This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/df49d7f7-bb3f-4187-be29-59ef2d89039a/0/547BC28C92A229A5AC78C0DE287D89CE37726409.mft
File: 547BC28C92A229A5AC78C0DE287D89CE37726409.mft (raw, json)
Hash identifier: ux2Vqg6N9GnyRwy4h+i5ENFrtR4h0REtjh8aoIuY1Jw=
Subject key identifier: 5D:FF:82:72:DE:FE:6F:ED:38:76:B5:8D:0E:80:F5:66:8E:96:DF:AE
Authority key identifier: 54:7B:C2:8C:92:A2:29:A5:AC:78:C0:DE:28:7D:89:CE:37:72:64:09
Certificate issuer: /CN=547bc28c92a229a5ac78c0de287d89ce37726409
Certificate serial: 69F300ACADA18023CF7492F872C6C41E298CAA56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VHvCjJKiKaWseMDeKH2JzjdyZAk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/df49d7f7-bb3f-4187-be29-59ef2d89039a/0/547BC28C92A229A5AC78C0DE287D89CE37726409.mft
Manifest number: 02C6
Signing time: Sun 25 Jan 2026 13:50:45 +0000
Manifest this update: Sun 25 Jan 2026 13:45:45 +0000
Manifest next update: Mon 26 Jan 2026 13:59:45 +0000
Files and hashes: 1: 547BC28C92A229A5AC78C0DE287D89CE37726409.crl (hash: C+5i6pEfK6ejiAvscjGH+kSkEwfX/P0CsqcugGshIdc=)
2: 323030313a3637383a6362303a3a2f34382d3438203d3e20323034393331.roa (hash: dHqMpXO8Fn1QmdwMgzIUNohViMqf6+wcagP7yILYRFI=)
3: AS204931.asa (hash: zM51UdB/A/IZqHl1wn4NbUbXZwQrun9iugvDxBnKfTA=)
4: AS60431.asa (hash: W8B2btvY8654NatOoBPRRMV+PSLMlHitlzk3n1vMklQ=)
5: 323030313a3637383a6362303a3a2f34382d3438203d3e203630343331.roa (hash: utwrqG/1k6qyhjzxqxfsIfDkj33KE0HmwhjLx5CU12Y=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/df49d7f7-bb3f-4187-be29-59ef2d89039a/0/547BC28C92A229A5AC78C0DE287D89CE37726409.crl
rsync://rsync.paas.rpki.ripe.net/repository/df49d7f7-bb3f-4187-be29-59ef2d89039a/0/547BC28C92A229A5AC78C0DE287D89CE37726409.mft
rsync://rpki.ripe.net/repository/DEFAULT/VHvCjJKiKaWseMDeKH2JzjdyZAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 13:59:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:f3:00:ac:ad:a1:80:23:cf:74:92:f8:72:c6:c4:1e:29:8c:aa:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=547bc28c92a229a5ac78c0de287d89ce37726409
Validity
Not Before: Jan 25 13:45:45 2026 GMT
Not After : Jan 26 13:59:45 2026 GMT
Subject: CN=5DFF8272DEFE6FED3876B58D0E80F5668E96DFAE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:65:37:90:6a:86:92:47:c8:77:c0:bc:3f:91:
76:83:ba:23:19:40:10:5d:f7:91:52:83:42:01:2a:
3c:a2:ef:fd:85:f7:57:f8:d2:99:ce:6d:6c:eb:c1:
de:ff:30:66:d6:03:cb:a6:cc:cb:47:06:f8:5f:cb:
d7:4d:0f:49:8c:ce:d0:c2:2d:2b:a1:c0:ad:71:11:
28:36:63:9a:7e:6e:51:a6:1f:58:d2:a3:31:42:00:
81:71:71:0a:e2:4f:b7:90:de:73:bb:e2:6b:1d:bd:
f8:1c:3c:8f:e6:83:12:41:1c:a1:69:de:18:ab:fb:
b9:ca:a9:02:6f:fb:92:88:93:19:19:5c:d6:de:c0:
05:66:e8:59:80:ab:cb:9c:4e:c4:73:05:b8:df:79:
da:51:8c:61:26:4a:8c:1c:4c:bd:46:a7:a1:e9:bd:
a6:0c:e9:24:43:41:f9:c1:51:68:e0:cb:dc:3c:4c:
ed:73:fe:45:2e:0a:51:84:89:6e:c3:47:6c:2b:13:
fa:54:e7:bd:32:65:f5:f7:8a:df:ed:f3:73:a7:cb:
2f:b7:36:3b:a3:87:1b:e1:5f:02:28:d1:ee:a5:31:
91:0c:28:d1:77:84:10:20:fc:64:3a:9b:0a:d0:2c:
a8:78:ac:9f:be:e1:65:e1:05:9b:67:8b:53:5e:70:
8c:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:FF:82:72:DE:FE:6F:ED:38:76:B5:8D:0E:80:F5:66:8E:96:DF:AE
X509v3 Authority Key Identifier:
keyid:54:7B:C2:8C:92:A2:29:A5:AC:78:C0:DE:28:7D:89:CE:37:72:64:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/df49d7f7-bb3f-4187-be29-59ef2d89039a/0/547BC28C92A229A5AC78C0DE287D89CE37726409.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VHvCjJKiKaWseMDeKH2JzjdyZAk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/df49d7f7-bb3f-4187-be29-59ef2d89039a/0/547BC28C92A229A5AC78C0DE287D89CE37726409.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:62:dc:cc:b1:5a:29:1d:a8:69:4a:eb:04:c2:c7:2e:22:0b:
61:57:9c:38:24:d3:64:ba:cb:9e:cf:46:2e:7c:d9:56:27:89:
a4:82:81:66:92:31:9f:3f:23:0c:60:00:c3:45:b6:45:32:13:
8e:93:2b:a7:90:a1:ff:66:f5:d7:75:05:21:f3:bf:36:40:e0:
98:62:5f:b7:77:d2:8e:03:6e:7b:5d:12:7f:4f:cd:26:52:38:
e3:f9:20:97:90:82:1c:1b:2a:9c:88:4e:13:81:79:3b:eb:d1:
7e:b9:23:f9:c3:b5:87:cc:f6:47:a4:16:37:91:08:d0:c5:ad:
f5:4c:c5:42:44:2c:b3:f3:63:fa:2c:18:f2:06:dc:ef:9f:83:
e2:be:b6:a9:7b:07:44:d5:b3:cf:57:08:3d:b8:48:ad:4a:a0:
97:35:8c:d8:9c:c1:5f:b1:dd:e9:3a:3b:80:fc:52:ad:40:a7:
f7:4f:61:4f:5b:db:cf:03:ec:d4:4d:96:b6:7e:40:b9:55:93:
7a:9c:10:bf:38:42:fa:f2:4b:3b:06:02:8e:16:7e:f6:0f:28:
c6:2b:65:06:b8:bd:8d:de:35:94:9c:2a:f3:fd:34:26:d2:22:
35:2b:16:bd:13:33:8d:b0:bf:56:d9:cb:06:a9:8f:6d:f7:fe:
b9:d3:a5:e0
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUafMArK2hgCPPdJL4csbEHimMqlYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTQ3YmMyOGM5MmEyMjlhNWFjNzhjMGRlMjg3ZDg5Y2Uz
NzcyNjQwOTAeFw0yNjAxMjUxMzQ1NDVaFw0yNjAxMjYxMzU5NDVaMDMxMTAvBgNV
BAMTKDVERkY4MjcyREVGRTZGRUQzODc2QjU4RDBFODBGNTY2OEU5NkRGQUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuZTeQaoaSR8h3wLw/kXaDuiMZ
QBBd95FSg0IBKjyi7/2F91f40pnObWzrwd7/MGbWA8umzMtHBvhfy9dND0mMztDC
LSuhwK1xESg2Y5p+blGmH1jSozFCAIFxcQriT7eQ3nO74msdvfgcPI/mgxJBHKFp
3hir+7nKqQJv+5KIkxkZXNbewAVm6FmAq8ucTsRzBbjfedpRjGEmSowcTL1Gp6Hp
vaYM6SRDQfnBUWjgy9w8TO1z/kUuClGEiW7DR2wrE/pU570yZfX3it/t83Onyy+3
NjujhxvhXwIo0e6lMZEMKNF3hBAg/GQ6mwrQLKh4rJ++4WXhBZtni1NecIwBAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUXf+Cct7+b+04drWNDoD1Zo6W364wHwYDVR0j
BBgwFoAUVHvCjJKiKaWseMDeKH2JzjdyZAkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZGY0OWQ3ZjctYmIzZi00MTg3LWJlMjktNTllZjJkODkw
MzlhLzAvNTQ3QkMyOEM5MkEyMjlBNUFDNzhDMERFMjg3RDg5Q0UzNzcyNjQwOS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1ZIdkNqSktpS2FXc2VNRGVLSDJKempk
eVpBay5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZjQ5ZDdmNy1i
YjNmLTQxODctYmUyOS01OWVmMmQ4OTAzOWEvMC81NDdCQzI4QzkyQTIyOUE1QUM3
OEMwREUyODdEODlDRTM3NzI2NDA5Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnWLczLFaKR2oaUrrBMLH
LiILYVecOCTTZLrLns9GLnzZVieJpIKBZpIxnz8jDGAAw0W2RTITjpMrp5Ch/2b1
13UFIfO/NkDgmGJft3fSjgNue10Sf0/NJlI44/kgl5CCHBsqnIhOE4F5O+vRfrkj
+cO1h8z2R6QWN5EI0MWt9UzFQkQss/Nj+iwY8gbc75+D4r62qXsHRNWzz1cIPbhI
rUqglzWM2JzBX7Hd6To7gPxSrUCn909hT1vbzwPs1E2Wtn5AuVWTepwQvzhC+vJL
OwYCjhZ+9g8oxitlBri9jd41lJwq8/00JtIiNSsWvRMzjbC/VtnLBqmPbff+udOl
4A==
-----END CERTIFICATE-----
Generated at Sun Jan 25 23:54:56 2026 by rpki-client