This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.mft
File: F1D0572FE72991BD32854BAC716676EBDAD22ACE.mft (raw, json)
Hash identifier: nM14BbXFnr2o77IeL2xWXV0U0BjmwA4V0ptis4tBf48=
Subject key identifier: 11:B8:40:9B:8F:42:5E:74:62:A2:38:86:3F:1E:B1:CF:35:93:C5:EE
Authority key identifier: F1:D0:57:2F:E7:29:91:BD:32:85:4B:AC:71:66:76:EB:DA:D2:2A:CE
Certificate issuer: /CN=f1d0572fe72991bd32854bac716676ebdad22ace
Certificate serial: 7894DEEB346E31FE0FF1C2647B9DC7AF0856C445
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dBXL-cpkb0yhUuscWZ269rSKs4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.mft
Manifest number: 02FE
Signing time: Wed 28 Jan 2026 15:23:06 +0000
Manifest this update: Wed 28 Jan 2026 15:18:06 +0000
Manifest next update: Thu 29 Jan 2026 19:09:06 +0000
Files and hashes: 1: 326131333a393634343a34303a3a2f34342d3438203d3e20323131343331.roa (hash: UQpEpactphMaN3i4tpyR5s9Tmz685dUuNs8hSuG0cJQ=)
2: 326131333a393634343a343030303a3a2f34302d3438203d3e203133333335.roa (hash: 3m2Z/mjozERlCSY+vSBpPSC7mc1wNvFz/UzxCrw2jy0=)
3: 39312e3230372e31332e302f32342d3234203d3e203532313132.roa (hash: YRttKbBVKmVFJCLqXVNyqXBZwi5ZooomBxSDP4Gl2m4=)
4: 326131333a393634343a34303a3a2f34342d3438203d3e20323136333336.roa (hash: lNHaIlVxi/lYCx53I3+MfwePjUfRoiP0WtejKnMjprU=)
5: 326131333a393634303a3a2f34342d3434203d3e203532313132.roa (hash: DOR1Pt3ct68s+ey18ZghPrs5rAUoZlIbwxjvP68BE+k=)
6: 326131333a393634343a343030303a3a2f34302d3438203d3e20323034323931.roa (hash: OXH7kpuguUKmKnwoouN0IGAOMj3E/W/ffH2kJO7vbOY=)
7: 326131333a393634343a31303a3a2f34362d3438203d3e203438313934.roa (hash: WOAaZY65k+/GoeKbXXymPrZVu7CfbDlQvCXqyS0ZjLA=)
8: 8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.cer (hash: nYcdq/fifitjvFyPoNBEJvUP1WGfqAJvzv/Dj2Iivv0=)
9: F1D0572FE72991BD32854BAC716676EBDAD22ACE.crl (hash: PnH87np3X3PJ1yTjDj2OyYszZ5Nz8+Gu89bhWsWranA=)
10: 326131333a393634343a333030303a3a2f34302d3438203d3e20323131343331.roa (hash: e3gM8xBShVESXc8MaKIMDq1iDa8wjJWbHPjdOfhPuFQ=)
11: 326131333a393634343a323232303a3a2f34342d3438203d3e20323134393932.roa (hash: 894RTKAEh4ciZZOdefpuTBSaNDM2TQpQSdGle6pgy08=)
12: 5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC.cer (hash: DDBKGLOay0ETlRkkd+ZGuz8/q4wtGaLppxLYYnPMDTM=)
13: 326131333a393634313a3a2f34382d3438203d3e203532313132.roa (hash: 5o2ZOradY5DoOPidcJ775vbaNLbxYZsPfZS6MPweSnY=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.crl
rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8dBXL-cpkb0yhUuscWZ269rSKs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Jan 2026 19:09:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:94:de:eb:34:6e:31:fe:0f:f1:c2:64:7b:9d:c7:af:08:56:c4:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d0572fe72991bd32854bac716676ebdad22ace
Validity
Not Before: Jan 28 15:18:06 2026 GMT
Not After : Jan 29 19:09:06 2026 GMT
Subject: CN=11B8409B8F425E7462A238863F1EB1CF3593C5EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b7:e8:34:32:a2:1e:27:2e:64:7a:03:50:fb:
e6:28:db:96:f2:6e:b8:8e:f6:1c:e0:5e:f9:4f:a1:
37:80:80:d7:93:f6:25:0f:d2:bc:82:2f:6e:ae:ec:
5c:18:2d:25:ae:75:af:d5:e9:a5:67:ac:e8:97:bb:
5f:3b:29:e2:dd:13:62:ca:38:af:78:ae:35:23:af:
9c:7e:4f:4a:b2:86:85:27:c8:ff:54:73:24:e6:58:
f1:73:42:9d:a8:ec:a7:75:04:4a:6b:75:50:7d:32:
a3:bb:4c:13:ac:af:ef:75:0f:7d:bf:5a:04:f0:9f:
38:43:4b:5c:4f:af:99:70:30:e3:6f:71:73:31:dd:
6c:48:cf:72:20:cd:4b:1b:b2:1a:40:d8:ed:df:3b:
8a:0d:27:57:2d:8c:4a:e6:7a:d8:d0:aa:ad:5f:60:
8b:92:42:2c:03:ae:a2:64:5f:30:11:30:16:7a:98:
b1:aa:0e:60:8c:46:7f:28:65:73:d6:08:c7:7f:7c:
59:33:73:b4:96:e0:06:ab:55:57:e3:55:48:77:aa:
aa:a5:17:2c:0c:4c:aa:9b:17:d2:c1:90:83:d6:d5:
3e:47:5f:5a:a2:d8:8e:46:c5:05:4a:6b:f6:a7:7a:
66:29:33:a2:04:31:f1:ee:cf:22:67:53:23:4e:d9:
d9:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:B8:40:9B:8F:42:5E:74:62:A2:38:86:3F:1E:B1:CF:35:93:C5:EE
X509v3 Authority Key Identifier:
keyid:F1:D0:57:2F:E7:29:91:BD:32:85:4B:AC:71:66:76:EB:DA:D2:2A:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dBXL-cpkb0yhUuscWZ269rSKs4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:12:65:8a:93:19:90:68:96:7d:29:d4:b0:77:5c:f9:02:0f:
83:d6:4a:8e:c4:5f:3c:02:d9:4c:c8:10:11:0e:2c:ef:53:95:
1f:31:7f:6a:c4:c5:b8:65:1d:49:75:a7:91:c3:43:8e:27:ba:
a5:ab:57:3b:7a:4e:33:5f:fb:0d:4c:30:34:db:13:ca:0e:59:
c8:bc:ca:ff:43:91:27:7d:8a:4c:06:8e:75:7c:1c:dd:fd:0e:
43:09:0a:50:63:7f:9f:9d:ec:6b:9b:11:de:c7:01:94:2e:7f:
bb:9f:74:4d:bc:f1:68:8e:84:e4:57:c9:b6:ff:82:55:b8:0d:
85:5d:9d:76:10:9e:f4:7c:58:6f:54:c6:66:cd:45:57:89:47:
17:85:39:b8:7f:3c:43:ec:23:c6:17:61:6d:e9:e4:4d:b6:17:
49:bd:1d:05:b0:b2:53:05:78:f2:9f:c2:d7:f0:13:5b:9e:20:
e6:fc:bf:9e:ac:15:cc:78:68:00:18:61:73:dd:fc:e5:72:f2:
ed:fa:de:99:63:b8:68:41:ad:3a:03:61:90:92:d5:b4:d5:b5:
f7:f0:d5:bc:5b:91:59:b0:ff:0e:e0:41:e2:46:50:ab:d5:84:
5e:ac:80:0f:3a:53:7a:f6:d6:6c:1d:5a:a1:07:97:0e:3e:7d:
c0:b3:6b:dd
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUeJTe6zRuMf4P8cJke53HrwhWxEUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZjFkMDU3MmZlNzI5OTFiZDMyODU0YmFjNzE2Njc2ZWJk
YWQyMmFjZTAeFw0yNjAxMjgxNTE4MDZaFw0yNjAxMjkxOTA5MDZaMDMxMTAvBgNV
BAMTKDExQjg0MDlCOEY0MjVFNzQ2MkEyMzg4NjNGMUVCMUNGMzU5M0M1RUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCot+g0MqIeJy5kegNQ++Yo25by
briO9hzgXvlPoTeAgNeT9iUP0ryCL26u7FwYLSWuda/V6aVnrOiXu187KeLdE2LK
OK94rjUjr5x+T0qyhoUnyP9UcyTmWPFzQp2o7Kd1BEprdVB9MqO7TBOsr+91D32/
WgTwnzhDS1xPr5lwMONvcXMx3WxIz3IgzUsbshpA2O3fO4oNJ1ctjErmetjQqq1f
YIuSQiwDrqJkXzARMBZ6mLGqDmCMRn8oZXPWCMd/fFkzc7SW4AarVVfjVUh3qqql
FywMTKqbF9LBkIPW1T5HX1qi2I5GxQVKa/anemYpM6IEMfHuzyJnUyNO2dknAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUEbhAm49CXnRiojiGPx6xzzWTxe4wHwYDVR0j
BBgwFoAU8dBXL+cpkb0yhUuscWZ269rSKs4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZTMwZGU4NGItNDAwYS00ZmQxLWFiOGEtZTc2MTZlMjQ1
YjQ5LzAvRjFEMDU3MkZFNzI5OTFCRDMyODU0QkFDNzE2Njc2RUJEQUQyMkFDRS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhkQlhMLWNwa2IweWhVdXNjV1oyNjly
U0tzNC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lMzBkZTg0Yi00
MDBhLTRmZDEtYWI4YS1lNzYxNmUyNDViNDkvMC9GMUQwNTcyRkU3Mjk5MUJEMzI4
NTRCQUM3MTY2NzZFQkRBRDIyQUNFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARhJlipMZkGiWfSnUsHdc
+QIPg9ZKjsRfPALZTMgQEQ4s71OVHzF/asTFuGUdSXWnkcNDjie6patXO3pOM1/7
DUwwNNsTyg5ZyLzK/0ORJ32KTAaOdXwc3f0OQwkKUGN/n53sa5sR3scBlC5/u590
TbzxaI6E5FfJtv+CVbgNhV2ddhCe9HxYb1TGZs1FV4lHF4U5uH88Q+wjxhdhbenk
TbYXSb0dBbCyUwV48p/C1/ATW54g5vy/nqwVzHhoABhhc9385XLy7fremWO4aEGt
OgNhkJLVtNW19/DVvFuRWbD/DuBB4kZQq9WEXqyADzpTevbWbB1aoQeXDj59wLNr
3Q==
-----END CERTIFICATE-----
Generated at Thu Jan 29 05:45:09 2026 by rpki-client