This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft
File: 9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft (raw, json)
Hash identifier: 4+bHraMZXl3CLv5BsK9n37o8/qx9L3Q/b0jlnknlcjg=
Subject key identifier: 5E:B3:66:6B:38:22:25:87:53:B8:57:EA:7C:01:F1:0E:44:27:E3:ED
Authority key identifier: 9D:F8:59:97:B1:B9:B3:58:E1:C4:3F:36:76:5A:A0:A4:A0:21:44:AE
Certificate issuer: /CN=9df85997b1b9b358e1c43f36765aa0a4a02144ae
Certificate serial: 6483E4CB1AF64B372D66C39AD960EC51D2F68E9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft
Manifest number: 04E0
Signing time: Sun 25 Jan 2026 04:19:23 +0000
Manifest this update: Sun 25 Jan 2026 04:14:23 +0000
Manifest next update: Mon 26 Jan 2026 07:37:23 +0000
Files and hashes: 1: 9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl (hash: dZTdP7/IxJiKFYvyrAjwD4yKyU6Q5G5DpD35ucW4SoA=)
2: 3138352e3134392e3135332e302f32342d3234203d3e203434373731.roa (hash: 3LQCLtbZ2cAzmsqD8inTKmHS0+b4RIJVefCUUonuvB0=)
3: 38362e33382e382e302f32312d3231203d3e203135343139.roa (hash: uWYPVYjRnhouz2kB1gip220mm9ixJ1+yxtSXIITlxEw=)
4: 3138352e3134392e3135332e302f32342d3234203d3e203133313934.roa (hash: DudKC7EbN/x1z3E3UcohZZDxNJCJJwujdDPss+8DrkI=)
5: 38392e3131362e31392e302f32342d3234203d3e203135343139.roa (hash: 4JL3Gtu7UsX3IaHs3LaQwmdxUfCfFV6YWJerzJoc+wE=)
6: 3138352e3134392e3135352e302f32342d3234203d3e203434373731.roa (hash: W9T8aPnkMAlNbGOA+isd3U8U+YdKRxlDW0/+vHw4iGg=)
7: 38392e3131362e312e302f32342d3234203d3e203135343139.roa (hash: QlNtxapPtCDVmKsd/rR7Y2Bq1QIkmg64gwg6mpWc9ZY=)
8: 38392e3131362e3131362e302f32322d3232203d3e203135343139.roa (hash: +6pKiWIr1xfpXpXCXiVMVMi0tFetJIO1JWmpuLH4c10=)
9: 3231372e392e3234322e302f32342d3234203d3e203135343139.roa (hash: mOAttZBNx/CTeO/Z3xtwFj9TNAzOHD7wWSzttDopHBY=)
10: 38392e3131362e34322e302f32332d3233203d3e203135343139.roa (hash: dqiC7sfkexEdY4bNAfWo7TkIe5GTWHX5uIAGfupS9Ro=)
11: 38392e3131362e31352e302f32342d3234203d3e203135343139.roa (hash: /LejqbWiFUxs1DgkjzVItnmcQXCtVjOkQxj/fIk9rAQ=)
12: 38392e3131362e31322e302f32332d3233203d3e203135343139.roa (hash: vCrLMX0eSFK/WsSjH4NPI6BnYmwIN7ZEFJbozFxO6uE=)
13: 326130323a323633303a3a2f32392d3239203d3e203135343139.roa (hash: 8htEN27nXC1XFUYvScmaKLGazPRUUosEipnSlN6XgBk=)
14: 38322e3134302e3133312e302f32342d3234203d3e203135343139.roa (hash: YcmyLeFBQ+WK9MxW4qT13yT/CsdMqFWcCNcHges7cNY=)
15: D34606949D385DB42714FE71274FAC9948EF279C.cer (hash: TQCZQkzK1CqgemnKR/erluvTKMYq58W//DcXZ16FiAE=)
16: 38392e3131362e31362e302f32332d3233203d3e203135343139.roa (hash: 7gdiZpTYF4VKwdmEsTHKuwi6oAiZC6mVLx4cpcdl/GE=)
17: 38392e3131362e342e302f32322d3232203d3e203135343139.roa (hash: S7PYQmgyaS+nUukOrNi+7gU0SVsm2vupfOTXwPtPOXM=)
18: 3231372e392e3234312e302f32342d3234203d3e203135343139.roa (hash: hFAW06mmhAPSV/HJ4B8aC2PvIR5CrcKx3FcqsTikSiM=)
19: 38392e3131362e34312e302f32342d3234203d3e203135343139.roa (hash: nrTdofG3QiyT59ifvXqBtX8pF4lYbmqFJc6mO1yyOW0=)
20: 38362e33382e332e302f32342d3234203d3e203135343139.roa (hash: 1jWpw+W9zeIRwNdxwEeWvA1uKZ5XVqeLW/yed0hU+d4=)
21: 3138352e3134392e3135322e302f32322d3232203d3e203135343139.roa (hash: yiPh36TU1+o+jLX45pyYr1yhJEOI86BPrMUwrS94mMI=)
