This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/1/C18020BDC5E6BA4A5474D3AA0DA4A962A68D98AB.mft
File: C18020BDC5E6BA4A5474D3AA0DA4A962A68D98AB.mft (raw, json)
Hash identifier: jTLQ8ChLbg03fOqjB9pdoDnJJnv5xWgUx3iLRkHC6i4=
Subject key identifier: 73:6F:64:23:E9:71:66:77:2C:21:1B:F8:2D:82:87:D5:AD:46:2D:1D
Authority key identifier: C1:80:20:BD:C5:E6:BA:4A:54:74:D3:AA:0D:A4:A9:62:A6:8D:98:AB
Certificate issuer: /CN=c18020bdc5e6ba4a5474d3aa0da4a962a68d98ab
Certificate serial: 565BF996658B9B83F0ADFDB25D27BC7043A246A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wYAgvcXmukpUdNOqDaSpYqaNmKs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/1/C18020BDC5E6BA4A5474D3AA0DA4A962A68D98AB.mft
Manifest number: 91
Signing time: Wed 21 Jan 2026 00:36:50 +0000
Manifest this update: Wed 21 Jan 2026 00:31:50 +0000
Manifest next update: Thu 22 Jan 2026 03:57:50 +0000
Files and hashes: 1: AS204211.asa (hash: yt11FQmMZ8P9UMbvCIMjnEDEe7PkUl2NP7ay9+7hSTo=)
2: C18020BDC5E6BA4A5474D3AA0DA4A962A68D98AB.crl (hash: rJI4iB2R42GTSu3Rr3Dt0LObPY9kI09p1bzmVVYf+hI=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/1/C18020BDC5E6BA4A5474D3AA0DA4A962A68D98AB.crl
rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/1/C18020BDC5E6BA4A5474D3AA0DA4A962A68D98AB.mft
rsync://rpki.ripe.net/repository/DEFAULT/wYAgvcXmukpUdNOqDaSpYqaNmKs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Jan 2026 00:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:5b:f9:96:65:8b:9b:83:f0:ad:fd:b2:5d:27:bc:70:43:a2:46:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c18020bdc5e6ba4a5474d3aa0da4a962a68d98ab
Validity
Not Before: Jan 21 00:31:50 2026 GMT
Not After : Jan 22 03:57:50 2026 GMT
Subject: CN=736F6423E97166772C211BF82D8287D5AD462D1D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:c3:4c:cf:1b:8c:e9:28:82:38:0a:43:c8:03:
93:6e:0f:dc:f4:63:40:bf:5b:65:72:98:df:bb:cf:
48:93:8c:ab:1d:86:fe:4b:80:95:e3:34:78:f7:74:
7e:11:ff:95:a3:e2:6b:83:f0:e9:3b:4c:6d:c5:88:
29:c2:48:ad:3c:10:ff:3a:ea:ed:42:6c:04:ea:9f:
75:05:08:a1:55:72:bd:05:1b:fa:97:91:14:1e:2d:
c0:e5:f9:89:74:e6:e3:99:30:f7:ce:a8:cb:36:31:
61:45:dd:06:92:10:ed:13:cc:45:26:4a:2e:20:0b:
9b:11:c2:e7:56:6d:e4:00:60:70:8f:7a:65:7a:28:
bf:11:83:99:4e:8c:5c:32:bd:cf:5b:b2:7a:dc:f4:
b7:e9:a1:47:9f:ed:ff:92:0b:25:a2:41:b3:44:07:
f9:e7:93:32:58:59:16:fa:4e:f7:11:e6:09:56:2b:
59:8a:a0:b5:d9:2c:44:57:59:13:32:16:d3:f5:90:
20:ef:0d:63:38:ae:0a:c2:14:d4:d6:ca:c4:09:f9:
b3:3b:a5:9c:a4:7d:93:99:54:db:0f:9d:34:27:2b:
6f:f3:f5:49:de:81:58:13:af:32:63:d5:f9:e5:e5:
dd:33:f8:2d:17:ed:81:33:f3:90:42:a1:60:b4:a4:
7c:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:6F:64:23:E9:71:66:77:2C:21:1B:F8:2D:82:87:D5:AD:46:2D:1D
X509v3 Authority Key Identifier:
keyid:C1:80:20:BD:C5:E6:BA:4A:54:74:D3:AA:0D:A4:A9:62:A6:8D:98:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/1/C18020BDC5E6BA4A5474D3AA0DA4A962A68D98AB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wYAgvcXmukpUdNOqDaSpYqaNmKs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/1/C18020BDC5E6BA4A5474D3AA0DA4A962A68D98AB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:c7:46:6f:0c:76:d3:b4:c9:56:2b:b2:56:c9:0a:f2:2f:cb:
f6:ba:34:23:0d:77:a7:29:5a:4f:5f:31:15:9b:dd:82:3d:37:
87:ff:2e:94:46:47:be:93:2b:09:33:50:33:04:e6:0b:eb:1b:
0a:f8:7b:97:ef:d9:1b:9e:71:a3:00:53:96:57:a6:d6:c6:bb:
15:91:22:d3:7c:3c:b6:a4:9a:39:59:1a:17:66:e3:23:10:96:
6c:64:a2:52:91:bd:29:93:ac:52:e1:be:b5:9f:a6:bd:39:29:
f6:4d:2a:19:ce:df:6f:67:8a:e8:06:20:94:94:cd:c1:df:c2:
f2:d7:0d:b9:9c:0e:8e:2a:e1:99:84:e3:91:43:ce:ec:70:52:
f9:1d:14:2f:bb:a8:52:5c:43:4e:d9:72:b7:e1:1d:73:f3:66:
04:99:e8:79:92:a2:61:b0:52:c9:ab:20:c9:24:dc:83:c4:c3:
2c:ac:fb:78:78:41:4e:33:5c:b1:f8:1f:23:3d:01:d9:72:5a:
4f:81:1f:c1:ab:ff:a3:2c:77:06:ea:9b:3b:e9:e0:ee:12:f3:
94:c2:f0:67:83:0a:28:c3:38:4f:b4:ff:cd:ba:85:ef:1d:28:
42:9d:8c:31:13:8a:73:df:fd:b6:6e:e3:7c:2f:be:ec:87:a7:
21:a5:a1:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 08:58:01 2026 by rpki-client