This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/3/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.mft File: 0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.mft (raw, json) Hash identifier: 0pWCiMO7+h6+0ztBQ1mscj1CSpZ1wXrnmyT9XRjQw98= Subject key identifier: F7:0F:7B:98:B2:60:ED:31:A9:4E:D1:D7:A1:55:18:89:63:0B:A7:41 Authority key identifier: 0A:FD:B7:22:2B:9E:BA:33:A6:5E:29:BB:E3:F2:9D:7C:5F:4B:09:B9 Certificate issuer: /CN=0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9 Certificate serial: 1B88551E92C46FA1E825504F061791B91CC2BAC1 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/3/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.mft Manifest number: 0110 Signing time: Sun 25 Jan 2026 02:33:01 +0000 Manifest this update: Sun 25 Jan 2026 02:28:01 +0000 Manifest next update: Mon 26 Jan 2026 06:22:01 +0000 Files and hashes: 1: 326130373a353463313a663030303a3a2f33362d3438203d3e20323038343533.roa (hash: PoxwFIHy8kdey2mlHnL1hmx4hhF1/GhCPxY1mv6kDWE=) 2: 0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.crl (hash: 51Uxpm2Cbuq3lypQUyEdyvzV7V4jFibnuXK+++yAWis=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/3/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.crl rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/3/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.mft rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.cer rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 21:56:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:88:55:1e:92:c4:6f:a1:e8:25:50:4f:06:17:91:b9:1c:c2:ba:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9 Validity Not Before: Jan 25 02:28:01 2026 GMT Not After : Jan 26 06:22:01 2026 GMT Subject: CN=F70F7B98B260ED31A94ED1D7A1551889630BA741 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:1e:9b:eb:d8:aa:60:76:5e:7d:05:05:eb:73: f7:ee:d9:8a:24:8d:2a:50:2b:ef:85:11:41:67:a2: 42:50:23:40:49:99:fe:a1:52:d7:6b:4c:ef:93:a0: 5a:90:ad:4b:04:0b:9b:03:f4:4a:c1:d6:93:6e:ea: 52:bc:1f:24:3c:c8:45:3a:07:c9:07:54:0e:ea:3e: 6f:71:8d:52:a7:05:de:f9:6d:b5:c2:1f:db:05:44: 5d:4a:ce:ff:d8:5d:64:e9:c6:a4:9d:77:53:45:08: d5:e0:a0:4b:14:ed:a4:d2:7f:f8:c0:18:1a:fb:ee: 2c:30:cf:b6:3d:a1:57:64:ac:91:41:81:47:3b:1e: 16:01:7f:f7:25:69:2c:69:cb:88:b3:14:97:8b:f6: fb:93:ac:80:c4:db:14:57:cd:88:80:b6:82:e9:15: 00:67:54:14:a6:2e:4a:f0:c5:a7:f9:21:df:ef:d9: 5b:90:19:5f:ac:34:ba:65:a9:30:f6:05:31:48:77: f2:70:dc:47:9d:b8:aa:54:0f:b4:9c:c4:d3:62:0a: fe:cb:3e:12:4e:d6:1a:0c:25:9b:02:b0:75:dc:bc: 95:0d:f5:64:bf:c9:bd:cf:d2:fd:f1:89:35:2a:9f: 69:ed:40:1a:c0:68:4a:50:80:5b:f1:a3:72:ae:88: 54:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:0F:7B:98:B2:60:ED:31:A9:4E:D1:D7:A1:55:18:89:63:0B:A7:41 X509v3 Authority Key Identifier: keyid:0A:FD:B7:22:2B:9E:BA:33:A6:5E:29:BB:E3:F2:9D:7C:5F:4B:09:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/3/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/3/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:3a:27:84:8e:c2:55:9b:77:47:c2:b2:ba:0f:29:3c:cc:9a: 42:3a:93:35:34:0b:47:de:e3:c3:53:19:7f:7c:6b:10:2e:5f: 9b:94:3c:2e:7a:9a:c3:6e:70:b3:49:bc:d9:eb:10:6a:8b:12: 4b:b7:85:6a:69:63:3d:e9:e6:59:b2:0f:aa:fe:4c:c0:de:fe: c9:92:5d:49:5c:58:1d:89:64:20:c8:e4:4e:0d:b3:c1:34:a2: 51:ca:4e:43:47:74:6f:6f:ee:76:31:07:05:26:4b:28:f6:4c: 0b:a1:f7:1a:09:fb:ea:56:63:7c:54:28:3f:c8:fb:bc:ce:49: 5c:b7:cc:ba:fa:fc:d4:da:1d:bd:5e:76:cf:d0:2c:c6:5f:8a: 6e:f5:cd:f2:88:da:a5:b0:37:f3:e6:5b:e1:cd:e1:1f:6e:af: 50:0a:51:4f:67:6c:2e:71:98:e2:9c:cf:0d:4f:bf:84:74:74: 4f:0b:8c:ec:dd:61:75:21:89:cf:12:b3:17:1f:3f:90:7e:58: 77:10:6f:99:ea:d9:b3:95:e1:c8:cd:78:c1:80:f9:3d:a7:fc: 5d:0c:5d:6d:7d:57:a0:62:f9:57:4e:6c:cd:bc:9c:c9:4e:e8: 85:72:f5:3c:27:5d:3e:0c:a2:55:b2:58:2e:d9:b6:3a:87:87: 33:e0:0f:3a -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUG4hVHpLEb6HoJVBPBheRuRzCusEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEFGREI3MjIyQjlFQkEzM0E2NUUyOUJCRTNGMjlEN0M1 RjRCMDlCOTAeFw0yNjAxMjUwMjI4MDFaFw0yNjAxMjYwNjIyMDFaMDMxMTAvBgNV BAMTKEY3MEY3Qjk4QjI2MEVEMzFBOTRFRDFEN0ExNTUxODg5NjMwQkE3NDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8Hpvr2Kpgdl59BQXrc/fu2Yok jSpQK++FEUFnokJQI0BJmf6hUtdrTO+ToFqQrUsEC5sD9ErB1pNu6lK8HyQ8yEU6 B8kHVA7qPm9xjVKnBd75bbXCH9sFRF1Kzv/YXWTpxqSdd1NFCNXgoEsU7aTSf/jA GBr77iwwz7Y9oVdkrJFBgUc7HhYBf/claSxpy4izFJeL9vuTrIDE2xRXzYiAtoLp FQBnVBSmLkrwxaf5Id/v2VuQGV+sNLplqTD2BTFId/Jw3EeduKpUD7ScxNNiCv7L PhJO1hoMJZsCsHXcvJUN9WS/yb3P0v3xiTUqn2ntQBrAaEpQgFvxo3KuiFTrAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU9w97mLJg7TGpTtHXoVUYiWMLp0EwHwYDVR0j BBgwFoAUCv23IiueujOmXim74/KdfF9LCbkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE0NzZkNjItOWNmYS00ODcxLWEyZDktZmFkZjU3ODFj MTFiLzMvMEFGREI3MjIyQjlFQkEzM0E2NUUyOUJCRTNGMjlEN0M1RjRCMDlCOS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYTAwNGJhMS00MTliLTRk YjUtYmJkMy01Y2NhNjMzY2FlM2YvNC8wQUZEQjcyMjJCOUVCQTMzQTY1RTI5QkJF M0YyOUQ3QzVGNEIwOUI5LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzcxNDc2ZDYyLTljZmEtNDg3MS1hMmQ5LWZhZGY1NzgxYzExYi8zLzBBRkRCNzIy MkI5RUJBMzNBNjVFMjlCQkUzRjI5RDdDNUY0QjA5QjkubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQADOieE jsJVm3dHwrK6Dyk8zJpCOpM1NAtH3uPDUxl/fGsQLl+blDwueprDbnCzSbzZ6xBq ixJLt4VqaWM96eZZsg+q/kzA3v7Jkl1JXFgdiWQgyORODbPBNKJRyk5DR3Rvb+52 MQcFJkso9kwLofcaCfvqVmN8VCg/yPu8zklct8y6+vzU2h29XnbP0CzGX4pu9c3y iNqlsDfz5lvhzeEfbq9QClFPZ2wucZjinM8NT7+EdHRPC4zs3WF1IYnPErMXHz+Q flh3EG+Z6tmzleHIzXjBgPk9p/xdDF1tfVegYvlXTmzNvJzJTuiFcvU8J10+DKJV slgu2bY6h4cz4A86 -----END CERTIFICATE-----Generated at Sun Jan 25 15:33:08 2026 by rpki-client