This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.mft
File: 0993289B168A37D449BC0D44B1AD35E532025CF1.mft (raw, json)
Hash identifier: t+HXArwaVkYizPJ3JLr1ijLyvG8SeqajjY8s0FcuY6c=
Subject key identifier: A9:BE:19:2B:84:C7:BE:39:EE:A9:72:89:AF:F2:73:2D:4D:D1:0C:6D
Authority key identifier: 09:93:28:9B:16:8A:37:D4:49:BC:0D:44:B1:AD:35:E5:32:02:5C:F1
Certificate issuer: /CN=0993289b168a37d449bc0d44b1ad35e532025cf1
Certificate serial: 0DD68F53A2C9DF271C48B8F2B2BE2EAB73C44129
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CZMomxaKN9RJvA1Esa015TICXPE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.mft
Manifest number: 033F
Signing time: Sun 25 Jan 2026 07:45:18 +0000
Manifest this update: Sun 25 Jan 2026 07:40:18 +0000
Manifest next update: Mon 26 Jan 2026 10:53:18 +0000
Files and hashes: 1: 0993289B168A37D449BC0D44B1AD35E532025CF1.crl (hash: LcqB0dCjyeCYWi/0Q9BHWxFtit9v0ToTZ9mqIgQwVxE=)
2: 3139342e3135362e37362e302f32342d3234203d3e20323132323338.roa (hash: +FUmQfKGqa7l1UgyL4zjqDbJWdoQDDjzi+PS6gpsjlM=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.crl
rsync://rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.mft
rsync://rpki.ripe.net/repository/DEFAULT/CZMomxaKN9RJvA1Esa015TICXPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:d6:8f:53:a2:c9:df:27:1c:48:b8:f2:b2:be:2e:ab:73:c4:41:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0993289b168a37d449bc0d44b1ad35e532025cf1
Validity
Not Before: Jan 25 07:40:18 2026 GMT
Not After : Jan 26 10:53:18 2026 GMT
Subject: CN=A9BE192B84C7BE39EEA97289AFF2732D4DD10C6D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:98:71:99:20:62:7d:81:ee:76:45:bd:42:51:
7f:70:76:52:52:7b:c0:eb:ad:8e:7c:f0:49:cf:b4:
7b:41:cb:c9:8b:2a:48:c8:df:f2:4c:0d:f4:4e:ee:
26:c5:f2:54:4b:19:8f:91:a4:ad:4b:44:29:eb:a0:
cf:35:0b:7f:a3:ae:24:83:b9:30:61:3c:d0:5f:e7:
dd:d3:76:25:af:ee:87:cc:69:17:59:22:3e:46:0e:
e0:4f:6e:2f:2d:8e:5c:f9:5c:ee:59:90:b1:88:b8:
07:49:c8:d3:3f:a4:6d:3d:d4:ef:1e:5f:b0:dd:b5:
06:87:9f:71:77:d4:f6:64:07:6c:e8:84:02:99:7c:
ff:e8:31:8b:0a:74:2b:79:9b:c0:96:05:e5:90:2f:
f5:2c:dd:7e:f6:30:7d:1f:12:6a:62:8d:a5:7f:82:
ff:4f:45:20:6d:49:59:8e:5f:bc:f2:c3:0e:dc:81:
9e:92:46:a0:fd:f3:f0:d2:d5:53:f7:39:50:30:03:
d2:7e:f2:9b:f3:7f:10:b2:c8:24:56:09:bf:bd:3f:
3b:74:da:12:ec:67:86:0d:4f:71:d9:a7:89:11:9f:
89:f6:73:c6:a3:06:f8:52:a7:f9:de:5d:90:65:9a:
05:5c:eb:9f:6c:33:7d:d3:b3:22:04:e1:c5:6f:fd:
69:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:BE:19:2B:84:C7:BE:39:EE:A9:72:89:AF:F2:73:2D:4D:D1:0C:6D
X509v3 Authority Key Identifier:
keyid:09:93:28:9B:16:8A:37:D4:49:BC:0D:44:B1:AD:35:E5:32:02:5C:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CZMomxaKN9RJvA1Esa015TICXPE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:0b:77:48:74:0d:ec:c9:a2:36:00:15:6c:b2:4d:92:a5:6b:
0d:cc:99:13:c9:77:de:5a:c9:c2:cd:81:83:8a:2a:54:c5:8f:
90:d3:b0:8c:da:44:40:18:c6:04:38:f3:1a:e7:c2:19:79:08:
ea:d4:df:c9:15:f8:f0:8d:6b:bf:df:eb:eb:f8:fd:f2:04:7b:
3b:73:bd:40:a8:7b:17:97:9b:8f:18:8f:26:15:58:9e:e3:50:
86:42:d0:e5:9b:05:52:f8:74:a5:8d:48:b9:53:4e:a0:75:a2:
e2:d2:6b:a8:df:2f:07:fb:df:dc:c0:59:f8:26:13:ee:33:6e:
9b:6d:22:54:c4:e1:b3:60:b7:19:b1:79:7b:2b:97:fb:97:83:
4c:0c:5d:ca:7a:29:48:dc:49:ed:32:b8:a8:2e:1f:b3:e5:20:
5c:16:4d:8f:3c:a0:8b:57:b9:44:92:10:98:81:15:d7:fa:28:
14:e2:68:4e:82:ba:4c:f9:08:0f:84:67:94:ac:c4:ee:4b:c1:
e4:59:9d:42:1c:7c:3c:2b:84:55:88:34:ad:39:c6:96:25:b5:
ed:35:1d:b1:2b:e2:20:d1:a0:3a:dd:82:de:fb:f4:3d:ac:68:
00:e7:98:24:f6:11:ea:02:73:1b:c8:1a:18:27:df:a0:83:cd:
aa:7e:78:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:04:50 2026 by rpki-client