This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3c8e4e11-3aca-4305-acd4-f05e6c909115/1/0874801164DC95F0AB9CCD4BD304A3EF78E9F39B.mft File: 0874801164DC95F0AB9CCD4BD304A3EF78E9F39B.mft (raw, json) Hash identifier: cKQ2Ay9BT7e1pGoSHsd7OCNPAsAB/FqHfGP932bKQIs= Subject key identifier: F9:97:A8:E8:1E:FC:1D:FB:2C:35:70:5E:2D:AB:0E:E7:1A:3C:07:34 Authority key identifier: 08:74:80:11:64:DC:95:F0:AB:9C:CD:4B:D3:04:A3:EF:78:E9:F3:9B Certificate issuer: /CN=0874801164DC95F0AB9CCD4BD304A3EF78E9F39B Certificate serial: 31251E324CAE40E1F194F7AD9B95C6469D910D05 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/0874801164DC95F0AB9CCD4BD304A3EF78E9F39B.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3c8e4e11-3aca-4305-acd4-f05e6c909115/1/0874801164DC95F0AB9CCD4BD304A3EF78E9F39B.mft Manifest number: 010B Signing time: Sun 25 Jan 2026 15:30:33 +0000 Manifest this update: Sun 25 Jan 2026 15:25:33 +0000 Manifest next update: Mon 26 Jan 2026 17:13:33 +0000 Files and hashes: 1: 0874801164DC95F0AB9CCD4BD304A3EF78E9F39B.crl (hash: pY3qobhnfRteC0XmdDSWXUC+cbF2qfaUi/ATsox04mk=) 2: 326131343a373538313a383030303a3a2f33362d3430203d3e203530333835.roa (hash: Em5jZEM0Z1oJ1UofjCQGnCq9Pql9aI7sK4Y5UkTysUg=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3c8e4e11-3aca-4305-acd4-f05e6c909115/1/0874801164DC95F0AB9CCD4BD304A3EF78E9F39B.crl rsync://rsync.paas.rpki.ripe.net/repository/3c8e4e11-3aca-4305-acd4-f05e6c909115/1/0874801164DC95F0AB9CCD4BD304A3EF78E9F39B.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/0874801164DC95F0AB9CCD4BD304A3EF78E9F39B.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 17:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:25:1e:32:4c:ae:40:e1:f1:94:f7:ad:9b:95:c6:46:9d:91:0d:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0874801164DC95F0AB9CCD4BD304A3EF78E9F39B Validity Not Before: Jan 25 15:25:33 2026 GMT Not After : Jan 26 17:13:33 2026 GMT Subject: CN=F997A8E81EFC1DFB2C35705E2DAB0EE71A3C0734 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:69:2c:ac:9b:ef:f3:27:e8:71:7a:ec:eb:ca: b3:99:ac:fc:7d:bf:4c:e9:7f:3e:92:36:ae:7a:14: 22:26:73:b0:63:71:d1:b5:18:83:23:4c:0d:4e:dc: 5a:62:f2:06:f0:c8:28:4c:99:c5:9f:c0:65:2d:bd: 5a:fd:c2:9c:3d:46:80:f2:97:b1:0f:b9:2e:d4:3f: 25:21:18:79:0a:a0:50:15:87:c2:2d:d4:8f:88:5e: e6:10:45:be:ce:e7:f9:62:b7:5c:e9:4d:ce:57:b1: 52:81:48:ea:a8:45:f3:e2:f1:68:a2:f0:9e:2f:ae: c2:5d:74:bf:66:aa:e3:5e:0e:ac:45:7b:40:60:56: 55:28:14:56:dc:ed:32:98:31:85:d4:9b:53:65:5b: d0:e7:f6:a9:65:3d:ef:6f:55:da:00:58:d8:f8:28: 1c:c8:f3:31:d8:96:7d:45:a8:df:11:40:c4:24:fa: e3:6c:6e:b4:d9:ec:04:96:05:a5:f6:a2:82:70:f7: 4e:51:c9:20:c5:18:6a:34:61:00:ae:a3:10:41:b8: fe:2d:3a:54:5d:d2:52:df:7b:cd:8f:c9:ee:60:60: 00:6a:9e:48:ac:b1:0c:49:2e:bf:24:fd:5f:01:50: 57:7b:e9:9e:ce:f4:20:ff:05:98:11:57:31:fb:1d: fe:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:97:A8:E8:1E:FC:1D:FB:2C:35:70:5E:2D:AB:0E:E7:1A:3C:07:34 X509v3 Authority Key Identifier: keyid:08:74:80:11:64:DC:95:F0:AB:9C:CD:4B:D3:04:A3:EF:78:E9:F3:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/3c8e4e11-3aca-4305-acd4-f05e6c909115/1/0874801164DC95F0AB9CCD4BD304A3EF78E9F39B.