This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft
File: 1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft (raw, json)
Hash identifier: X34wb6HX1Gvh7owuZ5magKP1OF6UqXCM+D3c01qvBt0=
Subject key identifier: 37:A3:1A:7E:CD:BC:1D:A5:04:9B:2B:61:0A:EB:D6:36:DD:AA:3E:CE
Authority key identifier: 1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77
Certificate issuer: /CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377
Certificate serial: 08146D0FBBEB562B480281889169BFB977F0041B
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft
Manifest number: 034F
Signing time: Sat 17 Jan 2026 16:36:00 +0000
Manifest this update: Sat 17 Jan 2026 16:31:00 +0000
Manifest next update: Sun 18 Jan 2026 16:56:00 +0000
Files and hashes: 1: 326130663a383563313a3730313a3a2f34382d3438203d3e20323033353131.roa (hash: Tk4tJu5bvTD5dR9NoM2pYvWxSXCc2/x84lQAlZZqzIs=)
2: 326130663a383563313a3766393a3a2f34382d3438203d3e20323135323432.roa (hash: EaK1Skh4Um4RxiTzKfvwYuiUAcDo6dIwTSOhuUAUNQg=)
3: 326130663a383563313a3766313a3a2f34382d3438203d3e20323035343633.roa (hash: QtxzWf2JsAYGrlxsDmcE2oi7tthkDrQ3wvK+rgUOQxg=)
4: 326130663a383563313a3766353a3a2f34382d3438203d3e20323135373631.roa (hash: byQYxxoRiZMkalXd6RzudJTQa4Ua3fqFXKXTWNIB1fs=)
5: 326130663a383563313a3766623a3a2f34382d3438203d3e20323135323432.roa (hash: 9Ctv2mltThGL0RyhvpcjL2LOhkF9bTv3dQQCtaxW34I=)
6: 1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl (hash: lGhY+SKgPbGKMa/lX+DvEeTVCY4ioX9FRJM0gYyq16w=)
7: 326130663a383563313a3766323a3a2f34382d3438203d3e20323135323432.roa (hash: sEiHLlrRoeeUa4AJCYCoXBnr24SESsEbTviJLVfMEys=)
8: 326130663a383563313a3766373a3a2f34382d3438203d3e20323135323432.roa (hash: 4CHXdVvHjYpqAYcHIcibvCLK5qq3tc1C66o5EpxaLt8=)
9: 326130663a383563313a3766613a3a2f34382d3438203d3e20323135323432.roa (hash: 6WOlcQZh4GVBhjXWW5Oz90ldzq2Au8/SbNiLZze2zNI=)
10: 326130663a383563313a3361323a3a2f34382d3438203d3e20323135323432.roa (hash: Gz7cU4OgmvLm8iR5sxlLJ8umD/eM2550DADKq1NdbVY=)
11: 326130663a383563313a3766303a3a2f34382d3438203d3e20323033353131.roa (hash: F6VJOi3vW8ih7gU8rCzD7A7gIu39IHtVGsLlId1ILkM=)
12: 326130663a383563313a3766343a3a2f34382d3438203d3e20323135323432.roa (hash: Sqqkf1ajVYDwVw2KSKZnr/tFVnDaWUIPFwaxuN/hzVk=)
13: 326130663a383563313a3730303a3a2f34302d3430203d3e20323135323432.roa (hash: LIVxcxtvoeze2S46mPqGSXeLOCk0JK2W2QKOiQjUdZQ=)
14: 326130663a383563313a3766313a3a2f34382d3438203d3e20323135313234.roa (hash: gq6me54MBqnqosS7iLksDmqAJs8yyfHwMXcZfgP1ijQ=)
15: 326130663a383563313a3766363a3a2f34382d3438203d3e20323135323432.roa (hash: sqekG79xztP1stI8964y8O+ILcqcxMBKS5vM2N9Yeq4=)
