This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.mft File: 069FAF47FF48AEF4C98F5097074530A74C111AB9.mft (raw, json) Hash identifier: In4hQDiiBmXY/WPtAY23XgvxGaUSU7FcEfVFJuRc7gU= Subject key identifier: 1C:8E:BF:80:2D:CA:81:8C:F9:83:9F:16:10:1D:C5:BB:81:FC:8D:FD Authority key identifier: 06:9F:AF:47:FF:48:AE:F4:C9:8F:50:97:07:45:30:A7:4C:11:1A:B9 Certificate issuer: /CN=069FAF47FF48AEF4C98F5097074530A74C111AB9 Certificate serial: 49912E280B39409C65AD6FDC28E186DFE047C3B5 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/069FAF47FF48AEF4C98F5097074530A74C111AB9.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.mft Manifest number: 0454 Signing time: Sun 25 Jan 2026 05:22:56 +0000 Manifest this update: Sun 25 Jan 2026 05:17:56 +0000 Manifest next update: Mon 26 Jan 2026 09:05:56 +0000 Files and hashes: 1: 326130663a383563313a3335373a3a2f34382d3438203d3e20323135363137.roa (hash: mT7wNp38f47L+2MAFo1ah1wV4i3g7EwDZhqEAFbd0PU=) 2: 326130663a383563313a3335313a3a2f34382d3438203d3e20343031333836.roa (hash: pdFac+QI0R/UPdzS1q2a9ExUPSLxlAAabS/RPyMDKJ0=) 3: 069FAF47FF48AEF4C98F5097074530A74C111AB9.crl (hash: OElMT1sFv9BhTd9sAajZSk9IhxvKM6ZTmFoCjB+Cfgw=) 4: 326130663a383563313a3336333a3a2f34382d3438203d3e20323135363137.roa (hash: nWVf9Vd1/pxv69WaHKM1e/8vQ/po0I7aidbKnzISSgo=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.crl rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.mft rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/069FAF47FF48AEF4C98F5097074530A74C111AB9.cer rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:05:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:91:2e:28:0b:39:40:9c:65:ad:6f:dc:28:e1:86:df:e0:47:c3:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=069FAF47FF48AEF4C98F5097074530A74C111AB9 Validity Not Before: Jan 25 05:17:56 2026 GMT Not After : Jan 26 09:05:56 2026 GMT Subject: CN=1C8EBF802DCA818CF9839F16101DC5BB81FC8DFD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:17:85:1b:41:15:e2:12:5e:2e:99:dc:df:de: 62:ec:db:52:7c:c6:a7:5d:2a:3d:4f:0c:b3:bb:4f: aa:f9:b1:23:00:94:3e:92:e1:08:3f:13:4a:aa:42: 2c:85:d6:1c:da:c3:ad:39:f8:cb:05:e5:8d:2c:95: 6c:12:44:b0:ec:48:c1:3e:2b:06:2c:47:66:f3:94: b8:86:29:f2:1d:2d:b0:23:af:9d:c2:59:c5:31:f7: fc:23:69:f9:a8:46:d0:ee:62:d1:e4:e3:81:dc:01: 6b:bc:58:85:53:9c:c1:ed:53:b5:7e:c0:fe:56:b2: 1d:3e:53:73:8d:1c:b2:9b:a5:01:cd:f3:49:81:bf: cf:0b:d1:28:13:14:11:5a:60:fc:70:5c:a0:10:a2: 32:ad:6d:22:60:9d:47:29:83:c0:70:46:c4:ee:fb: d8:f0:51:77:3d:28:57:9a:f6:d8:fa:44:54:37:40: b1:6f:6c:39:ff:4c:ad:ec:27:72:1c:5e:64:4c:21: 06:d4:b6:12:c7:91:78:92:a0:de:3c:97:62:88:da: 5c:be:0f:7c:e9:ad:6d:56:41:c4:c3:cb:25:94:25: b0:9c:d6:cf:b4:33:23:3e:24:0b:90:07:8c:06:9a: e8:b8:8a:e0:a5:7d:fd:8d:3f:49:0c:ec:7b:1e:54: d0:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:8E:BF:80:2D:CA:81:8C:F9:83:9F:16:10:1D:C5:BB:81:FC:8D:FD X509v3 Authority Key Identifier: keyid:06:9F:AF:47:FF:48:AE:F4:C9:8F:50:97:07:45:30:A7:4C:11:1A:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/069FAF47FF48AEF4C98F5097074530A74C111AB9.