This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/5a7c956c-22eb-4bb8-a327-ad97161295bc/0/020F7ED217FC36532E6B045CFBCCDA68A6604620.mft
File: 020F7ED217FC36532E6B045CFBCCDA68A6604620.mft (raw, json)
Hash identifier: ktJvrWZM4gaoDYM3IFNwuap4FSpCuv9kMuhUZyvUNAs=
Subject key identifier: 39:ED:71:43:1A:89:90:CF:30:82:5F:51:5D:2C:5E:53:8B:14:42:05
Authority key identifier: 02:0F:7E:D2:17:FC:36:53:2E:6B:04:5C:FB:CC:DA:68:A6:60:46:20
Certificate issuer: /CN=020F7ED217FC36532E6B045CFBCCDA68A6604620
Certificate serial: 5297C061CD7219F8F1769FFA46F4192B0F4CD21D
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/020F7ED217FC36532E6B045CFBCCDA68A6604620.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5a7c956c-22eb-4bb8-a327-ad97161295bc/0/020F7ED217FC36532E6B045CFBCCDA68A6604620.mft
Manifest number: AD
Signing time: Fri 02 Jan 2026 23:30:46 +0000
Manifest this update: Fri 02 Jan 2026 23:25:46 +0000
Manifest next update: Sun 04 Jan 2026 01:42:46 +0000
Files and hashes: 1: 326131343a373538313a366662303a3a2f34342d3438203d3e20323136343332.roa (hash: cip9cJqKeyNrJhvNYpxl3IQ3uuVk6x6ccrH22pN5xrA=)
2: 326131343a373538313a366665303a3a2f34342d3438203d3e20323134383431.roa (hash: eJoFXZz3vH/PzqNzkkd4bWX4CpO0e/s0UWWhyH7ohGo=)
3: 326131343a373538313a366330303a3a2f34302d3438203d3e20313938393534.roa (hash: fPBlj/OX226nVSvX0NnbhELuUhpZ2u/Ytd/uYZbhMTA=)
4: 020F7ED217FC36532E6B045CFBCCDA68A6604620.crl (hash: fxtDCO0WIe2DX3MtrULedl3SfOp5fdbQHdDe1F69g3s=)
5: 326131343a373538313a366664303a3a2f34342d3438203d3e20323135393334.roa (hash: BfxFUd5DTechXRUy4Ex3ytqAtMEr8QPJBcDEM0dDVlg=)
6: 326131343a373538313a366663303a3a2f34342d3438203d3e20323037333839.roa (hash: k0slLXQGak8JfXgcycld4UCv11bkqqJyVwy8WgUs0W4=)
7: 326131343a373538313a366430303a3a2f34302d3438203d3e20323035333239.roa (hash: UAf2blctTo7ZlN86/McI15QZsGre1E35LEt/FhIBXBM=)
8: 326131343a373538313a363030303a3a2f33362d3438203d3e20323034383434.roa (hash: 9WwOZQ+czh53N90Wic7WKUZpN9yKrnRBc/mSIwdZviM=)
9: 326131343a373538313a366530303a3a2f34302d3438203d3e2039393233.roa (hash: xTMyG8vk7HfhKOphzDUHjsL1N+HXzTu0fnBjhyB6AKQ=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:97:c0:61:cd:72:19:f8:f1:76:9f:fa:46:f4:19:2b:0f:4c:d2:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=020F7ED217FC36532E6B045CFBCCDA68A6604620
Validity
Not Before: Jan 2 23:25:46 2026 GMT
Not After : Jan 4 01:42:46 2026 GMT
