This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.mft
File: D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.mft (raw, json)
Hash identifier: 35zwKwbNXVmAjg+/qKdkodek2jNvH5mx9DgApUvg5Dg=
Subject key identifier: 36:3E:59:A0:04:0B:00:AE:BC:65:23:51:52:1B:BA:40:34:5D:A4:4D
Authority key identifier: D5:4D:44:3B:67:C1:CC:5E:A1:B5:44:6E:A0:64:3C:AC:3A:7A:8B:2C
Certificate issuer: /CN=D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C
Certificate serial: 159F642D820DD5DFEE44F9F413B5A670CE17AC38
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.mft
Manifest number: 019D
Signing time: Sun 25 Jan 2026 06:45:01 +0000
Manifest this update: Sun 25 Jan 2026 06:40:01 +0000
Manifest next update: Mon 26 Jan 2026 08:27:01 +0000
Files and hashes: 1: 326130363a313238333a383930363a3a2f34382d313238203d3e20323134303333.roa (hash: SDzB93ZmXL/9JaeiFrClXOKOMdMaPjQdBjiuTrcER6c=)
2: 326130363a313238333a383930303a3a2f34302d313238203d3e20323133343133.roa (hash: w6mEbr64LdAB6p4ChAQnVfiw39Sxb+bv0QiR3+vbqY0=)
3: D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.crl (hash: DzSebeFfasvWVktwbGsHL1bAEDJo0IXeZGAH8Ayzal4=)
4: 5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.cer (hash: E+mLqx7rEgzkPAUn5rJoLra7vStPRhm9ryAmKBFIvQ0=)
5: 326130363a313238333a633131303a3a2f34342d3438203d3e20323135313437.roa (hash: +z0Qc7b7Pm0YyOUO4LNkttIVrmFKBrkfbPc/zfrDGTk=)
6: 326130363a313238333a633131663a3a2f34382d313238203d3e20323131303636.roa (hash: MNB/IgLpAkC8BkMxVhMNWcW04HjOlc0Y//dSW/FFyhU=)
7: 326130363a313238333a383930323a3a2f34382d313238203d3e20323132373730.roa (hash: 1Mq7zwNWFVrFO4xAnw5YP+F5xNQQ0SyBjbZkZrxTF84=)
8: B113B31E9F01A2F41870E8C77492B18EBA830E07.cer (hash: 0OvTvvR3uKi33zOn4Le5nWSBooTmDUEGs6oBmef6/cc=)
9: D36546790928F44FF74C564231471FA1D8D2A97B.cer (hash: Yk51yNZZDrc+NxDYYI7+6vxfYJuE5Kc7CvebjeR4bSQ=)
10: 326130363a313238333a383030303a3a2f33362d3438203d3e20323135313437.roa (hash: 1HZdS5easOTzXqx+g13vhM2s0dAHymCGMDkKOH0yoVM=)
11: 326130363a313238333a383930353a3a2f34382d313238203d3e20323134303333.roa (hash: huX32HgMgk4Y2C020+tWpyikLyAfVZ2TMuvxXCD12N4=)
12: 326130363a313238333a383930313a3a2f34382d313238203d3e20323134323035.roa (hash: ZxaQKtSoKlgJmO3J3XqDtpxRpsMoDdJh04xqfrfCdBY=)
13: 326130363a313238333a626434303a3a2f34322d313238203d3e20323130373936.roa (hash: NS2/G+GE49Imka70FRvnrWigl/cu3jsnXcP9mUuT9+I=)
14: 326130363a313238333a383966303a3a2f34342d313238203d3e20323134303333.roa (hash: VPyKJTdMnGQqSuzFbkFQ60iQgNT+2pht93oF2htafCQ=)
15: 326130363a313238333a383030323a3a2f34382d3438203d3e20323135313437.roa (hash: B3lCmzbMTTF4JEYaqxL5SocH8KSyx1ZOaOngpc1c9xY=)
16: 326130363a313238333a383030333a3a2f34382d313238203d3e20323131303636.roa (hash: hYctHpFLZLrdZbOQKdUp5gBu76GVnDNrzAlSQDHkf8o=)
