This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/4c9acece-d05b-4f73-9c6e-d8785d1789c3/1/E9D2F7329F5BA42EE0D898228DEE58B64CA813FE.mft File: E9D2F7329F5BA42EE0D898228DEE58B64CA813FE.mft (raw, json) Hash identifier: lM7QLhFxQMQWevvSrdgcmjEdFT1WmEBnqi9OIif7x9Q= Subject key identifier: B7:02:A5:02:DF:E6:C4:55:94:E1:E6:BC:74:E5:2C:C7:AB:6C:52:31 Authority key identifier: E9:D2:F7:32:9F:5B:A4:2E:E0:D8:98:22:8D:EE:58:B6:4C:A8:13:FE Certificate issuer: /CN=E9D2F7329F5BA42EE0D898228DEE58B64CA813FE Certificate serial: 3EFC6602484D4D3893DEE4B2DF7F7AB4B5605CA0 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/E9D2F7329F5BA42EE0D898228DEE58B64CA813FE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/4c9acece-d05b-4f73-9c6e-d8785d1789c3/1/E9D2F7329F5BA42EE0D898228DEE58B64CA813FE.mft Manifest number: 6C Signing time: Sun 25 Jan 2026 02:51:36 +0000 Manifest this update: Sun 25 Jan 2026 02:46:36 +0000 Manifest next update: Mon 26 Jan 2026 06:28:36 +0000 Files and hashes: 1: E9D2F7329F5BA42EE0D898228DEE58B64CA813FE.crl (hash: K3Xlfm+RntvFvtZWCl0IX2aFgIqE1IpkHvHx6ucpsR4=) 2: 326131343a373538313a6230303a3a2f34302d3438203d3e20323134353735.roa (hash: YwVA55nGhmg50Nrcm1+tsq8Rc4xtCFLwJqkp0AhkdXQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/4c9acece-d05b-4f73-9c6e-d8785d1789c3/1/E9D2F7329F5BA42EE0D898228DEE58B64CA813FE.crl rsync://rsync.paas.rpki.ripe.net/repository/4c9acece-d05b-4f73-9c6e-d8785d1789c3/1/E9D2F7329F5BA42EE0D898228DEE58B64CA813FE.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/E9D2F7329F5BA42EE0D898228DEE58B64CA813FE.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:28:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:fc:66:02:48:4d:4d:38:93:de:e4:b2:df:7f:7a:b4:b5:60:5c:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E9D2F7329F5BA42EE0D898228DEE58B64CA813FE Validity Not Before: Jan 25 02:46:36 2026 GMT Not After : Jan 26 06:28:36 2026 GMT Subject: CN=B702A502DFE6C45594E1E6BC74E52CC7AB6C5231 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:6d:ef:f0:d9:12:e8:38:10:fb:7d:2d:08:13: ac:30:29:c1:49:93:1e:94:e1:ce:7a:b7:77:54:f3: 1d:04:5e:01:f6:ff:96:83:64:48:27:20:19:49:f4: 05:3a:38:52:bd:d8:1c:a4:0a:a1:0d:4b:e7:17:4d: 5e:a8:23:77:fc:58:01:64:a3:3d:f9:68:79:62:08: 76:d2:25:00:b4:9a:6b:4a:38:db:55:29:dc:aa:d7: 4f:b5:11:78:67:4a:f5:17:0d:27:d5:2f:87:be:a5: 1a:87:5a:0e:f5:d0:c3:3c:50:5a:cf:ac:7a:cf:63: 80:6f:41:4f:2a:ae:de:16:1e:24:10:b0:c7:bf:54: fe:97:1b:0d:66:e5:69:ba:40:3d:d5:af:5a:bb:3d: a6:4d:97:3d:e6:d4:1d:a7:16:d5:06:ff:eb:8a:a4: d6:3d:be:bf:b9:fd:fe:57:80:78:e2:56:da:c8:13: c9:77:7d:0e:7e:72:79:93:8b:7f:ff:1b:7f:45:f5: 16:44:f1:81:85:cd:42:f3:85:fe:4d:ab:ad:e4:52: aa:23:5d:0e:58:56:40:e3:84:31:b2:bb:95:74:16: e2:ef:d8:62:38:6a:75:f1:fe:01:c3:10:1d:48:c1: e1:93:9e:01:ee:cd:a8:6e:7e:4b:18:5b:8b:ed:e5: 2f:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:02:A5:02:DF:E6:C4:55:94:E1:E6:BC:74:E5:2C:C7:AB:6C:52:31 X509v3 Authority Key Identifier: keyid:E9:D2:F7:32:9F:5B:A4:2E:E0:D8:98:22:8D:EE:58:B6:4C:A8:13:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/4c9acece-d05b-4f73-9c6e-d8785d1789c3/1/E9D2F7329F5BA42EE0D898228DEE58B64CA813FE.