This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/13daa142-a245-47aa-a5dd-21202f6595a8/0/B7C75B0EE5281D7520B6724E8CC3CCF0A871CE8F.mft File: B7C75B0EE5281D7520B6724E8CC3CCF0A871CE8F.mft (raw, json) Hash identifier: PSsJUBe4atA9JeDuW78GH3sTyR2L3gdS52Da76Y0rwo= Subject key identifier: 3E:97:7C:2D:D7:46:D2:E7:01:C9:0D:B1:54:C2:61:54:BF:3C:DC:88 Authority key identifier: B7:C7:5B:0E:E5:28:1D:75:20:B6:72:4E:8C:C3:CC:F0:A8:71:CE:8F Certificate issuer: /CN=b7c75b0ee5281d7520b6724e8cc3ccf0a871ce8f Certificate serial: 2B585374405A1A760502D7EE160B17AD7E7F9E7D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t8dbDuUoHXUgtnJOjMPM8Khxzo8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/13daa142-a245-47aa-a5dd-21202f6595a8/0/B7C75B0EE5281D7520B6724E8CC3CCF0A871CE8F.mft Manifest number: 1B Signing time: Sun 25 Jan 2026 07:15:13 +0000 Manifest this update: Sun 25 Jan 2026 07:10:13 +0000 Manifest next update: Mon 26 Jan 2026 07:32:13 +0000 Files and hashes: 1: 38312e3139392e32372e302f32342d3234203d3e20313337343039.roa (hash: u1OMxn9fmgWDHDojYdnaxRpsdwWdM9GH2itMefeBYj0=) 2: 38312e3139392e32382e302f32342d3234203d3e2039333034.roa (hash: pA97BdM8AYYfQvgbqaA4wcFOZhq7+7h5RQ+DqjvYYXY=) 3: 38312e3139392e32352e302f32342d3234203d3e203630353036.roa (hash: CSFX/8cooaaYbIuAL4Sf7HHp8K52J80b70vmIgNJGD4=) 4: 38312e3139392e32392e302f32342d3234203d3e20333935333734.roa (hash: enyh8Pgkb8kCNqjK0iUrs5K7JVGsJfmEephM/1jo4no=) 5: B7C75B0EE5281D7520B6724E8CC3CCF0A871CE8F.crl (hash: proYPew5WemAr9laaA+LGJit/Smg1DfVTPboi/lsEKM=) 6: 38312e3139392e33302e302f32342d3234203d3e203631333137.roa (hash: +/Y9IAaoRj6lloSKax9X5ltFHBv1WoOrcZ1Hrol4b74=) 7: 34352e3134302e3234372e302f32342d3234203d3e203239383032.roa (hash: 17d8EZwswl99vYfVGSPZn0UNeWHnAEV/6RqAI4Pc7X8=) 8: 34352e3134302e3234342e302f32342d3234203d3e20323131333733.roa (hash: VZE+m0hFRe+1+SKsPJ2iMqzOw/gI5S5chPRbn/oZfBs=) 9: 38312e3139392e32342e302f32342d3234203d3e203630353036.roa (hash: V81BjlNQzsv1olpZAe5508YuSSx9IR1P12H/0KVXIgw=) 10: 38312e3139392e32362e302f32342d3234203d3e203632323430.roa (hash: a4QmPdfU2lZZxUtHw7kg4Y5Veo4u09TITUId9MZIWAo=) 11: 38312e3139392e33312e302f32342d3234203d3e203631333137.roa (hash: MpGYXlIuAPT1KvI6BwV+qAOm4Q2yxx2/nHYo3lAwukI=) 12: 34352e3134302e3234362e302f32342d3234203d3e20383334.roa (hash: 