This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/212531c8-b248-4431-a18e-4e6dc8d6b6e8/0/0DD4CFA21D83ABD8B565498180680D141A81960F.mft File: 0DD4CFA21D83ABD8B565498180680D141A81960F.mft (raw, json) Hash identifier: ojaoeW9tQHlx1Zcxsb6+owL52NHLnL3hh5ycAyaW7tw= Subject key identifier: 5E:BD:2B:13:9A:E2:5E:03:D6:BF:0B:6E:56:DA:6A:F1:40:3C:8B:97 Authority key identifier: 0D:D4:CF:A2:1D:83:AB:D8:B5:65:49:81:80:68:0D:14:1A:81:96:0F Certificate issuer: /CN=0dd4cfa21d83abd8b565498180680d141a81960f Certificate serial: 21B6B87E67234A25C8F8E6E4B90C0406BF48AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DdTPoh2Dq9i1ZUmBgGgNFBqBlg8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/212531c8-b248-4431-a18e-4e6dc8d6b6e8/0/0DD4CFA21D83ABD8B565498180680D141A81960F.mft Manifest number: F2 Signing time: Sun 25 Jan 2026 17:55:27 +0000 Manifest this update: Sun 25 Jan 2026 17:50:27 +0000 Manifest next update: Mon 26 Jan 2026 19:26:27 +0000 Files and hashes: 1: 3231322e362e34382e302f32342d3234203d3e20343031373833.roa (hash: xMLOXyY+BsMcBRRtKTQRzQvqncsTWn47VROaOw/TU2U=) 2: 0DD4CFA21D83ABD8B565498180680D141A81960F.crl (hash: bHHWumNYA1nDYg4+EKJwyZjMHIrb1pB1cbnsS1FwFKw=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/212531c8-b248-4431-a18e-4e6dc8d6b6e8/0/0DD4CFA21D83ABD8B565498180680D141A81960F.crl rsync://rsync.paas.rpki.ripe.net/repository/212531c8-b248-4431-a18e-4e6dc8d6b6e8/0/0DD4CFA21D83ABD8B565498180680D141A81960F.mft rsync://rpki.ripe.net/repository/DEFAULT/DdTPoh2Dq9i1ZUmBgGgNFBqBlg8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:b6:b8:7e:67:23:4a:25:c8:f8:e6:e4:b9:0c:04:06:bf:48:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dd4cfa21d83abd8b565498180680d141a81960f Validity Not Before: Jan 25 17:50:27 2026 GMT Not After : Jan 26 19:26:27 2026 GMT Subject: CN=5EBD2B139AE25E03D6BF0B6E56DA6AF1403C8B97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:c7:03:c6:66:16:ff:ed:37:6a:83:31:e5:44: c1:1f:cc:88:e0:d2:84:a7:e1:62:4b:4c:52:cf:1f: bc:61:ae:38:e1:74:f5:8d:f2:7a:86:8b:b7:e0:fe: c5:60:39:31:b3:71:d5:45:e9:59:ad:43:79:2e:53: 92:fd:63:5c:a2:60:82:f1:62:45:fd:95:34:fa:07: 99:4c:e9:42:05:27:6e:06:92:d3:92:0d:0f:fc:41: 7a:d8:de:1f:83:c6:a9:42:fd:30:49:c2:b8:4b:19: 50:50:1a:72:14:66:14:a6:65:b5:c4:93:e7:68:d1: 41:d7:6f:c1:6a:2a:2a:bb:45:d1:ec:1a:8c:49:a7: ce:3c:b5:46:99:ba:25:6b:67:9f:f4:3d:d9:28:8d: 96:bd:53:f4:43:60:ec:72:d0:b4:d3:58:3d:c8:3e: c2:df:7f:ef:b5:b9:e6:3f:8c:b1:d7:b3:2c:77:cd: 84:27:d9:e6:b2:41:b9:14:6b:a7:7d:bf:68:fe:42: bd:a8:0a:b6:69:00:b1:00:1f:f1:68:5f:2d:34:f3: 66:34:cb:6d:04:a1:07:6b:ae:22:dc:e1:11:e6:59: ec:61:38:75:b1:74:01:f4:78:64:e4:b7:3b:86:0c: fa:52:ab:bb:57:6e:dd:6f:b4:7b:99:81:e1:94:98: 0d:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:BD:2B:13:9A:E2:5E:03:D6:BF:0B:6E:56:DA:6A:F1:40:3C:8B:97 X509v3 Authority Key Identifier: keyid:0D:D4:CF:A2:1D:83:AB:D8:B5:65:49:81:80:68:0D:14:1A:81:96:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/212531c8-b248-4431-a18e-4e6dc8d6b6e8/0/0DD4CFA21D83ABD8B565498180680D141A81960F.