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/0874801164DC95F0AB9CCD4BD304A3EF78E9F39B.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3c8e4e11-3aca-4305-acd4-f05e6c909115/1/0874801164DC95F0AB9CCD4BD304A3EF78E9F39B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:81:60:e5:af:82:21:4d:82:c0:6f:e2:bd:8b:60:3d:72:43: 61:2f:74:68:9b:6d:f6:0d:5b:c3:4a:9f:1d:ec:4b:98:d9:bf: db:09:a6:dd:97:3d:7f:7d:35:11:55:fe:41:08:9f:07:39:0d: 54:ed:d9:93:3a:17:fc:73:bb:89:bd:c9:96:38:0e:c4:e8:72: 07:b2:93:b7:00:85:6a:e8:cf:ef:64:fd:b1:43:ba:71:bf:fa: e2:17:60:18:e9:b6:c5:5d:9b:ab:f0:05:2d:51:6a:47:34:36: 10:b9:e8:ba:55:0b:2d:c4:ef:1b:b1:9f:7b:6f:11:2b:8d:d4: bd:39:15:fc:c8:4a:1c:a4:13:2c:e0:53:95:f8:cc:66:2d:2b: 9e:60:8c:59:1b:d5:12:4b:34:53:2a:66:8a:3e:7a:f5:c1:97: 72:40:0c:f9:04:a1:ba:b9:2d:25:21:b3:2e:d7:c8:34:b7:86: f2:d6:50:68:a6:19:ae:5f:03:eb:f9:a9:8c:0a:c9:53:45:e3: 1f:2f:c9:03:2b:bd:15:7e:5c:91:98:46:9d:14:45:69:83:3f: 45:99:fb:db:0a:81:77:1a:be:28:d2:7e:89:51:18:6f:7e:47: c9:b2:21:89:0e:35:a2:78:63:74:b8:e9:16:38:c9:6f:fc:d4: bd:09:c1:2d -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUMSUeMkyuQOHxlPetm5XGRp2RDQUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDg3NDgwMTE2NERDOTVGMEFCOUNDRDRCRDMwNEEzRUY3 OEU5RjM5QjAeFw0yNjAxMjUxNTI1MzNaFw0yNjAxMjYxNzEzMzNaMDMxMTAvBgNV BAMTKEY5OTdBOEU4MUVGQzFERkIyQzM1NzA1RTJEQUIwRUU3MUEzQzA3MzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsaSysm+/zJ+hxeuzryrOZrPx9 v0zpfz6SNq56FCImc7BjcdG1GIMjTA1O3Fpi8gbwyChMmcWfwGUtvVr9wpw9RoDy l7EPuS7UPyUhGHkKoFAVh8It1I+IXuYQRb7O5/lit1zpTc5XsVKBSOqoRfPi8Wii 8J4vrsJddL9mquNeDqxFe0BgVlUoFFbc7TKYMYXUm1NlW9Dn9qllPe9vVdoAWNj4 KBzI8zHYln1FqN8RQMQk+uNsbrTZ7ASWBaX2ooJw905RySDFGGo0YQCuoxBBuP4t OlRd0lLfe82Pye5gYABqnkissQxJLr8k/V8BUFd76Z7O9CD/BZgRVzH7Hf4PAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU+Zeo6B78HfssNXBeLasO5xo8BzQwHwYDVR0j BBgwFoAUCHSAEWTclfCrnM1L0wSj73jp85swDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvM2M4ZTRlMTEtM2FjYS00MzA1LWFjZDQtZjA1ZTZjOTA5 MTE1LzEvMDg3NDgwMTE2NERDOTVGMEFCOUNDRDRCRDMwNEEzRUY3OEU5RjM5Qi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8wODc0ODAxMTY0REM5NUYwQUI5Q0NENEJE MzA0QTNFRjc4RTlGMzlCLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzNjOGU0ZTExLTNhY2EtNDMwNS1hY2Q0LWYwNWU2YzkwOTExNS8xLzA4NzQ4MDEx NjREQzk1RjBBQjlDQ0Q0QkQzMDRBM0VGNzhFOUYzOUIubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBMgWDl r4IhTYLAb+K9i2A9ckNhL3Rom232DVvDSp8d7EuY2b/bCabdlz1/fTURVf5BCJ8H OQ1U7dmTOhf8c7uJvcmWOA7E6HIHspO3AIVq6M/vZP2xQ7pxv/riF2AY6bbFXZur 8AUtUWpHNDYQuei6VQstxO8bsZ97bxErjdS9ORX8yEocpBMs4FOV+MxmLSueYIxZ G9USSzRTKmaKPnr1wZdyQAz5BKG6uS0lIbMu18g0t4by1lBophmuXwPr+amMCslT ReMfL8kDK70VflyRmEadFEVpgz9FmfvbCoF3Gr4o0n6JURhvfkfJsiGJDjWieGN0 uOkWOMlv/NS9CcEt -----END CERTIFICATE-----Generated at Mon Jan 26 05:37:18 2026 by rpki-client