This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/0BC6D225F0CE3E607712A9A98C4561912F3432B6.mft File: 0BC6D225F0CE3E607712A9A98C4561912F3432B6.mft (raw, json) Hash identifier: aLbpmLSyf5KC/llcLlrp2wl3ahci85TI2iy59uvlC8w= Subject key identifier: D2:89:FB:DD:2C:92:18:30:AF:C2:93:5E:C0:CD:AE:A4:17:C4:90:38 Authority key identifier: 0B:C6:D2:25:F0:CE:3E:60:77:12:A9:A9:8C:45:61:91:2F:34:32:B6 Certificate issuer: /CN=0BC6D225F0CE3E607712A9A98C4561912F3432B6 Certificate serial: 23F4F7D785E22EB5EA1BFB70F5A60FC1BDB4E325 Authority info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/0BC6D225F0CE3E607712A9A98C4561912F3432B6.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/0BC6D225F0CE3E607712A9A98C4561912F3432B6.mft Manifest number: E2 Signing time: Sat 24 Jan 2026 23:49:27 +0000 Manifest this update: Sat 24 Jan 2026 23:44:27 +0000 Manifest next update: Mon 26 Jan 2026 02:30:27 +0000 Files and hashes: 1: 326130623a346530373a316330323a3a2f34382d3438203d3e20323133383632.roa (hash: /X68JagauxWyaFcSb3BbJbw5DWqXyP6Pe5X7avcQNQs=) 2: 0BC6D225F0CE3E607712A9A98C4561912F3432B6.crl (hash: dil7ZN3Ina/0aO3cFZE3cgPG8UArluRxpaXs5E1uQVA=) 3: 326130623a346530373a316330313a3a2f34382d3438203d3e20313531373034.roa (hash: VQpA5o0Pq6sWKS236BEYQWIKLgBdNGi2BEIwMERcePY=) 4: 326130623a346530373a316330303a3a2f34382d3438203d3e20313531373034.roa (hash: GbSyn/a7s2Tct/cl+IXObaOaKJfLlKE/P5lfI5qam+k=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/0BC6D225F0CE3E607712A9A98C4561912F3432B6.crl rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/0BC6D225F0CE3E607712A9A98C4561912F3432B6.mft rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/0BC6D225F0CE3E607712A9A98C4561912F3432B6.cer rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 01:58:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:f4:f7:d7:85:e2:2e:b5:ea:1b:fb:70:f5:a6:0f:c1:bd:b4:e3:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0BC6D225F0CE3E607712A9A98C4561912F3432B6 Validity Not Before: Jan 24 23:44:27 2026 GMT Not After : Jan 26 02:30:27 2026 GMT Subject: CN=D289FBDD2C921830AFC2935EC0CDAEA417C49038 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:f1:3d:a9:f6:8e:24:f7:cd:e5:8a:cb:51:d4: 15:47:26:19:10:a4:5b:71:7f:8a:ca:c1:8b:a2:fe: b6:41:2d:41:32:0a:a0:c6:fd:0f:09:4a:91:d2:18: 9d:1b:37:a4:b3:51:eb:f4:5a:5e:f9:18:8b:14:2c: d5:a2:a2:34:7b:7d:54:c6:6f:8e:5e:4b:a6:15:88: 91:7f:2e:56:70:83:82:9c:2c:db:09:56:f8:41:0a: 81:ac:11:71:41:a5:0a:34:04:26:f1:87:fa:f3:56: 4b:a4:06:31:fb:fc:31:00:cc:39:03:a8:e7:71:c4: 2e:d7:f8:69:be:cf:aa:3e:d4:91:ca:a6:4d:a4:77: 48:9c:bb:92:9d:36:05:6c:8d:6b:ab:49:e5:95:65: 5d:12:bc:d1:a8:ca:a3:00:a9:56:c7:4b:57:00:0c: bd:52:ad:22:6a:6e:33:ef:93:f4:10:ba:3a:d9:fc: 50:a5:28:95:4e:c5:a9:05:18:dd:b4:d2:17:a3:42: bd:ff:71:3b:09:93:76:f2:f5:e7:d6:35:12:6e:d8: 32:95:bd:50:c3:95:a4:05:37:49:8f:df:ba:c6:c2: ae:70:f9:4d:5d:1b:b0:ad:0f:0d:91:5e:47:ee:51: 87:9b:74:92:02:a5:ef:80:27:ac:97:6c:21:12:71: 5b:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:89:FB:DD:2C:92:18:30:AF:C2:93:5E:C0:CD:AE:A4:17:C4:90:38 X509v3 Authority Key Identifier: keyid:0B:C6:D2:25:F0:CE:3E:60:77:12:A9:A9:8C:45:61:91:2F:34:32:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/0BC6D225F0CE3E607712A9A98C4561912F3432B6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/0BC6D225F0CE3E607712A9A98C4561912F3432B6.