This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/1/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.mft File: 13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.mft (raw, json) Hash identifier: TI3nsLoZSvIpJHPHRoT1Vxe8vxm2Gvc8kbA7WMY5HMI= Subject key identifier: C6:8B:33:9D:21:5A:83:58:81:54:AD:48:D4:74:B5:92:A8:DD:94:85 Authority key identifier: 13:E1:A9:98:F7:7D:7C:1F:F2:95:5C:0B:68:8F:EB:FE:0F:81:96:EB Certificate issuer: /CN=13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB Certificate serial: 4E5C613E05156522EADE6C03CA7620B6785DAE2D Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/1/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.mft Manifest number: 01C5 Signing time: Sun 25 Jan 2026 07:20:56 +0000 Manifest this update: Sun 25 Jan 2026 07:15:56 +0000 Manifest next update: Mon 26 Jan 2026 10:18:56 +0000 Files and hashes: 1: 326131343a373538303a6430303a3a2f34302d3438203d3e20313939333130.roa (hash: jIRO9mS3d6dPjcdQf+OkOGr/dNujGogdrEuPEpLgZJI=) 2: 13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.crl (hash: jUlAnBFVrrrjQxrMr9dCEK0uN5Vzw+1JO2Hxif055cM=) 3: 326131343a373538303a6466303a3a2f34382d3438203d3e20323133373239.roa (hash: u/JR7/M6BcKICssdDR7j/sPwWvJTPX2G+FFLBgXrUyU=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/1/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.crl rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/1/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 10:18:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:5c:61:3e:05:15:65:22:ea:de:6c:03:ca:76:20:b6:78:5d:ae:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB Validity Not Before: Jan 25 07:15:56 2026 GMT Not After : Jan 26 10:18:56 2026 GMT Subject: CN=C68B339D215A83588154AD48D474B592A8DD9485 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:91:2e:8d:f1:ad:c2:11:3f:d5:ce:bc:98:38: fe:0a:56:3a:4b:f3:e6:97:14:8c:9e:96:4f:13:c3: 09:df:c3:b8:7f:db:cc:a5:97:6b:80:14:b1:11:6e: 2f:2e:01:70:1a:4e:91:dc:6c:bc:66:e5:74:1e:42: 35:df:67:c3:ee:b6:48:9f:7f:3b:51:d4:36:78:2a: 18:8e:4e:2f:b1:94:96:81:18:42:49:46:6d:e0:fd: a3:90:b1:4b:5c:ab:e8:05:e4:a5:9e:19:2c:56:7d: 9e:75:9b:2f:aa:21:a0:25:2e:1b:1c:44:56:85:0f: 80:34:20:47:90:05:70:32:12:67:59:ee:86:5f:ae: 8f:ea:fa:50:d7:1f:2f:29:e4:c5:fc:06:ad:17:39: 13:e1:c8:93:7c:4d:02:ff:16:36:c4:58:5a:11:5f: 71:9d:35:b0:41:a6:cb:d4:f6:54:6e:ce:e9:4e:99: 06:a5:ef:c4:d1:15:ba:85:3a:fe:bd:e4:bd:5a:f3: 81:a3:49:86:62:b2:e4:f6:99:b5:2a:e5:9a:79:6a: d0:ab:10:db:ac:bc:92:32:d8:80:bd:08:a9:55:de: c1:34:f1:8b:f5:1c:69:62:a1:50:9c:23:16:e6:7f: 1d:7c:4a:b7:74:09:6e:c8:e9:d4:8f:d0:4f:e8:c7: 16:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:8B:33:9D:21:5A:83:58:81:54:AD:48:D4:74:B5:92:A8:DD:94:85 X509v3 Authority Key Identifier: