This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/1/4EC249B7AF3EE69C5BBDF3C7F4CBEE1EAAEC494F.mft File: 4EC249B7AF3EE69C5BBDF3C7F4CBEE1EAAEC494F.mft (raw, json) Hash identifier: c/KjZFHqFmofJ0oIRKCJ9cjjtG0IsBgGIXYv1bPKPDM= Subject key identifier: F4:AD:7B:F6:B1:3C:3F:E0:81:40:23:96:04:8C:C0:69:38:AA:FA:85 Authority key identifier: 4E:C2:49:B7:AF:3E:E6:9C:5B:BD:F3:C7:F4:CB:EE:1E:AA:EC:49:4F Certificate issuer: /CN=4ec249b7af3ee69c5bbdf3c7f4cbee1eaaec494f Certificate serial: 0C5D6BCC46A24D02D446251BB5FDD95C024658D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TsJJt68-5pxbvfPH9MvuHqrsSU8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/1/4EC249B7AF3EE69C5BBDF3C7F4CBEE1EAAEC494F.mft Manifest number: 32 Signing time: Sun 25 Jan 2026 03:43:28 +0000 Manifest this update: Sun 25 Jan 2026 03:38:28 +0000 Manifest next update: Mon 26 Jan 2026 06:51:28 +0000 Files and hashes: 1: 4EC249B7AF3EE69C5BBDF3C7F4CBEE1EAAEC494F.crl (hash: ewNLAKcRKdJRN6/+fzVTuXD7cy+xaHTuUaVZT8RBRwY=) 2: AS216299.asa (hash: X6AXlCP9HIyHTXbg3649O81EGxBI70CVhawZpaYBepA=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/1/4EC249B7AF3EE69C5BBDF3C7F4CBEE1EAAEC494F.crl rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/1/4EC249B7AF3EE69C5BBDF3C7F4CBEE1EAAEC494F.mft rsync://rpki.ripe.net/repository/DEFAULT/TsJJt68-5pxbvfPH9MvuHqrsSU8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:51:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:5d:6b:cc:46:a2:4d:02:d4:46:25:1b:b5:fd:d9:5c:02:46:58:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ec249b7af3ee69c5bbdf3c7f4cbee1eaaec494f Validity Not Before: Jan 25 03:38:28 2026 GMT Not After : Jan 26 06:51:28 2026 GMT Subject: CN=F4AD7BF6B13C3FE081402396048CC06938AAFA85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:00:f2:88:5e:2e:e9:c8:05:b5:b4:57:05:36: bd:82:91:cf:d0:cd:6e:2f:e7:c3:dc:9f:f5:44:80: 41:d8:71:d4:95:90:da:92:a7:8d:ea:8a:e8:0b:ee: 7e:82:e3:f1:b8:31:d1:b6:aa:20:c6:b6:c0:74:29: 58:93:0c:80:e7:9b:91:34:a9:fc:d3:0d:17:63:a6: d7:e6:96:c8:45:c2:7a:79:f7:7b:08:47:66:76:ad: ae:24:fe:ff:c3:62:17:19:77:dd:1f:84:0b:5d:9a: 6b:38:8b:8a:6d:fd:62:2b:0c:14:97:4a:ff:c3:07: ad:01:f7:55:be:51:55:78:28:e0:3c:18:ad:c0:53: 24:37:e5:84:18:2f:4e:67:93:c1:d8:78:b7:de:72: c7:25:9a:c8:73:52:12:f5:04:4a:09:3c:7d:b6:6a: 42:55:34:7f:9e:b8:7a:ba:e0:f6:67:1c:b9:48:cd: 33:4e:62:20:ed:77:ed:fe:93:85:d2:4b:a8:f6:0b: 47:9d:04:eb:34:1c:6c:66:43:8a:cf:2f:08:f1:a4: 8b:54:4b:72:bf:27:30:80:7b:da:fe:62:12:ca:45: 58:13:0a:31:d7:d4:b8:c4:08:44:95:ab:82:10:b2: 73:1f:83:6f:8a:6c:6a:05:41:0d:a2:fd:30:ac:6c: 7a:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:AD:7B:F6:B1:3C:3F:E0:81:40:23:96:04:8C:C0:69:38:AA:FA:85 X509v3 Authority Key Identifier: keyid:4E:C2:49:B7:AF:3E:E6:9C:5B:BD:F3:C7:F4:CB:EE:1E:AA:EC:49:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/1/4EC249B7AF3EE69C5BBDF3C7F4CBEE1EAAEC494F.