This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/78D65D4A22DF705BEED7B3432FBE48A356597724.mft
File: 78D65D4A22DF705BEED7B3432FBE48A356597724.mft (raw, json)
Hash identifier: LB+LxTeIEW7s7tcOhgl55bb6unUq1nYkIrCrxZoAETA=
Subject key identifier: AE:90:DA:22:28:7A:41:19:91:7C:D3:52:0E:DB:D8:57:54:09:55:BB
Authority key identifier: 78:D6:5D:4A:22:DF:70:5B:EE:D7:B3:43:2F:BE:48:A3:56:59:77:24
Certificate issuer: /CN=78d65d4a22df705beed7b3432fbe48a356597724
Certificate serial: 25E976AF9AB14FAA4787B36A17D2B132A67D1396
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eNZdSiLfcFvu17NDL75Io1ZZdyQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/78D65D4A22DF705BEED7B3432FBE48A356597724.mft
Manifest number: D4
Signing time: Sun 25 Jan 2026 02:04:58 +0000
Manifest this update: Sun 25 Jan 2026 01:59:58 +0000
Manifest next update: Mon 26 Jan 2026 05:40:58 +0000
Files and hashes: 1: 38302e38332e3138382e302f32342d3234203d3e203634323637.roa (hash: Zn2fU/zf/URUjzPX4k5UlzylOiLYtLrcrJVzOaLXmd8=)
2: 78D65D4A22DF705BEED7B3432FBE48A356597724.crl (hash: 2HkKkQV11Iwdx2N8MUehG4SqhMg60fdFouFtyg0dNUw=)
3: 323030313a346365383a3a2f32392d3239203d3e203539373136.roa (hash: CgDSfpo0IftLrA7o4eNAILZADKAHzaR3sZbqAdusdP4=)
4: 38302e38332e3138382e302f32322d3234203d3e203534323532.roa (hash: oxLxEjiJHAfR5sb7doKgFq8fOEt0To+nubINa8ThuEA=)
5: 38302e38332e3139312e302f32342d3234203d3e203534323532.roa (hash: t/r9GueVtBRqkEzG5ECpDmGAbhT8tQffnXyVbWMfuP8=)
6: 38302e38332e3139302e302f32342d3234203d3e203634323637.roa (hash: e7OjSlp/jABhHoAxV0NvuSo5CYOdNcptQrwcU0YPf4I=)
7: 3138352e3139302e3232382e302f32332d3234203d3e203332313332.roa (hash: jVr1HOM/vAQFN9/2YcEKEGs7D1zQDrdtbTvacM//wP0=)
8: 3138352e36392e322e302f32342d3234203d3e203539373136.roa (hash: C4vtZUJ4sSvWQ2xt2gUpLOR/9kh093F6GFa+cSWJX6U=)
9: 38302e38332e3138342e302f32322d3232203d3e203539373136.roa (hash: olHSbZHs/2t98PZjXMrMMRiZVSEe6IbSK97ATG0UHJ0=)
10: 38302e38332e3138392e302f32342d3234203d3e20333937363330.roa (hash: buBr0nPzFwtnExYzKZ33K40LR3ws0xsbE+PF1JfUozA=)
11: 323030313a346365383a3a2f33322d3332203d3e20323530.roa (hash: zJJBd2Rg1C8mF3Brr7ZPVnCCMMdyplxley/QZ6Up3Cg=)
12: 38302e38332e3138382e302f32322d3234203d3e20333937363330.roa (hash: we+BIDcecMDdhb3LTIFwBqfI4/tuGmFvD0wy77xN0HU=)
13: 38302e38332e3138382e302f32322d3234203d3e203634323637.roa (hash: usGVmfBSjshsI+jZ0UI5vbfRCtEIbFpWtlpk5JhJZu8=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/78D65D4A22DF705BEED7B3432FBE48A356597724.crl
rsync://rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/78D65D4A22DF705BEED7B3432FBE48A356597724.mft
