This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft
File: C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft (raw, json)
Hash identifier: 7dIf0eCtVVI7XWlc3lCH+cyKh1Ta9Mxm8Sju5vb4Tf4=
Subject key identifier: AC:A4:0C:05:3F:45:CC:99:16:62:13:D3:31:B8:1B:D9:24:BE:7D:85
Authority key identifier: C7:70:F4:33:58:B9:7B:A0:AA:9B:DC:62:BB:D5:11:E9:0A:EA:B2:9D
Certificate issuer: /CN=c770f43358b97ba0aa9bdc62bbd511e90aeab29d
Certificate serial: 402E1BA6033B7A1121FF4748B7ACAA93EC1D86C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft
Manifest number: 0268
Signing time: Sun 25 Jan 2026 11:45:24 +0000
Manifest this update: Sun 25 Jan 2026 11:40:24 +0000
Manifest next update: Mon 26 Jan 2026 14:45:24 +0000
Files and hashes: 1: 33312e32322e3130372e302f32342d3234203d3e20313337353137.roa (hash: zucU5bamNfYRw/esvivyzaXHMAl8N0xQ+Q3coI+3JvA=)
2: 33312e32322e3130362e302f32342d3234203d3e20323133353032.roa (hash: gMhOzO7mxft8aHHqMyhMEvoyI4x3AcVBhgkY3Yc2Ryc=)
3: 34332e3233302e38352e302f32342d3234203d3e20323132363639.roa (hash: vgObUGnSREXD+ZGKD48TBidzsDD4bb41p0YUFbXX2ak=)
4: 3130332e34392e3133312e302f32342d3234203d3e20313338333634.roa (hash: PCBT1S5SsQNvPExnIxpGrOJnC4Zxkw3ilANCZAM8stA=)
5: 33312e32322e3130392e302f32342d3234203d3e203432383331.roa (hash: uRUTbbdZ8AYVGvK3CKTe3KYxaaV1m1bGyvfgh/rstUI=)
6: 3130332e34392e3133312e302f32342d3234203d3e20313534343038.roa (hash: uNydLTQQX3HfUttLHpAQztbzmsLo2FwUjxcM/0z5ejA=)
7: 3130332e34392e3133312e302f32342d3234203d3e20323133373131.roa (hash: 0KQImRtVxQSlo2IkiWEm4Ta1ecdBVyx0gErMixeusbs=)
8: 3130332e34392e3132382e302f32342d3234203d3e20313534303439.roa (hash: RP7fF4ljaFnG1QBw6wHJTYmQiSzsC+UtOPXQULgrH/c=)
9: 34332e3233302e38342e302f32342d3234203d3e203633313939.roa (hash: mN7VhJyGfS7zh6TYiLbpihJCInKpBaTwITIrbKnSr78=)
10: 33312e32322e3130382e302f32342d3234203d3e203432383331.roa (hash: 8yRIzyX7kSL5wlZucsqrW2Cnq9iyHa3XujSoVf8z1CY=)
11: 33312e32322e3131302e302f32342d3234203d3e20323038393035.roa (hash: GDspqRij6MiNPh7udQ2b5uDlkV2tbpp6r9PQ/alfk6o=)
12: 33312e32322e3130342e302f32342d3234203d3e20313938303230.roa (hash: 2c/Q6mL57WPxOvD74dnFYEhVwjt0QpjY04YbOcxeQJ8=)
13: 34332e3233302e38362e302f32332d3234203d3e2033343931.roa (hash: BqbUmbythNNYP4WqssroNY2sOPvoyuRgXIRAVuIytpA=)
14: 3130332e34392e3133312e302f32342d3234203d3e20313437323631.roa (hash: gI3QMk1nxnVJ3ar9nDADeDjafrF5rxSYgoW75rlLkBk=)
15: C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl (hash: veYt7YNzjt/Iprxt6id1rRODjBWIQeZADpHY1GoqqoM=)
16: 34332e3233302e38342e302f32342d3234203d3e203235313938.roa (hash: D5rxpe/mz9cZbwkoouLs3Io8a9VjYwAhmSHGosd1BJQ=)
17: 3130332e34392e3133302e302f32342d3234203d3e20383334.roa (hash: BeVzuWN/0Qvsq9GYvTx4ZuaACwAjnMKfoJ2e9z9vYwU=)
