This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/3/317EDB3410058E086217C50FB97009DDE70A6F1A.mft
File: 317EDB3410058E086217C50FB97009DDE70A6F1A.mft (raw, json)
Hash identifier: wh5hqiGwhZ8qeCAGXEqSJv/OC+1Q/kyo4ajJBakBxVA=
Subject key identifier: B9:1E:78:A9:4A:F8:04:60:B1:75:DC:70:65:D8:21:9C:53:F5:82:89
Authority key identifier: 31:7E:DB:34:10:05:8E:08:62:17:C5:0F:B9:70:09:DD:E7:0A:6F:1A
Certificate issuer: /CN=317edb3410058e086217c50fb97009dde70a6f1a
Certificate serial: 6EC1F0BF2AFF5F4CBB0931DB799587F91E3CE2EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MX7bNBAFjghiF8UPuXAJ3ecKbxo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/3/317EDB3410058E086217C50FB97009DDE70A6F1A.mft
Manifest number: 65
Signing time: Sun 25 Jan 2026 13:04:40 +0000
Manifest this update: Sun 25 Jan 2026 12:59:40 +0000
Manifest next update: Mon 26 Jan 2026 16:08:40 +0000
Files and hashes: 1: AS207682.asa (hash: yNMgsZTlVBgZuwAny+gfftheJcltZQ2eLBjscmcmhhI=)
2: 317EDB3410058E086217C50FB97009DDE70A6F1A.crl (hash: jQQYPpzob7AENxi8FIOlR7eLmcNqyZ06PTwMXRa4Cm8=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/3/317EDB3410058E086217C50FB97009DDE70A6F1A.crl
rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/3/317EDB3410058E086217C50FB97009DDE70A6F1A.mft
rsync://rpki.ripe.net/repository/DEFAULT/MX7bNBAFjghiF8UPuXAJ3ecKbxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 16:08:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:c1:f0:bf:2a:ff:5f:4c:bb:09:31:db:79:95:87:f9:1e:3c:e2:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=317edb3410058e086217c50fb97009dde70a6f1a
Validity
Not Before: Jan 25 12:59:40 2026 GMT
Not After : Jan 26 16:08:40 2026 GMT
Subject: CN=B91E78A94AF80460B175DC7065D8219C53F58289
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:c8:0c:8e:40:7d:27:3e:29:d1:76:81:4a:f9:
5b:8a:55:67:89:82:0f:3a:fb:de:fd:3f:a5:59:e4:
27:ba:a9:70:59:88:ac:c4:63:96:b4:09:83:18:f2:
04:83:9f:42:ef:0d:d8:7a:2f:4f:22:ac:51:a9:27:
6b:4c:cc:01:06:02:51:78:05:41:6d:12:e5:b6:c5:
f8:f4:a9:bb:11:fc:d2:ff:30:8c:d9:14:17:72:38:
d4:bd:d9:53:85:fa:ae:27:34:10:db:dd:8d:79:49:
fc:8d:80:8e:83:a2:d5:0a:f0:98:46:a3:f6:fa:97:
c1:fd:70:de:c7:b2:9f:16:fa:ed:80:e0:6c:ef:b2:
c2:e7:76:1b:b3:d1:a6:10:23:b3:3b:23:59:01:7c:
71:6c:89:84:f1:01:95:4f:77:fe:cc:d8:29:07:5a:
45:15:6e:de:0e:b3:4f:45:02:10:46:59:00:c2:41:
52:93:eb:25:d1:ad:db:fe:62:f9:7d:0e:62:e3:f2:
7d:c8:85:c5:03:f6:2e:aa:4c:8b:2e:06:2b:b2:ae:
e9:60:94:92:c5:1b:13:5c:94:b8:ca:aa:0c:12:e0:
b6:19:30:3c:cd:04:3e:2d:40:6a:c9:f1:81:bd:f9:
7b:ea:df:fb:1a:af:35:bc:da:88:cf:cf:10:6a:7a:
ca:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:1E:78:A9:4A:F8:04:60:B1:75:DC:70:65:D8:21:9C:53:F5:82:89
X509v3 Authority Key Identifier:
keyid:31:7E:DB:34:10:05:8E:08:62:17:C5:0F:B9:70:09:DD:E7:0A:6F:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/3/317EDB3410058E086217C50FB97009DDE70A6F1A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MX7bNBAFjghiF8UPuXAJ3ecKbxo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/3/317EDB3410058E086217C50FB97009DDE70A6F1A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:61:38:69:30:9f:6c:6f:be:fc:e7:7d:b3:48:0b:b2:51:07:
ef:64:e7:31:fb:18:b4:54:ef:cf:95:f6:16:df:c0:6e:82:95:
0e:cb:c0:7b:bf:9d:5d:9a:bb:32:af:fa:0b:00:31:94:39:1e:
53:92:27:47:02:5b:24:59:52:89:fc:1d:b4:13:a3:ff:57:72:
ab:31:f0:3b:10:df:8d:f7:58:8a:21:7f:23:19:81:bd:28:59:
24:73:99:17:5c:ff:dd:85:70:0f:11:68:eb:db:a2:54:15:1e:
07:bc:dd:47:6b:91:56:00:cb:67:13:14:aa:43:a9:45:eb:5c:
81:14:97:a6:9d:b4:92:96:a4:28:46:49:e3:55:5e:d0:a0:a1:
2c:76:a0:bf:12:00:e9:e9:e1:77:b2:8e:e1:3f:6d:f3:04:17:
c8:b0:30:52:49:e7:86:76:d7:3b:c4:ae:bd:2f:99:53:1e:f3:
fb:b4:0e:62:24:c7:f0:48:58:03:88:7a:c5:c2:84:29:a9:85:
57:80:9a:b0:4a:bd:92:58:7e:db:92:b4:08:7f:05:58:4a:f4:
c6:26:b4:24:c4:d5:04:ba:10:b7:05:dc:57:6d:cb:bc:af:c4:
c8:c1:3f:68:78:85:57:8e:25:13:52:d0:d8:84:ed:79:b7:24:
84:bf:cd:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 09:28:43 2026 by rpki-client