This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.mft File: 25827D84056B8444CC2A7842759035354B8416BC.mft (raw, json) Hash identifier: fzeOQ50+oDq5/1UMMDQyJfUgYfBylh4Hu8z3rtIuFbM= Subject key identifier: 39:BC:57:0B:45:CB:90:8A:F1:24:36:38:B9:37:3D:66:9B:A7:40:89 Authority key identifier: 25:82:7D:84:05:6B:84:44:CC:2A:78:42:75:90:35:35:4B:84:16:BC Certificate issuer: /CN=25827d84056b8444cc2a7842759035354b8416bc Certificate serial: 65867CB381F40CA6329E9DF3CE015B1F61C32CC8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JYJ9hAVrhETMKnhCdZA1NUuEFrw.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.mft Manifest number: 031F Signing time: Sun 25 Jan 2026 14:02:38 +0000 Manifest this update: Sun 25 Jan 2026 13:57:38 +0000 Manifest next update: Mon 26 Jan 2026 15:03:38 +0000 Files and hashes: 1: AS207487.asa (hash: Ha+forEe+xS82UGSV4B7j+UWBj+/I05XFS+Ojajx3y4=) 2: 326131343a313463303a313a3a2f34382d3438203d3e20323037343837.roa (hash: nCuZ5ADJB2e8lGpTQQDYT3/JtyMvU82Myd2okt8I23s=) 3: 58E92F2C3859C2D0EF322A871688CB22928E2F3E.cer (hash: gYiT3SS0bbmQQSp3p/LPeJzfbx3ujd90DskZO9GZ0PQ=) 4: 3138352e3133342e3139312e302f32342d3234203d3e20323037343837.roa (hash: wMCy3m1h75GfC2ATV5bYCJD7S6jjiI8Si5ikYie+OUI=) 5: 326131343a313463303a3a2f34382d3438203d3e20323037343837.roa (hash: MAksePoJ+rnc08XyHZPcbQHx/BhF1iv7lCiKD0GFWxw=) 6: 326131343a313463303a323a3a2f34382d3438203d3e20323037343837.roa (hash: lVUTv9ePxFs76NYMpRch/wm8DFit0p7cLkwe+1lgWxI=) 7: AS18607.asa (hash: ol8lct09PZ1pqBOGDq6LTNV0i5NYMmiHGhSWuOi+FwQ=) 8: 25827D84056B8444CC2A7842759035354B8416BC.crl (hash: NPCn0A6UpJVpwLlYjNBdqZQFf5NTdbw7CwuyYsYEVOY=) 9: 326131343a313463313a3230303a3a2f34302d3438203d3e203138363037.roa (hash: eBGi76bk+i5KfnHGqq9jtzpn0gh813x0+GlA90AUkZI=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.crl rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.mft rsync://rpki.ripe.net/repository/DEFAULT/JYJ9hAVrhETMKnhCdZA1NUuEFrw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 15:03:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:86:7c:b3:81:f4:0c:a6:32:9e:9d:f3:ce:01:5b:1f:61:c3:2c:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25827d84056b8444cc2a7842759035354b8416bc Validity Not Before: Jan 25 13:57:38 2026 GMT Not After : Jan 26 15:03:38 2026 GMT Subject: CN=39BC570B45CB908AF1243638B9373D669BA74089 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:b2:1f:fa:99:6e:b9:24:e6:47:0a:ba:8b:34: 80:68:6c:a6:8c:29:4f:73:15:1e:7f:9d:b8:95:3d: 5d:ea:8c:76:26:23:a8:4b:eb:46:21:33:0f:63:20: 39:6e:4c:90:f5:a3:14:3d:79:32:fd:c9:c7:8c:4d: 75:1a:4f:33:7c:bb:98:85:72:46:b2:10:6f:61:9b: 1f:bb:d1:12:92:14:e4:76:34:46:cc:c0:97:52:5d: 78:35:73:1a:29:52:b5:29:a7:f0:aa:c4:02:6c:5d: cf:32:b2:12:1c:1b:d3:70:cc:7b:25:f0:f9:f4:2a: d1:8d:f7:e9:54:7e:64:66:f2:cd:28:b9:05:11:0a: b2:9a:8c:71:8d:74:de:38:e9:38:47:02:04:97:af: 89:4c:60:6b:f6:35:8d:87:9a:9e:9c:58:00:ec:6b: 31:5b:1a:7d:d5:cf:36:44:be:73:2f:84:f8:ef:8a: 73:a8:3e:e8:5f:55:41:84:de:5c:be:0e:47:81:e0: d9:b2:09:52:40:2a:5c:4d:8d:da:d6:9b:41:7f:fa: 42:8a:d2:fc:62:58:60:78:48:16:eb:fd:ff:36:30: 1f:9e:57:6c:3a:cf:73:b3:8e:bc:1f:4c:76:98:3b: a3:22:a4:88:24:cd:97:7a:ae:bd:9e:b1:db:b6:9d: d5:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:BC:57:0B:45:CB:90:8A:F1:24:36:38:B9:37:3D:66:9B:A7:40:89 X509v3 Authority Key Identifier: keyid:25:82:7D:84:05:6B:84:44:CC:2A:78:42:75:90:35:35:4B:84:16:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JYJ9hAVrhETMKnhCdZA1NUuEFrw.