This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513.mft File: 2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513.mft (raw, json) Hash identifier: LoZKbi/fHgQVgw2I7uXM1IEZ9Q0xMI3QG6SJA4mjCpI= Subject key identifier: 36:89:F4:0F:AD:1C:3B:C2:EB:81:40:32:C4:9F:0D:38:F1:DB:D5:A2 Authority key identifier: 2D:6D:8B:17:B6:3C:09:8C:A2:2D:8B:13:EA:1E:8D:DC:43:AA:F5:13 Certificate issuer: /CN=2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513 Certificate serial: 6EF4B751E835B012DB81DAF31D8D2D7EE6966422 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513.mft Manifest number: C1 Signing time: Sun 25 Jan 2026 15:42:15 +0000 Manifest this update: Sun 25 Jan 2026 15:37:15 +0000 Manifest next update: Mon 26 Jan 2026 18:59:15 +0000 Files and hashes: 1: 2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513.crl (hash: dpFKjWUJLQ8wd1nNhRarRHQOsbe7MC6F2DKE31UMvEQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513.crl rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513.mft rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513.cer rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:f4:b7:51:e8:35:b0:12:db:81:da:f3:1d:8d:2d:7e:e6:96:64:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513 Validity Not Before: Jan 25 15:37:15 2026 GMT Not After : Jan 26 18:59:15 2026 GMT Subject: CN=3689F40FAD1C3BC2EB814032C49F0D38F1DBD5A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:70:63:15:de:c0:98:0c:55:e9:a0:8e:f4:ce: 20:fb:c2:b7:bb:8a:b6:cc:8c:83:02:ce:58:b1:08: 45:21:3d:e3:fa:cd:61:af:b4:40:c9:30:15:e2:92: 8d:7d:25:9b:34:9d:81:93:b8:8a:4f:b4:ef:50:f2: 14:d3:7d:fc:63:cb:5a:60:84:d9:62:ef:52:36:ea: a5:fb:10:1e:12:85:4c:63:ee:1a:b4:54:0e:b8:10: da:2c:cd:49:05:8c:5e:65:62:37:14:d6:73:78:ce: 5e:6b:e0:40:eb:6d:9c:e2:99:db:b4:61:d6:66:65: 21:6e:0f:7e:e2:c5:1d:ec:a9:e8:d1:33:b4:69:1a: 17:ba:21:cc:60:d2:a5:14:27:0e:0a:05:58:4a:c7: 40:1e:d7:e6:04:c9:58:63:33:21:72:d6:f4:86:67: ce:be:1e:d3:45:93:34:46:27:df:f2:a0:d5:25:c7: 73:22:3c:67:27:8a:12:09:34:21:f4:27:36:05:68: 05:82:6d:5a:e7:84:55:cf:73:22:f6:77:14:69:a2: fa:5e:03:ec:4b:12:a7:c5:e4:cc:58:19:26:93:ed: e3:58:e9:13:95:cc:e8:2e:5b:1b:d8:8f:77:ce:1c: f8:b0:a2:fb:58:6d:d5:0b:a7:01:7a:a5:d0:73:d8: 08:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:89:F4:0F:AD:1C:3B:C2:EB:81:40:32:C4:9F:0D:38:F1:DB:D5:A2 X509v3 Authority Key Identifier: keyid:2D:6D:8B:17:B6:3C:09:8C:A2:2D:8B:13:EA:1E:8D:DC:43:AA:F5:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:92:82:1b:ed:73:da:bd:41:d5:3d:2d:64:51:ab:52:cd:54: ec:cc:c5:71:63:49:16:1f:c7:8d:19:3a:ad:66:40:94:93:73: 09:44:a6:ea:70:c5:80:c0:f8:4f:16:ee:9a:c9:7b:41:31:ee: 7f:2f:49:9d:66:9c:57:a0:89:17:e7:fd:6e:14:fd:04:bc:4d: a3:7b:c6:18:b4:eb:34:07:a5:68:44:fe:0e:15:8c:02:fd:d3: 9c:23:bd:fe:61:40:11:34:24:f4:52:fb:ba:76:6b:2e:7c:a4: 92:65:49:34:07:af:6a:9b:29:58:ea:ec:9b:4c:75:6f:dd:af: f4:f7:ad:bf:01:fb:c6:f8:ee:c0:76:5a:84:63:55:67:53:eb: dc:ef:a3:b7:7e:2d:85:41:2a:e3:6f:3b:7f:14:ad:b2:f9:93: 41:ac:64:c5:ed:81:5e:90:92:b5:d5:8d:d0:1d:b1:c2:26:37: ba:07:32:20:3c:e4:da:ce:34:17:87:af:1b:4c:37:25:ee:f8: a0:6a:d1:74:55:c4:6e:0a:05:41:a2:75:b9:1f:eb:4b:af:56: 66:13:79:86:98:4a:5f:85:14:0e:e3:42:c0:0c:f8:6b:b8:b4: 83:de:c8:89:f6:f8:57:63:80:8a:e3:26:ee:a3:92:06:f6:0a: 79:36:70:c8 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUbvS3Ueg1sBLbgdrzHY0tfuaWZCIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQ2RDhCMTdCNjNDMDk4Q0EyMkQ4QjEzRUExRThEREM0 M0FBRjUxMzAeFw0yNjAxMjUxNTM3MTVaFw0yNjAxMjYxODU5MTVaMDMxMTAvBgNV BAMTKDM2ODlGNDBGQUQxQzNCQzJFQjgxNDAzMkM0OUYwRDM4RjFEQkQ1QTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxcGMV3sCYDFXpoI70ziD7wre7 irbMjIMCzlixCEUhPeP6zWGvtEDJMBXiko19JZs0nYGTuIpPtO9Q8hTTffxjy1pg hNli71I26qX7EB4ShUxj7hq0VA64ENoszUkFjF5lYjcU1nN4zl5r4EDrbZzimdu0 YdZmZSFuD37ixR3sqejRM7RpGhe6Icxg0qUUJw4KBVhKx0Ae1+YEyVhjMyFy1vSG Z86+HtNFkzRGJ9/yoNUlx3MiPGcnihIJNCH0JzYFaAWCbVrnhFXPcyL2dxRpovpe A+xLEqfF5MxYGSaT7eNY6ROVzOguWxvYj3fOHPiwovtYbdULpwF6pdBz2Ai/AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUNon0D60cO8LrgUAyxJ8NOPHb1aIwHwYDVR0j BBgwFoAULW2LF7Y8CYyiLYsT6h6N3EOq9RMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjhhYmFiYmItZjA0OC00ZGUxLTkyMDYtOGQ0MGYwNzE4 MDhiLzYvMkQ2RDhCMTdCNjNDMDk4Q0EyMkQ4QjEzRUExRThEREM0M0FBRjUxMy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yYWY3M2E5Yy0yMDU4LTQz YmItOWFjNi01YWI0MmRmYmY0MDkvNC8yRDZEOEIxN0I2M0MwOThDQTIyRDhCMTNF QTFFOEREQzQzQUFGNTEzLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzY4YWJhYmJiLWYwNDgtNGRlMS05MjA2LThkNDBmMDcxODA4Yi82LzJENkQ4QjE3 QjYzQzA5OENBMjJEOEIxM0VBMUU4RERDNDNBQUY1MTMubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCYkoIb 7XPavUHVPS1kUatSzVTszMVxY0kWH8eNGTqtZkCUk3MJRKbqcMWAwPhPFu6ayXtB Me5/L0mdZpxXoIkX5/1uFP0EvE2je8YYtOs0B6VoRP4OFYwC/dOcI73+YUARNCT0 Uvu6dmsufKSSZUk0B69qmylY6uybTHVv3a/0962/AfvG+O7AdlqEY1VnU+vc76O3 fi2FQSrjbzt/FK2y+ZNBrGTF7YFekJK11Y3QHbHCJje6BzIgPOTazjQXh68bTDcl 7vigatF0VcRuCgVBonW5H+tLr1ZmE3mGmEpfhRQO40LADPhruLSD3siJ9vhXY4CK 4ybuo5IG9gp5NnDI -----END CERTIFICATE-----Generated at Sun Jan 25 21:00:56 2026 by rpki-client