This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/3/DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.mft File: DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.mft (raw, json) Hash identifier: MfCockWm49fkJa76naw37tobP/0/zhsHLV9iQIs1Bm8= Subject key identifier: 31:1E:39:63:96:C9:B2:C9:0C:63:8E:C1:93:F6:BC:B5:DE:22:4B:08 Authority key identifier: DB:5B:BD:B3:02:10:31:4E:90:40:B6:C9:9D:BF:69:EE:85:FA:4E:E1 Certificate issuer: /CN=DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1 Certificate serial: 09325E83F1E4704C283CB39890910F32642526E5 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/3/DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.mft Manifest number: 12 Signing time: Sun 25 Jan 2026 23:59:50 +0000 Manifest this update: Sun 25 Jan 2026 23:54:50 +0000 Manifest next update: Tue 27 Jan 2026 00:19:50 +0000 Files and hashes: 1: 326130663a316363353a326430323a3a2f34382d3438203d3e20323134393535.roa (hash: VVawYWTXQjQEBU4mla6uw3/riEywDPfxqIz2zpx9eTU=) 2: DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.crl (hash: HaL5Gr067Q0C32qDu4SHkRhdeqzf/ivzQCjAmXitV9w=) 3: 326130663a316363353a326430313a3a2f34382d3438203d3e20323134393535.roa (hash: l0RMqMiAhgGDzLpuD3ZJuPudrozfegvLREqyl+4aP2I=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/3/DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.crl rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/3/DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.mft rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.cer rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.crl rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.mft rsync://rpki.ripe.net/repository/DEFAULT/QR4tQR1oe8tEScPfRb7twEEAfZQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:32:5e:83:f1:e4:70:4c:28:3c:b3:98:90:91:0f:32:64:25:26:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1 Validity Not Before: Jan 25 23:54:50 2026 GMT Not After : Jan 27 00:19:50 2026 GMT Subject: CN=311E396396C9B2C90C638EC193F6BCB5DE224B08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:3c:96:bf:c2:e4:bf:f6:ab:4c:4e:95:2b:dd: 7c:1b:6d:56:7a:81:7a:24:78:68:75:de:16:19:18: c1:b6:a2:bf:23:cd:b3:23:8a:db:fc:2b:aa:a2:55: 21:61:e3:00:97:c8:3a:55:ca:e4:8f:68:9f:34:66: 27:5d:ae:5c:5e:37:33:82:63:44:29:93:75:81:f6: 99:b7:f2:aa:33:6d:78:83:6a:d5:d3:2b:50:42:7e: d1:bb:f1:64:5f:5b:a7:ff:39:e6:2c:d8:7c:aa:66: 6a:2d:b9:ea:00:54:55:80:e0:71:4f:8e:bd:bb:29: e7:b3:62:07:1b:25:cf:30:75:d6:09:7a:8c:c0:4e: 49:0e:7c:26:ad:4b:a0:e8:87:4b:41:b6:48:cc:51: e6:2f:6b:0d:ed:4a:fd:ef:45:c1:aa:bb:cc:f2:5e: 1d:d2:c1:b6:2d:7d:07:cb:38:58:87:4e:6b:4a:b7: b6:8d:6a:73:e9:15:16:ec:0f:ef:9d:b6:bb:97:cc: d0:c1:d5:84:2e:a4:c5:a3:66:dd:b8:38:c5:33:20: 13:c7:b7:0d:d7:b8:4f:98:e6:b2:e6:b7:8a:74:4a: 22:0f:53:cd:21:18:ca:16:de:b1:1a:10:34:2a:25: 5b:01:48:54:08:5a:fc:95:de:af:1c:e1:7f:e4:03: c1:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:1E:39:63:96:C9:B2:C9:0C:63:8E:C1:93:F6:BC:B5:DE:22:4B:08 X509v3 Authority Key Identifier: keyid:DB:5B:BD:B3:02:10:31:4E:90:40:B6:C9:9D:BF:69:EE:85:FA:4E:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/3/DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/3/DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:01:bb:6f:3a:cf:a0:af:a2:3f:ff:87:fc:bf:3a:f0:a5:97: 23:78:da:b0:2e:29:4a:4c:bb:7b:0f:6f:70:79:2e:04:48:f7: 86:cd:c9:de:5b:89:65:47:ba:46:67:4c:f6:42:91:39:f7:a5: 5a:5e:48:64:8a:35:14:2a:67:dd:f4:f5:f4:d9:60:71:d3:bb: 4a:3e:de:54:50:11:04:c5:c9:e6:81:d0:fb:4f:79:1a:af:9c: 17:28:16:d0:32:aa:f1:c9:ec:de:61:8d:f5:37:ce:df:03:c6: af:82:25:2e:4a:a0:10:2d:4d:c3:92:77:e7:a6:6e:50:8a:da: b6:51:23:49:12:91:58:07:3a:9b:f7:fa:50:58:56:64:f4:31: 9e:0b:17:09:a3:99:b6:ed:82:e1:03:9c:69:8c:75:a4:9b:ea: 62:09:2b:65:17:92:2c:b7:bc:71:38:32:6d:49:33:e6:9a:cb: d0:db:2e:a9:95:11:c7:85:d5:fa:d3:9f:4e:25:28:53:ea:2c: 44:78:d9:c9:2e:f1:6c:1b:5f:f8:7a:33:42:a5:47:b6:65:54: 53:9d:50:70:a2:ec:79:c0:e0:2c:dc:3e:f2:f4:24:c0:de:00: 42:79:71:a1:5a:22:77:43:e9:91:e8:6c:a4:7c:ab:58:56:17: eb:f2:d7:5a -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUCTJeg/HkcEwoPLOYkJEPMmQlJuUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREI1QkJEQjMwMjEwMzE0RTkwNDBCNkM5OURCRjY5RUU4 NUZBNEVFMTAeFw0yNjAxMjUyMzU0NTBaFw0yNjAxMjcwMDE5NTBaMDMxMTAvBgNV BAMTKDMxMUUzOTYzOTZDOUIyQzkwQzYzOEVDMTkzRjZCQ0I1REUyMjRCMDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkPJa/wuS/9qtMTpUr3XwbbVZ6 gXokeGh13hYZGMG2or8jzbMjitv8K6qiVSFh4wCXyDpVyuSPaJ80ZiddrlxeNzOC Y0Qpk3WB9pm38qozbXiDatXTK1BCftG78WRfW6f/OeYs2HyqZmotueoAVFWA4HFP jr27KeezYgcbJc8wddYJeozATkkOfCatS6Doh0tBtkjMUeYvaw3tSv3vRcGqu8zy Xh3SwbYtfQfLOFiHTmtKt7aNanPpFRbsD++dtruXzNDB1YQupMWjZt24OMUzIBPH tw3XuE+Y5rLmt4p0SiIPU80hGMoW3rEaEDQqJVsBSFQIWvyV3q8c4X/kA8GHAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUMR45Y5bJsskMY47Bk/a8td4iSwgwHwYDVR0j BBgwFoAU21u9swIQMU6QQLbJnb9p7oX6TuEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvM2Y5OWU2NmQtNGM3Yi00MTMwLTkxZDUtNGZiZDg0MzU3 NzkyLzMvREI1QkJEQjMwMjEwMzE0RTkwNDBCNkM5OURCRjY5RUU4NUZBNEVFMS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84YWZiNWZlMi0zYzJhLTQ5 MzktOTVlOS0wMDc3YjgwYjRmMGUvMC9EQjVCQkRCMzAyMTAzMTRFOTA0MEI2Qzk5 REJGNjlFRTg1RkE0RUUxLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzNmOTllNjZkLTRjN2ItNDEzMC05MWQ1LTRmYmQ4NDM1Nzc5Mi8zL0RCNUJCREIz MDIxMDMxNEU5MDQwQjZDOTlEQkY2OUVFODVGQTRFRTEubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAUAbtv Os+gr6I//4f8vzrwpZcjeNqwLilKTLt7D29weS4ESPeGzcneW4llR7pGZ0z2QpE5 96VaXkhkijUUKmfd9PX02WBx07tKPt5UUBEExcnmgdD7T3kar5wXKBbQMqrxyeze YY31N87fA8avgiUuSqAQLU3Dknfnpm5Qitq2USNJEpFYBzqb9/pQWFZk9DGeCxcJ o5m27YLhA5xpjHWkm+piCStlF5Ist7xxODJtSTPmmsvQ2y6plRHHhdX6059OJShT 6ixEeNnJLvFsG1/4ejNCpUe2ZVRTnVBwoux5wOAs3D7y9CTA3gBCeXGhWiJ3Q+mR 6GykfKtYVhfr8tda -----END CERTIFICATE-----Generated at Mon Jan 26 05:02:15 2026 by rpki-client