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TsJJt68-5pxbvfPH9MvuHqrsSU8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/1/4EC249B7AF3EE69C5BBDF3C7F4CBEE1EAAEC494F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:8f:41:fd:d2:9d:8c:c1:54:33:27:60:e7:6a:97:73:f7:96: 02:55:8f:4b:16:d0:3e:1a:2f:84:8f:37:83:70:47:82:ba:ef: 5d:c6:d3:b2:37:b8:b0:ff:ab:28:89:45:87:f8:ac:59:37:0c: 3d:f9:d7:9c:e7:34:38:05:0f:13:18:07:d7:e4:94:ab:a1:03: b7:f3:e5:9b:06:66:82:bb:27:da:0a:8f:8e:88:13:8f:a7:b7: 89:33:98:a5:7c:e5:f1:91:29:b8:68:9d:70:ee:b7:99:ba:5c: a1:f2:62:b4:02:ca:2c:67:7a:50:c1:b7:f3:d1:26:a6:a4:f1: 8f:d2:10:b2:cd:b4:bb:88:8a:c0:27:ef:85:80:aa:c4:1e:d9: 69:da:97:5e:f3:17:7e:42:0f:dd:5f:62:ba:c6:92:b9:97:0a: bf:65:6b:b1:c9:8d:e4:b9:31:8a:85:33:b0:02:02:f0:56:a8: 90:55:82:67:13:37:48:4d:5c:c9:87:ab:3d:54:08:0b:90:04: 44:fd:f9:9f:2f:da:a2:68:36:e1:fe:21:fd:ac:1a:90:4b:0f: ad:58:e0:65:36:2c:08:2d:dd:da:83:95:1b:ac:c2:73:df:52: 6f:78:94:d7:88:c9:42:da:9b:2b:d7:07:26:bb:5d:ee:48:ef: 6f:73:2e:7d -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUDF1rzEaiTQLURiUbtf3ZXAJGWNIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGVjMjQ5YjdhZjNlZTY5YzViYmRmM2M3ZjRjYmVlMWVh YWVjNDk0ZjAeFw0yNjAxMjUwMzM4MjhaFw0yNjAxMjYwNjUxMjhaMDMxMTAvBgNV BAMTKEY0QUQ3QkY2QjEzQzNGRTA4MTQwMjM5NjA0OENDMDY5MzhBQUZBODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1APKIXi7pyAW1tFcFNr2Ckc/Q zW4v58Pcn/VEgEHYcdSVkNqSp43qiugL7n6C4/G4MdG2qiDGtsB0KViTDIDnm5E0 qfzTDRdjptfmlshFwnp593sIR2Z2ra4k/v/DYhcZd90fhAtdmms4i4pt/WIrDBSX Sv/DB60B91W+UVV4KOA8GK3AUyQ35YQYL05nk8HYeLfecsclmshzUhL1BEoJPH22 akJVNH+euHq64PZnHLlIzTNOYiDtd+3+k4XSS6j2C0edBOs0HGxmQ4rPLwjxpItU S3K/JzCAe9r+YhLKRVgTCjHX1LjECESVq4IQsnMfg2+KbGoFQQ2i/TCsbHrhAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU9K179rE8P+CBQCOWBIzAaTiq+oUwHwYDVR0j BBgwFoAUTsJJt68+5pxbvfPH9MvuHqrsSU8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTJiODQxNTYtOTU5Ny00NGI0LWJkMjQtNjVkZTJjMzU1 ZWZjLzEvNEVDMjQ5QjdBRjNFRTY5QzVCQkRGM0M3RjRDQkVFMUVBQUVDNDk0Ri5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1RzSkp0NjgtNXB4YnZmUEg5TXZ1SHFy c1NVOC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS81MmI4NDE1Ni05 NTk3LTQ0YjQtYmQyNC02NWRlMmMzNTVlZmMvMS80RUMyNDlCN0FGM0VFNjlDNUJC REYzQzdGNENCRUUxRUFBRUM0OTRGLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiY9B/dKdjMFUMydg52qX c/eWAlWPSxbQPhovhI83g3BHgrrvXcbTsje4sP+rKIlFh/isWTcMPfnXnOc0OAUP ExgH1+SUq6EDt/PlmwZmgrsn2gqPjogTj6e3iTOYpXzl8ZEpuGidcO63mbpcofJi tALKLGd6UMG389EmpqTxj9IQss20u4iKwCfvhYCqxB7ZadqXXvMXfkIP3V9iusaS uZcKv2VrscmN5LkxioUzsAIC8FaokFWCZxM3SE1cyYerPVQIC5AERP35ny/aomg2 4f4h/awakEsPrVjgZTYsCC3d2oOVG6zCc99Sb3iU14jJQtqbK9cHJrtd7kjvb3Mu fQ== -----END CERTIFICATE-----Generated at Sun Jan 25 19:35:51 2026 by rpki-client