18: 33312e32322e3130352e302f32342d3234203d3e20323135303236.roa (hash: CEnX1eNlwK6zTbdiivvYtvATObcHBs1ojc6GAmrJxmA=)
19: 3130332e34392e3132392e302f32342d3234203d3e20313533373836.roa (hash: 8ciOgQf/5f2kkiTl0Q7pGFYfq76YJlE+KlbE9/JeEuM=)
20: 33312e32322e3131312e302f32342d3234203d3e20323135333535.roa (hash: brok2XUOzC0OAQs7efh1lP/TIOrHW70pJohRfs3tgEM=)
21: 34332e3233302e38352e302f32342d3234203d3e20323131343430.roa (hash: hoZQSGqkvoyh+Fwe28UicpO6RAJD80P7rklT/Di/mQU=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl
rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:2e:1b:a6:03:3b:7a:11:21:ff:47:48:b7:ac:aa:93:ec:1d:86:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c770f43358b97ba0aa9bdc62bbd511e90aeab29d
Validity
Not Before: Jan 25 11:40:24 2026 GMT
Not After : Jan 26 14:45:24 2026 GMT
Subject: CN=ACA40C053F45CC99166213D331B81BD924BE7D85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f5:8a:b3:8e:3f:93:de:60:3a:97:60:7f:b4:
e8:d6:43:e4:1f:fb:ed:66:7c:5c:4d:30:fd:99:6e:
30:4d:25:dc:36:b7:4f:1b:06:5a:4d:ef:87:91:26:
3d:18:04:ef:48:9f:09:ba:c3:0c:ba:9f:c6:33:fb:
b8:e4:36:b6:7f:a7:4c:f3:1e:c9:b5:65:df:9b:88:
16:cf:3c:7a:4b:5b:10:44:a7:a3:77:73:a9:90:56:
3c:68:29:21:3d:a1:37:29:27:40:09:49:47:b9:42:
68:22:7b:ed:5e:f6:74:ba:60:ad:2d:39:2f:ec:1b:
f4:13:9c:37:57:20:d9:ce:42:9c:a5:0b:a2:b2:62:
d9:9c:52:ee:88:9a:27:e7:f9:73:85:86:0b:d0:2d:
78:f9:65:27:68:da:f8:65:48:9c:3b:fb:ed:ee:b5:
be:8c:95:c7:e9:17:68:2a:51:31:c8:fe:52:68:aa:
12:d4:46:4e:bf:11:7e:2a:7e:aa:2c:a8:7e:a5:e4:
7f:19:2f:71:13:5d:c1:60:15:f7:d8:4b:2c:63:ee:
cc:7d:8a:aa:db:78:2f:31:ce:a7:16:ed:1c:2f:d2:
c7:56:40:db:fd:0c:07:1c:de:b3:2c:28:be:51:65:
2e:e5:2c:b9:5c:d2:9a:09:ff:b5:2d:a4:1a:0d:19:
3c:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:A4:0C:05:3F:45:CC:99:16:62:13:D3:31:B8:1B:D9:24:BE:7D:85
X509v3 Authority Key Identifier:
keyid:C7:70:F4:33:58:B9:7B:A0:AA:9B:DC:62:BB:D5:11:E9:0A:EA:B2:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:6c:a4:53:a1:c6:eb:d8:fa:6f:4b:df:60:6f:2d:a0:c9:f7:
94:68:25:c6:f6:f8:5f:f9:74:76:dc:a6:fa:12:0c:bf:75:54:
17:6c:04:72:da:ae:eb:91:ea:43:4a:d0:83:94:6e:2c:7a:cf:
da:30:6a:0a:63:ad:23:2a:84:ee:05:0e:ba:47:a4:c4:92:59:
95:72:c1:9d:ff:fc:a3:c7:e1:d6:e4:7d:7f:c8:06:fd:3f:f4:
c5:8a:f6:09:01:69:c5:31:1b:ee:e7:39:9f:40:bc:bf:b6:a2:
cc:96:43:2d:93:34:78:cb:a3:6a:a4:c1:01:81:b4:01:e5:48:
1e:a9:83:76:d0:b3:a0:9a:49:dd:cd:09:5d:a6:39:09:a2:aa:
9e:af:c3:3b:5c:03:22:4c:c4:f0:be:ef:ab:3e:f1:68:a0:8b:
a8:5d:7d:99:43:0e:5c:eb:17:49:66:dc:e6:c8:85:90:57:6f:
14:4e:72:00:2a:f8:20:e2:0d:e0:25:69:7e:56:f6:d5:b9:ec:
7a:5f:df:63:b7:43:7d:c3:8b:b2:49:a4:8d:74:14:f4:df:ce:
b8:0d:b7:d6:84:b9:9e:ac:46:f8:fd:91:98:64:89:4f:62:aa:
cf:b2:2d:46:eb:2d:ab:1c:4a:f9:d2:f7:28:59:a9:b1:9e:b9:
48:98:19:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:32:15 2026 by rpki-client