This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/3/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.mft File: D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.mft (raw, json) Hash identifier: x/YLY9FE05tdR7ELBPPSmb2rg9JQOlOQI+OfKQLZg7k= Subject key identifier: 06:45:98:73:E4:DE:2E:67:7A:62:35:7B:BF:7C:A3:C5:F0:0B:90:FF Authority key identifier: D6:15:AB:CB:A5:01:55:64:AD:E9:B4:73:D6:4F:1E:34:A0:BA:8D:4A Certificate issuer: /CN=D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A Certificate serial: 0D4F5CB07A5A0860D424D885A955003BD8A8BEB5 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/3/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.mft Manifest number: 0194 Signing time: Sun 25 Jan 2026 17:10:17 +0000 Manifest this update: Sun 25 Jan 2026 17:05:17 +0000 Manifest next update: Mon 26 Jan 2026 21:01:17 +0000 Files and hashes: 1: 326131343a373538303a3930323a3a2f34382d3438203d3e20323033383433.roa (hash: BFT8GbG7CSJ9YmzS1PjnMDrg1nwAcfXEJPEfuo5FzQk=) 2: D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.crl (hash: Zc6lreyQIsD4g+SWaoKhg+1Us+oeaUyiANls0KKAu1I=) 3: 326131343a373538303a3930333a3a2f34382d3438203d3e203331383938.roa (hash: ypgUGD6Euz3HGS0A9GoVgCiVtLF78aI6ZX/YlUyvGd8=) 4: 326131343a373538303a3930313a3a2f34382d3438203d3e20323033383433.roa (hash: XxS9zprV7IX1JjrBQQ+JptkD2bW89WKl615fH9J1hzc=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/3/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.crl rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/3/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:4f:5c:b0:7a:5a:08:60:d4:24:d8:85:a9:55:00:3b:d8:a8:be:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A Validity Not Before: Jan 25 17:05:17 2026 GMT Not After : Jan 26 21:01:17 2026 GMT Subject: CN=06459873E4DE2E677A62357BBF7CA3C5F00B90FF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:b6:63:74:08:89:7c:9e:16:af:44:df:4c:9d: c6:42:c4:3a:30:87:3f:61:18:9b:f2:be:ca:b8:d3: 18:28:dd:51:ea:74:78:a9:83:9d:53:53:96:2d:0d: 65:cf:d7:f1:ed:e1:b9:17:bc:21:b7:12:2e:0b:cb: 34:e4:06:2e:16:7b:17:35:9d:1a:d1:86:e1:11:67: e4:12:97:68:fb:c5:da:2f:88:cc:fc:31:01:3e:f9: 85:eb:3e:81:56:fb:94:f7:e6:a9:ab:97:9c:17:75: b9:81:75:85:26:03:f0:cf:c9:84:80:aa:51:43:95: 64:86:eb:dc:a5:2c:97:f6:34:79:9f:8a:1f:25:f8: 0c:77:0b:6a:55:1f:c3:85:b9:ec:0f:a0:5b:6e:3b: 9c:12:eb:f9:26:5d:38:4c:5f:db:40:b7:98:98:14: a5:a9:30:95:c8:16:f2:a2:bc:cd:3c:23:68:e7:e3: 4c:64:0a:14:19:28:44:2a:4c:e0:90:ff:5e:d9:3a: a5:91:64:a6:55:89:d6:5c:2d:73:0d:ca:40:59:d0: 1a:69:54:f1:9a:14:8c:df:fa:9d:76:6b:06:63:fe: a2:15:9e:13:1c:9f:84:04:cc:de:33:01:04:95:28: 81:d3:5f:3b:26:af:6a:15:4b:42:0a:f2:24:3f:5d: fc:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:45:98:73:E4:DE:2E:67:7A:62:35:7B:BF:7C:A3:C5:F0:0B:90:FF X509v3 