This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/2/BB0B02806AE3C34F453ADEDDE36ADF432FCDF9C4.mft File: BB0B02806AE3C34F453ADEDDE36ADF432FCDF9C4.mft (raw, json) Hash identifier: 8zC4IRXt7ugVylV34s3JE29jRxCr10hRpVeOBOxTN4A= Subject key identifier: 7C:10:EE:DA:F2:CD:50:9D:C9:A9:41:AE:80:BF:F4:FC:D8:CE:3C:2C Authority key identifier: BB:0B:02:80:6A:E3:C3:4F:45:3A:DE:DD:E3:6A:DF:43:2F:CD:F9:C4 Certificate issuer: /CN=BB0B02806AE3C34F453ADEDDE36ADF432FCDF9C4 Certificate serial: 7B984D40BA02AFAFD6A122B76E10431E59B47ECA Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/BB0B02806AE3C34F453ADEDDE36ADF432FCDF9C4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/2/BB0B02806AE3C34F453ADEDDE36ADF432FCDF9C4.mft Manifest number: 42 Signing time: Sun 25 Jan 2026 04:25:02 +0000 Manifest this update: Sun 25 Jan 2026 04:20:02 +0000 Manifest next update: Mon 26 Jan 2026 06:42:02 +0000 Files and hashes: 1: 326131343a373538303a666634353a3a2f34382d3438203d3e20323134333434.roa (hash: hdVzeFM1qIVbiHCOPfcZVjzE07zDvwiz6q8IHeNVQA0=) 2: 326131343a373538303a666634333a3a2f34382d3438203d3e20323134333434.roa (hash: LrJY5RvJFU1hFw5kwe9OHrsNrGlMAHPKFkyFsYYWBwM=) 3: 326131343a373538303a666634303a3a2f34382d3438203d3e20323134333434.roa (hash: NMvj9zoeOL/7ubYXVejRPUJJs+qt+8DS24zEbTeKmfE=) 4: 326131343a373538303a666634343a3a2f34382d3438203d3e20323134333434.roa (hash: 5NZsbS3/ECNwsIkfwekBTuMsstws0S9jzGJtHhbmy3k=) 5: 326131343a373538303a666634323a3a2f34382d3438203d3e20323134333434.roa (hash: O/PJi/N0ASXeoDd9xkm5e+vUVYHvnrMhoRT9Q5UqBNM=) 6: 326131343a373538303a666634313a3a2f34382d3438203d3e20323134333434.roa (hash: FSeGkTavy6E/PYG9xOOh6cS7WX/ehiQ2P+nWL6HUfzA=) 7: BB0B02806AE3C34F453ADEDDE36ADF432FCDF9C4.crl (hash: qHVCE5fv5M2po23llOlKI3UiHW/GXfvop6OD0ErSKe4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/2/BB0B02806AE3C34F453ADEDDE36ADF432FCDF9C4.crl rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/2/BB0B02806AE3C34F453ADEDDE36ADF432FCDF9C4.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/BB0B02806AE3C34F453ADEDDE36ADF432FCDF9C4.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 01:36:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:98:4d:40:ba:02:af:af:d6:a1:22:b7:6e:10:43:1e:59:b4:7e:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BB0B02806AE3C34F453ADEDDE36ADF432FCDF9C4 Validity Not Before: Jan 25 04:20:02 2026 GMT Not After : Jan 26 06:42:02 2026 GMT Subject: CN=7C10EEDAF2CD509DC9A941AE80BFF4FCD8CE3C2C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:42:73:86:5a:da:d4:09:90:11:ef:16:7a:68: 17:ec:86:b9:18:66:f6:2f:e7:45:67:9b:37:fa:66: 9b:00:03:63:f8:eb:c3:5c:7d:8d:48:08:28:fd:21: 84:aa:c4:fd:87:28:a0:a5:c8:92:1f:b5:58:ef:9c: 13:81:bc:e0:75:e0:a7:57:16:1b:34:3b:d0:45:96: df:57:4b:05:42:e4:30:3e:ec:58:57:2c:68:df:3d: d3:b8:a2:ec:10:25:ee:60:83:ff:49:0f:fc:86:8a: 3f:92:27:70:0d:e0:92:66:75:38:77:86:26:64:09: 1d:7e:a8:ed:11:83:99:9c:be:fd:d6:29:46:d0:b1: 63:c5:91:50:73:e3:53:2b:0e:28:f7:c0:50:94:4b: d5:4c:47:54:6d:cc:d9:1b:86:da:fa:67:4d:e4:ce: 51:d5:45:61:30:b0:65:3e:a4:37:59:11:63:47:d9: 62:f3:61:b4:8d:00:c9:be:5f:fb:ae:fd:b3:33:4a: f0:ce:ef:7d:7b:94:32:15:fb:28:bc:c9:49:dc:aa: e5:ed:f3:01:87:21:4b:54:c4:28:67:b2:89:0a:68: 12:d5:39:10:a5:c6:6d:9c:1f:22:7e:ab:dc:22:5c: 1a:5c:48:18:1a:56:fb:df:ba:6d:9b:88:ab:88:e3: ea:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:10:EE:DA:F2:CD:50:9D:C9:A9:41:AE:80:BF:F4:FC:D8:CE:3C:2C X509v3 Authority Key Identifier: keyid:BB:0B:02:80:6A:E3:C3:4F:45:3A:DE:DD:E3:6A:DF:43:2F:CD:F9:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/2/BB0B02806AE3C34F453ADEDDE36ADF432FCDF9C4.