9IMsqbCD3Vl+fhh/JuymG+sCvsGmX3oEfcS1ykJH1BY=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/13daa142-a245-47aa-a5dd-21202f6595a8/0/B7C75B0EE5281D7520B6724E8CC3CCF0A871CE8F.crl rsync://rsync.paas.rpki.ripe.net/repository/13daa142-a245-47aa-a5dd-21202f6595a8/0/B7C75B0EE5281D7520B6724E8CC3CCF0A871CE8F.mft rsync://rpki.ripe.net/repository/DEFAULT/t8dbDuUoHXUgtnJOjMPM8Khxzo8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:32:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:58:53:74:40:5a:1a:76:05:02:d7:ee:16:0b:17:ad:7e:7f:9e:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b7c75b0ee5281d7520b6724e8cc3ccf0a871ce8f Validity Not Before: Jan 25 07:10:13 2026 GMT Not After : Jan 26 07:32:13 2026 GMT Subject: CN=3E977C2DD746D2E701C90DB154C26154BF3CDC88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:d3:a8:b5:7f:96:fa:80:3b:07:f4:21:0f:fa: 40:fc:6f:74:c2:25:a1:47:34:7a:93:a7:75:ed:da: 6a:7e:dc:06:a6:1e:3d:f3:f2:9a:c6:41:75:37:9a: f3:80:f3:02:15:a2:59:21:b1:da:dc:ef:d5:db:5c: dd:92:f7:68:3c:4c:77:16:6a:8c:a8:a1:e0:54:e0: d2:c6:75:49:3d:34:1e:ba:88:a6:90:4b:0e:53:a4: 24:1e:36:22:18:b6:55:ea:a0:82:fb:ba:43:6a:63: 0c:1f:34:4f:d2:2a:d1:37:ec:01:b8:a9:98:66:ca: 85:33:c5:c0:3c:38:6f:24:b5:66:93:bc:c4:d4:13: fb:1f:35:31:fd:26:8b:2f:18:c8:8d:d8:07:a6:75: 18:e6:0e:d4:43:15:85:ac:5c:ec:39:c1:ea:c6:40: 15:34:05:b5:e0:2c:45:4d:2b:50:6a:71:29:31:c3: 19:22:51:f8:55:89:1c:67:58:8f:90:3f:3b:5f:25: e8:29:7f:0f:ca:da:29:02:68:bb:dc:52:52:f3:85: d6:d3:03:c6:04:45:cd:18:51:c6:bd:b9:60:2c:ca: 16:c5:6f:16:b3:89:89:85:94:82:55:94:64:f5:96: f8:e6:e7:9e:24:ce:cd:c7:82:c2:b7:f1:84:71:2a: a0:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:97:7C:2D:D7:46:D2:E7:01:C9:0D:B1:54:C2:61:54:BF:3C:DC:88 X509v3 Authority Key Identifier: keyid:B7:C7:5B:0E:E5:28:1D:75:20:B6:72:4E:8C:C3:CC:F0:A8:71:CE:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/13daa142-a245-47aa-a5dd-21202f6595a8/0/B7C75B0EE5281D7520B6724E8CC3CCF0A871CE8F.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t8dbDuUoHXUgtnJOjMPM8Khxzo8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/13daa142-a245-47aa-a5dd-21202f6595a8/0/B7C75B0EE5281D7520B6724E8CC3CCF0A871CE8F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption df:27:4f:81:3d:04:1f:8e:65:9e:b1:3b:36:fa:df:d0:27:91: 07:40:8f:52:b7:31:64:86:3c:fa:c7:c2:63:10:65:d1:5e:74: 46:ff:36:3d:4c:11:e5:c4:02:9c:92:11:2e:7a:cb:2b:21:77: ee:2d:92:55:cb:b8:77:ef:c7:e9:54:97:05:ff:aa:6b:98:b2: 49:b0:59:d3:57:95:01:67:76:1c:99:e2:a2:cb:70:ca:fd:7d: 86:66:9b:ca:3e:4c:2b:b1:ec:ff:48:bf:33:e3:78:fe:5d:58: 65:e1:48:ce:4f:15:ea:2e:67:be:6a:60:87:c0:34:25:6e:d5: 7a:71:d9:2e:b0:15:eb:a9:f5:0e:b7:43:9d:4a:a8:66:6e:46: 1d:8b:9c:5d:33:da:0f:6e:21:da:50:77:49:f8:39:5c:f5:e2: 77:6e:b2:56:fd:26:42:1f:6e:04:5e:65:68:e5:fa:4d:e8:22: 9c:8c:3c:b1:f8:d0:12:6e:3c:0a:76:06:e7:5b:59:03:59:35: 84:33:17:b6:8d:94:07:99:ab:40:fb:96:04:28:a9:77:97:6d: 88:cf:88:8c:e5:13:0d:4f:79:ad:18:83:86:0e:74:26:ff:42: 49:67:e7:25:c7:85:fc:dc:63:6e:2d:dc:5b:93:2e:00:f9:e7: 2a:f7:6a:0e -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUK1hTdEBaGnYFAtfuFgsXrX5/nn0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYjdjNzViMGVlNTI4MWQ3NTIwYjY3MjRlOGNjM2NjZjBh ODcxY2U4ZjAeFw0yNjAxMjUwNzEwMTNaFw0yNjAxMjYwNzMyMTNaMDMxMTAvBgNV BAMTKDNFOTc3QzJERDc0NkQyRTcwMUM5MERCMTU0QzI2MTU0QkYzQ0RDODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDR06i1f5b6gDsH9CEP+kD8b3TC JaFHNHqTp3Xt2mp+3AamHj3z8prGQXU3mvOA8wIVolkhsdrc79XbXN2S92g8THcW aoyooeBU4NLGdUk9NB66iKaQSw5TpCQeNiIYtlXqoIL7ukNqYwwfNE/SKtE37AG4 qZhmyoUzxcA8OG8ktWaTvMTUE/sfNTH9JosvGMiN2AemdRjmDtRDFYWsXOw5werG QBU0BbXgLEVNK1BqcSkxwxkiUfhViRxnWI+QPztfJegpfw/K2ikCaLvcUlLzhdbT A8YERc0YUca9uWAsyhbFbxaziYmFlIJVlGT1lvjm554kzs3HgsK38YRxKqDfAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUPpd8LddG0ucByQ2xVMJhVL883IgwHwYDVR0j BBgwFoAUt8dbDuUoHXUgtnJOjMPM8Khxzo8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTNkYWExNDItYTI0NS00N2FhLWE1ZGQtMjEyMDJmNjU5 NWE4LzAvQjdDNzVCMEVFNTI4MUQ3NTIwQjY3MjRFOENDM0NDRjBBODcxQ0U4Ri5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3Q4ZGJEdVVvSFhVZ3RuSk9qTVBNOEto eHpvOC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xM2RhYTE0Mi1h MjQ1LTQ3YWEtYTVkZC0yMTIwMmY2NTk1YTgvMC9CN0M3NUIwRUU1MjgxRDc1MjBC NjcyNEU4Q0MzQ0NGMEE4NzFDRThGLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA3ydPgT0EH45lnrE7Nvrf 0CeRB0CPUrcxZIY8+sfCYxBl0V50Rv82PUwR5cQCnJIRLnrLKyF37i2SVcu4d+/H 6VSXBf+qa5iySbBZ01eVAWd2HJniostwyv19hmabyj5MK7Hs/0i/M+N4/l1YZeFI zk8V6i5nvmpgh8A0JW7VenHZLrAV66n1DrdDnUqoZm5GHYucXTPaD24h2lB3Sfg5 XPXid26yVv0mQh9uBF5laOX6TeginIw8sfjQEm48CnYG51tZA1k1hDMXto2UB5mr QPuWBCipd5dtiM+IjOUTDU95rRiDhg50Jv9CSWfnJceF/Nxjbi3cW5MuAPnnKvdq Dg== -----END CERTIFICATE-----Generated at Sun Jan 25 19:59:09 2026 by rpki-client