This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.mft
File: 8F4CE7722F99075D94738B7E61070401269EB3D6.mft (raw, json)
Hash identifier: 6hS/X/PPA2OwD/zgbUstDhLXL9sVSx5c7YO474USZ+c=
Subject key identifier: 3E:AB:05:FB:A0:F3:55:D9:BF:54:E0:80:DB:09:19:90:04:9A:40:5B
Authority key identifier: 8F:4C:E7:72:2F:99:07:5D:94:73:8B:7E:61:07:04:01:26:9E:B3:D6
Certificate issuer: /CN=8f4ce7722f99075d94738b7e61070401269eb3d6
Certificate serial: 793C319EB9AB513C89655AA6F20754765DF52B5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.mft
Manifest number: 05F3
Signing time: Sat 24 Jan 2026 18:59:43 +0000
Manifest this update: Sat 24 Jan 2026 18:54:43 +0000
Manifest next update: Sun 25 Jan 2026 22:53:43 +0000
Files and hashes: 1: 38352e3230392e31362e302f32342d3234203d3e20343030303339.roa (hash: JpeDtHMcVyRt7wSevEegZIXGiDHI/xp5ouHedcx7mT4=)
2: 8F4CE7722F99075D94738B7E61070401269EB3D6.crl (hash: 6VVx7aUboEDBtqpNAqT5Segjbcy05F/ugBww7iNwv+w=)
3: 37372e38332e3235332e302f32342d3234203d3e20333938333835.roa (hash: VegTYwpyqBI8NVsfiZGa7nbuIizSi0tQDSuMW1lp9V8=)
4: 3138352e3138312e312e302f32342d3234203d3e203232313638.roa (hash: j6aiC8hmqjNX8bvUvtzfL/WZD+CbfD2TNLTq4Vkaxb8=)
5: 36322e3139322e3137322e302f32342d3234203d3e20323632323837.roa (hash: 2GimDrI+u19G9USJIxEoIwe+FIkjWzBTs+tdLgZWAyE=)
6: 3138352e3138312e322e302f32342d3234203d3e20323132363639.roa (hash: AO/2wQxFVW1dCHNtgSdMO8qdA9TP6KJffP27Y2ywVzk=)
7: 3138352e3138312e332e302f32342d3234203d3e20323030303137.roa (hash: yu4VS8d4SOotNR90wp+Yzh042rOQsTRk/ltNPBkKiBs=)
8: 36322e3139322e3137332e302f32342d3234203d3e203235363933.roa (hash: 7LxiUpW29bCJDw6ndbnVxwTHPen7XCpx03brWPSWNVo=)
9: 37372e38332e3235322e302f32342d3234203d3e20323734383237.roa (hash: 1TkU9CuZNSKSA6n8CCEVJKfR3/eejFvKDG72x42fajA=)
10: 36322e3139322e3137342e302f32342d3234203d3e20313939303538.roa (hash: 7SPDhEMWd1gl2XtQJzxrngcOVdYu9T7eD0t4enh6w+8=)
11: 36322e3139322e3137332e302f32342d3234203d3e2038313030.roa (hash: VR4JLJ2ZU8eUzCRER2JzBOvrizo3+I5iCEURL4jUDUs=)
12: 3138352e3138312e302e302f32342d3234203d3e2035303635.roa (hash: jKhLBm90tx+Wj64bfhAOaNtyd2IRsOIjohul50fMfmI=)
13: 36322e3139322e3137352e302f32342d3234203d3e203332313637.roa (hash: /WAm5dy4jlcwivOnkIFnMuEvBCc6QOLwRlkX4YTGCBc=)
14: 38352e3230392e31392e302f32342d3234203d3e203131383738.roa (hash: Nx4wSG2k5MsgvkZE/SkqlmuALnm8blh30hh9Mbxj2MU=)
15: 38352e3230392e31372e302f32342d3234203d3e203235363933.roa (hash: sfBR34BQfUnBG/Dfs9RgO4NWV6dIYQiGWUQLFQnMRUU=)
16: 37372e38332e3235342e302f32342d3234203d3e203432383331.roa (hash: B5BKp3Kt7IC0lBSFIyTVJVOYl/EnjscrkC95vEdRQdg=)
17: 37372e38332e3235322e302f32342d3234203d3e203533313037.roa (hash: 3Dh0+QL4Ca7K3/8ZGEgIxNy6qmtIRAGaEkPcZns1GuY=)
18: 3231322e3130322e3131342e302f32342d3234203d3e20323132363039.roa (hash: k4QPq18KIVcE3YfXs1geEObswKolsmORhNCPU0jWep8=)
19: 38352e3230392e31372e302f32342d3234203d3e2038313030.roa (hash: QDSk8x00L35RICmReakqpkA/56+KGgKX4susJmbToXY=)
