This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2285be6f-5111-4c3c-8254-d2e415510284/2/CECA73092344CA9B6F74C1A83D6C747962186C47.mft File: CECA73092344CA9B6F74C1A83D6C747962186C47.mft (raw, json) Hash identifier: PnF/foFTDcpbMXwxm540K6oZ8bSSwalDqu5EFHf+bYo= Subject key identifier: 66:D9:73:01:DB:D2:CA:4F:F0:18:17:55:30:50:CB:ED:35:DB:64:EB Authority key identifier: CE:CA:73:09:23:44:CA:9B:6F:74:C1:A8:3D:6C:74:79:62:18:6C:47 Certificate issuer: /CN=CECA73092344CA9B6F74C1A83D6C747962186C47 Certificate serial: 424105D9B89941E031150662751E38AB2CF833C9 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/CECA73092344CA9B6F74C1A83D6C747962186C47.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2285be6f-5111-4c3c-8254-d2e415510284/2/CECA73092344CA9B6F74C1A83D6C747962186C47.mft Manifest number: 14 Signing time: Sun 25 Jan 2026 14:03:01 +0000 Manifest this update: Sun 25 Jan 2026 13:58:01 +0000 Manifest next update: Mon 26 Jan 2026 14:26:01 +0000 Files and hashes: 1: CECA73092344CA9B6F74C1A83D6C747962186C47.crl (hash: hLZv19c5aeQHBSlILFVCar2pIYHsPrE6h1UJLK0Fmx8=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2285be6f-5111-4c3c-8254-d2e415510284/2/CECA73092344CA9B6F74C1A83D6C747962186C47.crl rsync://rsync.paas.rpki.ripe.net/repository/2285be6f-5111-4c3c-8254-d2e415510284/2/CECA73092344CA9B6F74C1A83D6C747962186C47.mft rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/CECA73092344CA9B6F74C1A83D6C747962186C47.cer rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.crl rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.mft rsync://rpki.ripe.net/repository/DEFAULT/QR4tQR1oe8tEScPfRb7twEEAfZQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:34:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:41:05:d9:b8:99:41:e0:31:15:06:62:75:1e:38:ab:2c:f8:33:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CECA73092344CA9B6F74C1A83D6C747962186C47 Validity Not Before: Jan 25 13:58:01 2026 GMT Not After : Jan 26 14:26:01 2026 GMT Subject: CN=66D97301DBD2CA4FF01817553050CBED35DB64EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:09:1d:80:3f:4a:6a:64:35:4b:b9:7d:92:41: 7d:4d:60:b2:35:48:6a:68:12:d6:29:c7:55:3c:aa: d2:e2:a0:f0:bb:ab:43:07:28:93:f8:84:81:55:9a: 4a:a2:d8:77:85:fa:93:be:8a:5d:15:b5:43:87:fe: 10:e5:61:91:7c:c9:b5:81:bc:3d:42:27:0d:46:24: cc:fa:bd:81:7a:9c:2b:21:72:5b:cd:22:16:fc:02: 0b:30:88:a0:63:3a:ed:ee:3f:a5:8a:d0:53:20:23: 57:79:c8:27:88:45:7b:50:56:38:05:72:9e:bd:43: 7c:9a:c0:75:e9:03:c0:b3:bc:90:e7:68:19:bf:38: 81:db:82:09:b1:4a:56:63:44:f5:4b:42:9c:20:07: 9b:44:1a:9b:9b:ee:9a:1d:83:38:5f:9a:7d:ab:af: af:e4:a9:79:93:f6:23:a9:6c:d5:ba:ea:01:80:f2: c5:19:cc:93:70:23:d7:f0:8d:63:08:56:80:be:9a: 12:dd:d6:47:00:7f:51:d9:6a:69:b5:f3:5d:47:29: 71:d6:32:b7:8a:d7:13:fe:09:fd:33:93:1d:db:ba: 2f:a0:38:c9:b8:e8:d5:de:83:c8:6d:72:a8:7d:b7: 12:14:4c:b0:6f:73:8f:70:fa:9c:e2:07:8b:b0:8a: 20:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:D9:73:01:DB:D2:CA:4F:F0:18:17:55:30:50:CB:ED:35:DB:64:EB X509v3 Authority Key Identifier: keyid:CE:CA:73:09:23:44:CA:9B:6F:74:C1:A8:3D:6C:74:79:62:18:6C:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2285be6f-5111-4c3c-8254-d2e415510284/2/CECA73092344CA9B6F74C1A83D6C747962186C47.