This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2dfb30ca-e1c2-4921-b054-d4af09165af1/0/7F216F49A3B9A84A0E85E80A2C42874F09EA3985.mft File: 7F216F49A3B9A84A0E85E80A2C42874F09EA3985.mft (raw, json) Hash identifier: pPB9mpOmfG1xrKmv7QXfi+zZmoaH6iusn4YBei+dQeU= Subject key identifier: 46:0F:7A:A8:5A:A8:C3:37:92:70:9B:F8:8F:E6:31:AD:D1:07:E5:A5 Authority key identifier: 7F:21:6F:49:A3:B9:A8:4A:0E:85:E8:0A:2C:42:87:4F:09:EA:39:85 Certificate issuer: /CN=7f216f49a3b9a84a0e85e80a2c42874f09ea3985 Certificate serial: 79210B497A7CE9C6047291D8EFF94E4FBB8464D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fyFvSaO5qEoOhegKLEKHTwnqOYU.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2dfb30ca-e1c2-4921-b054-d4af09165af1/0/7F216F49A3B9A84A0E85E80A2C42874F09EA3985.mft Manifest number: 01B7 Signing time: Sat 24 Jan 2026 21:45:25 +0000 Manifest this update: Sat 24 Jan 2026 21:40:25 +0000 Manifest next update: Mon 26 Jan 2026 01:23:25 +0000 Files and hashes: 1: 326130653a666434353a326630303a3a2f34382d3438203d3e20323132393636.roa (hash: fCahoT0DASmE4L0CnNku4FHnUTfBEMsJKaoRBnEvKJY=) 2: 326130653a666434353a326538303a3a2f34382d3438203d3e20323134373233.roa (hash: OBdYMpDCrnydUqYR/9aR6OWDxV3xrASuK04QdHbbnp4=) 3: 34352e3134362e372e302f32342d3332203d3e203439393831.roa (hash: ohztvwe2w66eHUWp00RbU/8ScLc2/rEvRDbabjcZgPU=) 4: 326130653a666434353a353030303a3a2f34302d3438203d3e20323034383330.roa (hash: 9ztDCaU6aAMVKVrLFNLTSsl1A84X7CinJDw99b10Wgk=) 5: 326130653a666434353a326633303a3a2f34382d3438203d3e20323039333130.roa (hash: Ah9wB6P+J6/u6bq6IHZMWUCN9kLwcy3+ovMQjaM+Mjs=) 6: 326130653a666434353a326635303a3a2f34382d3634203d3e203439393831.roa (hash: zpE8O6QFgOcjidzEd8zc2djpSlwttC8o8DmDYuakobQ=) 7: 7F216F49A3B9A84A0E85E80A2C42874F09EA3985.crl (hash: 3ggTLgISD0FKuEKnlZhXRzHu2xtL44S+vEFMKi6Di5c=) 8: 326130393a626534303a323830303a3a2f34302d3438203d3e20323133313730.roa (hash: bGsR+5RlWB67shIeVpz1QNwpCAPKyIXgoOV7T0RQXx8=) 9: 326130393a626534303a323830303a3a2f34302d3438203d3e20313939393530.roa (hash: AiP13DNBwIkSFzdQdSir0FYGd4okcKOcyfxhs/nt0mM=) 10: 326130653a666434353a326634303a3a2f34342d3438203d3e20323132353931.roa (hash: m8ac/OmE29DqLuwrvKPJFKpYCamTHx1fmPvpHqRkArI=) 11: 326130653a666434353a326535303a3a2f34382d3438203d3e20323135333730.roa (hash: S2x/glwBFQqLmSWyNwtm4qEtJyulbbnFBue99o2JPS8=) 12: 326130653a666434353a326366303a3a2f34382d3438203d3e20323032383535.roa (hash: lpEMU1X1JLSHAOWUFG4frUPhBZsu7LhlBnijuGC43xs=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2dfb30ca-e1c2-4921-b054-d4af09165af1/0/7F216F49A3B9A84A0E85E80A2C42874F09EA3985.crl rsync://rsync.paas.rpki.ripe.net/repository/2dfb30ca-e1c2-4921-b054-d4af09165af1/0/7F216F49A3B9A84A0E85E80A2C42874F09EA3985.mft rsync://rpki.ripe.net/repository/DEFAULT/fyFvSaO5qEoOhegKLEKHTwnqOYU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 01:23:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:21:0b:49:7a:7c:e9:c6:04:72:91:d8:ef:f9:4e:4f:bb:84:64:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7f216f49a3b9a84a0e85e80a2c42874f09ea3985 Validity Not Before: Jan 24 21:40:25 2026 GMT Not After : Jan 26 01:23:25 2026 GMT Subject: CN=460F7AA85AA8C33792709BF88FE631ADD107E5A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:f0:90:1d:81:25:e3:90:e4:d0:d3:bd:ab:49: 4f:14:32:06:f9:c7:4f:dd:09:d2:10:3b:c4:8a:6c: 7b:cb:1e:9e:c3:da:c3:f1:8b:79:72:72:3a:12:c8: 97:41:b7:b4:7d:30:1f:38:63:76:77:2a:23:a8:b8: 69:94:67:01:b3:88:c3:33:7d:fa:3a:af:8d:c2:9f: 87:8f:07:95:1d:8b:f0:c7:b4:66:4a:68:c8:d3:96: 4f:94:0e:1e:39:02:94:2c:2e:13:cb:8d:54:cd:7f: 8f:0a:46:74:00:c6:aa:6c:79:dc:f5:09:ce:c0:33: 6e:f7:7a:dd:8f:80:6f:3f:f9:bd:87:78:af:96:47: 58:f9:e2:02:67:55:3a:2a:d4:e3:06:66:93:bb:23: 58:57:cf:3a:e2:fe:5c:0e:ac:a0:37:08:d4:fd:f8: cb:9f:b7:64:0f:10:22:65:de:d9:5b:3d:f5:cc:cb: 6c:3e:bb:c2:d1:76:58:25:ea:63:da:46:27:ab:6a: 00:58:07:b5:5e:d1:6d:9e:57:e5:4f:fe:38:3f:70: c3:b2:13:54:bd:22:5e:da:2b:5e:6b:76:99:37:f7: 9a:56:ae:79:0c:50:b4:7c:da:98:ae:8c:ba:ca:4c: 64:06:2a:8e:c5:94:61:73:24:11:92:c2:4d:3e:a7: 5f:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:0F:7A:A8:5A:A8:C3:37:92:70:9B:F8:8F:E6:31:AD:D1:07:E5:A5 X509v3 Authority Key Identifier: keyid:7F:21:6F:49:A3:B9:A8:4A:0E:85:E8:0A:2C:42:87:4F:09:EA:39:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2dfb30ca-e1c2-4921-b054-d4af09165af1/0/7F216F49A3B9A84A0E85E80A2C42874F09EA3985.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fyFvSaO5qEoOhegKLEKHTwnqOYU.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2dfb30ca-e1c2-4921-b054-d4af09165af1/0/7F216F49A3B9A84A0E85E80A2C42874F09EA3985.