This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/A912092CFA11F378852F52266C793AB678233205.mft
File: A912092CFA11F378852F52266C793AB678233205.mft (raw, json)
Hash identifier: VbcC2EGBnVXX14stWhQcSsGhz3VZ0F1JoBY3yynBKMo=
Subject key identifier: 74:D0:26:CD:5D:48:13:AD:ED:81:56:A5:AE:CE:72:AD:42:34:A4:B1
Authority key identifier: A9:12:09:2C:FA:11:F3:78:85:2F:52:26:6C:79:3A:B6:78:23:32:05
Certificate issuer: /CN=A912092CFA11F378852F52266C793AB678233205
Certificate serial: 4A8CFDF47ADC333E90F88817B2B773D006E2E276
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/A912092CFA11F378852F52266C793AB678233205.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/A912092CFA11F378852F52266C793AB678233205.mft
Manifest number: 01A2
Signing time: Sun 25 Jan 2026 15:42:15 +0000
Manifest this update: Sun 25 Jan 2026 15:37:15 +0000
Manifest next update: Mon 26 Jan 2026 18:14:15 +0000
Files and hashes: 1: 326130393a353463333a613230303a3a2f34302d313238203d3e20323039383734.roa (hash: bwL4xPqc/uz8Pz2knWoJ8zvpAw8HB5XXWez7oPoDaEI=)
2: 326130393a353463333a613130343a3a2f34382d313238203d3e20323135313437.roa (hash: mqZWFx8mEs19q6avxgn8ro9WrQffoF4FToEMy+hXzM0=)
3: 326130393a353463333a613130303a3a2f34382d313238203d3e20323135313437.roa (hash: 5vA7kcahmkhnv7Pjx7uA7TrGRG+XVrMF+mKhb2vEG5U=)
4: A912092CFA11F378852F52266C793AB678233205.crl (hash: ZEMNXhkeBNJWhcA5XJ/eGituF97YobsNQ2ntXUDQtxU=)
5: 326130393a353463333a613030303a3a2f34302d313238203d3e20323039383734.roa (hash: ca9GKU5mOXVUfI7Du4XvHpxs7R00F6F4l3yz+1HGWmo=)
6: 3131312e3233352e3135312e302f32342d3332203d3e20323135313437.roa (hash: vew4LNWCVofm5qe2BK5sopfMvrn3w6T63/5S4aLPNx0=)
7: 326130393a353463333a393030303a3a2f33362d3336203d3e20323131303636.roa (hash: /KjIFlpbNb1VbdyEsAMlwZ6y7EnP5aEMV+JQt9I/CYU=)
8: 326130393a353463333a613130313a3a2f34382d313238203d3e20323135313437.roa (hash: 90FGOeqqLptd8qlXcfjJgcF07gJvM1oxc2QmHLuTM1Y=)
9: 326130393a353463333a613130323a3a2f34382d313238203d3e20323135313437.roa (hash: vs9kXuBMMWCplaNsRIcMMGKaCF4FLRTK4Bq5jqpLQYc=)
10: 326130393a353463333a613166303a3a2f34342d313238203d3e20323130373936.roa (hash: m/KS3U1L5fK6/ozUyGVO/HofrXSxDH++GoaQCE6VLqY=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/A912092CFA11F378852F52266C793AB678233205.crl
rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/A912092CFA11F378852F52266C793AB678233205.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/A912092CFA11F378852F52266C793AB678233205.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 13:21:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:8c:fd:f4:7a:dc:33:3e:90:f8:88:17:b2:b7:73:d0:06:e2:e2:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912092CFA11F378852F52266C793AB678233205
Validity
Not Before: Jan 25 15:37:15 2026 GMT
Not After : Jan 26 18:14:15 2026 GMT
Subject: CN=74D026CD5D4813ADED8156A5AECE72AD4234A4B1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:c7:88:5a:f4:52:2b:47:2c:ef:22:f7:69:26:
d4:df:1b:5b:cf:17:63:8c:5c:f9:da:bd:ca:b4:3a:
7c:2c:3f:b6:96:4b:99:a9:20:43:38:05:46:9b:aa:
3d:38:93:d1:cb:5d:f1:04:5e:95:17:61:fe:5d:8c:
ca:2d:db:a6:e6:70:1b:b8:c8:7b:8f:0f:9d:b4:fc:
4d:fc:fd:6a:de:2d:8e:42:29:f0:d0:54:ab:45:18:
06:72:2d:69:bc:72:e9:3a:f2:ab:bc:5b:86:a9:b3:
7c:cf:3b:36:b7:14:9d:e5:63:85:82:f2:fa:b3:50:
10:ab:23:14:22:08:97:57:fa:1c:50:43:c6:d4:8d:
a9:58:38:9e:16:f7:03:99:69:a9:f6:79:93:eb:fa:
89:71:f3:bc:58:ea:1d:16:23:b4:95:04:f9:aa:87:
28:a2:96:07:48:61:80:54:2e:c7:17:a7:79:21:45:
0a:26:70:ca:86:47:ae:86:95:03:e0:51:f6:0a:2e:
f4:69:0e:e6:6e:7b:5d:cf:07:f2:57:c8:0c:41:de:
fc:aa:f8:d1:42:15:5c:15:94:6d:a6:4b:55:a6:df:
de:47:f4:0f:25:6e:89:c9:fb:d1:80:27:bd:c7:b7:
ed:87:a0:97:2a:3c:80:ae:00:f0:04:02:25:6d:1f:
84:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:D0:26:CD:5D:48:13:AD:ED:81:56:A5:AE:CE:72:AD:42:34:A4:B1
X509v3 Authority Key Identifier:
keyid:A9:12:09:2C:FA:11:F3:78:85:2F:52:26:6C:79:3A:B6:78:23:32:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/A912092CFA11F378852F52266C793AB678233205.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/A912092CFA11F378852F52266C793AB678233205.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/A912092CFA11F378852F52266C793AB678233205.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:60:9a:49:ac:f9:b5:5d:64:d2:b5:c6:d5:2b:b6:0c:2d:cb:
25:83:a2:e6:aa:ff:e4:b0:a4:fc:ce:cb:83:b6:af:7d:ac:64:
95:4c:b5:db:23:73:65:65:43:30:82:7d:43:28:a7:4b:9a:60:
b5:d5:3e:e7:59:8f:98:1b:55:65:34:aa:76:8d:90:a6:53:e8:
f5:a8:0b:33:67:21:f7:ce:8f:fb:7a:b0:62:61:ae:9e:ac:5c:
df:8d:5c:e4:77:a3:50:d0:36:67:98:e0:c1:43:7e:7e:c2:df:
41:39:19:0c:d0:05:01:c6:f4:94:36:51:a8:1a:86:70:49:38:
d1:f3:dd:09:44:22:6a:e7:99:76:20:89:66:f0:0d:e2:59:c6:
cf:8e:d0:29:af:2b:5b:46:aa:5b:51:08:f7:84:68:0b:c2:5b:
dc:12:22:5d:01:dc:b6:b8:f5:58:2f:fe:7e:6c:90:63:95:e4:
b5:e5:d3:33:4d:e8:76:b5:b6:e2:f2:a8:24:d0:55:a6:83:0a:
92:37:d3:18:a6:50:ab:5a:ef:96:1b:fb:ef:72:ea:e0:53:2b:
7d:92:fc:2c:b2:4e:10:40:d5:a0:34:fb:31:4c:95:f3:a5:29:
56:dd:a0:6e:02:72:08:ad:f9:8e:c7:18:07:dd:43:65:19:56:
be:fc:a2:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:43:26 2026 by rpki-client