This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft
File: 1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft (raw, json)
Hash identifier: cyHeYG90gJfdk1l/X4rzBKWPE7RxbvB96aNReMM6YI8=
Subject key identifier: 85:72:96:24:CE:32:0E:B9:0F:6D:4C:65:13:84:F1:7A:12:0E:C8:9D
Authority key identifier: 1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77
Certificate issuer: /CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377
Certificate serial: 3630B564812B34F541C3FDAE9BB144E75D041484
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft
Manifest number: 0357
Signing time: Fri 23 Jan 2026 13:56:01 +0000
Manifest this update: Fri 23 Jan 2026 13:51:01 +0000
Manifest next update: Sat 24 Jan 2026 16:11:01 +0000
Files and hashes: 1: 326130663a383563313a3766313a3a2f34382d3438203d3e20323035343633.roa (hash: QtxzWf2JsAYGrlxsDmcE2oi7tthkDrQ3wvK+rgUOQxg=)
2: 326130663a383563313a3766343a3a2f34382d3438203d3e20323135323432.roa (hash: Sqqkf1ajVYDwVw2KSKZnr/tFVnDaWUIPFwaxuN/hzVk=)
3: 1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl (hash: cFSOdGWKlq8cfQctX22d6a8rrvKwO4jgl0JAYtRTghw=)
4: 326130663a383563313a3766323a3a2f34382d3438203d3e20323135323432.roa (hash: sEiHLlrRoeeUa4AJCYCoXBnr24SESsEbTviJLVfMEys=)
5: 326130663a383563313a3766393a3a2f34382d3438203d3e20323135323432.roa (hash: EaK1Skh4Um4RxiTzKfvwYuiUAcDo6dIwTSOhuUAUNQg=)
6: 326130663a383563313a3766303a3a2f34382d3438203d3e20323033353131.roa (hash: F6VJOi3vW8ih7gU8rCzD7A7gIu39IHtVGsLlId1ILkM=)
7: 326130663a383563313a3730303a3a2f34302d3430203d3e20323135323432.roa (hash: LIVxcxtvoeze2S46mPqGSXeLOCk0JK2W2QKOiQjUdZQ=)
8: 326130663a383563313a3730313a3a2f34382d3438203d3e20323033353131.roa (hash: Tk4tJu5bvTD5dR9NoM2pYvWxSXCc2/x84lQAlZZqzIs=)
9: 326130663a383563313a3361323a3a2f34382d3438203d3e20323135323432.roa (hash: Gz7cU4OgmvLm8iR5sxlLJ8umD/eM2550DADKq1NdbVY=)
10: 326130663a383563313a3766373a3a2f34382d3438203d3e20323135323432.roa (hash: 4CHXdVvHjYpqAYcHIcibvCLK5qq3tc1C66o5EpxaLt8=)
11: 326130663a383563313a3766613a3a2f34382d3438203d3e20323135323432.roa (hash: 6WOlcQZh4GVBhjXWW5Oz90ldzq2Au8/SbNiLZze2zNI=)
12: 326130663a383563313a3766623a3a2f34382d3438203d3e20323135323432.roa (hash: 9Ctv2mltThGL0RyhvpcjL2LOhkF9bTv3dQQCtaxW34I=)
13: 326130663a383563313a3766313a3a2f34382d3438203d3e20323135313234.roa (hash: gq6me54MBqnqosS7iLksDmqAJs8yyfHwMXcZfgP1ijQ=)
14: 326130663a383563313a3766353a3a2f34382d3438203d3e20323135373631.roa (hash: byQYxxoRiZMkalXd6RzudJTQa4Ua3fqFXKXTWNIB1fs=)
15: 326130663a383563313a3766383a3a2f34382d3438203d3e20323135323432.roa (hash: y9HbdtxnynZX2rM71oo4qhqJ/M/3l6e62X60vqkSXOc=)
16: 326130663a383563313a3766363a3a2f34382d3438203d3e20323135323432.roa (hash: sqekG79xztP1stI8964y8O+ILcqcxMBKS5vM2N9Yeq4=)
17: 326130663a383563313a3766333a3a2f34382d3438203d3e20323035343633.roa (hash: YxuKH5bQA8YI1bwf7mCp5od3hfadKIetOc5KHPtspsc=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl
rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Jan 2026 10:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:30:b5:64:81:2b:34:f5:41:c3:fd:ae:9b:b1:44:e7:5d:04:14:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377
Validity
Not Before: Jan 23 13:51:01 2026 GMT
Not After : Jan 24 16:11:01 2026 GMT
Subject: CN=85729624CE320EB90F6D4C651384F17A120EC89D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:da:6a:a1:72:52:88:a0:03:de:67:82:ea:df:
07:ac:33:80:83:96:6a:48:3e:65:6f:3b:66:d2:79:
97:3b:f6:4c:22:81:c1:2a:71:af:a5:0c:28:c9:91:
0d:e2:8d:8e:ff:d5:70:38:97:77:9f:9d:4b:d3:49:
