This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/1/A4A082EAE8EF48C7B407C40E742479EADD862089.mft File: A4A082EAE8EF48C7B407C40E742479EADD862089.mft (raw, json) Hash identifier: wT0CLKo8JgnCZ87w83/37XK0yBofZZoYfzqJk5/lyBA= Subject key identifier: D9:CA:02:A2:02:3D:2C:AA:13:DD:B4:A6:63:1A:91:38:D0:EB:4A:00 Authority key identifier: A4:A0:82:EA:E8:EF:48:C7:B4:07:C4:0E:74:24:79:EA:DD:86:20:89 Certificate issuer: /CN=A4A082EAE8EF48C7B407C40E742479EADD862089 Certificate serial: 11996DB22579F4A4A99BD7E21F4400E0B7B2BD0D Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/A4A082EAE8EF48C7B407C40E742479EADD862089.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/1/A4A082EAE8EF48C7B407C40E742479EADD862089.mft Manifest number: 01DC Signing time: Sat 24 Jan 2026 17:51:39 +0000 Manifest this update: Sat 24 Jan 2026 17:46:39 +0000 Manifest next update: Sun 25 Jan 2026 17:56:39 +0000 Files and hashes: 1: A4A082EAE8EF48C7B407C40E742479EADD862089.crl (hash: eOOm7rH+SKEJ8urvGH8YlL4mf6VzV4zjvHviB+tbl8A=) 2: 326130663a383563313a3339303a3a2f34382d3438203d3e20323135343730.roa (hash: mky/ldC1XpVEwoLHqIyOpw4wZEQNfx0y97P4Ne2BiJs=) 3: 326130663a383563313a6234643a3a2f34382d3438203d3e20323133343238.roa (hash: MorJ8/zqWP+ENMZ78Dfg8lahRlU/VfcwHwmQyMuE7hc=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/1/A4A082EAE8EF48C7B407C40E742479EADD862089.crl rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/1/A4A082EAE8EF48C7B407C40E742479EADD862089.mft rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/A4A082EAE8EF48C7B407C40E742479EADD862089.cer rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 17:56:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:99:6d:b2:25:79:f4:a4:a9:9b:d7:e2:1f:44:00:e0:b7:b2:bd:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A4A082EAE8EF48C7B407C40E742479EADD862089 Validity Not Before: Jan 24 17:46:39 2026 GMT Not After : Jan 25 17:56:39 2026 GMT Subject: CN=D9CA02A2023D2CAA13DDB4A6631A9138D0EB4A00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:c1:ec:db:ab:7e:d7:da:15:9d:a4:02:c6:30: ab:e8:a8:a2:ba:35:57:06:61:bc:77:1c:fc:1b:ce: 94:0d:78:7f:7f:d5:b7:39:c3:12:31:3d:6f:ba:58: 55:cc:97:da:9b:45:bb:7f:6b:24:92:53:11:68:b9: ec:8f:2e:9f:56:1c:50:e1:6c:f6:08:8a:8f:26:40: c2:12:11:0f:32:3c:5f:ad:43:0e:f2:a9:ea:74:3b: 57:df:8b:a2:fe:1d:84:8d:71:81:1f:94:74:c1:ad: 3a:e5:4c:cc:35:57:05:1e:3c:34:99:0c:26:c1:2c: e6:d0:28:29:51:5a:d3:a3:9a:67:c6:99:2f:ce:cf: df:c9:9c:9e:ac:a8:99:98:e0:29:2d:92:0a:8f:8f: 32:57:2a:89:af:24:21:63:13:63:8b:35:7d:88:cd: 17:f9:80:99:42:81:44:a9:1b:ac:57:93:5d:f2:75: 33:70:d7:04:69:e0:00:57:7d:b3:0c:41:93:f8:92: ed:5a:f6:7d:0f:f8:10:7f:51:92:60:12:06:40:9b: 1f:36:b4:52:e1:1f:aa:dd:eb:8e:1b:8e:4e:0c:7d: 81:12:37:70:67:c3:43:1c:05:58:9c:e8:b0:84:e7: 26:b5:a9:7a:89:f3:4c:f3:6a:2a:50:2c:75:1f:22: 33:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:CA:02:A2:02:3D:2C:AA:13:DD:B4:A6:63:1A:91:38:D0:EB:4A:00 X509v3 Authority Key Identifier: keyid:A4:A0:82:EA:E8:EF:48:C7:B4:07:C4:0E:74:24:79:EA:DD:86:20:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/1/A4A082EAE8EF48C7B407C40E742479EADD862089.