22: 38322e3134302e3138392e302f32342d3234203d3e203135343139.roa (hash: q/tmnbq1kdd2hUMwbcuSKcZt7pux1EaGGpLbn7IfofI=)
23: 38322e3134302e3137382e302f32342d3234203d3e203135343139.roa (hash: kVZlSJSrWOIFgbVyyqSUiD6jECTpvfhx5mx8hRL1cGE=)
24: 326130323a323633303a3a2f33322d3332203d3e203135343139.roa (hash: qWp9paAJXWyG6T4NlWTD/O+mrcUKf+wb2OOSJ/RUTQM=)
25: 38392e3131362e322e302f32332d3233203d3e203135343139.roa (hash: twheygdBU9M/hWK8PwEKS7vel1IBGYLsGKuF6NDPdmA=)
26: 3138352e3134392e3135332e302f32342d3234203d3e203135343430.roa (hash: ld9bmw/lU5ViE7fFfnUAARe92vzpSXeZ47xTrIGHE2Y=)
27: 3231372e392e3235342e302f32332d3233203d3e203135343139.roa (hash: iksl6QO5bGAwqBp6Vth9mckUoVZxpFnDxq6gmgw5QDs=)
28: 3138352e3134392e3135342e302f32342d3234203d3e203434373731.roa (hash: Pgs5ueHQXHOzRUAnFpUKAel9Ig4WE+HMpXX4wHeR3SY=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Jan 2026 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:83:e4:cb:1a:f6:4b:37:2d:66:c3:9a:d9:60:ec:51:d2:f6:8e:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9df85997b1b9b358e1c43f36765aa0a4a02144ae
Validity
Not Before: Jan 25 04:14:23 2026 GMT
Not After : Jan 26 07:37:23 2026 GMT
Subject: CN=5EB3666B3822258753B857EA7C01F10E4427E3ED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:c4:4d:7f:53:84:37:73:ae:28:a8:85:91:d7:
c5:52:a5:e8:c1:2e:ff:57:a7:91:fa:24:d2:ae:10:
89:f6:58:00:db:aa:66:14:a1:89:54:9d:6d:58:3d:
14:ca:f3:c7:0f:aa:47:27:7f:ad:a8:62:fe:65:31:
9c:d1:19:a2:b6:a7:d2:8c:5a:ed:5f:9f:1a:ba:78:
a1:86:a0:91:81:42:82:d5:f8:d2:87:fa:99:31:6a:
ee:a0:89:00:f5:17:e3:71:ae:5f:95:11:a8:d6:c2:
3a:4f:47:d1:b7:d0:61:7c:92:28:13:61:75:46:b6:
39:88:fe:2c:38:62:a3:8b:f3:c1:cf:f4:02:7e:1a:
5a:4c:07:1e:f9:5a:ee:68:b5:8b:78:02:3f:3c:c6:
8e:f2:d4:4b:15:07:4b:e3:64:28:33:b2:e9:c8:be:
23:5a:91:0e:fe:20:53:90:db:36:18:15:09:1a:47:
cd:58:05:24:99:c3:ec:ef:9e:40:b9:f0:df:38:ba:
ba:ef:aa:28:bc:86:b3:4c:dd:1f:be:93:14:c5:37:
1f:9b:02:3a:c3:34:a5:90:39:f1:9b:9b:43:ef:e7:
53:d4:11:cb:68:39:37:54:fc:3f:80:3c:5c:1e:e1:
ce:7d:11:0d:37:a1:01:ea:84:e4:c6:c3:50:de:7f:
80:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:B3:66:6B:38:22:25:87:53:B8:57:EA:7C:01:F1:0E:44:27:E3:ED
X509v3 Authority Key Identifier:
keyid:9D:F8:59:97:B1:B9:B3:58:E1:C4:3F:36:76:5A:A0:A4:A0:21:44:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:77:dd:50:54:37:4e:f2:b4:a9:79:e6:ea:9d:87:ff:b5:ed:
f5:e3:9f:4a:fb:48:f8:ce:36:f9:cd:8b:a6:0f:b1:7a:a6:15:
42:6d:87:14:48:8a:2a:dd:b9:29:59:e5:6b:b6:d7:3a:af:2f:
5b:cb:bf:fa:2a:34:e2:5f:6f:16:99:dd:26:8a:a4:0e:f2:3b:
c2:9f:6a:a4:8c:19:bc:ea:fe:61:7c:30:09:3e:ca:13:f8:1c:
ce:24:3b:5c:50:e8:30:e5:e3:2d:29:c3:d0:4f:88:9e:fe:3c:
34:ce:d6:98:89:d0:91:e3:91:38:02:46:f5:61:5c:92:2d:44:
2a:d5:62:97:f3:87:b0:96:f6:1b:7e:66:65:8a:ce:6e:bf:6b:
51:1b:25:54:33:31:a3:51:a6:d8:62:02:dd:22:f9:7b:4b:fb:
e4:b4:65:c5:46:3d:e7:9e:c0:ed:a2:9b:a5:53:f1:a0:cf:9b:
45:63:19:eb:8f:4e:6d:ed:9c:12:ac:8e:f4:c5:b4:31:5f:5a:
ec:80:58:15:15:47:61:2e:3d:40:c4:e9:97:f8:b1:b5:3d:be:
d3:27:98:35:cb:c4:f2:8c:1a:52:f9:3c:68:bc:54:ee:08:27:
d1:cd:4b:cc:30:7d:a4:f4:83:98:e6:fd:f8:5a:07:50:8c:73:
c7:a1:20:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:09:56 2026 by rpki-client