI=)
5: 326130663a383563313a3766313a3a2f34382d3438203d3e20323035343633.roa (hash: QtxzWf2JsAYGrlxsDmcE2oi7tthkDrQ3wvK+rgUOQxg=)
6: 326130663a383563313a3766373a3a2f34382d3438203d3e20323135323432.roa (hash: 4CHXdVvHjYpqAYcHIcibvCLK5qq3tc1C66o5EpxaLt8=)
7: 326130663a383563313a3361323a3a2f34382d3438203d3e20323135323432.roa (hash: Gz7cU4OgmvLm8iR5sxlLJ8umD/eM2550DADKq1NdbVY=)
8: 326130663a383563313a3766323a3a2f34382d3438203d3e20323135323432.roa (hash: sEiHLlrRoeeUa4AJCYCoXBnr24SESsEbTviJLVfMEys=)
9: 326130663a383563313a3766363a3a2f34382d3438203d3e20323135323432.roa (hash: sqekG79xztP1stI8964y8O+ILcqcxMBKS5vM2N9Yeq4=)
10: 326130663a383563313a3730303a3a2f34302d3430203d3e20323135323432.roa (hash: LIVxcxtvoeze2S46mPqGSXeLOCk0JK2W2QKOiQjUdZQ=)
11: 1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl (hash: UgnVuTJCv5ftpsATPuXgpcYlxtVbI8mnantwEpwZ1HQ=)
12: 326130663a383563313a3766353a3a2f34382d3438203d3e20323135373631.roa (hash: byQYxxoRiZMkalXd6RzudJTQa4Ua3fqFXKXTWNIB1fs=)
13: 326130663a383563313a3766623a3a2f34382d3438203d3e20323135323432.roa (hash: 9Ctv2mltThGL0RyhvpcjL2LOhkF9bTv3dQQCtaxW34I=)
14: 326130663a383563313a3766393a3a2f34382d3438203d3e20323135323432.roa (hash: EaK1Skh4Um4RxiTzKfvwYuiUAcDo6dIwTSOhuUAUNQg=)
15: 326130663a383563313a3766313a3a2f34382d3438203d3e20323135313234.roa (hash: gq6me54MBqnqosS7iLksDmqAJs8yyfHwMXcZfgP1ijQ=)
16: 326130663a383563313a3766383a3a2f34382d3438203d3e20323135323432.roa (hash: y9HbdtxnynZX2rM71oo4qhqJ/M/3l6e62X60vqkSXOc=)
17: 326130663a383563313a3766333a3a2f34382d3438203d3e20323035343633.roa (hash: YxuKH5bQA8YI1bwf7mCp5od3hfadKIetOc5KHPtspsc=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl
rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Jan 2026 07:52:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:c3:57:68:fa:8b:2d:96:ae:0c:a0:04:52:ed:5e:a4:c4:99:0a:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377
Validity
Not Before: Jan 13 04:30:42 2026 GMT
Not After : Jan 14 07:52:42 2026 GMT
Subject: CN=2B757CC1F31B886FEBC2638A226CA6B33F69A0CF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:27:47:26:da:42:45:4e:57:39:6a:ff:d0:90:
7a:7a:78:0e:5e:30:33:a5:64:08:5d:6a:05:53:b3:
00:a1:60:71:57:47:09:14:4e:34:bf:0d:7e:cc:cf:
b3:57:53:7d:60:99:cf:ea:0d:96:13:ba:5c:7e:13:
1a:b7:d6:7b:52:4b:a3:65:d8:68:30:cb:77:e3:9a:
2a:e6:47:6a:68:45:b8:15:44:63:30:5b:09:63:37:
e9:bc:ac:ad:6f:58:9a:9d:3c:ff:5c:60:bf:11:00:
23:4a:93:76:9f:b8:38:e8:84:b6:17:2c:a9:07:db:
3e:2b:6c:79:23:29:cb:1a:c9:f7:0e:3d:69:07:23:
d0:b7:81:f4:a0:9e:c1:d6:62:ff:b4:f9:23:02:70:
42:46:53:fd:7d:da:7a:ff:2a:c2:fe:ca:ae:4a:a1:
c9:f4:89:c1:b3:50:ca:ff:0d:68:fc:12:dd:1e:c9:
e3:0b:04:6f:ec:3e:57:4d:de:2c:04:89:8b:7e:32:
64:ea:3a:b7:61:29:86:6c:48:00:fe:a3:1d:93:5a:
00:23:bd:be:61:85:5f:08:e9:a6:68:5a:67:6b:31:
f1:98:65:bd:bd:15:bb:31:94:0e:92:f4:d8:7e:6d:
a7:97:16:2f:cf:20:2b:85:61:f4:66:05:5f:d7:55:
93:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:75:7C:C1:F3:1B:88:6F:EB:C2:63:8A:22:6C:A6:B3:3F:69:A0:CF
X509v3 Authority Key Identifier:
keyid:1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:e3:07:b6:f3:76:2c:4f:a8:1d:d2:e8:db:9f:df:21:94:ca:
7f:9d:98:07:3a:47:e2:6a:4a:4f:aa:7b:7b:a4:89:e2:0d:1f:
89:c8:5e:19:2b:e1:62:64:ec:f2:c2:2f:3b:c4:02:23:00:83:
90:9a:6c:88:3d:5f:d8:9d:e7:4e:26:e8:89:c7:f4:9b:09:d9:
60:20:17:4b:5c:e1:22:13:7b:ef:dc:93:c6:f6:10:a1:09:bd:
6d:ac:89:26:8a:21:36:2f:8c:d1:ff:3d:92:8a:a5:cc:1d:9e:
6e:39:30:6d:e6:42:10:8e:48:96:52:60:86:d3:e9:e5:01:cb:
0a:f0:d7:c1:6f:4d:35:d7:7c:ed:42:60:a0:76:5d:b2:38:81:
9b:22:3f:61:bb:58:7e:23:ce:13:98:93:ae:90:5c:f5:d6:37:
44:10:6e:9e:df:b6:f0:1d:04:05:ca:e0:b6:fd:3c:8e:01:09:
93:14:67:20:d9:ee:bf:c3:9f:c8:20:96:90:cc:48:30:34:11:
63:27:95:0d:68:23:dd:4c:3b:55:5f:72:e6:f4:bf:00:bd:70:
63:1d:a8:b1:08:9b:57:06:b8:ee:2f:21:94:82:65:58:17:7e:
4b:a1:57:56:48:aa:0b:00:3e:88:69:d0:c9:df:84:e3:48:db:
34:ec:3f:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 12:58:01 2026 by rpki-client