This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/3/94A2F16DF417C32E057AA268C0E52C70D1A406C5.mft
File: 94A2F16DF417C32E057AA268C0E52C70D1A406C5.mft (raw, json)
Hash identifier: jyHaXUZAydky/FzrvKLlEzdLRBwXlDbwtZBo61dSHas=
Subject key identifier: 0B:2B:83:81:6F:9A:A6:8B:A1:E7:59:65:9B:76:DB:FA:3E:AB:BC:17
Authority key identifier: 94:A2:F1:6D:F4:17:C3:2E:05:7A:A2:68:C0:E5:2C:70:D1:A4:06:C5
Certificate issuer: /CN=A91443440000/serialNumber=94A2F16DF417C32E057AA268C0E52C70D1A406C5
Certificate serial: 133B17A5ADB79974D1E81A08525763A3870D97FB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lKLxbfQXwy4FeqJowOUscNGkBsU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/3/94A2F16DF417C32E057AA268C0E52C70D1A406C5.mft
Manifest number: 0241
Signing time: Sat 24 Jan 2026 12:23:20 +0000
Manifest this update: Sat 24 Jan 2026 12:18:20 +0000
Manifest next update: Sun 25 Jan 2026 13:26:20 +0000
Files and hashes: 1: AS153176.asa (hash: nTAPGafaR0TwBdv5jCAijmg7tuOn6F8lJBqMjy7Nxfk=)
2: 94A2F16DF417C32E057AA268C0E52C70D1A406C5.crl (hash: 7Nl1sruGxCWc0zd3FthrVtC9/ne23ZRZsQBMB6CpsiU=)
3: 323030313a6466343a316463303a3a2f34382d3438203d3e20313533313736.roa (hash: kx3ayya4lPrQllp+nogQF65nwTl1whhZEUlAaHtTvAM=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/3/94A2F16DF417C32E057AA268C0E52C70D1A406C5.crl
rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/3/94A2F16DF417C32E057AA268C0E52C70D1A406C5.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lKLxbfQXwy4FeqJowOUscNGkBsU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Jan 2026 13:26:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:3b:17:a5:ad:b7:99:74:d1:e8:1a:08:52:57:63:a3:87:0d:97:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91443440000, serialNumber=94A2F16DF417C32E057AA268C0E52C70D1A406C5
Validity
Not Before: Jan 24 12:18:20 2026 GMT
Not After : Jan 25 13:26:20 2026 GMT
Subject: CN=0B2B83816F9AA68BA1E759659B76DBFA3EABBC17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c7:6a:23:0f:88:75:99:26:21:0f:7a:a2:62:
cd:03:d4:d1:1b:0b:9e:9d:56:8c:f7:d7:fc:78:61:
f2:fd:1a:15:61:10:7f:a5:73:f8:68:95:b5:be:9c:
61:da:d5:8c:c1:ee:4e:2a:fc:d5:94:1d:2c:32:76:
50:a5:8c:45:69:7a:0d:83:78:c9:43:02:ec:e0:3c:
8e:0e:57:94:e5:ab:87:c9:8e:8e:33:ae:c5:11:8e:
43:5e:56:33:62:e2:22:ca:8d:88:96:99:24:25:a6:
77:dc:6a:3a:36:0f:50:c5:73:66:6f:8a:92:f3:1e:
23:d0:5d:41:e9:e5:24:e9:2c:af:41:3f:15:6a:e7:
3c:8f:dc:82:aa:4f:ae:30:74:8a:b4:b2:29:87:c3:
7c:93:59:98:c5:33:b6:45:21:d0:f9:bd:a4:26:5c:
0c:42:37:bc:ac:16:1e:b5:37:76:74:d5:c8:0a:52:
5a:d9:7d:42:6c:5f:d2:d1:07:fa:68:9c:e3:5d:52:
87:01:00:0f:3c:26:72:00:6f:52:99:ee:70:f1:d6:
5f:00:93:64:53:c4:b0:c2:f3:db:7a:86:7e:5b:e8:
71:1c:8c:06:75:47:72:ac:d9:a8:d1:14:ab:d3:eb:
0f:55:e8:d8:76:98:a8:76:c8:e6:6c:a1:6f:3d:a1:
49:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:2B:83:81:6F:9A:A6:8B:A1:E7:59:65:9B:76:DB:FA:3E:AB:BC:17
X509v3 Authority Key Identifier:
keyid:94:A2:F1:6D:F4:17:C3:2E:05:7A:A2:68:C0:E5:2C:70:D1:A4:06:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/3/94A2F16DF417C32E057AA268C0E52C70D1A406C5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lKLxbfQXwy4FeqJowOUscNGkBsU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/3/94A2F16DF417C32E057AA268C0E52C70D1A406C5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:e9:f2:48:fa:b4:38:38:f8:17:f8:48:3d:8e:7f:e7:b6:75:
a5:a7:73:28:99:08:6f:5e:78:dd:55:c2:02:9d:c2:57:1a:cd:
b6:40:07:be:52:e0:39:9d:d9:31:3f:f2:6d:5b:1b:19:3e:a4:
3b:40:9b:8a:81:26:d7:f7:4c:61:63:aa:84:15:a7:50:d2:85:
65:f8:bf:d9:6a:2f:1d:a6:ef:52:29:bd:6f:74:07:f2:0f:a3:
d4:96:31:32:87:42:d3:b7:6f:42:bb:43:b4:f7:b2:db:27:13:
82:6e:12:be:df:65:8b:6b:19:d2:c9:ab:3b:f4:08:71:dc:17:
6a:8b:ae:c8:6b:58:94:cc:1d:f9:c4:77:07:ce:52:38:63:fe:
1e:93:50:65:e7:20:4b:bc:c1:da:f7:de:ea:d9:c5:03:8b:ba:
ed:fa:1e:cc:e5:57:03:12:4e:db:aa:2d:06:c9:7f:e3:8a:4d:
5c:89:a8:b0:02:3a:53:5e:86:35:9c:a8:c9:a9:3c:e9:90:e1:
4d:ac:bc:b2:11:27:6e:b8:3a:4f:9b:5b:f9:c3:20:01:42:31:
40:1b:f2:6a:b0:97:1b:fa:28:4c:a7:2c:68:06:1e:8e:72:c2:
9d:a2:ef:26:b5:0f:c6:6d:b9:df:71:29:f5:ad:d2:b3:90:e3:
95:70:03:cb
-----BEGIN CERTIFICATE-----
MIIFbjCCBFagAwIBAgIUEzsXpa23mXTR6BoIUldjo4cNl/swDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxNDQzNDQwMDAwMTEwLwYDVQQFEyg5NEEyRjE2REY0
MTdDMzJFMDU3QUEyNjhDMEU1MkM3MEQxQTQwNkM1MB4XDTI2MDEyNDEyMTgyMFoX
DTI2MDEyNTEzMjYyMFowMzExMC8GA1UEAxMoMEIyQjgzODE2RjlBQTY4QkExRTc1
OTY1OUI3NkRCRkEzRUFCQkMxNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALDHaiMPiHWZJiEPeqJizQPU0RsLnp1WjPfX/Hhh8v0aFWEQf6Vz+GiVtb6c
YdrVjMHuTir81ZQdLDJ2UKWMRWl6DYN4yUMC7OA8jg5XlOWrh8mOjjOuxRGOQ15W
M2LiIsqNiJaZJCWmd9xqOjYPUMVzZm+KkvMeI9BdQenlJOksr0E/FWrnPI/cgqpP
rjB0irSyKYfDfJNZmMUztkUh0Pm9pCZcDEI3vKwWHrU3dnTVyApSWtl9Qmxf0tEH
+mic411ShwEADzwmcgBvUpnucPHWXwCTZFPEsMLz23qGflvocRyMBnVHcqzZqNEU
q9PrD1Xo2HaYqHbI5myhbz2hSbcCAwEAAaOCAmEwggJdMB0GA1UdDgQWBBQLK4OB
b5qmi6HnWWWbdtv6Pqu8FzAfBgNVHSMEGDAWgBSUovFt9BfDLgV6omjA5Sxw0aQG
xTAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84ZDVjZDE0ZS01
ZjYzLTRmMWMtOTRlMy0yNzA1MGMyNjY0ODAvMy85NEEyRjE2REY0MTdDMzJFMDU3
QUEyNjhDMEU1MkM3MEQxQTQwNkM1LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYB
BQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1
ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9sS0x4YmZRWHd5NEZlcUpvd09Vc2NO
R2tCc1UuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvOGQ1Y2QxNGUt
NWY2My00ZjFjLTk0ZTMtMjcwNTBjMjY2NDgwLzMvOTRBMkYxNkRGNDE3QzMyRTA1
N0FBMjY4QzBFNTJDNzBEMUE0MDZDNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF
BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBABbp8kj6tDg4+Bf4SD2O
f+e2daWncyiZCG9eeN1VwgKdwlcazbZAB75S4Dmd2TE/8m1bGxk+pDtAm4qBJtf3
TGFjqoQVp1DShWX4v9lqLx2m71IpvW90B/IPo9SWMTKHQtO3b0K7Q7T3stsnE4Ju
Er7fZYtrGdLJqzv0CHHcF2qLrshrWJTMHfnEdwfOUjhj/h6TUGXnIEu8wdr33urZ
xQOLuu36HszlVwMSTtuqLQbJf+OKTVyJqLACOlNehjWcqMmpPOmQ4U2svLIRJ264
Ok+bW/nDIAFCMUAb8mqwlxv6KEynLGgGHo5ywp2i7ya1D8Ztud9xKfWt0rOQ45Vw
A8s=
-----END CERTIFICATE-----
Generated at Sun Jan 25 04:32:57 2026 by rpki-client