This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.mft
File: 202A82DA6E73CE4262E18BAED60A3FA6C88923F0.mft (raw, json)
Hash identifier: 05cnFmZuFTbXi8LpMvw0OawRuV4Ebra7wUuBY/Q1czQ=
Subject key identifier: B1:EC:F5:E5:85:34:EF:C7:EA:1F:DA:B5:77:FD:01:4D:67:D0:19:02
Authority key identifier: 20:2A:82:DA:6E:73:CE:42:62:E1:8B:AE:D6:0A:3F:A6:C8:89:23:F0
Certificate issuer: /CN=202A82DA6E73CE4262E18BAED60A3FA6C88923F0
Certificate serial: 254DA0B991E58CB69247DB2444A6121291F35BE6
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.mft
Manifest number: D0
Signing time: Sun 25 Jan 2026 21:57:53 +0000
Manifest this update: Sun 25 Jan 2026 21:52:53 +0000
Manifest next update: Tue 27 Jan 2026 00:05:53 +0000
Files and hashes: 1: 326131343a373538313a333030303a3a2f34302d3438203d3e20323037353239.roa (hash: 49tQr1GLN9QvPACiaQcXfaSDsuhRZJax3rEAyqF9fvs=)
2: 326131343a373538313a333062353a3a2f34382d3438203d3e20323131373239.roa (hash: tFUXq6i30FxB1SNNhCRKk78oQl/FXFjJBGghOw722to=)
3: 326131343a373538303a666666353a3a2f34382d3438203d3e20323037353239.roa (hash: 8GEpSwKR5aAKrW7JpZcQNrVUIUKVu8YVCYytf208qTw=)
4: 326131343a373538313a333062363a3a2f34382d3438203d3e20323037323939.roa (hash: QF7sj3Q22cpFIfftMWFUaaWBXSTUWiNGhFKa4Gm8DjQ=)
5: 326131343a373538313a333039303a3a2f34342d3434203d3e20323034323131.roa (hash: an2CTnY48XCjuCGH81CGgjVXZdlCvh7kWv6euA7rsaw=)
6: 202A82DA6E73CE4262E18BAED60A3FA6C88923F0.crl (hash: DVnYbg5wejEFXCGbjfoYe0VTOuTp9nVdvGiK+SvFenI=)
7: 326131343a373538313a333062363a3a2f34382d3438203d3e203331383938.roa (hash: EiykYxl+6FaTNBSgNTe5hk8ztAyCkiKmYpqs3J6XV7E=)
8: 64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05.cer (hash: Cg46VfMFxkibHVY72VspTJE2BjBtIpE0lG8+Ny9YFKc=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.crl
rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.mft
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.cer
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:4d:a0:b9:91:e5:8c:b6:92:47:db:24:44:a6:12:12:91:f3:5b:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=202A82DA6E73CE4262E18BAED60A3FA6C88923F0
Validity
Not Before: Jan 25 21:52:53 2026 GMT
Not After : Jan 27 00:05:53 2026 GMT
Subject: CN=B1ECF5E58534EFC7EA1FDAB577FD014D67D01902
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:53:a9:bf:53:f7:6d:b9:40:a4:ab:1a:22:36:
0f:3f:21:b2:f8:8c:f4:64:75:e4:3c:81:1d:7f:86:
7c:01:43:f5:74:ef:5f:0b:93:d9:92:78:2a:59:09:
5b:37:e7:a5:b1:f5:7a:ae:de:ca:ad:e8:44:ba:21:
05:e1:c1:42:57:95:03:f5:ad:64:54:28:8d:35:28:
c5:5d:87:a6:30:60:fd:2b:ac:15:53:e0:95:5d:29:
73:b8:d6:26:30:5a:4a:27:f4:be:65:50:5c:3a:a8:
34:b5:ea:1b:e3:9c:75:f9:c7:88:05:22:8b:b1:a3:
f0:38:5b:77:4d:84:57:10:0a:81:37:45:74:d3:b7:
54:79:a4:00:5a:7c:04:ed:85:41:d0:34:df:37:64:
c1:53:5e:cc:e3:2b:66:67:f5:e4:7f:62:83:82:81:
32:15:ac:1a:9e:d3:a8:cf:67:1a:45:65:e4:b4:f9:
40:c8:d6:88:a4:a9:da:92:fa:e1:3d:c3:7e:68:26:
73:6e:c2:a9:79:65:92:4d:d9:d7:26:3d:d1:f0:92:
e9:93:e3:98:5d:de:51:31:fa:5a:17:06:50:17:95:
91:66:0a:8e:72:95:a4:c3:aa:00:02:f0:8c:0e:16:
d4:2a:94:13:ab:2a:ac:cb:c8:c6:2c:0f:c2:90:82:
28:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:EC:F5:E5:85:34:EF:C7:EA:1F:DA:B5:77:FD:01:4D:67:D0:19:02
X509v3 Authority Key Identifier:
keyid:20:2A:82:DA:6E:73:CE:42:62:E1:8B:AE:D6:0A:3F:A6:C8:89:23:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:09:77:50:dc:ff:3b:09:1c:e6:d8:11:89:b8:5c:24:39:85:
70:7d:dd:d8:36:46:94:ae:36:51:2e:f1:90:03:73:43:7b:27:
ea:15:b1:2c:94:bd:5b:5b:6e:73:d3:32:38:54:db:22:7d:a0:
70:ea:08:8d:02:9b:7b:29:b2:3e:35:12:2c:38:9b:b2:f4:f3:
79:3b:39:ca:ba:7e:47:a0:02:df:7f:ee:ba:9f:26:ff:dd:4c:
8b:6c:49:a8:b0:f7:3e:9d:d4:9a:8e:ef:45:5d:7e:92:34:40:
d3:9b:82:c0:82:2a:3b:68:f7:6e:9d:cf:47:4b:b0:48:5e:38:
6f:12:b2:4c:5d:3f:0b:af:47:ee:6d:ff:4f:80:95:55:24:61:
24:56:34:36:e9:00:ed:bc:b7:b8:f1:21:90:42:66:f3:46:fc:
27:dd:84:02:b4:f6:ec:27:7f:85:c0:58:04:c0:81:df:2c:10:
2b:77:50:e6:9c:8e:1e:f0:aa:b2:ee:cf:bf:26:00:4b:19:ef:
76:1c:13:4d:aa:fe:46:89:ba:7d:e9:05:23:0f:2d:fb:96:f5:
6b:3e:8a:41:6d:92:18:cf:08:bd:99:bb:2a:17:ab:5e:e9:58:
d5:69:4f:22:8d:ee:e2:3b:78:ac:fe:0e:4e:b5:d6:34:9a:1b:
50:82:44:b0
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgIUJU2guZHljLaSR9skRKYSEpHzW+YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjAyQTgyREE2RTczQ0U0MjYyRTE4QkFFRDYwQTNGQTZD
ODg5MjNGMDAeFw0yNjAxMjUyMTUyNTNaFw0yNjAxMjcwMDA1NTNaMDMxMTAvBgNV
BAMTKEIxRUNGNUU1ODUzNEVGQzdFQTFGREFCNTc3RkQwMTRENjdEMDE5MDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEU6m/U/dtuUCkqxoiNg8/IbL4
jPRkdeQ8gR1/hnwBQ/V0718Lk9mSeCpZCVs356Wx9Xqu3sqt6ES6IQXhwUJXlQP1
rWRUKI01KMVdh6YwYP0rrBVT4JVdKXO41iYwWkon9L5lUFw6qDS16hvjnHX5x4gF
Iouxo/A4W3dNhFcQCoE3RXTTt1R5pABafATthUHQNN83ZMFTXszjK2Zn9eR/YoOC
gTIVrBqe06jPZxpFZeS0+UDI1oikqdqS+uE9w35oJnNuwql5ZZJN2dcmPdHwkumT
45hd3lEx+loXBlAXlZFmCo5ylaTDqgAC8IwOFtQqlBOrKqzLyMYsD8KQgigpAgMB
AAGjggKCMIICfjAdBgNVHQ4EFgQUsez15YU078fqH9q1d/0BTWfQGQIwHwYDVR0j
BBgwFoAUICqC2m5zzkJi4Yuu1go/psiJI/AwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZDliZDM4ODgtOTMwMi00YjZmLWEwMTctMmI0YmJhNWU1
N2JiLzEvMjAyQTgyREE2RTczQ0U0MjYyRTE4QkFFRDYwQTNGQTZDODg5MjNGMC5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy
OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8yMDJBODJEQTZFNzNDRTQyNjJFMThCQUVE
NjBBM0ZBNkM4ODkyM0YwLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF
BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L2Q5YmQzODg4LTkzMDItNGI2Zi1hMDE3LTJiNGJiYTVlNTdiYi8xLzIwMkE4MkRB
NkU3M0NFNDI2MkUxOEJBRUQ2MEEzRkE2Qzg4OTIzRjAubWZ0MBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF
ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB8CXdQ
3P87CRzm2BGJuFwkOYVwfd3YNkaUrjZRLvGQA3NDeyfqFbEslL1bW25z0zI4VNsi
faBw6giNApt7KbI+NRIsOJuy9PN5OznKun5HoALff+66nyb/3UyLbEmosPc+ndSa
ju9FXX6SNEDTm4LAgio7aPdunc9HS7BIXjhvErJMXT8Lr0fubf9PgJVVJGEkVjQ2
6QDtvLe48SGQQmbzRvwn3YQCtPbsJ3+FwFgEwIHfLBArd1DmnI4e8Kqy7s+/JgBL
Ge92HBNNqv5Gibp96QUjDy37lvVrPopBbZIYzwi9mbsqF6te6VjVaU8ije7iO3is
/g5OtdY0mhtQgkSw
-----END CERTIFICATE-----
Generated at Mon Jan 26 08:05:17 2026 by rpki-client