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/A4A082EAE8EF48C7B407C40E742479EADD862089.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/1/A4A082EAE8EF48C7B407C40E742479EADD862089.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:05:9e:e4:82:7a:df:35:59:32:b7:98:3b:d9:d9:f2:03:ad: 27:7a:e1:4e:80:70:2d:c3:aa:78:b8:b4:20:a6:82:87:d6:dd: f0:e9:4e:12:e9:ad:64:ea:f2:da:16:bf:3c:03:e5:b0:92:3e: 1c:c4:df:f6:f8:10:04:b5:90:fa:0d:aa:32:51:be:2f:22:43: 63:85:e8:61:ba:0f:b8:15:8c:8b:a1:ea:7f:6c:3f:ef:43:4f: aa:90:23:bb:d9:a5:e5:57:56:05:e0:79:20:56:28:5b:d4:70: 6d:d9:37:32:98:c4:5a:1c:54:a6:31:0b:c1:1e:1d:14:84:f4: 61:bb:d2:36:9a:d8:a5:8a:8b:41:d3:c3:f5:ef:0e:1c:c4:14: 11:ec:47:1b:5e:13:73:f2:3d:0b:dc:3b:59:32:98:85:2d:e1: 9d:5b:bc:4f:28:ca:89:10:fa:80:58:06:00:8f:07:e8:0c:1d: 90:19:92:05:b2:92:37:0a:c0:ce:bb:9b:27:be:b1:b7:61:19: dc:60:56:98:b7:9f:2a:97:ca:9e:9a:08:07:7a:55:47:e2:f5: f7:8c:15:be:87:05:2f:24:10:c9:2a:2a:de:72:9f:84:bf:28: a4:a5:ac:10:15:a3:c7:15:cf:46:22:15:23:ab:8b:83:cd:d4: c0:c0:9c:7b -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUEZltsiV59KSpm9fiH0QA4LeyvQ0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTRBMDgyRUFFOEVGNDhDN0I0MDdDNDBFNzQyNDc5RUFE RDg2MjA4OTAeFw0yNjAxMjQxNzQ2MzlaFw0yNjAxMjUxNzU2MzlaMDMxMTAvBgNV BAMTKEQ5Q0EwMkEyMDIzRDJDQUExM0REQjRBNjYzMUE5MTM4RDBFQjRBMDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1wezbq37X2hWdpALGMKvoqKK6 NVcGYbx3HPwbzpQNeH9/1bc5wxIxPW+6WFXMl9qbRbt/aySSUxFoueyPLp9WHFDh bPYIio8mQMISEQ8yPF+tQw7yqep0O1ffi6L+HYSNcYEflHTBrTrlTMw1VwUePDSZ DCbBLObQKClRWtOjmmfGmS/Oz9/JnJ6sqJmY4CktkgqPjzJXKomvJCFjE2OLNX2I zRf5gJlCgUSpG6xXk13ydTNw1wRp4ABXfbMMQZP4ku1a9n0P+BB/UZJgEgZAmx82 tFLhH6rd644bjk4MfYESN3Bnw0McBVic6LCE5ya1qXqJ80zzaipQLHUfIjPjAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU2coCogI9LKoT3bSmYxqRONDrSgAwHwYDVR0j BBgwFoAUpKCC6ujvSMe0B8QOdCR56t2GIIkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTlhYTlkYTctZjFlNC00ZDk4LWJmOTUtOWZkZmNmNDQ4 Zjc3LzEvQTRBMDgyRUFFOEVGNDhDN0I0MDdDNDBFNzQyNDc5RUFERDg2MjA4OS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84NGQ1MTgxMC0xOTg3LTQ3 MDEtOGYxZi04NDI1MTExOTY0ZjQvMC9BNEEwODJFQUU4RUY0OEM3QjQwN0M0MEU3 NDI0NzlFQUREODYyMDg5LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzE5YWE5ZGE3LWYxZTQtNGQ5OC1iZjk1LTlmZGZjZjQ0OGY3Ny8xL0E0QTA4MkVB RThFRjQ4QzdCNDA3QzQwRTc0MjQ3OUVBREQ4NjIwODkubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBsBZ7k gnrfNVkyt5g72dnyA60neuFOgHAtw6p4uLQgpoKH1t3w6U4S6a1k6vLaFr88A+Ww kj4cxN/2+BAEtZD6DaoyUb4vIkNjhehhug+4FYyLoep/bD/vQ0+qkCO72aXlV1YF 4HkgVihb1HBt2TcymMRaHFSmMQvBHh0UhPRhu9I2mtiliotB08P17w4cxBQR7Ecb XhNz8j0L3DtZMpiFLeGdW7xPKMqJEPqAWAYAjwfoDB2QGZIFspI3CsDOu5snvrG3 YRncYFaYt58ql8qemggHelVH4vX3jBW+hwUvJBDJKirecp+EvyikpawQFaPHFc9G IhUjq4uDzdTAwJx7 -----END CERTIFICATE-----Generated at Sun Jan 25 12:47:59 2026 by rpki-client