17: 326130363a313238333a383930343a3a2f34382d313238203d3e20323134373632.roa (hash: NbESZTGbsnyViyuGLC+8sRHMyf8Ojiq0F9ioTriEM2E=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.crl
rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.mft
rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer
rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl
rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 04:23:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:9f:64:2d:82:0d:d5:df:ee:44:f9:f4:13:b5:a6:70:ce:17:ac:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C
Validity
Not Before: Jan 25 06:40:01 2026 GMT
Not After : Jan 26 08:27:01 2026 GMT
Subject: CN=363E59A0040B00AEBC652351521BBA40345DA44D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:2d:df:33:5e:1a:3c:d4:de:bc:b3:fd:5f:71:
f5:96:40:d0:bf:58:ca:eb:a3:a8:25:d6:eb:84:13:
a3:ed:5f:94:98:13:ae:f2:c4:f1:f8:f3:cc:f0:55:
50:3f:fc:61:50:a4:85:44:eb:40:44:ed:a6:ed:d0:
47:ba:7c:cd:4c:8f:9a:ad:70:ea:78:ed:e3:e2:9c:
56:21:fa:cc:42:71:e0:ea:fd:9a:7a:5c:b8:44:d4:
4f:24:30:68:76:1e:8b:83:4c:62:cd:ad:8d:59:29:
d1:13:57:49:b4:f0:18:c2:1d:e8:55:d9:c8:36:6d:
4f:64:c1:2d:57:1b:c1:29:81:af:dd:82:0b:e2:c1:
21:48:9e:bd:d4:a5:fc:d3:be:9b:2c:da:45:6c:ca:
94:5f:e7:25:fe:0a:2a:10:e1:5c:85:54:ef:ac:7d:
08:b7:cd:bf:8e:71:da:a6:c0:ca:b5:6d:42:0e:82:
75:75:d9:54:28:71:00:26:e6:13:fa:1e:be:92:98:
f4:79:ce:99:d4:55:31:e8:96:ea:4d:2b:a2:37:ef:
f6:0a:a0:ee:35:b9:11:c4:67:7b:43:e7:49:5d:e9:
b0:76:b3:b7:8b:e6:0a:ab:d7:73:c5:c4:ce:1a:b0:
5d:c1:d6:9d:cf:30:ab:b2:1d:5b:b7:a7:c0:b6:bb:
a6:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:3E:59:A0:04:0B:00:AE:BC:65:23:51:52:1B:BA:40:34:5D:A4:4D
X509v3 Authority Key Identifier:
keyid:D5:4D:44:3B:67:C1:CC:5E:A1:B5:44:6E:A0:64:3C:AC:3A:7A:8B:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:c1:5f:96:d9:42:33:15:44:d8:cb:4b:56:b7:e6:54:2d:24:
09:0d:37:c9:b5:f5:2e:ad:87:b8:3d:d8:e3:38:71:fe:45:2f:
55:17:24:1d:4f:9e:9d:9f:7a:48:f3:b3:6a:4b:3f:dc:b7:f1:
f7:28:30:ef:e9:57:ba:72:61:1c:d0:f7:d3:6c:f5:29:c5:77:
a2:d0:e4:08:c3:7f:67:4f:0c:b6:0f:bf:3d:63:a1:ee:be:e8:
a9:28:6b:06:21:7a:90:e8:50:80:f8:62:b3:3f:b3:75:ec:c8:
1b:9d:37:f2:9e:4c:bd:16:6f:c3:ba:43:83:bc:e9:c0:a4:47:
af:83:1e:fc:33:e6:a1:ba:2b:89:6f:e1:50:1c:0f:79:43:e7:
df:7b:cd:cd:0e:cd:2d:11:6d:ed:0d:38:a3:dc:a9:9a:59:ed:
5a:91:34:9f:36:16:9f:32:54:35:43:64:8e:66:0f:f6:48:7c:
11:fb:e5:d9:c1:cb:40:ec:90:36:0f:ac:a8:06:99:64:67:4c:
55:43:5d:d2:cd:13:a4:21:9e:f2:4c:ec:04:3d:c3:85:5d:b6:
7f:c4:4b:8a:7c:01:b1:64:23:90:dd:61:d1:9c:c5:73:fe:22:
56:e5:06:14:1c:4e:14:1c:64:e7:b6:1f:fb:14:b7:47:ba:6a:
34:a7:2c:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:49:46 2026 by rpki-client