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:e2:44:12:b8:5b:be:e9:0a:02:6e:33:2a:6b:4f:bc:a1:98: eb:8e:c1:82:df:35:dc:cd:bd:8e:72:ec:f9:1d:66:6b:e0:5f: 1a:72:d9:e7:33:36:22:4e:48:f0:f4:e9:db:b7:cd:63:8c:f0: 33:c3:94:42:76:cf:54:08:f3:bc:3b:53:21:fb:d9:a1:63:59: e2:8b:46:6b:10:1c:37:5d:14:fa:cb:a8:01:2e:da:b3:2b:82: 41:6d:d5:f6:0b:9f:f7:13:80:8f:e4:74:76:eb:63:65:da:bd: d5:a8:c9:a0:f3:92:f9:58:fe:8d:d1:52:67:06:71:ce:98:bb: 62:eb:2d:69:f6:df:aa:fb:0a:58:6a:96:65:34:39:57:b7:23: d7:74:ff:f0:69:c8:bb:fb:d7:73:e5:67:40:31:d2:eb:00:4f: ac:7e:35:30:59:fc:29:75:74:26:59:e5:2e:6e:f9:85:2f:0f: ef:3e:cd:bb:f8:81:cf:f3:50:85:7d:49:58:44:5e:55:70:0e: b2:28:36:de:1b:8f:e5:f8:78:1e:5a:6b:89:db:07:27:c0:c0: 7a:20:7d:a5:86:1a:b4:0e:ff:fa:67:ff:58:3f:75:ea:4f:b9: 37:e3:6f:a8:65:89:56:6b:2c:26:eb:34:6e:e1:10:21:cc:b6: 47:c4:38:e5 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUeSELSXp86cYEcpHY7/lOT7uEZNkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN2YyMTZmNDlhM2I5YTg0YTBlODVlODBhMmM0Mjg3NGYw OWVhMzk4NTAeFw0yNjAxMjQyMTQwMjVaFw0yNjAxMjYwMTIzMjVaMDMxMTAvBgNV BAMTKDQ2MEY3QUE4NUFBOEMzMzc5MjcwOUJGODhGRTYzMUFERDEwN0U1QTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo8JAdgSXjkOTQ072rSU8UMgb5 x0/dCdIQO8SKbHvLHp7D2sPxi3lycjoSyJdBt7R9MB84Y3Z3KiOouGmUZwGziMMz ffo6r43Cn4ePB5Udi/DHtGZKaMjTlk+UDh45ApQsLhPLjVTNf48KRnQAxqpsedz1 Cc7AM273et2PgG8/+b2HeK+WR1j54gJnVToq1OMGZpO7I1hXzzri/lwOrKA3CNT9 +Muft2QPECJl3tlbPfXMy2w+u8LRdlgl6mPaRieragBYB7Ve0W2eV+VP/jg/cMOy E1S9Il7aK15rdpk395pWrnkMULR82piujLrKTGQGKo7FlGFzJBGSwk0+p1+lAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQURg96qFqowzeScJv4j+YxrdEH5aUwHwYDVR0j BBgwFoAUfyFvSaO5qEoOhegKLEKHTwnqOYUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMmRmYjMwY2EtZTFjMi00OTIxLWIwNTQtZDRhZjA5MTY1 YWYxLzAvN0YyMTZGNDlBM0I5QTg0QTBFODVFODBBMkM0Mjg3NEYwOUVBMzk4NS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Z5RnZTYU81cUVvT2hlZ0tMRUtIVHdu cU9ZVS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yZGZiMzBjYS1l MWMyLTQ5MjEtYjA1NC1kNGFmMDkxNjVhZjEvMC83RjIxNkY0OUEzQjlBODRBMEU4 NUU4MEEyQzQyODc0RjA5RUEzOTg1Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtuJEErhbvukKAm4zKmtP vKGY647Bgt813M29jnLs+R1ma+BfGnLZ5zM2Ik5I8PTp27fNY4zwM8OUQnbPVAjz vDtTIfvZoWNZ4otGaxAcN10U+suoAS7asyuCQW3V9guf9xOAj+R0dutjZdq91ajJ oPOS+Vj+jdFSZwZxzpi7YustafbfqvsKWGqWZTQ5V7cj13T/8GnIu/vXc+VnQDHS 6wBPrH41MFn8KXV0JlnlLm75hS8P7z7Nu/iBz/NQhX1JWEReVXAOsig23huP5fh4 HlpridsHJ8DAeiB9pYYatA7/+mf/WD916k+5N+NvqGWJVmssJus0buEQIcy2R8Q4 5Q== -----END CERTIFICATE-----Generated at Sun Jan 25 17:44:14 2026 by rpki-client