Authority Key Identifier: keyid:D6:15:AB:CB:A5:01:55:64:AD:E9:B4:73:D6:4F:1E:34:A0:BA:8D:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/3/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/3/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:06:a5:e7:d4:35:2c:8b:e6:dc:bc:f6:3c:32:73:81:5f:43: 42:15:53:6b:a4:8f:66:75:23:91:6f:b0:33:e7:af:13:38:3d: 6d:44:f8:ad:5e:b1:65:50:8b:a4:ca:8b:e4:f2:37:69:e1:46: 6f:d5:7e:cb:2f:5b:38:5d:82:7e:10:ce:e9:0c:12:1a:e7:1f: ea:1e:b1:f8:f1:77:57:f7:e4:b7:b0:56:0c:9b:2b:b0:64:d9: 07:69:46:5b:ab:c7:89:a6:39:c0:25:82:1d:c1:fe:d0:ce:bb: d1:f3:1f:1d:c8:f6:20:24:52:6f:d5:60:5e:fa:85:b0:97:a5: 04:3e:50:0f:51:83:a3:e9:99:2c:33:40:6a:13:74:82:ae:a8: 3c:36:c3:be:3c:e7:4b:4a:4e:d2:c2:a2:5f:96:07:44:30:30: 12:d2:33:53:40:8e:24:b2:cc:c0:ad:bf:ff:45:bc:02:3b:1e: 21:42:09:e0:70:72:1e:17:c8:05:18:af:e8:74:36:0d:46:9e: dc:19:ca:d1:da:c2:c6:5b:37:7e:fd:09:c5:a5:71:9a:7d:f1: 98:8c:93:a7:9c:8b:39:e9:99:85:8a:14:d6:54:58:3e:53:f8: 78:b5:95:8a:21:93:ee:f2:90:6e:d6:71:96:79:06:34:76:42: c6:37:66:8b -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUDU9csHpaCGDUJNiFqVUAO9iovrUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDYxNUFCQ0JBNTAxNTU2NEFERTlCNDczRDY0RjFFMzRB MEJBOEQ0QTAeFw0yNjAxMjUxNzA1MTdaFw0yNjAxMjYyMTAxMTdaMDMxMTAvBgNV BAMTKDA2NDU5ODczRTRERTJFNjc3QTYyMzU3QkJGN0NBM0M1RjAwQjkwRkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCntmN0CIl8nhavRN9MncZCxDow hz9hGJvyvsq40xgo3VHqdHipg51TU5YtDWXP1/Ht4bkXvCG3Ei4LyzTkBi4Wexc1 nRrRhuERZ+QSl2j7xdoviMz8MQE++YXrPoFW+5T35qmrl5wXdbmBdYUmA/DPyYSA qlFDlWSG69ylLJf2NHmfih8l+Ax3C2pVH8OFuewPoFtuO5wS6/kmXThMX9tAt5iY FKWpMJXIFvKivM08I2jn40xkChQZKEQqTOCQ/17ZOqWRZKZVidZcLXMNykBZ0Bpp VPGaFIzf+p12awZj/qIVnhMcn4QEzN4zAQSVKIHTXzsmr2oVS0IK8iQ/XfwTAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUBkWYc+TeLmd6YjV7v3yjxfALkP8wHwYDVR0j BBgwFoAU1hWry6UBVWSt6bRz1k8eNKC6jUowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTNmNjg1NjEtMGE3NC00Y2NhLWJmOGYtMTJmYWFhZmM4 ZWI4LzMvRDYxNUFCQ0JBNTAxNTU2NEFERTlCNDczRDY0RjFFMzRBMEJBOEQ0QS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9ENjE1QUJDQkE1MDE1NTY0QURFOUI0NzNE NjRGMUUzNEEwQkE4RDRBLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzEzZjY4NTYxLTBhNzQtNGNjYS1iZjhmLTEyZmFhYWZjOGViOC8zL0Q2MTVBQkNC QTUwMTU1NjRBREU5QjQ3M0Q2NEYxRTM0QTBCQThENEEubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBwBqXn 1DUsi+bcvPY8MnOBX0NCFVNrpI9mdSORb7Az568TOD1tRPitXrFlUIukyovk8jdp 4UZv1X7LL1s4XYJ+EM7pDBIa5x/qHrH48XdX9+S3sFYMmyuwZNkHaUZbq8eJpjnA JYIdwf7QzrvR8x8dyPYgJFJv1WBe+oWwl6UEPlAPUYOj6ZksM0BqE3SCrqg8NsO+ POdLSk7SwqJflgdEMDAS0jNTQI4ksszArb//RbwCOx4hQgngcHIeF8gFGK/odDYN Rp7cGcrR2sLGWzd+/QnFpXGaffGYjJOnnIs56ZmFihTWVFg+U/h4tZWKIZPu8pBu 1nGWeQY0dkLGN2aL -----END CERTIFICATE-----Generated at Sun Jan 25 20:26:28 2026 by rpki-client