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DdTPoh2Dq9i1ZUmBgGgNFBqBlg8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/212531c8-b248-4431-a18e-4e6dc8d6b6e8/0/0DD4CFA21D83ABD8B565498180680D141A81960F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:62:81:f2:95:27:e4:42:e7:00:ef:76:c7:1f:46:94:84:ff: 3d:51:2e:e9:09:2f:3d:2a:2e:f8:88:bc:37:bd:82:25:ff:ea: 76:ab:97:05:a0:3d:10:74:d6:39:2a:5d:81:65:5b:03:61:66: 9a:36:6f:5d:23:68:49:4f:4d:c1:e7:f2:bd:71:03:80:dd:c1: 3b:d4:d9:cc:b6:78:cd:2d:3a:b0:4f:7b:71:bb:bb:99:03:8c: 52:67:86:c0:23:2f:f2:d8:c3:da:a4:b3:df:01:31:35:50:15: ba:ee:18:a8:29:bf:35:2d:3a:fc:52:02:0c:2c:42:56:bc:cc: 26:88:4f:0c:fb:0a:25:51:c1:a9:cf:b3:75:88:95:f7:60:3d: 07:39:2a:b2:f2:43:71:45:fa:72:53:da:ec:13:33:96:49:0b: b1:44:7d:be:cc:06:7f:22:48:70:59:9a:50:89:44:24:65:ae: 5a:05:ef:a7:b4:7d:d5:dc:54:89:3e:e0:82:88:4d:f1:4a:11: c4:97:7b:df:13:c5:a4:6a:d3:77:d5:b5:a0:c0:8d:e1:53:6f: 72:d7:01:ff:0a:80:84:bd:53:c4:f3:9f:2a:5b:dd:8d:43:5e: 4e:ee:d0:94:28:00:65:48:bc:b3:ee:06:97:79:c8:98:bd:e6: 71:96:5f:24 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgITIba4fmcjSiXI+ObkuQwEBr9IrjANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEygwZGQ0Y2ZhMjFkODNhYmQ4YjU2NTQ5ODE4MDY4MGQxNDFh ODE5NjBmMB4XDTI2MDEyNTE3NTAyN1oXDTI2MDEyNjE5MjYyN1owMzExMC8GA1UE AxMoNUVCRDJCMTM5QUUyNUUwM0Q2QkYwQjZFNTZEQTZBRjE0MDNDOEI5NzCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAK3HA8ZmFv/tN2qDMeVEwR/MiODS hKfhYktMUs8fvGGuOOF09Y3yeoaLt+D+xWA5MbNx1UXpWa1DeS5Tkv1jXKJggvFi Rf2VNPoHmUzpQgUnbgaS05IND/xBetjeH4PGqUL9MEnCuEsZUFAachRmFKZltcST 52jRQddvwWoqKrtF0ewajEmnzjy1Rpm6JWtnn/Q92SiNlr1T9ENg7HLQtNNYPcg+ wt9/77W55j+MsdezLHfNhCfZ5rJBuRRrp32/aP5CvagKtmkAsQAf8WhfLTTzZjTL bQShB2uuItzhEeZZ7GE4dbF0AfR4ZOS3O4YM+lKru1du3W+0e5mB4ZSYDRkCAwEA AaOCAkcwggJDMB0GA1UdDgQWBBRevSsTmuJeA9a/C25W2mrxQDyLlzAfBgNVHSME GDAWgBQN1M+iHYOr2LVlSYGAaA0UGoGWDzAOBgNVHQ8BAf8EBAMCB4AwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5u ZXQvcmVwb3NpdG9yeS8yMTI1MzFjOC1iMjQ4LTQ0MzEtYTE4ZS00ZTZkYzhkNmI2 ZTgvMC8wREQ0Q0ZBMjFEODNBQkQ4QjU2NTQ5ODE4MDY4MEQxNDFBODE5NjBGLmNy bDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvRGRUUG9oMkRxOWkxWlVtQmdHZ05GQnFC bGc4LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUFBzALhn9yc3luYzov L3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzIxMjUzMWM4LWIy NDgtNDQzMS1hMThlLTRlNmRjOGQ2YjZlOC8wLzBERDRDRkEyMUQ4M0FCRDhCNTY1 NDk4MTgwNjgwRDE0MUE4MTk2MEYubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcB CAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBhYoHylSfkQucA73bHH0aU hP89US7pCS89Ki74iLw3vYIl/+p2q5cFoD0QdNY5Kl2BZVsDYWaaNm9dI2hJT03B 5/K9cQOA3cE71NnMtnjNLTqwT3txu7uZA4xSZ4bAIy/y2MPapLPfATE1UBW67hio Kb81LTr8UgIMLEJWvMwmiE8M+wolUcGpz7N1iJX3YD0HOSqy8kNxRfpyU9rsEzOW SQuxRH2+zAZ/IkhwWZpQiUQkZa5aBe+ntH3V3FSJPuCCiE3xShHEl3vfE8WkatN3 1bWgwI3hU29y1wH/CoCEvVPE858qW92NQ15O7tCUKABlSLyz7gaXeciYveZxll8k -----END CERTIFICATE-----Generated at Sun Jan 25 21:10:49 2026 by rpki-client