This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/29066f5d-ecc1-4927-95c1-e1a8df8f9897/0/1498141819112B8446C2D4A3111F53038F05DBE9.mft
File: 1498141819112B8446C2D4A3111F53038F05DBE9.mft (raw, json)
Hash identifier: UpKRr3pVSlw3YjvQpXhgcoGM5hFrDRBplX2E9QUIAUo=
Subject key identifier: 12:13:9A:34:89:DB:3E:27:8B:97:D1:BF:BC:FA:56:D9:BF:A2:A6:3C
Authority key identifier: 14:98:14:18:19:11:2B:84:46:C2:D4:A3:11:1F:53:03:8F:05:DB:E9
Certificate issuer: /CN=1498141819112b8446c2d4a3111f53038f05dbe9
Certificate serial: 6FB03900E10F7E82622927AAECFDE933E0A85A87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FJgUGBkRK4RGwtSjER9TA48F2-k.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/29066f5d-ecc1-4927-95c1-e1a8df8f9897/0/1498141819112B8446C2D4A3111F53038F05DBE9.mft
Manifest number: 014F
Signing time: Sun 25 Jan 2026 16:40:27 +0000
Manifest this update: Sun 25 Jan 2026 16:35:27 +0000
Manifest next update: Mon 26 Jan 2026 17:36:27 +0000
Files and hashes: 1: 3138352e39312e3131322e302f32342d3234203d3e203230343733.roa (hash: uQR2ZEBSc/gm5nc4UWXss03+GuSFprtiONvs7ml01aQ=)
2: 3138352e39312e3131342e302f32342d3234203d3e20323132323338.roa (hash: O3+fkuGYHEGuJgzobwksf3BrAnxvmElLOiQKqynfHQQ=)
3: 1498141819112B8446C2D4A3111F53038F05DBE9.crl (hash: 1lmDEUHy8S6LohkJ8pXdXZRsxK4aYMW+RQyS304UXZo=)
4: 3138352e39312e3131332e302f32342d3234203d3e20323134323038.roa (hash: qSSu/jTa9CtmAhgZlrJ1s4QldXeKp0EqfLu29FuP5Zs=)
5: 3138352e39312e3131352e302f32342d3234203d3e2034363337.roa (hash: ck91ILJJRhGrU5dcx7s2t1suhnGyLbRTekoZlADPXPE=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/29066f5d-ecc1-4927-95c1-e1a8df8f9897/0/1498141819112B8446C2D4A3111F53038F05DBE9.crl
rsync://rsync.paas.rpki.ripe.net/repository/29066f5d-ecc1-4927-95c1-e1a8df8f9897/0/1498141819112B8446C2D4A3111F53038F05DBE9.mft
rsync://rpki.ripe.net/repository/DEFAULT/FJgUGBkRK4RGwtSjER9TA48F2-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 13:21:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:b0:39:00:e1:0f:7e:82:62:29:27:aa:ec:fd:e9:33:e0:a8:5a:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1498141819112b8446c2d4a3111f53038f05dbe9
Validity
Not Before: Jan 25 16:35:27 2026 GMT
Not After : Jan 26 17:36:27 2026 GMT
Subject: CN=12139A3489DB3E278B97D1BFBCFA56D9BFA2A63C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:09:6c:b3:82:4e:0a:aa:6d:d5:cf:ba:9e:de:
16:82:95:6f:fb:a4:ec:ec:5e:99:25:e9:f5:12:48:
8a:32:1d:85:81:07:44:00:48:c0:80:8f:99:00:8a:
ae:a2:97:b0:91:18:dd:bd:94:59:58:5a:76:5f:3a:
a7:fc:17:fd:6c:e7:5b:7b:e2:46:d9:c4:2d:b8:d8:
26:50:c7:2d:cb:e7:0a:24:27:57:0c:de:f6:1f:35:
7b:24:d2:2e:42:ef:73:2d:66:10:d8:65:f7:05:a0:
81:85:c3:82:36:3f:34:59:57:55:bb:6d:c4:8b:04:
06:0d:cd:d6:00:94:93:da:69:b7:58:4d:50:11:80:
20:00:99:2c:fa:83:90:5d:70:a8:54:39:a3:bf:3c:
ac:16:ce:71:a5:40:bb:51:36:d2:5f:e6:83:d0:15:
0a:98:a3:46:04:75:9b:ba:3f:03:d5:ce:b9:90:d0:
60:86:16:f0:60:f0:9d:b9:7b:f4:b4:df:e2:4b:47:
89:1a:4b:13:65:b9:07:cc:88:a3:eb:bd:e5:28:40:
14:dc:1e:fb:59:af:4f:60:34:2e:40:8c:28:0d:9e:
76:1f:09:cd:17:91:85:a3:d6:aa:06:38:66:7c:6d:
61:7b:6c:27:94:12:d4:fd:61:a9:f0:4e:01:00:cd:
a6:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:13:9A:34:89:DB:3E:27:8B:97:D1:BF:BC:FA:56:D9:BF:A2:A6:3C
X509v3 Authority Key Identifier:
keyid:14:98:14:18:19:11:2B:84:46:C2:D4:A3:11:1F:53:03:8F:05:DB:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/29066f5d-ecc1-4927-95c1-e1a8df8f9897/0/1498141819112B8446C2D4A3111F53038F05DBE9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FJgUGBkRK4RGwtSjER9TA48F2-k.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/29066f5d-ecc1-4927-95c1-e1a8df8f9897/0/1498141819112B8446C2D4A3111F53038F05DBE9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:5b:c7:48:e8:d1:4f:a7:5d:7f:03:68:85:ba:09:fb:9d:63:
af:c4:74:08:e9:fb:45:62:39:8b:47:6b:2e:c8:ea:bc:4d:ed:
80:81:be:50:93:80:66:cb:3b:c9:31:11:8d:e4:f8:3c:1c:91:
d2:16:d1:5a:62:6e:04:24:7c:dc:95:b8:32:74:a9:d4:29:fc:
f2:89:41:c1:85:82:e1:a8:87:6d:8e:5e:0e:b8:0c:82:8c:29:
38:72:46:e7:05:ab:15:07:91:92:a3:90:fc:33:85:95:88:ee:
55:12:df:75:86:17:5e:0d:f6:9b:b1:f2:a7:6c:7e:3e:ed:00:
03:48:b6:ae:db:5b:c4:2c:b2:ff:ce:33:fd:a3:31:61:7d:ba:
9c:1b:b3:66:9e:32:34:70:c5:47:7e:25:86:f0:43:0f:13:bd:
c7:d1:bd:94:0e:87:40:c3:84:94:4a:e3:c2:53:42:0b:07:13:
d5:ae:a1:d4:f1:36:6b:09:06:d0:03:71:1e:44:b0:77:28:93:
f3:34:34:0a:3e:d8:60:58:2d:95:e6:f9:1a:4b:c4:34:36:ef:
a2:bf:65:e8:cd:5e:5a:cf:49:0e:72:5d:c6:37:5e:9b:21:79:
d5:e2:87:f9:e9:c9:7f:6a:ad:18:82:42:19:05:4d:62:49:67:
33:4a:6b:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:07:12 2026 by rpki-client