rsync://rpki.ripe.net/repository/DEFAULT/eNZdSiLfcFvu17NDL75Io1ZZdyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 05:40:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:e9:76:af:9a:b1:4f:aa:47:87:b3:6a:17:d2:b1:32:a6:7d:13:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78d65d4a22df705beed7b3432fbe48a356597724
Validity
Not Before: Jan 25 01:59:58 2026 GMT
Not After : Jan 26 05:40:58 2026 GMT
Subject: CN=AE90DA22287A4119917CD3520EDBD857540955BB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:fc:e5:b2:54:88:00:38:55:a2:98:43:92:20:
9b:5e:49:12:8b:a8:76:7c:0a:cf:c9:d9:5b:3d:aa:
1c:61:ae:3c:0e:fa:b8:a5:0b:19:f1:62:2c:df:b4:
a2:46:d5:0c:1c:a1:eb:b2:c6:94:9f:a6:f7:5f:ba:
9f:66:c6:10:4d:6a:92:80:f1:a9:99:09:96:02:bb:
14:37:79:17:fc:ca:52:7b:ce:c3:d6:b8:5a:58:e3:
1f:3f:ac:a6:de:02:01:e4:cb:eb:3e:d3:72:a3:a9:
28:2e:98:b9:c5:fa:5a:b9:f9:c2:eb:fe:a2:d5:32:
29:78:13:9a:a7:d0:86:c3:9d:00:84:b2:40:5b:2c:
ac:2c:c6:9d:6b:f6:10:cf:d5:b2:61:f0:3a:45:e4:
71:bf:87:db:cc:43:18:52:5d:ac:56:53:fa:32:c3:
11:aa:39:d0:9c:40:fd:9d:cf:63:e4:7e:f5:7d:64:
21:d2:44:e5:12:f2:35:69:4b:8f:9f:1d:13:d3:34:
4d:1e:bd:62:65:7a:b1:ba:1b:d7:d5:33:55:50:bc:
8e:c3:6e:0a:30:d5:b9:0e:af:b5:08:a0:45:b6:fb:
f3:3b:38:6a:30:75:9b:7f:5b:99:4d:84:06:f2:d0:
f2:fc:ca:eb:96:18:d8:ac:fb:58:e6:27:6f:56:1f:
6a:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:90:DA:22:28:7A:41:19:91:7C:D3:52:0E:DB:D8:57:54:09:55:BB
X509v3 Authority Key Identifier:
keyid:78:D6:5D:4A:22:DF:70:5B:EE:D7:B3:43:2F:BE:48:A3:56:59:77:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/78D65D4A22DF705BEED7B3432FBE48A356597724.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eNZdSiLfcFvu17NDL75Io1ZZdyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/78D65D4A22DF705BEED7B3432FBE48A356597724.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:e8:fc:4b:41:57:38:71:15:9a:aa:e7:3d:5d:b9:5b:f0:fd:
77:0f:f7:2b:4e:88:2d:ee:09:37:86:ff:03:2f:cd:e5:d8:d0:
56:e7:55:e9:b4:ed:23:fb:66:9c:23:e7:5b:55:2e:d1:f4:45:
67:dc:09:d6:10:2c:bd:19:6b:61:aa:74:85:ce:62:c3:82:d8:
92:42:15:a3:50:e0:41:b2:59:d5:24:78:68:ce:8e:f7:74:b5:
93:62:b3:7e:4e:1a:a8:77:16:58:cb:a7:db:03:9a:aa:c8:67:
5e:21:07:67:53:d5:88:21:a2:52:bf:a1:c1:19:2d:74:17:a0:
aa:f4:30:49:3e:37:1a:44:ac:86:ac:c8:04:e6:ea:ea:4e:64:
73:2c:54:1a:a5:65:6e:8b:c0:2e:b6:ab:3f:46:e3:19:79:a4:
68:a7:26:c8:76:ac:26:89:c0:5e:cb:a6:f8:10:ab:f7:97:2a:
dc:57:b1:7b:d9:eb:09:b9:16:43:8e:2c:ec:93:56:dd:9f:86:
c1:4a:1e:f4:cf:de:19:d7:75:5c:f3:ce:e0:15:2d:77:a8:a6:
fd:e1:9d:e0:d6:fd:b3:e9:9e:4e:51:9a:a6:f3:27:96:43:ff:
a8:28:7e:cb:dc:36:ae:79:32:73:0d:37:45:c3:06:00:d7:e7:
5c:59:53:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:46:38 2026 by rpki-client