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/0BC6D225F0CE3E607712A9A98C4561912F3432B6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:91:9a:39:50:55:5b:3a:c7:9d:93:1f:be:09:dc:3c:90:9c: c1:65:02:28:06:44:74:90:11:c8:68:db:3b:04:c2:ed:a6:ae: 7a:66:58:04:d1:70:dd:23:36:3c:83:c4:44:2e:cc:58:fe:5b: a6:0f:27:7a:53:da:6b:04:f9:2a:e3:75:5c:24:c1:50:07:67: c2:97:a9:c5:1f:87:6c:bb:19:0c:98:02:39:f1:58:27:27:ef: e4:a8:e0:6e:6b:8e:46:97:1f:22:34:f7:ac:06:05:25:20:9a: a7:01:17:2d:11:29:ae:67:f9:e0:57:2b:17:a8:3e:88:ca:39: 6d:46:61:9e:5b:83:ae:d3:d9:96:aa:5e:47:47:cb:1e:1e:60: ec:25:69:d4:d0:61:35:b3:cb:07:a3:e5:01:c5:9e:b9:0a:9c: 53:1b:04:48:c9:bf:94:52:76:75:21:93:18:08:cb:52:2c:01: e7:01:7c:8d:f0:c4:0c:18:dc:d6:bf:b6:c6:fe:0d:d1:a1:c2: 6e:ff:87:34:78:2e:5e:bf:db:5f:a7:52:03:d1:21:76:d1:42: 06:70:4d:1b:0a:20:fa:9c:30:28:10:30:5c:54:c3:bb:ef:40: a2:84:30:7c:c3:bc:a1:6d:56:8e:16:7e:41:48:a9:e9:d9:11: 84:8f:ab:2e -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUI/T314XiLrXqG/tw9aYPwb204yUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEJDNkQyMjVGMENFM0U2MDc3MTJBOUE5OEM0NTYxOTEy RjM0MzJCNjAeFw0yNjAxMjQyMzQ0MjdaFw0yNjAxMjYwMjMwMjdaMDMxMTAvBgNV BAMTKEQyODlGQkREMkM5MjE4MzBBRkMyOTM1RUMwQ0RBRUE0MTdDNDkwMzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz8T2p9o4k983listR1BVHJhkQ pFtxf4rKwYui/rZBLUEyCqDG/Q8JSpHSGJ0bN6SzUev0Wl75GIsULNWiojR7fVTG b45eS6YViJF/LlZwg4KcLNsJVvhBCoGsEXFBpQo0BCbxh/rzVkukBjH7/DEAzDkD qOdxxC7X+Gm+z6o+1JHKpk2kd0icu5KdNgVsjWurSeWVZV0SvNGoyqMAqVbHS1cA DL1SrSJqbjPvk/QQujrZ/FClKJVOxakFGN200hejQr3/cTsJk3by9efWNRJu2DKV vVDDlaQFN0mP37rGwq5w+U1dG7CtDw2RXkfuUYebdJICpe+AJ6yXbCEScVv5AgMB AAGjggJ3MIICczAdBgNVHQ4EFgQU0on73SySGDCvwpNewM2upBfEkDgwHwYDVR0j BBgwFoAUC8bSJfDOPmB3EqmpjEVhkS80MrYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTMxZTk3MjAtMGI2Mi00M2E4LThlMWYtMjMwNjg0ZWFm OWFmLzMvMEJDNkQyMjVGMENFM0U2MDc3MTJBOUE5OEM0NTYxOTEyRjM0MzJCNi5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQz MDUzZjgyMGY1LzEvMEJDNkQyMjVGMENFM0U2MDc3MTJBOUE5OEM0NTYxOTEyRjM0 MzJCNi5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS81MzFlOTcyMC0w YjYyLTQzYTgtOGUxZi0yMzA2ODRlYWY5YWYvMy8wQkM2RDIyNUYwQ0UzRTYwNzcx MkE5QTk4QzQ1NjE5MTJGMzQzMkI2Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPZGaOVBVWzrHnZMfvgnc PJCcwWUCKAZEdJARyGjbOwTC7aauemZYBNFw3SM2PIPERC7MWP5bpg8nelPaawT5 KuN1XCTBUAdnwpepxR+HbLsZDJgCOfFYJyfv5KjgbmuORpcfIjT3rAYFJSCapwEX LREprmf54FcrF6g+iMo5bUZhnluDrtPZlqpeR0fLHh5g7CVp1NBhNbPLB6PlAcWe uQqcUxsESMm/lFJ2dSGTGAjLUiwB5wF8jfDEDBjc1r+2xv4N0aHCbv+HNHguXr/b X6dSA9EhdtFCBnBNGwog+pwwKBAwXFTDu+9AooQwfMO8oW1WjhZ+QUip6dkRhI+r Lg== -----END CERTIFICATE-----Generated at Sun Jan 25 14:23:08 2026 by rpki-client