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/E9D2F7329F5BA42EE0D898228DEE58B64CA813FE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/4c9acece-d05b-4f73-9c6e-d8785d1789c3/1/E9D2F7329F5BA42EE0D898228DEE58B64CA813FE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:38:88:36:92:c7:23:08:9e:e2:77:12:c4:bc:51:11:ad:86: 0f:45:45:e8:5c:70:57:9d:e6:00:2c:0c:1d:fd:0a:af:e2:3d: ce:79:ff:f5:97:ce:5b:78:5f:b3:34:62:c9:62:60:9b:a5:b6: cc:82:d5:21:41:fb:2b:ef:b6:3a:0f:c5:27:22:e8:a7:df:40: d8:7f:77:0e:23:f9:26:80:d1:32:14:ee:63:5a:da:53:a1:8f: af:9d:ac:97:17:a4:e1:81:bd:63:99:90:1b:1a:14:52:51:91: 8d:af:9d:75:9a:22:ad:f3:ba:14:61:53:a1:dd:67:28:fa:39: a8:d8:87:5d:fa:21:85:36:71:c2:37:3e:aa:cd:89:64:66:85: 58:83:63:90:7f:9c:9d:d9:49:57:45:a8:8d:69:43:80:73:85: 85:8f:88:7b:77:eb:a8:d5:85:06:ec:b8:72:55:ea:b5:25:39: c8:0c:0e:0f:9d:82:ab:f0:55:84:95:82:eb:2c:d1:aa:47:42: 3e:e3:2d:e7:ff:e5:d7:ee:57:cf:52:3a:a0:f9:62:51:bb:c2: 80:05:1d:88:5a:1d:4f:0b:91:d8:de:8d:5b:17:aa:5d:87:84: e5:41:12:4b:9a:83:2b:74:63:37:8a:90:21:35:95:74:0f:5a: 7e:de:27:8f -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUPvxmAkhNTTiT3uSy3396tLVgXKAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTlEMkY3MzI5RjVCQTQyRUUwRDg5ODIyOERFRTU4QjY0 Q0E4MTNGRTAeFw0yNjAxMjUwMjQ2MzZaFw0yNjAxMjYwNjI4MzZaMDMxMTAvBgNV BAMTKEI3MDJBNTAyREZFNkM0NTU5NEUxRTZCQzc0RTUyQ0M3QUI2QzUyMzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjbe/w2RLoOBD7fS0IE6wwKcFJ kx6U4c56t3dU8x0EXgH2/5aDZEgnIBlJ9AU6OFK92BykCqENS+cXTV6oI3f8WAFk oz35aHliCHbSJQC0mmtKONtVKdyq10+1EXhnSvUXDSfVL4e+pRqHWg710MM8UFrP rHrPY4BvQU8qrt4WHiQQsMe/VP6XGw1m5Wm6QD3Vr1q7PaZNlz3m1B2nFtUG/+uK pNY9vr+5/f5XgHjiVtrIE8l3fQ5+cnmTi3//G39F9RZE8YGFzULzhf5Nq63kUqoj XQ5YVkDjhDGyu5V0FuLv2GI4anXx/gHDEB1IweGTngHuzahufksYW4vt5S/xAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUtwKlAt/mxFWU4ea8dOUsx6tsUjEwHwYDVR0j BBgwFoAU6dL3Mp9bpC7g2Jgije5YtkyoE/4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNGM5YWNlY2UtZDA1Yi00ZjczLTljNmUtZDg3ODVkMTc4 OWMzLzEvRTlEMkY3MzI5RjVCQTQyRUUwRDg5ODIyOERFRTU4QjY0Q0E4MTNGRS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9FOUQyRjczMjlGNUJBNDJFRTBEODk4MjI4 REVFNThCNjRDQTgxM0ZFLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzRjOWFjZWNlLWQwNWItNGY3My05YzZlLWQ4Nzg1ZDE3ODljMy8xL0U5RDJGNzMy OUY1QkE0MkVFMEQ4OTgyMjhERUU1OEI2NENBODEzRkUubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB3OIg2 kscjCJ7idxLEvFERrYYPRUXoXHBXneYALAwd/Qqv4j3Oef/1l85beF+zNGLJYmCb pbbMgtUhQfsr77Y6D8UnIuin30DYf3cOI/kmgNEyFO5jWtpToY+vnayXF6Thgb1j mZAbGhRSUZGNr511miKt87oUYVOh3Wco+jmo2Idd+iGFNnHCNz6qzYlkZoVYg2OQ f5yd2UlXRaiNaUOAc4WFj4h7d+uo1YUG7LhyVeq1JTnIDA4PnYKr8FWElYLrLNGq R0I+4y3n/+XX7lfPUjqg+WJRu8KABR2IWh1PC5HY3o1bF6pdh4TlQRJLmoMrdGM3 ipAhNZV0D1p+3ieP -----END CERTIFICATE-----Generated at Sun Jan 25 22:01:19 2026 by rpki-client