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:f7:fc:42:69:cd:01:cc:f3:fe:cb:f5:44:c1:8c:c6:92:e8: 3d:18:b5:26:e6:f6:26:9d:86:0b:a5:4e:0b:04:cf:e5:2a:fa: 8a:dd:ab:a8:e4:22:f5:cd:e8:47:c6:8e:86:48:91:2f:90:da: e1:11:05:15:59:87:44:aa:05:46:8a:9d:06:d9:ba:61:40:3b: cc:62:6c:7d:29:aa:a3:90:c0:75:ab:f5:3e:f1:7a:28:63:2d: 4a:e7:14:fb:5e:d4:de:7f:f5:2e:2c:9f:02:09:d3:fd:e9:75: ec:4c:0a:ce:f9:e9:07:cb:88:26:fc:b0:2f:1a:b0:9f:e6:00: 29:03:c8:f3:85:0f:6d:f3:05:33:d9:7f:08:a1:b6:b4:b0:7c: 90:46:fa:a8:5a:ff:a2:13:99:2f:22:aa:e9:11:1e:93:76:96: 8e:b3:8d:ba:8a:1b:25:66:60:32:d0:32:2b:0f:cb:a3:a2:69: 1d:38:ca:da:c6:88:a5:a1:0c:5d:e2:dd:4a:eb:22:94:8d:22: 2f:52:cf:69:65:c3:b8:9c:3d:76:7d:2e:a8:88:a4:fc:87:c1: 7b:e7:52:f5:5e:58:09:c3:82:77:31:21:57:f0:25:18:46:16: 2d:d4:dd:04:d8:f1:7f:c8:86:aa:68:ac:58:f5:e1:02:4c:cb: bf:ae:3f:1c -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUZYZ8s4H0DKYynp3zzgFbH2HDLMgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjU4MjdkODQwNTZiODQ0NGNjMmE3ODQyNzU5MDM1MzU0 Yjg0MTZiYzAeFw0yNjAxMjUxMzU3MzhaFw0yNjAxMjYxNTAzMzhaMDMxMTAvBgNV BAMTKDM5QkM1NzBCNDVDQjkwOEFGMTI0MzYzOEI5MzczRDY2OUJBNzQwODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCish/6mW65JOZHCrqLNIBobKaM KU9zFR5/nbiVPV3qjHYmI6hL60YhMw9jIDluTJD1oxQ9eTL9yceMTXUaTzN8u5iF ckayEG9hmx+70RKSFOR2NEbMwJdSXXg1cxopUrUpp/CqxAJsXc8yshIcG9NwzHsl 8Pn0KtGN9+lUfmRm8s0ouQURCrKajHGNdN446ThHAgSXr4lMYGv2NY2Hmp6cWADs azFbGn3VzzZEvnMvhPjvinOoPuhfVUGE3ly+DkeB4NmyCVJAKlxNjdrWm0F/+kKK 0vxiWGB4SBbr/f82MB+eV2w6z3OzjrwfTHaYO6MipIgkzZd6rr2esdu2ndU/AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUObxXC0XLkIrxJDY4uTc9ZpunQIkwHwYDVR0j BBgwFoAUJYJ9hAVrhETMKnhCdZA1NUuEFrwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjliYmZkY2YtMzVjZC00NTI0LThmZmEtMzAwNWIwYjY5 YTI5LzAvMjU4MjdEODQwNTZCODQ0NENDMkE3ODQyNzU5MDM1MzU0Qjg0MTZCQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0pZSjloQVZyaEVUTUtuaENkWkExTlV1 RUZydy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82OWJiZmRjZi0z NWNkLTQ1MjQtOGZmYS0zMDA1YjBiNjlhMjkvMC8yNTgyN0Q4NDA1NkI4NDQ0Q0My QTc4NDI3NTkwMzUzNTRCODQxNkJDLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWPf8QmnNAczz/sv1RMGM xpLoPRi1Jub2Jp2GC6VOCwTP5Sr6it2rqOQi9c3oR8aOhkiRL5Da4REFFVmHRKoF RoqdBtm6YUA7zGJsfSmqo5DAdav1PvF6KGMtSucU+17U3n/1LiyfAgnT/el17EwK zvnpB8uIJvywLxqwn+YAKQPI84UPbfMFM9l/CKG2tLB8kEb6qFr/ohOZLyKq6REe k3aWjrONuoobJWZgMtAyKw/Lo6JpHTjK2saIpaEMXeLdSusilI0iL1LPaWXDuJw9 dn0uqIik/IfBe+dS9V5YCcOCdzEhV/AlGEYWLdTdBNjxf8iGqmisWPXhAkzLv64/ HA== -----END CERTIFICATE-----Generated at Mon Jan 26 04:00:53 2026 by rpki-client