This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/5/C284E54726A876081FA2857EF4AF5B1A78D096B4.mft File: C284E54726A876081FA2857EF4AF5B1A78D096B4.mft (raw, json) Hash identifier: zBKEwlSOYWA7hN3Wkko1xhXA3pS1eu5grRm5qOP6d6c= Subject key identifier: 98:4A:5D:64:26:29:8A:71:C0:BB:D5:B5:33:68:F9:23:79:37:95:8E Authority key identifier: C2:84:E5:47:26:A8:76:08:1F:A2:85:7E:F4:AF:5B:1A:78:D0:96:B4 Certificate issuer: /CN=C284E54726A876081FA2857EF4AF5B1A78D096B4 Certificate serial: 166E7CBD622C555DB2DB395759A0D60FB62A5721 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/C284E54726A876081FA2857EF4AF5B1A78D096B4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/5/C284E54726A876081FA2857EF4AF5B1A78D096B4.mft Manifest number: 011A Signing time: Sun 25 Jan 2026 14:08:47 +0000 Manifest this update: Sun 25 Jan 2026 14:03:47 +0000 Manifest next update: Mon 26 Jan 2026 18:01:47 +0000 Files and hashes: 1: C284E54726A876081FA2857EF4AF5B1A78D096B4.crl (hash: wJLrMlud2wrrWHVWzFxT/D7Vn9LvoPMUfpmq39S1+Kw=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/5/C284E54726A876081FA2857EF4AF5B1A78D096B4.crl rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/5/C284E54726A876081FA2857EF4AF5B1A78D096B4.mft rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/C284E54726A876081FA2857EF4AF5B1A78D096B4.cer rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 14:25:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:6e:7c:bd:62:2c:55:5d:b2:db:39:57:59:a0:d6:0f:b6:2a:57:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C284E54726A876081FA2857EF4AF5B1A78D096B4 Validity Not Before: Jan 25 14:03:47 2026 GMT Not After : Jan 26 18:01:47 2026 GMT Subject: CN=984A5D6426298A71C0BBD5B53368F9237937958E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:91:2c:e7:24:95:fa:c3:4b:b9:c0:4c:b3:1c: 7d:26:72:89:91:e5:29:ad:43:97:00:71:12:de:51: fc:e5:eb:a3:02:5c:72:05:da:9f:e4:25:a2:54:c8: 90:94:ac:ab:b3:d6:52:f4:9a:be:59:69:04:6b:c5: fe:15:e8:76:71:22:bf:0c:63:b2:58:5a:e5:0f:ec: 0b:0a:50:56:fc:9c:77:ab:06:d8:6e:75:c4:92:39: a2:71:37:d2:8c:c7:f4:d4:92:32:aa:51:67:a1:13: b5:7e:40:01:c5:de:22:18:8e:28:02:10:ca:38:09: 15:04:1a:0c:5d:20:37:b5:f6:7c:d2:ae:0f:a5:00: 70:3d:f4:6e:37:69:2e:6c:e8:9b:d2:af:7c:e8:c6: f6:5f:25:22:27:a0:18:e0:48:b5:2b:77:05:ce:4c: cb:bc:7f:7c:6e:2a:39:a0:c4:2c:23:69:81:6f:af: 2b:d6:88:eb:90:5d:28:3e:20:fb:bb:4c:01:cd:e5: 4a:ee:71:3a:71:a6:26:93:a6:8d:59:b1:99:f0:1c: e2:63:96:08:b6:23:ef:dc:66:f3:1b:4b:6e:18:e2: 03:ef:fa:53:35:33:41:56:b9:3f:27:b1:4e:01:4d: 83:e2:34:02:92:4a:c0:cb:70:30:f6:a9:38:32:69: 87:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:4A:5D:64:26:29:8A:71:C0:BB:D5:B5:33:68:F9:23:79:37:95:8E X509v3 Authority Key Identifier: keyid:C2:84:E5:47:26:A8:76:08:1F:A2:85:7E:F4:AF:5B:1A:78:D0:96:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/5/C284E54726A876081FA2857EF4AF5B1A78D096B4.