02:ab:b4:94:7d:b2:78:51:e2:29:09:01:16:d1:c1:
1c:14:1b:51:1e:b3:e9:81:f3:7c:99:54:34:7e:13:
22:e5:26:e5:1c:21:fc:16:d2:42:af:36:49:0c:f0:
b2:8a:b6:35:8c:cf:99:ee:75:cb:6f:78:74:e2:55:
fe:d0:e8:94:fb:43:ce:bd:89:f4:70:9b:2d:29:be:
1b:92:7b:10:9b:53:d3:c3:53:e5:6e:d8:e8:13:6f:
b3:15:6b:05:e7:71:7f:22:82:b3:4c:b1:98:6d:a9:
67:62:65:c5:72:c6:90:36:0b:00:93:39:fb:49:63:
41:be:fe:a8:08:7c:c5:d1:fc:98:f0:e8:5f:26:bf:
96:bf:9b:3e:03:1d:c9:fb:13:ce:9e:d8:b2:c4:74:
a2:52:a2:9a:a7:e3:5a:99:23:6d:b0:bc:52:d0:4c:
c4:2a:c3:8c:dd:01:51:9b:0c:3d:e4:7e:1b:61:be:
a3:a3:73:f0:cf:3e:fb:cb:f7:13:e3:34:ea:82:4b:
fb:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:72:96:24:CE:32:0E:B9:0F:6D:4C:65:13:84:F1:7A:12:0E:C8:9D
X509v3 Authority Key Identifier:
keyid:1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:e4:e1:a8:bc:a5:aa:a7:83:e4:29:10:5f:6b:88:cd:a4:f6:
db:2b:81:7c:00:7b:e8:5d:e1:f1:b5:90:fb:db:db:9f:98:c2:
99:bc:57:cb:52:a1:a8:72:f9:c1:0a:22:97:7a:5f:57:2f:6b:
7b:f1:28:4e:24:23:7d:1d:d6:c3:54:82:94:2b:63:1a:91:11:
b4:84:d5:ae:e9:5f:b9:5a:26:51:a2:04:a5:38:c2:42:6a:53:
5f:11:65:0e:56:f3:81:85:8e:f8:e5:01:45:04:27:bc:ec:f5:
bb:51:64:64:b7:3b:f6:78:a1:5b:00:be:df:13:f4:30:a8:92:
57:7f:8f:93:e3:2a:19:e5:34:16:26:f9:3a:f8:90:c5:48:89:
62:99:b2:0a:dc:7b:18:22:19:f5:ae:35:6c:38:bf:a1:c5:f0:
c5:7d:40:1d:49:25:ee:a1:02:df:bc:2f:5e:66:8c:2d:52:a3:
26:9d:68:fc:ac:0d:ba:b8:92:68:b1:9f:3e:a7:31:8d:21:68:
50:df:ab:b9:98:73:57:db:7f:a1:8e:50:00:96:e8:2e:98:84:
89:ae:db:e4:40:c8:c6:78:87:96:b5:54:47:85:a3:29:ba:8f:
d2:62:ee:e4:e1:2a:13:55:61:51:d6:65:12:df:33:78:66:30:
1f:e4:d2:85
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgIUNjC1ZIErNPVBw/2um7FE510EFIQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUE5MEE2QUUxNTQyQTM1M0NDQTc0OTc3RUIyQkZFMkE0
OUMxODM3NzAeFw0yNjAxMjMxMzUxMDFaFw0yNjAxMjQxNjExMDFaMDMxMTAvBgNV
BAMTKDg1NzI5NjI0Q0UzMjBFQjkwRjZENEM2NTEzODRGMTdBMTIwRUM4OUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDz2mqhclKIoAPeZ4Lq3wesM4CD
lmpIPmVvO2bSeZc79kwigcEqca+lDCjJkQ3ijY7/1XA4l3efnUvTSQKrtJR9snhR
4ikJARbRwRwUG1Ees+mB83yZVDR+EyLlJuUcIfwW0kKvNkkM8LKKtjWMz5nudctv
eHTiVf7Q6JT7Q869ifRwmy0pvhuSexCbU9PDU+Vu2OgTb7MVawXncX8igrNMsZht
qWdiZcVyxpA2CwCTOftJY0G+/qgIfMXR/Jjw6F8mv5a/mz4DHcn7E86e2LLEdKJS
opqn41qZI22wvFLQTMQqw4zdAVGbDD3kfhthvqOjc/DPPvvL9xPjNOqCS/tHAgMB
AAGjggKCMIICfjAdBgNVHQ4EFgQUhXKWJM4yDrkPbUxlE4TxehIOyJ0wHwYDVR0j
BBgwFoAUGpCmrhVCo1PMp0l36yv+KknBg3cwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZDA2MzMzYzYtOTQ2ZC00YjBiLTk1ZWYtZGFiYTI2MmE0
MmUxLzEvMUE5MEE2QUUxNTQyQTM1M0NDQTc0OTc3RUIyQkZFMkE0OUMxODM3Ny5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84NGQ1MTgxMC0xOTg3LTQ3
MDEtOGYxZi04NDI1MTExOTY0ZjQvMC8xQTkwQTZBRTE1NDJBMzUzQ0NBNzQ5NzdF
QjJCRkUyQTQ5QzE4Mzc3LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF
BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L2QwNjMzM2M2LTk0NmQtNGIwYi05NWVmLWRhYmEyNjJhNDJlMS8xLzFBOTBBNkFF
MTU0MkEzNTNDQ0E3NDk3N0VCMkJGRTJBNDlDMTgzNzcubWZ0MBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF
ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBi5OGo
vKWqp4PkKRBfa4jNpPbbK4F8AHvoXeHxtZD729ufmMKZvFfLUqGocvnBCiKXel9X
L2t78ShOJCN9HdbDVIKUK2MakRG0hNWu6V+5WiZRogSlOMJCalNfEWUOVvOBhY74
5QFFBCe87PW7UWRktzv2eKFbAL7fE/QwqJJXf4+T4yoZ5TQWJvk6+JDFSIlimbIK
3HsYIhn1rjVsOL+hxfDFfUAdSSXuoQLfvC9eZowtUqMmnWj8rA26uJJosZ8+pzGN
IWhQ36u5mHNX23+hjlAAlugumISJrtvkQMjGeIeWtVRHhaMpuo/SYu7k4SoTVWFR
1mUS3zN4ZjAf5NKF
-----END CERTIFICATE-----
Generated at Fri Jan 23 17:55:05 2026 by rpki-client