This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/4c9acece-d05b-4f73-9c6e-d8785d1789c3/1/E9D2F7329F5BA42EE0D898228DEE58B64CA813FE.mft File: E9D2F7329F5BA42EE0D898228DEE58B64CA813FE.mft (raw, json) Hash identifier: llk4/x+xsSE3Xx/TZZR4QrTQKw1T5Ht0nvag1QKzMjg= Subject key identifier: 2D:EA:1F:79:93:FB:83:80:B4:27:EA:7B:31:BF:5B:BC:BC:FF:FB:BB Authority key identifier: E9:D2:F7:32:9F:5B:A4:2E:E0:D8:98:22:8D:EE:58:B6:4C:A8:13:FE Certificate issuer: /CN=E9D2F7329F5BA42EE0D898228DEE58B64CA813FE Certificate serial: 4B69D804D742846702872E048BEBB0905D8721F1 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/E9D2F7329F5BA42EE0D898228DEE58B64CA813FE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/4c9acece-d05b-4f73-9c6e-d8785d1789c3/1/E9D2F7329F5BA42EE0D898228DEE58B64CA813FE.mft Manifest number: 6D Signing time: Sun 25 Jan 2026 22:31:36 +0000 Manifest this update: Sun 25 Jan 2026 22:26:36 +0000 Manifest next update: Mon 26 Jan 2026 22:36:36 +0000 Files and hashes: 1: 326131343a373538313a6230303a3a2f34302d3438203d3e20323134353735.roa (hash: YwVA55nGhmg50Nrcm1+tsq8Rc4xtCFLwJqkp0AhkdXQ=) 2: E9D2F7329F5BA42EE0D898228DEE58B64CA813FE.crl (hash: fCMrNoeWVpIS72G3QOvDIqQLNsZZ/4+KCuGAHc+Zzq0=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/4c9acece-d05b-4f73-9c6e-d8785d1789c3/1/E9D2F7329F5BA42EE0D898228DEE58B64CA813FE.crl rsync://rsync.paas.rpki.ripe.net/repository/4c9acece-d05b-4f73-9c6e-d8785d1789c3/1/E9D2F7329F5BA42EE0D898228DEE58B64CA813FE.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/E9D2F7329F5BA42EE0D898228DEE58B64CA813FE.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 18:04:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:69:d8:04:d7:42:84:67:02:87:2e:04:8b:eb:b0:90:5d:87:21:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E9D2F7329F5BA42EE0D898228DEE58B64CA813FE Validity Not Before: Jan 25 22:26:36 2026 GMT Not After : Jan 26 22:36:36 2026 GMT Subject: CN=2DEA1F7993FB8380B427EA7B31BF5BBCBCFFFBBB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:aa:56:25:7d:77:1b:56:b2:74:1e:50:bf:14: e3:36:31:e4:2f:04:76:04:aa:09:5d:0e:47:7c:92: 1d:d9:25:41:36:2f:c2:0a:d0:ce:5c:3b:53:54:ed: 6a:d3:ce:3f:cb:69:58:cd:98:52:28:68:44:de:15: 66:6e:61:ab:ed:16:84:85:8b:aa:ca:58:ce:b9:04: 97:be:65:3d:1e:ac:c4:4e:aa:a5:22:52:67:33:aa: 53:88:aa:34:0f:cc:ce:8b:ab:6f:4b:b9:87:d9:8e: c6:37:97:7e:d4:45:82:45:40:68:2c:e2:11:99:5c: 03:61:1b:04:f7:73:e1:aa:d0:40:7a:90:33:2b:2f: 50:02:3c:a5:74:95:94:94:b4:ae:b9:42:37:3d:b4: 29:96:bd:d6:1f:bd:f3:3e:5e:c7:60:ff:f4:f8:30: 2b:b0:d4:c7:f3:b8:aa:3c:33:ff:92:8c:98:9e:b4: 16:ff:99:47:ed:84:13:04:97:05:eb:d6:4d:f0:18: be:42:d1:fd:70:6c:3b:90:5d:0c:d3:76:1e:fc:35: 88:52:1d:c5:a9:14:bd:79:9b:72:83:2e:47:36:8a: e5:50:d2:8e:04:5f:73:a3:69:87:4b:4e:1a:0a:8f: dc:42:46:8f:95:94:98:07:ca:95:32:47:5f:9b:86: 28:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:EA:1F:79:93:FB:83:80:B4:27:EA:7B:31:BF:5B:BC:BC:FF:FB:BB X509v3 Authority Key Identifier: keyid:E9:D2:F7:32:9F:5B:A4:2E:E0:D8:98:22:8D:EE:58:B6:4C:A8:13:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/4c9acece-d05b-4f73-9c6e-d8785d1789c3/1/E9D2F7329F5BA42EE0D898228DEE58B64CA813FE.