keyid:13:E1:A9:98:F7:7D:7C:1F:F2:95:5C:0B:68:8F:EB:FE:0F:81:96:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/1/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/1/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:bb:88:de:24:cc:56:98:e4:6a:bb:12:00:d1:7b:61:75:68: c5:f5:c4:66:5d:fb:31:2a:21:c7:42:26:3c:08:8b:47:cd:5d: 60:74:27:ae:ee:ae:0e:8f:d1:67:f2:8c:82:7e:23:9d:05:fe: 37:d0:70:a1:30:dd:2a:c6:38:02:35:f3:a5:84:a0:0f:82:35: ed:4c:60:98:a6:6f:db:1c:b1:e3:38:f5:3a:62:b6:74:5f:e3: f2:17:3a:69:b6:24:a5:11:79:b5:16:9e:1a:b1:ab:21:b9:9b: e5:0d:5a:e3:83:da:7f:db:25:b4:8c:83:6f:2d:a6:4e:f6:82: 39:8a:c6:53:0b:ef:6d:87:e8:e4:c7:03:1b:55:42:96:64:65: 55:af:4c:46:c5:0f:44:27:e1:80:4a:ec:73:a2:01:7e:0f:bf: ea:e8:4a:5c:e5:49:71:f5:16:9f:95:17:d1:94:cb:6a:2f:8f: 53:0a:f1:8f:15:77:a6:da:72:26:ee:56:01:6e:db:b6:5f:35: 04:8c:df:df:d0:00:36:5b:6a:ff:58:51:d1:cf:d8:e0:6a:8a: e6:f9:92:33:3a:b6:9f:e1:2c:68:c6:9f:a4:0a:79:1a:a3:13: cd:78:6d:ab:32:3f:65:5f:d8:65:72:bf:c7:78:cf:71:29:87: 1d:7f:16:2d -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUTlxhPgUVZSLq3mwDynYgtnhdri0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTNFMUE5OThGNzdEN0MxRkYyOTU1QzBCNjg4RkVCRkUw RjgxOTZFQjAeFw0yNjAxMjUwNzE1NTZaFw0yNjAxMjYxMDE4NTZaMDMxMTAvBgNV BAMTKEM2OEIzMzlEMjE1QTgzNTg4MTU0QUQ0OEQ0NzRCNTkyQThERDk0ODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCykS6N8a3CET/VzryYOP4KVjpL 8+aXFIyelk8Twwnfw7h/28yll2uAFLERbi8uAXAaTpHcbLxm5XQeQjXfZ8Putkif fztR1DZ4KhiOTi+xlJaBGEJJRm3g/aOQsUtcq+gF5KWeGSxWfZ51my+qIaAlLhsc RFaFD4A0IEeQBXAyEmdZ7oZfro/q+lDXHy8p5MX8Bq0XORPhyJN8TQL/FjbEWFoR X3GdNbBBpsvU9lRuzulOmQal78TRFbqFOv695L1a84GjSYZisuT2mbUq5Zp5atCr ENusvJIy2IC9CKlV3sE08Yv1HGlioVCcIxbmfx18Srd0CW7I6dSP0E/oxxZTAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUxosznSFag1iBVK1I1HS1kqjdlIUwHwYDVR0j BBgwFoAUE+GpmPd9fB/ylVwLaI/r/g+BluswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDE1NzY0N2MtOTFkNi00YTA0LThhOTEtZDE1Mzg1ZDFm YWIyLzEvMTNFMUE5OThGNzdEN0MxRkYyOTU1QzBCNjg4RkVCRkUwRjgxOTZFQi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8xM0UxQTk5OEY3N0Q3QzFGRjI5NTVDMEI2 ODhGRUJGRTBGODE5NkVCLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzAxNTc2NDdjLTkxZDYtNGEwNC04YTkxLWQxNTM4NWQxZmFiMi8xLzEzRTFBOTk4 Rjc3RDdDMUZGMjk1NUMwQjY4OEZFQkZFMEY4MTk2RUIubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCKu4je JMxWmORquxIA0XthdWjF9cRmXfsxKiHHQiY8CItHzV1gdCeu7q4Oj9Fn8oyCfiOd Bf430HChMN0qxjgCNfOlhKAPgjXtTGCYpm/bHLHjOPU6YrZ0X+PyFzpptiSlEXm1 Fp4asashuZvlDVrjg9p/2yW0jINvLaZO9oI5isZTC+9th+jkxwMbVUKWZGVVr0xG xQ9EJ+GASuxzogF+D7/q6Epc5Ulx9RaflRfRlMtqL49TCvGPFXem2nIm7lYBbtu2 XzUEjN/f0AA2W2r/WFHRz9jgaorm+ZIzOraf4Sxoxp+kCnkaoxPNeG2rMj9lX9hl cr/HeM9xKYcdfxYt -----END CERTIFICATE-----Generated at Sun Jan 25 22:00:41 2026 by rpki-client