This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/40cba61d-4056-46a9-9392-a61dfc500dc9/1/2A91778ACCE76333081468D9784DE132C2985976.mft File: 2A91778ACCE76333081468D9784DE132C2985976.mft (raw, json) Hash identifier: hw6OdwqoPL2YB0v3pu2TSoWiqfmtxoiNQV5vJBqxybg= Subject key identifier: 7D:0D:61:EE:72:AE:99:08:E7:66:15:CC:CB:9A:D9:0F:A7:93:43:6C Authority key identifier: 2A:91:77:8A:CC:E7:63:33:08:14:68:D9:78:4D:E1:32:C2:98:59:76 Certificate issuer: /CN=2A91778ACCE76333081468D9784DE132C2985976 Certificate serial: 74F212D21BD2A81E46CECFC364EFFFDF0228A6D0 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/2A91778ACCE76333081468D9784DE132C2985976.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/40cba61d-4056-46a9-9392-a61dfc500dc9/1/2A91778ACCE76333081468D9784DE132C2985976.mft Manifest number: 02 Signing time: Sun 25 Jan 2026 05:58:59 +0000 Manifest this update: Sun 25 Jan 2026 05:53:59 +0000 Manifest next update: Mon 26 Jan 2026 08:28:59 +0000 Files and hashes: 1: 326130663a316363353a323630303a3a2f34302d3438203d3e20323032333335.roa (hash: nzPrfU7/0C1uT8wK0Kkdb/GSWbML8Xt4edf9nME+bEg=) 2: 2A91778ACCE76333081468D9784DE132C2985976.crl (hash: eJcFxi782NiL2TcRSch0eovPq8t5n8p8nnsAlGZohp8=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/40cba61d-4056-46a9-9392-a61dfc500dc9/1/2A91778ACCE76333081468D9784DE132C2985976.crl rsync://rsync.paas.rpki.ripe.net/repository/40cba61d-4056-46a9-9392-a61dfc500dc9/1/2A91778ACCE76333081468D9784DE132C2985976.mft rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/2A91778ACCE76333081468D9784DE132C2985976.cer rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.crl rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.mft rsync://rpki.ripe.net/repository/DEFAULT/QR4tQR1oe8tEScPfRb7twEEAfZQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:f2:12:d2:1b:d2:a8:1e:46:ce:cf:c3:64:ef:ff:df:02:28:a6:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A91778ACCE76333081468D9784DE132C2985976 Validity Not Before: Jan 25 05:53:59 2026 GMT Not After : Jan 26 08:28:59 2026 GMT Subject: CN=7D0D61EE72AE9908E76615CCCB9AD90FA793436C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:65:79:54:9b:fa:96:93:d4:af:fc:51:06:62: 7b:9c:43:e8:84:12:2a:fa:42:60:8a:dd:b9:17:7a: cf:86:ba:b2:9c:dc:f6:7e:9d:72:2f:4d:5f:82:7b: 52:a7:05:a9:ad:23:de:ca:36:29:de:75:45:ca:da: d8:f2:e1:73:8b:4a:a9:7c:62:4b:60:9d:f7:4a:e4: 83:7d:bc:c5:97:f1:5d:ed:3d:b8:f0:f9:5d:d7:84: ab:06:28:23:12:d9:c8:d1:39:25:70:c7:7b:fb:28: a7:61:1c:91:d1:83:ad:bc:c3:a7:ac:72:00:a9:44: 9d:19:f1:46:fb:53:f8:35:74:16:0e:e5:e3:92:d9: 6d:32:a6:c3:c2:d1:f8:93:ad:27:0c:1f:71:a6:21: a4:f0:88:d0:4f:8c:c2:62:bc:13:39:65:1b:0c:c8: 34:c8:16:ae:23:b4:62:90:ac:0b:38:13:fa:48:eb: 7d:7e:98:17:f0:0c:56:eb:64:5d:2e:e8:de:97:33: d1:ee:17:47:a8:79:ef:bd:db:c3:2a:6c:86:66:a3: 7a:c2:e2:9c:af:b8:63:73:a0:c7:fc:de:6b:4a:cb: eb:ab:5b:6a:1d:31:bc:a2:2e:03:35:fa:69:37:50: 98:d2:20:fa:11:dc:de:95:5b:81:c2:85:e2:00:63: 88:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:0D:61:EE:72:AE:99:08:E7:66:15:CC:CB:9A:D9:0F:A7:93:43:6C X509v3 Authority Key Identifier: keyid:2A:91:77:8A:CC:E7:63:33:08:14:68:D9:78:4D:E1:32:C2:98:59:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/40cba61d-4056-46a9-9392-a61dfc500dc9/1/2A91778ACCE76333081468D9784DE132C2985976.