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/BB0B02806AE3C34F453ADEDDE36ADF432FCDF9C4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/2/BB0B02806AE3C34F453ADEDDE36ADF432FCDF9C4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:f1:59:35:b5:ba:b9:11:28:67:ba:af:2b:96:b6:77:79:97: d6:3b:e0:23:48:ca:77:4e:62:40:5f:e8:b2:1c:27:0f:ce:49: fe:2a:4d:80:20:c5:0b:12:b0:5d:97:52:5a:0a:25:fc:b3:88: f4:60:9b:71:79:5b:9c:6b:b7:03:9a:93:e7:0a:29:62:90:7e: 28:f6:a1:29:87:0b:31:ad:7c:41:f2:9b:46:22:2d:94:12:73: a4:4e:13:fb:a7:23:5c:4c:22:54:b8:26:fb:72:b3:82:41:6e: 2c:76:52:14:cf:69:47:76:b0:c1:67:d1:2f:24:4a:f1:08:9a: 95:81:b1:1e:89:dc:e9:ca:f2:06:74:b5:32:d9:a7:7c:35:69: dc:ba:b7:01:e1:0a:d0:92:d0:e0:bf:bf:47:c9:99:15:c5:31: dd:4e:12:c6:fc:20:bd:e4:8b:b4:20:1b:55:15:e9:95:c0:c6: 34:1c:17:86:40:e8:06:b6:1b:92:14:7b:68:cf:b2:29:14:5c: 07:43:c2:8f:56:57:5b:b0:6f:cd:60:40:11:51:5e:e1:ed:00: f3:ea:78:0d:e6:fc:cf:d8:05:13:ba:bb:87:7d:92:45:45:92: de:c7:0b:77:3a:dc:f5:1b:48:57:ca:63:cf:2f:e2:27:c4:15: 0f:82:67:b7 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUe5hNQLoCr6/WoSK3bhBDHlm0fsowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkIwQjAyODA2QUUzQzM0RjQ1M0FERURERTM2QURGNDMy RkNERjlDNDAeFw0yNjAxMjUwNDIwMDJaFw0yNjAxMjYwNjQyMDJaMDMxMTAvBgNV BAMTKDdDMTBFRURBRjJDRDUwOURDOUE5NDFBRTgwQkZGNEZDRDhDRTNDMkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMQnOGWtrUCZAR7xZ6aBfshrkY ZvYv50Vnmzf6ZpsAA2P468NcfY1ICCj9IYSqxP2HKKClyJIftVjvnBOBvOB14KdX Fhs0O9BFlt9XSwVC5DA+7FhXLGjfPdO4ouwQJe5gg/9JD/yGij+SJ3AN4JJmdTh3 hiZkCR1+qO0Rg5mcvv3WKUbQsWPFkVBz41MrDij3wFCUS9VMR1RtzNkbhtr6Z03k zlHVRWEwsGU+pDdZEWNH2WLzYbSNAMm+X/uu/bMzSvDO7317lDIV+yi8yUncquXt 8wGHIUtUxChnsokKaBLVORClxm2cHyJ+q9wiXBpcSBgaVvvfum2biKuI4+rhAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUfBDu2vLNUJ3JqUGugL/0/NjOPCwwHwYDVR0j BBgwFoAUuwsCgGrjw09FOt7d42rfQy/N+cQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDk3MThmMDgtYmIzOS00YTA5LWE0YzAtMWY0MDI0OGE2 ZDE1LzIvQkIwQjAyODA2QUUzQzM0RjQ1M0FERURERTM2QURGNDMyRkNERjlDNC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9CQjBCMDI4MDZBRTNDMzRGNDUzQURFRERF MzZBREY0MzJGQ0RGOUM0LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzA5NzE4ZjA4LWJiMzktNGEwOS1hNGMwLTFmNDAyNDhhNmQxNS8yL0JCMEIwMjgw NkFFM0MzNEY0NTNBREVEREUzNkFERjQzMkZDREY5QzQubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA/8Vk1 tbq5EShnuq8rlrZ3eZfWO+AjSMp3TmJAX+iyHCcPzkn+Kk2AIMULErBdl1JaCiX8 s4j0YJtxeVuca7cDmpPnCilikH4o9qEphwsxrXxB8ptGIi2UEnOkThP7pyNcTCJU uCb7crOCQW4sdlIUz2lHdrDBZ9EvJErxCJqVgbEeidzpyvIGdLUy2ad8NWncurcB 4QrQktDgv79HyZkVxTHdThLG/CC95Iu0IBtVFemVwMY0HBeGQOgGthuSFHtoz7Ip FFwHQ8KPVldbsG/NYEARUV7h7QDz6ngN5vzP2AUTuruHfZJFRZLexwt3Otz1G0hX ymPPL+InxBUPgme3 -----END CERTIFICATE-----Generated at Sun Jan 25 19:17:34 2026 by rpki-client