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/E9D2F7329F5BA42EE0D898228DEE58B64CA813FE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/4c9acece-d05b-4f73-9c6e-d8785d1789c3/1/E9D2F7329F5BA42EE0D898228DEE58B64CA813FE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:d2:2d:28:54:b6:a6:86:f1:5a:8d:6b:a2:81:ad:cc:76:02: e5:54:94:ee:48:4d:de:e4:b2:45:e2:b4:a7:12:af:13:67:92: 4d:b9:f3:e2:4a:e9:32:3c:d9:5b:2a:34:7a:b5:b2:35:65:8f: cc:7f:68:c1:1a:20:cb:85:79:cd:24:0c:82:44:80:c9:70:f2: 83:83:62:8f:25:82:e6:8f:32:ec:a9:77:df:c4:5b:16:72:14: f1:b4:4e:b6:4b:4c:e4:5f:72:16:39:1e:75:30:4b:1b:96:1a: 7d:d4:50:6f:fc:05:60:99:ad:88:3b:6c:b2:c3:13:ac:66:40: 13:d2:13:55:c3:5c:83:f3:62:32:a4:28:35:54:11:9a:b2:02: 43:1a:51:d9:1d:5c:99:d6:a2:22:87:95:29:07:4f:84:ee:ac: b2:10:4e:3c:90:42:21:a6:c7:65:ed:ba:71:fc:96:80:66:af: bc:4a:91:f5:c8:07:a9:c0:f2:7d:87:d0:c1:c1:c2:e8:d8:e2: ec:4f:f3:12:0d:41:1d:e3:a8:27:6e:cb:ad:2d:13:8c:e5:dd: 13:1d:47:e8:78:c0:c0:03:ec:d2:e3:8d:03:89:ee:6d:17:c0: 3d:f0:29:69:5b:21:d3:52:00:cd:95:59:1b:a3:00:c8:62:f8: d5:3c:53:fc -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUS2nYBNdChGcChy4Ei+uwkF2HIfEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTlEMkY3MzI5RjVCQTQyRUUwRDg5ODIyOERFRTU4QjY0 Q0E4MTNGRTAeFw0yNjAxMjUyMjI2MzZaFw0yNjAxMjYyMjM2MzZaMDMxMTAvBgNV BAMTKDJERUExRjc5OTNGQjgzODBCNDI3RUE3QjMxQkY1QkJDQkNGRkZCQkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCIqlYlfXcbVrJ0HlC/FOM2MeQv BHYEqgldDkd8kh3ZJUE2L8IK0M5cO1NU7WrTzj/LaVjNmFIoaETeFWZuYavtFoSF i6rKWM65BJe+ZT0erMROqqUiUmczqlOIqjQPzM6Lq29LuYfZjsY3l37URYJFQGgs 4hGZXANhGwT3c+Gq0EB6kDMrL1ACPKV0lZSUtK65Qjc9tCmWvdYfvfM+Xsdg//T4 MCuw1MfzuKo8M/+SjJietBb/mUfthBMElwXr1k3wGL5C0f1wbDuQXQzTdh78NYhS HcWpFL15m3KDLkc2iuVQ0o4EX3OjaYdLThoKj9xCRo+VlJgHypUyR1+bhigrAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQULeofeZP7g4C0J+p7Mb9bvLz/+7swHwYDVR0j BBgwFoAU6dL3Mp9bpC7g2Jgije5YtkyoE/4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNGM5YWNlY2UtZDA1Yi00ZjczLTljNmUtZDg3ODVkMTc4 OWMzLzEvRTlEMkY3MzI5RjVCQTQyRUUwRDg5ODIyOERFRTU4QjY0Q0E4MTNGRS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9FOUQyRjczMjlGNUJBNDJFRTBEODk4MjI4 REVFNThCNjRDQTgxM0ZFLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzRjOWFjZWNlLWQwNWItNGY3My05YzZlLWQ4Nzg1ZDE3ODljMy8xL0U5RDJGNzMy OUY1QkE0MkVFMEQ4OTgyMjhERUU1OEI2NENBODEzRkUubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCu0i0o VLamhvFajWuiga3MdgLlVJTuSE3e5LJF4rSnEq8TZ5JNufPiSukyPNlbKjR6tbI1 ZY/Mf2jBGiDLhXnNJAyCRIDJcPKDg2KPJYLmjzLsqXffxFsWchTxtE62S0zkX3IW OR51MEsblhp91FBv/AVgma2IO2yywxOsZkAT0hNVw1yD82IypCg1VBGasgJDGlHZ HVyZ1qIih5UpB0+E7qyyEE48kEIhpsdl7bpx/JaAZq+8SpH1yAepwPJ9h9DBwcLo 2OLsT/MSDUEd46gnbsutLROM5d0THUfoeMDAA+zS440Die5tF8A98ClpWyHTUgDN lVkbowDIYvjVPFP8 -----END CERTIFICATE-----Generated at Mon Jan 26 03:33:30 2026 by rpki-client