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:ff:02:b4:62:0f:90:a1:07:d6:fc:68:be:f3:a2:a1:05:ff: 90:0c:99:b1:7b:b9:ca:93:55:d1:b2:ea:46:d3:fc:7e:6d:c8: ac:76:cd:d7:a4:c6:72:e0:15:ec:af:cd:8e:6d:fc:5c:b4:49: 8c:6f:63:89:d8:19:3a:48:52:bc:cd:69:e9:b5:c5:4a:e8:6b: 6c:8e:6d:4a:0e:05:88:6c:46:fb:ec:01:43:95:d9:2f:fb:e2: ab:30:1c:8d:a4:8f:d0:9e:4e:50:d9:9a:53:4d:c3:26:de:9a: da:a3:53:ae:40:15:c5:33:34:04:11:49:fb:9e:f1:1c:31:c2: 2a:97:3d:93:ef:27:2e:04:07:6a:39:08:54:2c:b4:c2:a8:64: 60:49:27:16:cd:bf:92:83:ca:aa:41:d1:d4:4e:70:d9:87:fa: e6:00:06:35:f0:1d:db:a4:d6:c9:c9:b5:37:f8:d6:56:49:11: 7b:53:cb:05:40:fc:15:27:9a:a7:fc:a9:d8:fe:95:61:23:12: 18:77:81:77:3e:af:b1:40:84:bc:cf:ea:52:e5:4b:1c:08:d5: e5:88:2b:87:57:26:01:05:68:a8:7e:77:56:5d:4f:6d:bc:8f: df:f4:6c:89:fe:bf:37:07:fd:b0:7e:d4:5e:b0:1f:54:b8:78: ae:54:b1:4d -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUSZEuKAs5QJxlrW/cKOGG3+BHw7UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDY5RkFGNDdGRjQ4QUVGNEM5OEY1MDk3MDc0NTMwQTc0 QzExMUFCOTAeFw0yNjAxMjUwNTE3NTZaFw0yNjAxMjYwOTA1NTZaMDMxMTAvBgNV BAMTKDFDOEVCRjgwMkRDQTgxOENGOTgzOUYxNjEwMURDNUJCODFGQzhERkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4F4UbQRXiEl4umdzf3mLs21J8 xqddKj1PDLO7T6r5sSMAlD6S4Qg/E0qqQiyF1hzaw605+MsF5Y0slWwSRLDsSME+ KwYsR2bzlLiGKfIdLbAjr53CWcUx9/wjafmoRtDuYtHk44HcAWu8WIVTnMHtU7V+ wP5Wsh0+U3ONHLKbpQHN80mBv88L0SgTFBFaYPxwXKAQojKtbSJgnUcpg8BwRsTu +9jwUXc9KFea9tj6RFQ3QLFvbDn/TK3sJ3IcXmRMIQbUthLHkXiSoN48l2KI2ly+ D3zprW1WQcTDyyWUJbCc1s+0MyM+JAuQB4wGmui4iuClff2NP0kM7HseVNAhAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUHI6/gC3KgYz5g58WEB3Fu4H8jf0wHwYDVR0j BBgwFoAUBp+vR/9IrvTJj1CXB0Uwp0wRGrkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjNkNWY2ODItYjUxYi00ODEyLWI4YjEtNDMwZTM4Njgz NzQ4LzIvMDY5RkFGNDdGRjQ4QUVGNEM5OEY1MDk3MDc0NTMwQTc0QzExMUFCOS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84NGQ1MTgxMC0xOTg3LTQ3 MDEtOGYxZi04NDI1MTExOTY0ZjQvMC8wNjlGQUY0N0ZGNDhBRUY0Qzk4RjUwOTcw NzQ1MzBBNzRDMTExQUI5LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzIzZDVmNjgyLWI1MWItNDgxMi1iOGIxLTQzMGUzODY4Mzc0OC8yLzA2OUZBRjQ3 RkY0OEFFRjRDOThGNTA5NzA3NDUzMEE3NEMxMTFBQjkubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCn/wK0 Yg+QoQfW/Gi+86KhBf+QDJmxe7nKk1XRsupG0/x+bcisds3XpMZy4BXsr82Obfxc tEmMb2OJ2Bk6SFK8zWnptcVK6Gtsjm1KDgWIbEb77AFDldkv++KrMByNpI/Qnk5Q 2ZpTTcMm3prao1OuQBXFMzQEEUn7nvEcMcIqlz2T7ycuBAdqOQhULLTCqGRgSScW zb+Sg8qqQdHUTnDZh/rmAAY18B3bpNbJybU3+NZWSRF7U8sFQPwVJ5qn/KnY/pVh IxIYd4F3Pq+xQIS8z+pS5UscCNXliCuHVyYBBWiofndWXU9tvI/f9GyJ/r83B/2w ftResB9UuHiuVLFN -----END CERTIFICATE-----Generated at Sun Jan 25 20:36:08 2026 by rpki-client