This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/6/2472949B3C234930DBE99B1B5CD5196AB16D151B.mft
File: 2472949B3C234930DBE99B1B5CD5196AB16D151B.mft (raw, json)
Hash identifier: HQwACzkAEwjrS3f73bcOPvdfeheogE9qro1qE6bDJFA=
Subject key identifier: C9:92:9B:52:4C:18:87:5A:75:FB:B6:50:72:B9:9D:E4:87:58:1A:8F
Authority key identifier: 24:72:94:9B:3C:23:49:30:DB:E9:9B:1B:5C:D5:19:6A:B1:6D:15:1B
Certificate issuer: /CN=89d4f40fed1166159109937674aef0279ad039550feccf8d61
Certificate serial: 7BAECB6E8498579D408E38CF696762CA08BBEA15
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3d9879da-145f-4f21-a7c3-da6b59a01625/89d4f40fed1166159109937674aef0279ad039550feccf8d61.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/6/2472949B3C234930DBE99B1B5CD5196AB16D151B.mft
Manifest number: 038E
Signing time: Sun 25 Jan 2026 12:30:53 +0000
Manifest this update: Sun 25 Jan 2026 12:25:53 +0000
Manifest next update: Mon 26 Jan 2026 13:09:53 +0000
Files and hashes: 1: 323630323a663961323a3a2f34382d3438203d3e203436373636.roa (hash: UAkAddbwt9iFm85K1ELuBkLomLKwc7hMpyyYhhtNJsY=)
2: 32332e3137302e37322e302f32342d3234203d3e203436373636.roa (hash: hfPLPQW0RCv33ma51bvJk8w/CbhypODZthVk4Z+KIYw=)
3: 323630323a663961323a35353a3a2f34382d3438203d3e20313939353138.roa (hash: Lmh4khK9jqfGM7AgqtrinnAM2ubStxsQ/YZSUwbqCvU=)
4: 2472949B3C234930DBE99B1B5CD5196AB16D151B.crl (hash: mMYolg55N5SX5cKE/MxydlO0TCS9+IxyBsI+J9l4vSk=)
5: 323630323a663961323a31303a3a2f34382d3438203d3e203436373636.roa (hash: 4WeoHWRvFw0AjbvhEY/m4kAMvgGDc13uyJpzQvCGzG0=)
6: 3139392e3234312e36302e302f32342d3234203d3e203436373636.roa (hash: 4ZYkW/+NAwrD1ELCwQxEXepcoE4Wv3XF1vCdQrX3iE0=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/6/2472949B3C234930DBE99B1B5CD5196AB16D151B.crl
rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/6/2472949B3C234930DBE99B1B5CD5196AB16D151B.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3d9879da-145f-4f21-a7c3-da6b59a01625/89d4f40fed1166159109937674aef0279ad039550feccf8d61.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3d9879da-145f-4f21-a7c3-da6b59a01625/3d9879da-145f-4f21-a7c3-da6b59a01625.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3d9879da-145f-4f21-a7c3-da6b59a01625/3d9879da-145f-4f21-a7c3-da6b59a01625.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3d9879da-145f-4f21-a7c3-da6b59a01625.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 26 Jan 2026 13:09:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:ae:cb:6e:84:98:57:9d:40:8e:38:cf:69:67:62:ca:08:bb:ea:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89d4f40fed1166159109937674aef0279ad039550feccf8d61
Validity
Not Before: Jan 25 12:25:53 2026 GMT
Not After : Jan 26 13:09:53 2026 GMT
Subject: CN=C9929B524C18875A75FBB65072B99DE487581A8F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:8b:c9:31:06:6b:36:12:7a:8e:5b:15:17:92:
47:99:f0:14:db:1d:e5:0a:f1:1b:5d:93:75:a4:cf:
02:b0:16:7e:e4:b7:57:f5:20:b6:5d:0c:73:ba:71:
2d:c6:e0:b3:f9:ea:1d:58:b5:9d:1b:a6:5f:af:d8:
92:66:50:1b:89:d3:5d:5b:b2:a2:66:c2:72:44:de:
11:77:8a:2d:18:45:e2:5b:60:04:b5:98:73:39:00:
6d:c6:f2:bc:af:43:04:97:c0:99:00:b2:c4:23:0a:
24:b0:38:77:ee:a4:f8:da:98:51:d7:c0:4d:87:f4:
cc:88:fa:1c:e7:8e:85:87:c2:a4:2c:27:d1:e5:4b:
44:c4:1c:42:f6:05:69:b9:d7:fd:65:13:be:b6:74:
20:75:26:25:3c:17:66:60:9b:df:62:ca:78:9f:da:
c2:b1:13:05:5f:fa:15:33:1f:39:19:79:3d:4a:cf:
a5:d0:fe:ad:59:a2:27:33:25:30:d9:70:97:2e:b5:
85:b4:e5:3e:0a:4b:51:78:e2:bc:6c:1a:1d:b0:92:
56:f6:c6:bb:e2:78:67:fc:61:a7:2c:39:47:1b:b4:
58:94:f7:21:9d:85:cf:3f:24:a8:ac:3b:da:b8:4b:
2b:e7:f1:df:b0:ac:7b:bd:86:72:71:2d:4d:4c:09:
6b:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:92:9B:52:4C:18:87:5A:75:FB:B6:50:72:B9:9D:E4:87:58:1A:8F
X509v3 Authority Key Identifier:
keyid:24:72:94:9B:3C:23:49:30:DB:E9:9B:1B:5C:D5:19:6A:B1:6D:15:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/6/2472949B3C234930DBE99B1B5CD5196AB16D151B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3d9879da-145f-4f21-a7c3-da6b59a01625/89d4f40fed1166159109937674aef0279ad039550feccf8d61.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/6/2472949B3C234930DBE99B1B5CD5196AB16D151B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:68:6e:2b:a8:0c:c6:7c:14:fc:b0:cc:36:66:3a:02:6d:1d:
e6:d5:b6:86:bc:24:ea:6e:d2:a6:4e:09:db:59:6a:42:68:cb:
e3:80:c2:aa:fd:a4:94:22:22:ba:d3:c8:a5:d7:3e:ca:17:9a:
b2:49:16:02:05:24:ac:bb:11:9f:96:bb:95:5a:ca:e8:78:0b:
ef:1e:ec:c0:28:07:7e:14:4f:2e:25:a1:0d:ca:a4:1a:78:0d:
5f:46:f8:2d:6d:ca:ab:19:3a:29:54:f0:95:ed:ae:47:e8:56:
2a:6f:3f:78:7d:df:53:a0:d0:bf:00:d6:56:bf:48:97:b3:72:
05:ce:23:96:91:26:17:5d:52:04:ec:0b:24:5d:ac:63:50:ab:
b6:51:8d:8f:1c:e0:79:b3:ab:ad:e6:fd:ec:8b:54:53:ed:cc:
b6:f7:0a:14:9e:65:50:b5:57:b9:f0:94:9a:29:6f:fa:3a:7b:
99:7d:2e:14:88:23:0e:49:aa:5c:03:33:07:8d:96:73:a2:2b:
f0:16:fe:2c:e7:1f:4c:36:01:b3:11:db:b6:51:af:29:de:24:
90:38:1b:f7:2b:68:7b:96:42:ad:36:e9:fc:91:4f:8f:80:ce:
7f:4b:6d:f2:ed:40:8e:44:01:a6:be:07:82:81:31:db:e3:8f:
5e:72:2f:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 03:59:56 2026 by rpki-client