This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/4/D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9.mft File: D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9.mft (raw, json) Hash identifier: vMMCd7LoD8yN5tnzjOoYTT2iOLnmw7hNXCOOkDpr4hM= Subject key identifier: 7C:C1:5E:85:DA:11:73:F5:7D:A1:F4:71:0D:A6:39:88:E0:87:91:69 Authority key identifier: D5:EE:63:D9:B1:D2:D5:C6:FA:DC:9A:16:9E:9B:4A:F6:44:CF:37:E9 Certificate issuer: /CN=D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9 Certificate serial: 279C05F44682B08344E84E1CCE47FB07CED736A6 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/4/D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9.mft Manifest number: 0D Signing time: Sun 25 Jan 2026 07:22:53 +0000 Manifest this update: Sun 25 Jan 2026 07:17:53 +0000 Manifest next update: Mon 26 Jan 2026 08:03:53 +0000 Files and hashes: 1: 326130663a316363353a6630303a3a2f34302d3438203d3e20323130333532.roa (hash: Qe+s8/fAnIQEeutwNPKlMCYxj4th5oSw8TX5K8siNS0=) 2: 326130663a316363353a6666663a3a2f34382d3438203d3e20323131353735.roa (hash: 9OCqZ/d+1rU6CR9p3YDhWbf8ZADN9O93ycDA5zxlgcg=) 3: D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9.crl (hash: jATTQn7RcHmcxjz7oEyp0O5Fz5Lty6zQAFj5wtCKru8=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/4/D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9.crl rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/4/D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9.mft rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9.cer rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.crl rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.mft rsync://rpki.ripe.net/repository/DEFAULT/QR4tQR1oe8tEScPfRb7twEEAfZQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:9c:05:f4:46:82:b0:83:44:e8:4e:1c:ce:47:fb:07:ce:d7:36:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9 Validity Not Before: Jan 25 07:17:53 2026 GMT Not After : Jan 26 08:03:53 2026 GMT Subject: CN=7CC15E85DA1173F57DA1F4710DA63988E0879169 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:a1:ff:50:4c:67:4a:75:d6:83:74:20:eb:bb: bf:2d:d9:c4:52:e9:c6:1d:06:a2:3f:37:cd:0a:2c: a6:12:11:a1:ee:53:08:fd:31:73:45:31:e4:09:13: 52:5f:8d:08:41:03:65:66:cf:63:36:c2:c0:16:88: ef:7c:bd:ff:75:16:88:f8:2d:26:2d:b3:20:77:9d: a5:bc:e3:f1:96:f7:74:79:b7:9e:96:13:ec:de:e8: 3d:c7:43:ae:d2:38:e5:68:17:99:a0:5a:8d:51:d1: f0:9c:69:5e:c2:e2:35:58:ad:99:df:11:26:ed:38: 7d:ff:d1:ea:42:e6:0a:cf:e7:11:d8:53:07:b0:88: 29:50:eb:59:61:da:a3:73:34:48:3e:bc:62:05:ea: cc:55:52:54:93:6e:9d:a5:cd:63:47:f2:6a:da:b0: 3f:74:40:b1:e1:79:92:d4:38:c7:ea:4b:fe:df:01: fb:c5:3e:54:6f:d3:7b:7a:49:22:0c:f8:31:77:eb: 20:f9:04:6a:b4:be:59:e5:f6:a4:a1:67:cf:32:b9: d0:c5:b8:58:67:75:36:d7:29:a8:50:d5:04:7f:89: e9:4f:96:68:ef:06:96:9a:2e:ae:e1:7a:3f:fa:97: 23:b8:23:43:2e:af:14:6f:9f:03:07:fb:52:3f:8c: 78:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:C1:5E:85:DA:11:73:F5:7D:A1:F4:71:0D:A6:39:88:E0:87:91:69 X509v3 Authority Key Identifier: keyid:D5:EE:63:D9:B1:D2:D5:C6:FA:DC:9A:16:9E:9B:4A:F6:44:CF:37:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/4/D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/4/D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:9c:d0:ba:39:6b:02:86:9e:42:79:75:84:51:b3:75:8c:e1: 5c:d2:90:17:cf:e0:f9:fe:4a:55:a2:d1:83:7a:05:74:cd:9d: a1:3b:69:e0:d0:9b:16:2b:e0:6c:29:59:52:3f:99:60:bf:b3: 39:9d:e3:94:ca:15:97:6d:c1:92:81:75:a5:eb:56:d2:1a:7d: 9a:47:bd:59:52:55:a0:38:f6:b0:3b:ca:e4:04:cf:fd:8b:81: 86:e4:19:8c:a0:6d:26:6a:9d:5c:5f:e8:be:e0:e3:4f:a8:b5: a6:57:d9:12:b8:70:da:99:19:d6:ac:b8:94:fe:03:17:46:71: 84:27:c7:d8:57:13:8f:16:f5:74:ca:f1:47:6f:ef:aa:d1:42: 3e:da:cd:31:46:c7:6e:b2:c1:6f:bc:05:27:86:c1:68:95:0e: bc:3a:cd:30:a6:e7:45:bb:58:c5:f1:cc:82:c0:83:8b:e7:00: 6e:f6:ea:30:b0:dd:58:b2:3d:2e:a5:3a:ce:02:27:fc:6d:ff: d9:4c:95:aa:af:25:b2:17:15:40:24:28:64:c0:e4:94:24:c2: 63:7c:41:9c:53:10:42:99:2c:f4:ff:1c:47:9b:1b:04:e1:f7: ef:58:2a:f8:35:b9:7c:5c:1e:9e:70:57:9c:bd:32:f3:4a:b1: e2:f3:27:fa -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUJ5wF9EaCsINE6E4czkf7B87XNqYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDVFRTYzRDlCMUQyRDVDNkZBREM5QTE2OUU5QjRBRjY0 NENGMzdFOTAeFw0yNjAxMjUwNzE3NTNaFw0yNjAxMjYwODAzNTNaMDMxMTAvBgNV BAMTKDdDQzE1RTg1REExMTczRjU3REExRjQ3MTBEQTYzOTg4RTA4NzkxNjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeof9QTGdKddaDdCDru78t2cRS 6cYdBqI/N80KLKYSEaHuUwj9MXNFMeQJE1JfjQhBA2Vmz2M2wsAWiO98vf91Foj4 LSYtsyB3naW84/GW93R5t56WE+ze6D3HQ67SOOVoF5mgWo1R0fCcaV7C4jVYrZnf ESbtOH3/0epC5grP5xHYUwewiClQ61lh2qNzNEg+vGIF6sxVUlSTbp2lzWNH8mra sD90QLHheZLUOMfqS/7fAfvFPlRv03t6SSIM+DF36yD5BGq0vlnl9qShZ88yudDF uFhndTbXKahQ1QR/ielPlmjvBpaaLq7hej/6lyO4I0MurxRvnwMH+1I/jHhVAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUfMFehdoRc/V9ofRxDaY5iOCHkWkwHwYDVR0j BBgwFoAU1e5j2bHS1cb63JoWnptK9kTPN+kwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTUxN2I1ZDAtMzMxNy00YjQ5LThlYzUtYmU5MGJjNzAw NjJmLzQvRDVFRTYzRDlCMUQyRDVDNkZBREM5QTE2OUU5QjRBRjY0NENGMzdFOS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84YWZiNWZlMi0zYzJhLTQ5 MzktOTVlOS0wMDc3YjgwYjRmMGUvMC9ENUVFNjNEOUIxRDJENUM2RkFEQzlBMTY5 RTlCNEFGNjQ0Q0YzN0U5LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzE1MTdiNWQwLTMzMTctNGI0OS04ZWM1LWJlOTBiYzcwMDYyZi80L0Q1RUU2M0Q5 QjFEMkQ1QzZGQURDOUExNjlFOUI0QUY2NDRDRjM3RTkubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAJnNC6 OWsChp5CeXWEUbN1jOFc0pAXz+D5/kpVotGDegV0zZ2hO2ng0JsWK+BsKVlSP5lg v7M5neOUyhWXbcGSgXWl61bSGn2aR71ZUlWgOPawO8rkBM/9i4GG5BmMoG0map1c X+i+4ONPqLWmV9kSuHDamRnWrLiU/gMXRnGEJ8fYVxOPFvV0yvFHb++q0UI+2s0x RsdussFvvAUnhsFolQ68Os0wpudFu1jF8cyCwIOL5wBu9uowsN1Ysj0upTrOAif8 bf/ZTJWqryWyFxVAJChkwOSUJMJjfEGcUxBCmSz0/xxHmxsE4ffvWCr4Nbl8XB6e cFecvTLzSrHi8yf6 -----END CERTIFICATE-----Generated at Sun Jan 25 17:19:52 2026 by rpki-client