20: 37372e38332e3235352e302f32342d3234203d3e20333937333733.roa (hash: FvvfrZU7Zk5wRW7V0nJVCDjddc7RhJHDxzG+f+tC0NU=)
21: 3139332e3136332e3132372e302f32342d3234203d3e20313439393438.roa (hash: 1dKp6xe+eLRTQoCYGUtbaGkzNAIMlS65VuQGc12R6RA=)
22: 38352e3230392e31382e302f32342d3234203d3e20323132343136.roa (hash: CE9hWXGWiDqK5X5bUXx/dqTabhUB/7ogzo6chIHvh68=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.crl
rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.mft
rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Jan 2026 22:53:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:3c:31:9e:b9:ab:51:3c:89:65:5a:a6:f2:07:54:76:5d:f5:2b:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f4ce7722f99075d94738b7e61070401269eb3d6
Validity
Not Before: Jan 24 18:54:43 2026 GMT
Not After : Jan 25 22:53:43 2026 GMT
Subject: CN=3EAB05FBA0F355D9BF54E080DB091990049A405B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:13:57:0e:ee:72:a1:db:72:4d:fc:ef:55:3c:
10:eb:38:6c:d4:58:c1:65:13:ac:25:6f:e7:1a:54:
f0:04:e3:09:73:d9:a7:d9:b2:a0:f5:16:35:63:b1:
c0:62:74:d2:aa:fe:b3:f0:7f:d4:57:b7:94:84:da:
8e:6f:8b:64:ad:b5:62:0e:fb:3c:aa:89:91:b2:39:
c4:f1:29:b2:ff:cb:c3:0a:9a:63:7c:41:60:28:60:
bc:b2:56:e8:a8:59:69:ad:c2:62:19:04:25:77:db:
5f:aa:3f:fa:fa:37:ed:0d:65:0a:24:ed:e1:73:e5:
2c:fe:a8:56:a8:e2:76:dd:2d:2b:0a:b1:39:a8:78:
c7:91:55:13:4d:e6:ac:b1:c7:c4:ff:db:77:ad:7f:
4d:5f:11:33:ea:c9:1b:f5:fd:4d:7a:39:82:20:97:
7e:9e:e4:f7:22:a0:9d:3d:6c:fd:31:83:bd:cd:3a:
96:40:d2:66:fd:67:7c:2b:f1:4c:8b:1c:8d:23:4e:
94:a5:1e:9c:75:3d:4d:d1:f4:12:10:c5:cf:a4:4e:
24:4d:a9:93:ac:fb:77:fa:39:3c:a7:c3:43:bd:73:
a2:21:2c:b8:f8:be:2f:f2:ee:70:38:27:10:75:b8:
eb:f4:f8:ae:b1:1d:ff:11:ce:0a:4b:b9:9b:a4:34:
ed:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:AB:05:FB:A0:F3:55:D9:BF:54:E0:80:DB:09:19:90:04:9A:40:5B
X509v3 Authority Key Identifier:
keyid:8F:4C:E7:72:2F:99:07:5D:94:73:8B:7E:61:07:04:01:26:9E:B3:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:3f:1e:c5:48:af:07:e4:1b:9a:f5:ab:46:ab:6e:c5:82:1e:
55:ea:eb:0e:ea:6b:37:24:20:63:69:58:92:cd:61:e9:23:a6:
4f:4c:9c:dc:9e:79:27:82:e5:a9:b4:79:4c:21:74:8a:8e:a8:
f8:9b:34:c8:25:62:e2:05:1f:b5:6a:b0:f1:13:b8:35:e6:fb:
f7:51:f1:9b:b0:0e:25:9e:d6:76:2f:41:b3:74:0a:9d:4c:15:
0c:18:16:d6:29:02:1f:ef:17:b2:be:4a:24:f4:da:83:5f:ca:
20:9c:cb:88:7e:f1:b9:bb:73:42:b0:8e:1e:5a:3d:8e:ab:97:
e2:ac:2c:a6:f4:7c:a4:71:d1:b2:db:75:ae:6c:34:01:7a:31:
37:90:c7:0c:5e:84:2e:36:cf:42:e7:96:c6:1e:75:43:5d:34:
75:d9:2b:80:1c:78:14:9a:43:a5:3c:1b:0e:5a:4c:6e:72:79:
d5:f1:e7:c0:84:d7:63:90:de:be:fb:69:eb:ce:0f:b7:31:af:
81:65:2b:57:86:e6:d5:50:e3:02:2e:03:8a:f1:96:47:85:e2:
7e:ef:ee:77:b7:d0:23:12:95:eb:aa:b7:d7:8d:a3:d4:ce:40:
b7:01:62:c8:22:6b:8b:f9:8d:84:f6:2d:49:71:ba:89:30:ba:
d2:7b:26:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:56:51 2026 by rpki-client