This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/4/521525856CBBA6D9D2254221C280DC930734AAB8.mft File: 521525856CBBA6D9D2254221C280DC930734AAB8.mft (raw, json) Hash identifier: hY/FB4LkYxxGQ+o9YuuAlxd2AZnevMI3D4XM1EOcq4Q= Subject key identifier: F0:71:F2:DA:D1:FD:C8:6C:CD:63:54:9A:7C:FA:B7:AA:6C:59:06:E3 Authority key identifier: 52:15:25:85:6C:BB:A6:D9:D2:25:42:21:C2:80:DC:93:07:34:AA:B8 Certificate issuer: /CN=521525856CBBA6D9D2254221C280DC930734AAB8 Certificate serial: 039295CEAB1F68E0554FA870CE02113AD83FE0A7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/521525856CBBA6D9D2254221C280DC930734AAB8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/4/521525856CBBA6D9D2254221C280DC930734AAB8.mft Manifest number: 0113 Signing time: Sun 25 Jan 2026 02:21:39 +0000 Manifest this update: Sun 25 Jan 2026 02:16:39 +0000 Manifest next update: Mon 26 Jan 2026 06:19:39 +0000 Files and hashes: 1: 326130363a613030333a313131313a3a2f34382d3438203d3e20323030363736.roa (hash: rOXq6KopS7nNrxLenr0thMMbHkGjihkrbeGzvVQ4fNc=) 2: 39342e32342e3130382e302f32342d3234203d3e20323030363736.roa (hash: hbkkIcLL2dVYKU+9BKXYxvOgTE4cVlfb37zj8sIKpS0=) 3: 326130363a613030333a3a2f34382d3438203d3e20323030363736.roa (hash: PNV+6g1yuxZfiOErO1rlD/OjvHSDnl045B3ycAeUEw8=) 4: 326130363a613030333a313333373a3a2f34382d3438203d3e20323030363736.roa (hash: qr/bfrnor+1gB61vuOA1czljaK/VRJBauBs1U2EbENw=) 5: 326130363a613030333a623030623a3a2f34382d3438203d3e20323030363736.roa (hash: kunZD4UEEwcG2nc99Wb+xz1yK+IdIm7SjegbAra8chc=) 6: 326130363a613030333a666666663a3a2f34382d3438203d3e203530373535.roa (hash: HVzJ9R68GMwZO9EL/DI2ZLp1a+F6uNrFmfl8+YGeZKc=) 7: 521525856CBBA6D9D2254221C280DC930734AAB8.crl (hash: 3tZLI+zD/YbZAOCqKCl9N++Sw1Xw9mskx/oRE7kVxQs=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/4/521525856CBBA6D9D2254221C280DC930734AAB8.crl rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/4/521525856CBBA6D9D2254221C280DC930734AAB8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/521525856CBBA6D9D2254221C280DC930734AAB8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:19:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:92:95:ce:ab:1f:68:e0:55:4f:a8:70:ce:02:11:3a:d8:3f:e0:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521525856CBBA6D9D2254221C280DC930734AAB8 Validity Not Before: Jan 25 02:16:39 2026 GMT Not After : Jan 26 06:19:39 2026 GMT Subject: CN=F071F2DAD1FDC86CCD63549A7CFAB7AA6C5906E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:fa:ea:9d:79:36:61:65:0d:12:1c:7b:10:65: 5c:47:a6:1f:79:9d:af:58:68:1d:78:32:57:d8:c0: 4e:c2:49:e8:54:32:8f:c2:5f:7d:ea:81:6b:46:fe: 56:58:ee:59:fb:e4:89:8d:55:0f:d1:ba:20:80:07: 21:a8:50:d4:6c:38:e9:53:65:e7:50:8c:29:f4:0c: 11:eb:f7:5c:be:ec:50:26:2a:7b:d4:ff:e4:3f:30: 95:79:83:87:95:fa:a4:11:c8:16:e8:a8:7f:ab:5b: f7:96:ed:d8:9a:c0:98:0b:62:f4:d3:73:2c:d6:35: 32:5e:ca:b3:29:10:b3:77:c9:15:fb:6b:17:7c:45: a5:eb:17:9b:8a:79:f7:e0:32:b4:6e:98:ec:01:43: f9:70:3e:2f:62:42:a7:19:8f:eb:3c:66:a6:37:62: ef:15:fd:57:2c:8b:06:ab:ac:9e:55:a1:b0:95:d0: e3:1c:f7:5b:e6:5b:66:0c:86:69:e6:8d:f6:93:c0: 32:f6:dd:7c:68:c6:e1:84:40:f6:f9:91:6c:3d:c1: ab:37:2e:6f:81:23:cc:60:98:16:0b:b0:bc:a1:33: cf:d4:bc:e4:7f:69:51:76:af:2b:dc:13:43:da:89: 08:9d:43:fc:c7:95:64:e2:1f:08:2f:8a:73:14:7f: 02:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:71:F2:DA:D1:FD:C8:6C:CD:63:54:9A:7C:FA:B7:AA:6C:59:06:E3 X509v3 Authority Key Identifier: keyid:52:15:25:85:6C:BB:A6:D9:D2:25:42:21:C2:80:DC:93:07:34:AA:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/4/521525856CBBA6D9D2254221C280DC930734AAB8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/521525856CBBA6D9D2254221C280DC930734AAB8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/4/521525856CBBA6D9D2254221C280DC930734AAB8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:65:c4:76:41:0b:45:ae:4f:9d:08:73:15:39:bc:50:2b:8b: 4d:d0:3b:5e:4e:33:1c:b4:10:75:db:5e:23:6e:53:07:c5:fb: 75:1c:57:56:e4:ea:ce:78:97:3c:8f:18:77:36:a6:9a:e6:ff: 0b:e3:ca:31:5e:74:00:71:0c:d4:c9:9b:62:12:c4:a2:0b:af: aa:50:c0:06:1b:6d:c9:6c:12:86:53:83:83:a8:d0:78:43:14: 6f:02:f0:49:ab:f4:1a:19:cd:89:e4:d0:fe:2f:7f:08:e0:db: c3:d7:ce:6a:f5:2b:d8:a2:5f:2b:df:8a:d2:fc:d7:7a:4c:b3: 7f:ae:b9:f2:31:a3:c0:d7:a8:81:4f:3a:4e:fc:b2:58:e6:69: 1c:52:ca:8b:11:b8:61:0e:46:15:fb:06:3e:52:b0:4c:78:58: f9:f7:cd:10:b9:fd:9d:7a:bd:b3:d4:68:6a:d5:eb:c8:7e:61: a1:a1:e9:a1:c6:5b:90:20:7f:cf:2d:92:32:a2:7c:96:9c:a3: b2:36:21:42:3a:9c:a3:75:36:57:25:ce:0c:99:f0:0e:cf:b2: 6c:17:00:46:86:ae:00:a5:76:e8:ff:6a:39:09:a5:c5:64:4a: 34:47:81:6e:33:37:35:d2:f2:1d:15:2b:17:06:b7:53:3e:7e: 3b:76:91:16 -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUA5KVzqsfaOBVT6hwzgIROtg/4KcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTIxNTI1ODU2Q0JCQTZEOUQyMjU0MjIxQzI4MERDOTMw NzM0QUFCODAeFw0yNjAxMjUwMjE2MzlaFw0yNjAxMjYwNjE5MzlaMDMxMTAvBgNV BAMTKEYwNzFGMkRBRDFGREM4NkNDRDYzNTQ5QTdDRkFCN0FBNkM1OTA2RTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDW+uqdeTZhZQ0SHHsQZVxHph95 na9YaB14MlfYwE7CSehUMo/CX33qgWtG/lZY7ln75ImNVQ/RuiCAByGoUNRsOOlT ZedQjCn0DBHr91y+7FAmKnvU/+Q/MJV5g4eV+qQRyBboqH+rW/eW7diawJgLYvTT cyzWNTJeyrMpELN3yRX7axd8RaXrF5uKeffgMrRumOwBQ/lwPi9iQqcZj+s8ZqY3 Yu8V/VcsiwarrJ5VobCV0OMc91vmW2YMhmnmjfaTwDL23XxoxuGEQPb5kWw9was3 Lm+BI8xgmBYLsLyhM8/UvOR/aVF2ryvcE0PaiQidQ/zHlWTiHwgvinMUfwKzAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQU8HHy2tH9yGzNY1SafPq3qmxZBuMwHwYDVR0j BBgwFoAUUhUlhWy7ptnSJUIhwoDckwc0qrgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMmFjYTNjYTYtMzRjYy00NzcyLWJhYzAtYTM1ZGQwMTk1 Y2U3LzQvNTIxNTI1ODU2Q0JCQTZEOUQyMjU0MjIxQzI4MERDOTMwNzM0QUFCOC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvNTIxNTI1ODU2Q0JCQTZEOUQyMjU0MjIxQzI4MERDOTMwNzM0 QUFCOC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yYWNhM2NhNi0z NGNjLTQ3NzItYmFjMC1hMzVkZDAxOTVjZTcvNC81MjE1MjU4NTZDQkJBNkQ5RDIy NTQyMjFDMjgwREM5MzA3MzRBQUI4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdWXEdkELRa5PnQhzFTm8 UCuLTdA7Xk4zHLQQddteI25TB8X7dRxXVuTqzniXPI8Ydzammub/C+PKMV50AHEM 1MmbYhLEoguvqlDABhttyWwShlODg6jQeEMUbwLwSav0GhnNieTQ/i9/CODbw9fO avUr2KJfK9+K0vzXekyzf6658jGjwNeogU86TvyyWOZpHFLKixG4YQ5GFfsGPlKw THhY+ffNELn9nXq9s9RoatXryH5hoaHpocZbkCB/zy2SMqJ8lpyjsjYhQjqco3U2 VyXODJnwDs+ybBcARoauAKV26P9qOQmlxWRKNEeBbjM3NdLyHRUrFwa3Uz5+O3aR Fg== -----END CERTIFICATE-----Generated at Sun Jan 25 13:59:10 2026 by rpki-client