This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/1/140CF895225100CF571959173341D92070FF6E7C.mft File: 140CF895225100CF571959173341D92070FF6E7C.mft (raw, json) Hash identifier: Qaq7Smjz6Rw9IHdg5T/4alHFqmAeIXcLOMVOt9jQtgw= Subject key identifier: 54:88:C5:2C:D1:E8:CF:87:B5:99:14:78:92:F9:8C:6B:38:6A:79:51 Authority key identifier: 14:0C:F8:95:22:51:00:CF:57:19:59:17:33:41:D9:20:70:FF:6E:7C Certificate issuer: /CN=140CF895225100CF571959173341D92070FF6E7C Certificate serial: 56BE7AF7CDFD51B2045113A9105E2DF6A1C55D28 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/140CF895225100CF571959173341D92070FF6E7C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/1/140CF895225100CF571959173341D92070FF6E7C.mft Manifest number: 2C Signing time: Sun 25 Jan 2026 06:22:53 +0000 Manifest this update: Sun 25 Jan 2026 06:17:53 +0000 Manifest next update: Mon 26 Jan 2026 08:22:53 +0000 Files and hashes: 1: 140CF895225100CF571959173341D92070FF6E7C.crl (hash: 4cNLCGxxIfhiM1Pl/f1YJuPbDTPALl7b9gGPDrDPW+Y=) 2: 326131343a373538363a363230303a3a2f34302d3438203d3e20323130333532.roa (hash: VyqY9yrEjpVeGa7fC0EnkjbydVqfbidJLnALhbzwu3k=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/1/140CF895225100CF571959173341D92070FF6E7C.crl rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/1/140CF895225100CF571959173341D92070FF6E7C.mft rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/140CF895225100CF571959173341D92070FF6E7C.cer rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.crl rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/20914720382A1F52B950212C138E5E1E81BA69B7.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:21:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:be:7a:f7:cd:fd:51:b2:04:51:13:a9:10:5e:2d:f6:a1:c5:5d:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=140CF895225100CF571959173341D92070FF6E7C Validity Not Before: Jan 25 06:17:53 2026 GMT Not After : Jan 26 08:22:53 2026 GMT Subject: CN=5488C52CD1E8CF87B599147892F98C6B386A7951 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:46:7c:4b:cc:8d:25:d2:81:b5:c7:82:42:a7: 1e:95:46:3c:0b:76:25:e3:df:e6:9f:9f:58:de:3c: f1:68:ef:13:55:e3:3e:1d:62:70:16:69:6d:a1:cc: 9b:17:e1:95:c8:a7:6f:72:a0:d9:6b:58:9b:48:91: 95:f2:06:d6:a6:f0:56:0b:ad:38:93:be:ca:7d:28: 54:dd:5e:52:d7:47:68:ee:0d:4b:73:6c:29:47:06: 3e:32:7f:26:9f:e8:7e:32:84:23:47:79:71:a8:a7: 81:d3:b5:6d:98:f8:87:17:8f:90:82:8a:30:2d:d1: 27:a2:00:e8:ff:ac:83:f6:44:55:be:ca:2c:0a:cc: 3f:72:7b:08:0c:83:b4:d9:f9:99:d2:53:c2:8a:a8: 32:ca:c7:d5:41:3f:97:e1:69:30:67:e6:c9:8c:28: 31:17:b8:10:3a:69:1a:95:95:ba:27:08:92:0d:41: e5:6c:23:bc:3e:72:ff:eb:04:6c:eb:85:be:1c:b5: 5b:87:28:82:87:8a:4b:0d:14:dc:f6:75:a9:c8:89: ff:81:c4:15:32:5f:81:d0:54:8c:b7:2a:83:5d:d3: a3:6b:8f:54:bd:13:59:40:49:2e:08:05:e7:eb:47: a4:ec:68:e0:6b:8d:a6:dd:48:19:06:81:fa:eb:40: 4f:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:88:C5:2C:D1:E8:CF:87:B5:99:14:78:92:F9:8C:6B:38:6A:79:51 X509v3 Authority Key Identifier: keyid:14:0C:F8:95:22:51:00:CF:57:19:59:17:33:41:D9:20:70:FF:6E:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/1/140CF895225100CF571959173341D92070FF6E7C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/140CF895225100CF571959173341D92070FF6E7C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/1/140CF895225100CF571959173341D92070FF6E7C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:05:54:d3:d4:1a:0d:2c:ce:3c:3a:04:3b:f9:07:a5:9a:08: 2d:04:34:eb:5a:c2:9f:5b:b6:c6:39:1f:43:2d:e6:cc:10:25: ff:4a:40:e4:22:79:15:e3:24:b5:1d:8f:96:30:b2:46:c9:a1: a8:8d:55:77:c4:10:eb:e7:f2:55:a7:29:59:3c:a7:f7:ca:38: 17:c1:ad:e2:c4:ff:57:64:40:6d:fc:7c:57:d9:1e:f1:1e:1c: ad:ed:ba:fe:d7:3d:ee:37:e5:47:26:c0:eb:c0:24:7c:e9:16: 9f:83:74:37:22:19:b0:e7:68:6b:e2:7b:5e:b7:1f:1b:58:ba: 01:69:1f:8d:8c:60:f3:10:ae:bb:cc:0c:68:35:b9:58:f5:fc: 2e:40:4b:fa:20:d8:79:42:1c:fb:7d:a0:95:9e:02:e3:3d:2d: b9:ef:b8:8c:c1:5b:f6:61:c6:72:62:c0:52:57:bc:a9:6b:b4: a4:82:5a:53:c8:b1:57:93:f1:11:c3:46:95:3b:e5:44:de:a2: 5f:bd:d4:ca:95:34:45:43:ce:dd:3c:82:dd:24:53:65:b2:98: 80:98:9a:bc:46:33:ff:ee:ab:bd:76:da:92:40:d4:52:5a:1f: 41:65:c3:37:6a:34:8b:39:8c:0f:87:35:29:46:3a:6c:44:a5: ff:d6:48:ba -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUVr569839UbIEUROpEF4t9qHFXSgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTQwQ0Y4OTUyMjUxMDBDRjU3MTk1OTE3MzM0MUQ5MjA3 MEZGNkU3QzAeFw0yNjAxMjUwNjE3NTNaFw0yNjAxMjYwODIyNTNaMDMxMTAvBgNV BAMTKDU0ODhDNTJDRDFFOENGODdCNTk5MTQ3ODkyRjk4QzZCMzg2QTc5NTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiRnxLzI0l0oG1x4JCpx6VRjwL diXj3+afn1jePPFo7xNV4z4dYnAWaW2hzJsX4ZXIp29yoNlrWJtIkZXyBtam8FYL rTiTvsp9KFTdXlLXR2juDUtzbClHBj4yfyaf6H4yhCNHeXGop4HTtW2Y+IcXj5CC ijAt0SeiAOj/rIP2RFW+yiwKzD9yewgMg7TZ+ZnSU8KKqDLKx9VBP5fhaTBn5smM KDEXuBA6aRqVlbonCJINQeVsI7w+cv/rBGzrhb4ctVuHKIKHiksNFNz2danIif+B xBUyX4HQVIy3KoNd06Nrj1S9E1lASS4IBefrR6TsaOBrjabdSBkGgfrrQE9/AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUVIjFLNHoz4e1mRR4kvmMazhqeVEwHwYDVR0j BBgwFoAUFAz4lSJRAM9XGVkXM0HZIHD/bnwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTUxN2I1ZDAtMzMxNy00YjQ5LThlYzUtYmU5MGJjNzAw NjJmLzEvMTQwQ0Y4OTUyMjUxMDBDRjU3MTk1OTE3MzM0MUQ5MjA3MEZGNkU3Qy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mNTMyYjllYi0yZmFlLTQ4 YTgtOTc5My0zM2VlYzA2N2NlMzkvMy8xNDBDRjg5NTIyNTEwMENGNTcxOTU5MTcz MzQxRDkyMDcwRkY2RTdDLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzE1MTdiNWQwLTMzMTctNGI0OS04ZWM1LWJlOTBiYzcwMDYyZi8xLzE0MENGODk1 MjI1MTAwQ0Y1NzE5NTkxNzMzNDFEOTIwNzBGRjZFN0MubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB2BVTT 1BoNLM48OgQ7+QelmggtBDTrWsKfW7bGOR9DLebMECX/SkDkInkV4yS1HY+WMLJG yaGojVV3xBDr5/JVpylZPKf3yjgXwa3ixP9XZEBt/HxX2R7xHhyt7br+1z3uN+VH JsDrwCR86Rafg3Q3Ihmw52hr4ntetx8bWLoBaR+NjGDzEK67zAxoNblY9fwuQEv6 INh5Qhz7faCVngLjPS2577iMwVv2YcZyYsBSV7ypa7SkglpTyLFXk/ERw0aVO+VE 3qJfvdTKlTRFQ87dPILdJFNlspiAmJq8RjP/7qu9dtqSQNRSWh9BZcM3ajSLOYwP hzUpRjpsRKX/1ki6 -----END CERTIFICATE-----Generated at Sun Jan 25 15:14:16 2026 by rpki-client