16: 326130663a383563313a3766383a3a2f34382d3438203d3e20323135323432.roa (hash: y9HbdtxnynZX2rM71oo4qhqJ/M/3l6e62X60vqkSXOc=)
17: 326130663a383563313a3766333a3a2f34382d3438203d3e20323035343633.roa (hash: YxuKH5bQA8YI1bwf7mCp5od3hfadKIetOc5KHPtspsc=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl
rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Jan 2026 16:56:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:14:6d:0f:bb:eb:56:2b:48:02:81:88:91:69:bf:b9:77:f0:04:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377
Validity
Not Before: Jan 17 16:31:00 2026 GMT
Not After : Jan 18 16:56:00 2026 GMT
Subject: CN=37A31A7ECDBC1DA5049B2B610AEBD636DDAA3ECE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:da:dd:ec:2d:e0:24:e2:6a:c0:61:5c:01:17:
12:0c:bd:a8:c7:70:e7:54:f4:da:51:18:25:f7:72:
6d:98:c8:88:1f:91:d6:0e:0b:78:90:f0:2a:1c:ce:
49:51:c4:39:bf:5c:b9:54:12:15:a2:ce:65:c4:3d:
d8:0e:db:36:74:51:07:61:79:cb:00:c5:4b:36:be:
a8:41:d3:90:09:5d:38:02:57:04:ef:bd:50:5e:e1:
70:93:6d:2e:79:a2:3c:78:e3:a2:81:b9:79:72:d1:
b0:b1:d6:ac:28:86:d1:83:2a:6d:0d:69:55:ca:83:
ea:a6:0f:c2:75:47:21:57:97:c1:0a:9a:46:1a:22:
f8:8b:f9:f4:ce:b2:ff:dc:10:fe:8c:da:eb:4c:b9:
f0:c4:44:65:47:ca:09:cd:1a:9e:ff:2f:57:e1:a8:
8e:82:a7:8b:0e:5e:28:ff:a3:6a:7d:0a:4a:dc:4d:
04:eb:30:9f:15:05:49:58:4f:d4:b0:14:48:8c:7e:
7a:00:ad:7f:df:cc:1a:61:f4:bf:12:b4:fa:3a:ad:
d5:0a:a5:9b:2a:3d:0a:89:d5:6e:54:ef:6d:5d:c0:
a8:ed:81:93:5b:90:1a:9c:d4:09:e2:e4:5d:58:f0:
a3:82:2d:96:ac:2a:90:bb:a3:91:73:8f:ac:32:6b:
78:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:A3:1A:7E:CD:BC:1D:A5:04:9B:2B:61:0A:EB:D6:36:DD:AA:3E:CE
X509v3 Authority Key Identifier:
keyid:1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:36:cd:05:4b:bf:3a:70:b8:b0:4f:68:0e:90:20:93:a0:30:
22:e6:3d:84:d8:f6:cb:d0:11:94:c5:c6:03:78:91:73:f7:de:
04:4f:a7:15:a5:95:e8:55:26:8f:2e:52:ce:2c:06:b8:5b:75:
de:91:99:b1:03:10:fc:3c:23:a1:13:11:6a:3d:ae:c6:92:20:
85:1a:86:76:26:84:f6:b2:9e:ca:49:e4:d4:c8:fd:a9:b0:b5:
f5:f6:01:f3:d9:41:40:83:aa:2d:1c:56:12:8d:1c:62:3e:b4:
1f:00:c5:f0:62:40:bb:8a:49:d9:d8:6f:a0:d1:4f:18:62:df:
dd:13:e5:ea:e1:97:40:bd:1c:38:9e:08:6c:eb:ed:43:54:1f:
dd:de:3e:fd:4e:01:19:4a:55:5b:f6:24:1f:fc:07:79:67:14:
e0:bc:a2:79:19:02:8c:63:6d:35:9a:5b:6e:fd:16:94:97:77:
df:a1:e2:1b:6f:d9:24:fb:53:c2:14:eb:14:c0:55:a5:38:ef:
b9:e8:34:ca:82:22:ec:5a:38:c8:66:62:6f:2e:03:e2:fc:74:
36:18:48:21:18:b9:87:6e:85:85:07:d5:0a:4f:94:3c:e8:d0:
7a:56:0f:e4:1b:b2:e0:dd:45:c3:2a:24:3c:b2:6a:ab:7d:12:
dc:f3:fb:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 04:11:21 2026 by rpki-client