This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft
File: C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft (raw, json)
Hash identifier: 83sKLToTJuxXoo3/NsEjZhshePpfkqcJA9fh3ckksi8=
Subject key identifier: 7D:B2:8C:8B:3C:96:2E:31:4A:57:85:25:F7:E7:9D:1E:6E:66:2F:60
Authority key identifier: C7:70:F4:33:58:B9:7B:A0:AA:9B:DC:62:BB:D5:11:E9:0A:EA:B2:9D
Certificate issuer: /CN=c770f43358b97ba0aa9bdc62bbd511e90aeab29d
Certificate serial: 47B23F31B5978FC7E7AEBD49B8A3BEA0D80B6600
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft
Manifest number: 0260
Signing time: Mon 19 Jan 2026 16:59:12 +0000
Manifest this update: Mon 19 Jan 2026 16:54:12 +0000
Manifest next update: Tue 20 Jan 2026 19:15:12 +0000
Files and hashes: 1: 3130332e34392e3132382e302f32342d3234203d3e20313534303439.roa (hash: RP7fF4ljaFnG1QBw6wHJTYmQiSzsC+UtOPXQULgrH/c=)
2: 34332e3233302e38342e302f32342d3234203d3e203633313939.roa (hash: mN7VhJyGfS7zh6TYiLbpihJCInKpBaTwITIrbKnSr78=)
3: 3130332e34392e3133312e302f32342d3234203d3e20313534343038.roa (hash: uNydLTQQX3HfUttLHpAQztbzmsLo2FwUjxcM/0z5ejA=)
4: 34332e3233302e38342e302f32342d3234203d3e203235313938.roa (hash: D5rxpe/mz9cZbwkoouLs3Io8a9VjYwAhmSHGosd1BJQ=)
5: 34332e3233302e38352e302f32342d3234203d3e20323131343430.roa (hash: hoZQSGqkvoyh+Fwe28UicpO6RAJD80P7rklT/Di/mQU=)
6: 33312e32322e3130352e302f32342d3234203d3e20323135303236.roa (hash: CEnX1eNlwK6zTbdiivvYtvATObcHBs1ojc6GAmrJxmA=)
7: 33312e32322e3130372e302f32342d3234203d3e20313337353137.roa (hash: zucU5bamNfYRw/esvivyzaXHMAl8N0xQ+Q3coI+3JvA=)
8: 33312e32322e3130392e302f32342d3234203d3e203432383331.roa (hash: uRUTbbdZ8AYVGvK3CKTe3KYxaaV1m1bGyvfgh/rstUI=)
9: 33312e32322e3130382e302f32342d3234203d3e203432383331.roa (hash: 8yRIzyX7kSL5wlZucsqrW2Cnq9iyHa3XujSoVf8z1CY=)
10: 33312e32322e3131312e302f32342d3234203d3e20323135333535.roa (hash: brok2XUOzC0OAQs7efh1lP/TIOrHW70pJohRfs3tgEM=)
11: 3130332e34392e3133312e302f32342d3234203d3e20313338333634.roa (hash: PCBT1S5SsQNvPExnIxpGrOJnC4Zxkw3ilANCZAM8stA=)
12: 3130332e34392e3133312e302f32342d3234203d3e20313437323631.roa (hash: gI3QMk1nxnVJ3ar9nDADeDjafrF5rxSYgoW75rlLkBk=)
13: 3130332e34392e3132392e302f32342d3234203d3e20313533373836.roa (hash: 8ciOgQf/5f2kkiTl0Q7pGFYfq76YJlE+KlbE9/JeEuM=)
14: 33312e32322e3130342e302f32342d3234203d3e20313938303230.roa (hash: 2c/Q6mL57WPxOvD74dnFYEhVwjt0QpjY04YbOcxeQJ8=)
15: 34332e3233302e38352e302f32342d3234203d3e20323132363639.roa (hash: vgObUGnSREXD+ZGKD48TBidzsDD4bb41p0YUFbXX2ak=)
16: 33312e32322e3130362e302f32342d3234203d3e20323133353032.roa (hash: gMhOzO7mxft8aHHqMyhMEvoyI4x3AcVBhgkY3Yc2Ryc=)
17: 3130332e34392e3133302e302f32342d3234203d3e20383334.roa (hash: BeVzuWN/0Qvsq9GYvTx4ZuaACwAjnMKfoJ2e9z9vYwU=)
18: C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl (hash: in30pHHBkbOv1I6ZGOzBF/nCmED0p0DhlHZLIoCf428=)
