This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/0/883931AAB8B1363015BC8FDDF0B582321767440A.mft File: 883931AAB8B1363015BC8FDDF0B582321767440A.mft (raw, json) Hash identifier: XdxFvCgF41eLqZTDrdK94cc5EvAmsGn8elFqq/EupRs= Subject key identifier: 40:B8:46:E1:7A:E7:7E:1F:0E:EA:D2:68:45:4E:39:FE:AC:02:EF:28 Authority key identifier: 88:39:31:AA:B8:B1:36:30:15:BC:8F:DD:F0:B5:82:32:17:67:44:0A Certificate issuer: /CN=883931aab8b1363015bc8fddf0b582321767440a Certificate serial: 7D340A5200BB067F358F8D10FE67F17BCA6CB343 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iDkxqrixNjAVvI_d8LWCMhdnRAo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/0/883931AAB8B1363015BC8FDDF0B582321767440A.mft Manifest number: 29 Signing time: Sun 25 Jan 2026 09:07:06 +0000 Manifest this update: Sun 25 Jan 2026 09:02:06 +0000 Manifest next update: Mon 26 Jan 2026 09:51:06 +0000 Files and hashes: 1: AS213605.asa (hash: vDTrzMEAXQDX/rAJbwqFTc96En0LeH2npreVsst7mlA=) 2: 323030313a3637383a3533633a3a2f34382d3438203d3e20313534313835.roa (hash: ToBUFvUom+h4rbM7uZ7L3aEUItGSsZaFzls2rQ5hJzY=) 3: 883931AAB8B1363015BC8FDDF0B582321767440A.crl (hash: VJASXQCtX1w6Ni/oaGvSbKbGTsVmhXdGX/mEVfBdesY=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/0/883931AAB8B1363015BC8FDDF0B582321767440A.crl rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/0/883931AAB8B1363015BC8FDDF0B582321767440A.mft rsync://rpki.ripe.net/repository/DEFAULT/iDkxqrixNjAVvI_d8LWCMhdnRAo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:34:0a:52:00:bb:06:7f:35:8f:8d:10:fe:67:f1:7b:ca:6c:b3:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=883931aab8b1363015bc8fddf0b582321767440a Validity Not Before: Jan 25 09:02:06 2026 GMT Not After : Jan 26 09:51:06 2026 GMT Subject: CN=40B846E17AE77E1F0EEAD268454E39FEAC02EF28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:70:9a:aa:5a:8a:d8:0f:ba:08:36:6e:e6:a6: c0:31:b7:fe:38:ea:6b:45:53:9a:0b:e4:d6:37:ea: ab:14:76:fa:85:f9:e0:9d:71:21:d0:20:4f:59:81: cd:01:9b:0a:d8:1e:f8:a4:cb:6d:96:b1:17:b3:f2: 27:7a:4b:ee:25:65:ad:83:ec:1c:ad:77:a3:10:5e: 32:d9:34:f3:f9:66:19:bc:d8:25:06:36:cb:2b:09: 92:59:08:af:d0:c0:6f:0a:c5:74:15:e6:a8:5a:89: 7b:83:31:fe:d0:2f:69:00:1d:c9:e2:bf:b7:f4:8f: 9e:f6:5b:3d:15:c6:ff:e7:ea:65:a1:04:24:64:4a: 79:18:44:af:ab:59:a8:82:93:6f:a2:ec:00:e4:7a: 1a:56:f6:8a:c8:72:66:a9:92:e6:b9:58:50:9d:f4: 86:f7:81:92:97:60:4d:e8:97:5d:97:60:2d:ff:37: 1b:a1:78:df:7f:c1:c1:bd:fe:9d:ae:d1:4f:3a:0b: 41:5a:66:9a:ae:de:f8:f0:d4:0b:2e:c6:31:30:71: 19:2c:50:df:c8:18:e9:a1:06:4e:c4:28:29:25:b1: fe:f4:0d:81:e7:72:ce:1a:7a:d6:29:49:cf:ff:37: bd:3c:2a:96:06:bb:68:2d:a2:ca:d9:e3:09:eb:c6: 21:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:B8:46:E1:7A:E7:7E:1F:0E:EA:D2:68:45:4E:39:FE:AC:02:EF:28 X509v3 Authority Key Identifier: keyid:88:39:31:AA:B8:B1:36:30:15:BC:8F:DD:F0:B5:82:32:17:67:44:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/0/883931AAB8B1363015BC8FDDF0B582321767440A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iDkxqrixNjAVvI_d8LWCMhdnRAo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/0/883931AAB8B1363015BC8FDDF0B582321767440A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:76:a9:5d:05:6a:47:d7:2d:79:57:27:bc:73:b2:03:05:f1: 9b:c5:05:1e:6c:1a:ca:4a:b0:6e:c6:e9:a6:80:41:35:ee:25: 85:3a:74:e1:db:2e:25:2c:e9:aa:30:99:50:78:c0:35:1c:ce: 24:27:d8:c7:b3:e3:a4:4d:4a:34:c0:87:0a:0d:4f:d5:bb:3f: aa:b6:16:2c:48:c7:41:7c:7d:e7:16:2a:b4:f6:fd:82:8f:02: 73:75:9f:3c:54:54:44:fc:97:30:8d:3e:f5:ce:dc:a5:9e:02: 02:f8:bc:53:14:3a:3f:6a:61:56:8e:8c:ce:97:70:ce:f4:62: c6:35:aa:c2:c1:8f:ce:5c:ab:bb:5f:6e:0c:e6:c0:51:91:a8: 23:7d:72:71:7b:f4:13:90:87:7e:35:c8:84:2f:3b:a9:2a:cb: 46:34:1d:20:46:73:93:6b:39:65:6e:96:91:82:23:5a:17:00: 74:fd:6a:9b:25:ee:a0:b0:36:5a:6d:40:0f:6e:14:91:f0:6c: 3c:5e:ba:b9:54:71:15:cf:03:d6:31:d4:a0:0c:47:e1:3a:86: aa:63:0b:9d:5f:4f:d4:ad:97:b1:b7:2e:aa:18:3b:f5:09:af: 33:83:21:e9:5e:87:9a:0f:13:0b:f7:59:ec:42:47:36:30:f9: 7e:4a:e9:5b -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUfTQKUgC7Bn81j40Q/mfxe8pss0MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODgzOTMxYWFiOGIxMzYzMDE1YmM4ZmRkZjBiNTgyMzIx NzY3NDQwYTAeFw0yNjAxMjUwOTAyMDZaFw0yNjAxMjYwOTUxMDZaMDMxMTAvBgNV BAMTKDQwQjg0NkUxN0FFNzdFMUYwRUVBRDI2ODQ1NEUzOUZFQUMwMkVGMjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDccJqqWorYD7oINm7mpsAxt/44 6mtFU5oL5NY36qsUdvqF+eCdcSHQIE9Zgc0BmwrYHviky22WsRez8id6S+4lZa2D 7Bytd6MQXjLZNPP5Zhm82CUGNssrCZJZCK/QwG8KxXQV5qhaiXuDMf7QL2kAHcni v7f0j572Wz0Vxv/n6mWhBCRkSnkYRK+rWaiCk2+i7ADkehpW9orIcmapkua5WFCd 9Ib3gZKXYE3ol12XYC3/NxuheN9/wcG9/p2u0U86C0FaZpqu3vjw1AsuxjEwcRks UN/IGOmhBk7EKCklsf70DYHncs4aetYpSc//N708KpYGu2gtosrZ4wnrxiGVAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUQLhG4Xrnfh8O6tJoRU45/qwC7ygwHwYDVR0j BBgwFoAUiDkxqrixNjAVvI/d8LWCMhdnRAowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDkyZDE2ZjItOWI0Ni00YTExLWFjNTktNDJiM2RkZWUx MTA2LzAvODgzOTMxQUFCOEIxMzYzMDE1QkM4RkRERjBCNTgyMzIxNzY3NDQwQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2lEa3hxcml4TmpBVnZJX2Q4TFdDTWhk blJBby5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8wOTJkMTZmMi05 YjQ2LTRhMTEtYWM1OS00MmIzZGRlZTExMDYvMC84ODM5MzFBQUI4QjEzNjMwMTVC QzhGRERGMEI1ODIzMjE3Njc0NDBBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGnapXQVqR9cteVcnvHOy AwXxm8UFHmwaykqwbsbppoBBNe4lhTp04dsuJSzpqjCZUHjANRzOJCfYx7PjpE1K NMCHCg1P1bs/qrYWLEjHQXx95xYqtPb9go8Cc3WfPFRURPyXMI0+9c7cpZ4CAvi8 UxQ6P2phVo6MzpdwzvRixjWqwsGPzlyru19uDObAUZGoI31ycXv0E5CHfjXIhC87 qSrLRjQdIEZzk2s5ZW6WkYIjWhcAdP1qmyXuoLA2Wm1AD24UkfBsPF66uVRxFc8D 1jHUoAxH4TqGqmMLnV9P1K2Xsbcuqhg79QmvM4Mh6V6Hmg8TC/dZ7EJHNjD5fkrp Ww== -----END CERTIFICATE-----Generated at Sun Jan 25 17:35:08 2026 by rpki-client