Subject: CN=39ED71431A8990CF30825F515D2C5E538B144205
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:41:f9:bd:bd:bd:6f:8a:ec:d8:95:78:ad:04:
5b:9c:17:80:d5:e8:14:74:32:55:3e:cb:3d:1e:e8:
47:1d:63:a2:ef:dd:a1:b7:a7:31:1d:1b:d9:f5:04:
f8:49:a4:6f:e2:98:a6:3d:d5:9b:db:e8:b4:60:26:
69:c6:53:e9:aa:a0:47:f0:b4:ad:94:c6:18:d8:84:
e3:ae:c8:5e:d3:aa:bf:fe:f9:ac:eb:f4:07:f3:b8:
9a:a8:1e:bf:32:9e:c5:5c:34:92:27:d9:5c:81:ab:
15:2b:d6:69:10:93:e2:57:7a:dd:ee:39:9e:23:fc:
8b:a7:4f:86:93:36:f0:a0:da:ee:0b:7c:d1:c0:f2:
66:b4:ce:86:6d:58:c2:b7:0d:f8:03:17:51:9a:c2:
0c:00:b1:3b:b2:d4:09:6a:a3:f4:0f:c2:8f:c4:c0:
91:6a:de:a6:77:8a:fa:46:68:03:39:91:88:c7:b1:
69:5d:85:2f:7e:f6:bc:4d:06:23:df:7c:05:03:85:
9d:88:03:40:ed:59:5f:af:60:bf:36:b8:28:b9:7b:
6f:8f:b5:a4:f6:00:24:4f:38:f2:21:e3:30:c4:f6:
08:97:8a:28:0c:36:3f:f8:bc:79:5e:41:82:79:38:
bb:3e:a8:90:a7:4a:bb:71:27:b2:2d:98:a2:68:57:
5c:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:ED:71:43:1A:89:90:CF:30:82:5F:51:5D:2C:5E:53:8B:14:42:05
X509v3 Authority Key Identifier:
keyid:02:0F:7E:D2:17:FC:36:53:2E:6B:04:5C:FB:CC:DA:68:A6:60:46:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/5a7c956c-22eb-4bb8-a327-ad97161295bc/0/020F7ED217FC36532E6B045CFBCCDA68A6604620.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/020F7ED217FC36532E6B045CFBCCDA68A6604620.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5a7c956c-22eb-4bb8-a327-ad97161295bc/0/020F7ED217FC36532E6B045CFBCCDA68A6604620.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:97:19:d5:40:17:02:88:7e:ee:e1:4d:43:dc:73:00:f4:4d:
fd:5f:54:68:bb:ce:58:d1:dc:30:b2:d9:43:e3:27:d7:49:10:
4f:ea:7f:b1:50:60:11:3b:96:b3:c5:1b:35:ee:d4:8b:51:28:
0a:11:17:df:35:a9:1b:77:27:e7:12:88:9a:db:4a:2a:64:c0:
06:b6:81:c4:f0:8e:ca:d5:83:ec:b6:78:2a:38:27:50:da:c7:
00:71:fc:ce:30:b1:d2:5f:ff:cf:2d:23:c2:8b:8a:4e:e1:2c:
87:0e:41:bf:63:18:87:4b:9b:ff:17:13:5c:5b:9e:7e:d2:88:
d9:c1:08:fa:b8:6a:69:43:97:1f:22:36:5e:3d:5d:54:c8:bf:
cc:f7:b2:82:74:02:91:e5:c3:db:03:7d:51:63:ab:cc:7d:7f:
e4:c6:26:2c:7b:f4:76:4d:91:92:83:d3:01:c6:71:f9:b2:e8:
b9:4f:51:10:a2:cd:63:57:4f:fa:da:27:bc:f0:12:5a:5c:11:
43:b7:5a:85:49:97:f9:0f:b8:05:62:e2:4a:34:42:e8:2a:79:
a6:ae:ed:72:48:e5:e5:fd:46:73:12:37:b1:c4:0f:4e:3a:e7:
9d:53:15:d5:a8:21:20:a3:54:e5:e4:10:95:36:fb:db:1d:1d:
5f:e5:6d:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:29:02 2026 by rpki-client