19: 3130332e34392e3133312e302f32342d3234203d3e20323133373131.roa (hash: 0KQImRtVxQSlo2IkiWEm4Ta1ecdBVyx0gErMixeusbs=)
20: 34332e3233302e38362e302f32332d3234203d3e2033343931.roa (hash: BqbUmbythNNYP4WqssroNY2sOPvoyuRgXIRAVuIytpA=)
21: 33312e32322e3131302e302f32342d3234203d3e20323038393035.roa (hash: GDspqRij6MiNPh7udQ2b5uDlkV2tbpp6r9PQ/alfk6o=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl
rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Jan 2026 09:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:b2:3f:31:b5:97:8f:c7:e7:ae:bd:49:b8:a3:be:a0:d8:0b:66:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c770f43358b97ba0aa9bdc62bbd511e90aeab29d
Validity
Not Before: Jan 19 16:54:12 2026 GMT
Not After : Jan 20 19:15:12 2026 GMT
Subject: CN=7DB28C8B3C962E314A578525F7E79D1E6E662F60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:cd:4a:2f:6c:3b:71:2b:d9:e7:24:31:cc:76:
25:e8:dc:90:43:2b:f9:91:7e:98:a1:c0:e5:b9:90:
fb:99:a5:92:26:66:0e:44:c9:b5:5c:1e:65:42:96:
98:04:fc:61:bb:1e:68:59:a9:52:ed:d4:aa:9a:a0:
34:15:29:e8:24:12:c7:83:49:f9:a4:dc:ae:32:cc:
ab:95:e3:46:76:9e:74:3c:c6:30:ec:f2:49:a6:45:
d5:23:08:71:b0:72:80:12:e6:6c:fd:fe:c1:12:c1:
12:9a:30:09:2a:fa:43:94:cf:f6:17:31:17:81:19:
56:e2:9b:60:a3:d4:6c:37:a2:7a:08:1f:37:6a:33:
5d:68:72:d5:e7:ef:e6:0e:85:6d:a2:70:e8:97:ad:
2b:d0:e6:57:b7:0c:c5:7b:7c:de:3f:1e:84:c0:0e:
ed:5b:6c:67:2d:2b:31:5e:ff:d3:61:ea:1f:17:ca:
e6:9e:7b:4f:48:5b:35:55:7d:a7:5e:e8:ab:2c:97:
89:c7:5e:b1:2a:57:05:51:9c:c8:8e:a8:ce:c7:a3:
2c:ba:9d:8b:fd:59:9f:6e:2b:d9:65:49:f4:a2:76:
83:01:76:a0:71:61:fb:cd:07:f8:9b:90:f6:84:05:
e8:17:65:ff:85:3b:55:46:a8:44:e3:d3:0f:01:e9:
34:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:B2:8C:8B:3C:96:2E:31:4A:57:85:25:F7:E7:9D:1E:6E:66:2F:60
X509v3 Authority Key Identifier:
keyid:C7:70:F4:33:58:B9:7B:A0:AA:9B:DC:62:BB:D5:11:E9:0A:EA:B2:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:65:f1:b1:79:91:4d:89:c9:70:6f:1e:22:60:eb:68:0c:cd:
be:92:44:1d:e0:f0:f7:a8:37:ce:01:78:bc:5c:cf:17:31:40:
4e:1c:d7:9f:f6:2b:b2:8b:c1:91:11:50:54:01:c9:ed:bb:7f:
47:4d:c7:ec:a4:a6:61:25:9c:b9:dd:4e:64:b5:1e:f9:d6:b1:
1d:de:21:6c:14:9d:63:77:b3:3d:6e:05:d3:c6:da:20:9a:cc:
71:a4:8e:30:7b:3f:e6:2b:9f:c1:78:ea:b3:7f:31:9e:ba:6b:
76:03:9f:e3:ec:06:26:1b:a7:06:73:f3:4e:cc:d1:4b:10:17:
6b:40:d6:69:fe:8f:52:92:c4:79:1c:f5:bd:5e:38:eb:15:cd:
a8:75:84:15:7b:d2:ef:a0:af:77:34:be:a9:31:e4:56:72:66:
c2:87:31:48:88:08:65:15:f2:2c:b0:96:b3:56:4f:9c:0e:38:
24:33:9e:46:4d:30:08:67:9b:10:37:66:3a:f5:78:46:10:81:
76:13:a7:2f:63:58:65:09:de:1b:1f:1a:11:0d:d2:bb:34:d7:
00:43:17:0b:16:e5:0b:dd:86:0d:87:e5:9d:c8:6c:d2:87:f5:
5b:2b:c2:10:88:0c:98:7a:4d:36:f1:39:08:e6:5e:af:16:69:
df:3e:eb:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 18:37:48 2026 by rpki-client