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/C284E54726A876081FA2857EF4AF5B1A78D096B4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/5/C284E54726A876081FA2857EF4AF5B1A78D096B4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:6e:b2:ea:e1:16:2f:59:a8:ef:41:c5:60:17:ec:00:46:97: 92:3d:72:8a:e2:ff:af:27:69:18:9b:62:04:7f:e5:fa:89:50: 4e:9c:58:09:76:2f:95:a0:5c:3b:c0:4c:5d:f4:6c:9d:4c:8c: 20:d2:d3:18:aa:f5:92:40:f2:2e:f7:07:e3:ac:38:f4:d5:6b: 27:f8:b2:1b:c1:98:f3:53:f1:63:83:e3:e3:f1:52:e4:70:ce: 93:b2:9c:2d:cc:0d:9b:56:b5:8b:74:d2:d8:28:61:6e:32:55: f6:6c:2f:c2:b9:f1:4a:49:75:ae:aa:2c:90:1e:cf:b0:33:fd: 61:33:5d:49:e4:06:e3:ce:47:a9:ae:f2:a1:3d:91:08:70:e8: 66:a5:a4:22:10:be:13:31:14:90:f7:34:eb:a9:45:f2:d7:94: cc:c1:c6:46:69:4a:1e:f3:d6:4d:f4:4e:c8:60:2d:f8:5a:8a: 44:08:53:99:b8:8e:79:ab:e1:6e:bf:ad:dc:f2:73:e3:c4:8f: 49:a2:cc:2a:15:69:4d:94:ce:63:a4:be:90:7a:a0:54:ed:c1: c0:42:ec:86:40:1f:a4:fe:d6:97:33:73:de:0c:17:1c:de:34: 9c:6e:79:e7:0a:8f:58:93:fc:ee:8a:06:81:4f:ea:6b:87:45: 98:2a:87:73 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUFm58vWIsVV2y2zlXWaDWD7YqVyEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzI4NEU1NDcyNkE4NzYwODFGQTI4NTdFRjRBRjVCMUE3 OEQwOTZCNDAeFw0yNjAxMjUxNDAzNDdaFw0yNjAxMjYxODAxNDdaMDMxMTAvBgNV BAMTKDk4NEE1RDY0MjYyOThBNzFDMEJCRDVCNTMzNjhGOTIzNzkzNzk1OEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtkSznJJX6w0u5wEyzHH0mcomR 5SmtQ5cAcRLeUfzl66MCXHIF2p/kJaJUyJCUrKuz1lL0mr5ZaQRrxf4V6HZxIr8M Y7JYWuUP7AsKUFb8nHerBthudcSSOaJxN9KMx/TUkjKqUWehE7V+QAHF3iIYjigC EMo4CRUEGgxdIDe19nzSrg+lAHA99G43aS5s6JvSr3zoxvZfJSInoBjgSLUrdwXO TMu8f3xuKjmgxCwjaYFvryvWiOuQXSg+IPu7TAHN5UrucTpxpiaTpo1ZsZnwHOJj lgi2I+/cZvMbS24Y4gPv+lM1M0FWuT8nsU4BTYPiNAKSSsDLcDD2qTgyaYdZAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUmEpdZCYpinHAu9W1M2j5I3k3lY4wHwYDVR0j BBgwFoAUwoTlRyaodggfooV+9K9bGnjQlrQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNmZmN2E5ODktZWNkZi00M2Q2LTg2ZTEtZjZjMzkzNWI5 YjNkLzUvQzI4NEU1NDcyNkE4NzYwODFGQTI4NTdFRjRBRjVCMUE3OEQwOTZCNC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYTAwNGJhMS00MTliLTRk YjUtYmJkMy01Y2NhNjMzY2FlM2YvNC9DMjg0RTU0NzI2QTg3NjA4MUZBMjg1N0VG NEFGNUIxQTc4RDA5NkI0LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzZmZjdhOTg5LWVjZGYtNDNkNi04NmUxLWY2YzM5MzViOWIzZC81L0MyODRFNTQ3 MjZBODc2MDgxRkEyODU3RUY0QUY1QjFBNzhEMDk2QjQubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBybrLq 4RYvWajvQcVgF+wARpeSPXKK4v+vJ2kYm2IEf+X6iVBOnFgJdi+VoFw7wExd9Gyd TIwg0tMYqvWSQPIu9wfjrDj01Wsn+LIbwZjzU/Fjg+Pj8VLkcM6TspwtzA2bVrWL dNLYKGFuMlX2bC/CufFKSXWuqiyQHs+wM/1hM11J5AbjzkeprvKhPZEIcOhmpaQi EL4TMRSQ9zTrqUXy15TMwcZGaUoe89ZN9E7IYC34WopECFOZuI55q+Fuv63c8nPj xI9JoswqFWlNlM5jpL6QeqBU7cHAQuyGQB+k/taXM3PeDBcc3jScbnnnCo9Yk/zu igaBT+prh0WYKodz -----END CERTIFICATE-----Generated at Mon Jan 26 00:46:14 2026 by rpki-client