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/CECA73092344CA9B6F74C1A83D6C747962186C47.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2285be6f-5111-4c3c-8254-d2e415510284/2/CECA73092344CA9B6F74C1A83D6C747962186C47.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:f7:a5:e4:4a:9f:87:96:b6:d9:9a:34:ce:81:ab:bf:63:11: b7:d0:46:3a:65:50:85:64:0a:ca:83:0d:83:54:40:de:b4:27: 54:2b:16:06:f2:42:fd:f3:74:35:3d:a2:b2:60:fd:e5:44:e9: 74:fc:00:15:68:be:20:ba:6f:23:56:65:d0:50:83:a2:88:8a: 92:e6:3f:29:4c:38:9c:22:7c:43:a7:53:63:1e:51:21:f5:e9: 04:a2:9e:08:51:4f:c6:c6:99:e9:db:f0:26:33:a5:bb:dd:ff: d2:f3:01:6b:59:1f:8d:63:11:25:70:ca:52:f5:be:63:75:94: ea:27:d8:a3:67:88:6e:13:e0:cf:e6:79:ce:52:f9:99:db:f2: c1:94:db:da:03:ef:9d:1b:99:be:d2:85:e8:7b:9e:76:5a:38: db:e6:c8:03:91:ed:e1:da:34:fb:a8:5c:7a:32:73:c5:56:f8: b3:fd:2a:06:a8:a7:95:2b:0b:0b:fb:62:1a:13:6b:2e:c7:f1: 20:bb:8a:74:e8:02:cf:03:df:dd:ce:0c:51:cb:dc:09:58:61: 7b:eb:cc:fd:66:a0:43:8f:8d:ce:de:6f:de:bf:10:b5:61:96: c4:af:06:42:69:26:f8:f5:1b:de:7e:81:51:71:7b:41:e5:80: 97:5c:c2:4b -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUQkEF2biZQeAxFQZidR44qyz4M8kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VDQTczMDkyMzQ0Q0E5QjZGNzRDMUE4M0Q2Qzc0Nzk2 MjE4NkM0NzAeFw0yNjAxMjUxMzU4MDFaFw0yNjAxMjYxNDI2MDFaMDMxMTAvBgNV BAMTKDY2RDk3MzAxREJEMkNBNEZGMDE4MTc1NTMwNTBDQkVEMzVEQjY0RUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaCR2AP0pqZDVLuX2SQX1NYLI1 SGpoEtYpx1U8qtLioPC7q0MHKJP4hIFVmkqi2HeF+pO+il0VtUOH/hDlYZF8ybWB vD1CJw1GJMz6vYF6nCshclvNIhb8AgswiKBjOu3uP6WK0FMgI1d5yCeIRXtQVjgF cp69Q3yawHXpA8CzvJDnaBm/OIHbggmxSlZjRPVLQpwgB5tEGpub7podgzhfmn2r r6/kqXmT9iOpbNW66gGA8sUZzJNwI9fwjWMIVoC+mhLd1kcAf1HZamm1811HKXHW MreK1xP+Cf0zkx3bui+gOMm46NXeg8htcqh9txIUTLBvc49w+pziB4uwiiBBAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUZtlzAdvSyk/wGBdVMFDL7TXbZOswHwYDVR0j BBgwFoAUzspzCSNEyptvdMGoPWx0eWIYbEcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjI4NWJlNmYtNTExMS00YzNjLTgyNTQtZDJlNDE1NTEw Mjg0LzIvQ0VDQTczMDkyMzQ0Q0E5QjZGNzRDMUE4M0Q2Qzc0Nzk2MjE4NkM0Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84YWZiNWZlMi0zYzJhLTQ5 MzktOTVlOS0wMDc3YjgwYjRmMGUvMC9DRUNBNzMwOTIzNDRDQTlCNkY3NEMxQTgz RDZDNzQ3OTYyMTg2QzQ3LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzIyODViZTZmLTUxMTEtNGMzYy04MjU0LWQyZTQxNTUxMDI4NC8yL0NFQ0E3MzA5 MjM0NENBOUI2Rjc0QzFBODNENkM3NDc5NjIxODZDNDcubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCH96Xk Sp+HlrbZmjTOgau/YxG30EY6ZVCFZArKgw2DVEDetCdUKxYG8kL983Q1PaKyYP3l ROl0/AAVaL4gum8jVmXQUIOiiIqS5j8pTDicInxDp1NjHlEh9ekEop4IUU/Gxpnp 2/AmM6W73f/S8wFrWR+NYxElcMpS9b5jdZTqJ9ijZ4huE+DP5nnOUvmZ2/LBlNva A++dG5m+0oXoe552Wjjb5sgDke3h2jT7qFx6MnPFVviz/SoGqKeVKwsL+2IaE2su x/Egu4p06ALPA9/dzgxRy9wJWGF768z9ZqBDj43O3m/evxC1YZbErwZCaSb49Rve foFRcXtB5YCXXMJL -----END CERTIFICATE-----Generated at Sun Jan 25 20:48:59 2026 by rpki-client