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/2A91778ACCE76333081468D9784DE132C2985976.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/40cba61d-4056-46a9-9392-a61dfc500dc9/1/2A91778ACCE76333081468D9784DE132C2985976.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:2d:da:d4:c1:92:7c:79:c2:0d:bd:18:f3:71:77:5c:1c:33: ed:f7:66:d8:f6:24:f4:f3:84:ac:fa:c7:b9:af:60:0e:93:7a: 76:e7:b2:29:33:3e:ec:a6:36:5e:77:ea:64:0a:36:f4:2c:2e: bd:39:c8:f3:1c:36:b9:a6:44:dd:53:2c:e2:c9:ff:28:cf:cc: 61:a5:d2:17:8a:52:f6:8f:e7:dc:0c:47:77:d3:c4:81:6d:bc: e1:8c:b9:90:02:29:a3:76:2f:1c:18:bf:be:f1:fa:18:ea:fe: 84:3b:c9:7a:0d:24:98:ad:bc:b0:8a:21:e5:88:c7:d9:bf:0d: eb:91:95:e9:b1:58:23:93:b9:da:81:23:66:fe:80:8c:c6:b2: c8:aa:79:de:e3:03:72:3f:09:28:57:95:7c:a6:fb:89:af:8b: 67:f3:d0:25:4a:2c:9a:1e:67:dd:f2:6e:63:8a:10:d6:d5:4c: 70:96:22:ed:dd:98:7c:49:99:c6:ab:31:25:29:c1:c1:36:38: ad:96:21:68:34:84:eb:ef:5d:5b:47:90:f7:7d:f4:d6:ca:47: d6:cb:5a:56:1c:90:31:e7:61:0e:96:02:85:20:c6:86:14:aa: db:48:e8:9d:98:ff:bc:28:c5:6a:08:d4:2f:71:b4:36:c3:e6: af:55:10:9c -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUdPIS0hvSqB5Gzs/DZO//3wIoptAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkE5MTc3OEFDQ0U3NjMzMzA4MTQ2OEQ5Nzg0REUxMzJD Mjk4NTk3NjAeFw0yNjAxMjUwNTUzNTlaFw0yNjAxMjYwODI4NTlaMDMxMTAvBgNV BAMTKDdEMEQ2MUVFNzJBRTk5MDhFNzY2MTVDQ0NCOUFEOTBGQTc5MzQzNkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrZXlUm/qWk9Sv/FEGYnucQ+iE Eir6QmCK3bkXes+GurKc3PZ+nXIvTV+Ce1KnBamtI97KNinedUXK2tjy4XOLSql8 YktgnfdK5IN9vMWX8V3tPbjw+V3XhKsGKCMS2cjROSVwx3v7KKdhHJHRg628w6es cgCpRJ0Z8Ub7U/g1dBYO5eOS2W0ypsPC0fiTrScMH3GmIaTwiNBPjMJivBM5ZRsM yDTIFq4jtGKQrAs4E/pI631+mBfwDFbrZF0u6N6XM9HuF0eoee+928MqbIZmo3rC 4pyvuGNzoMf83mtKy+urW2odMbyiLgM1+mk3UJjSIPoR3N6VW4HCheIAY4gJAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUfQ1h7nKumQjnZhXMy5rZD6eTQ2wwHwYDVR0j BBgwFoAUKpF3isznYzMIFGjZeE3hMsKYWXYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNDBjYmE2MWQtNDA1Ni00NmE5LTkzOTItYTYxZGZjNTAw ZGM5LzEvMkE5MTc3OEFDQ0U3NjMzMzA4MTQ2OEQ5Nzg0REUxMzJDMjk4NTk3Ni5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84YWZiNWZlMi0zYzJhLTQ5 MzktOTVlOS0wMDc3YjgwYjRmMGUvMC8yQTkxNzc4QUNDRTc2MzMzMDgxNDY4RDk3 ODRERTEzMkMyOTg1OTc2LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzQwY2JhNjFkLTQwNTYtNDZhOS05MzkyLWE2MWRmYzUwMGRjOS8xLzJBOTE3NzhB Q0NFNzYzMzMwODE0NjhEOTc4NERFMTMyQzI5ODU5NzYubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBYLdrU wZJ8ecINvRjzcXdcHDPt92bY9iT084Ss+se5r2AOk3p257IpMz7spjZed+pkCjb0 LC69OcjzHDa5pkTdUyziyf8oz8xhpdIXilL2j+fcDEd308SBbbzhjLmQAimjdi8c GL++8foY6v6EO8l6DSSYrbywiiHliMfZvw3rkZXpsVgjk7nagSNm/oCMxrLIqnne 4wNyPwkoV5V8pvuJr4tn89AlSiyaHmfd8m5jihDW1UxwliLt3Zh8SZnGqzElKcHB NjitliFoNITr711bR5D3ffTWykfWy1pWHJAx52EOlgKFIMaGFKrbSOidmP+8KMVq CNQvcbQ2w+avVRCc -----END CERTIFICATE-----Generated at Sun Jan 25 17:36:41 2026 by rpki-client