This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/727b5ef7-d121-4ae2-bab6-410d205349b8/0/EC342ADD81633658330112D2BF8B1DE3EE19F684.mft File: EC342ADD81633658330112D2BF8B1DE3EE19F684.mft (raw, json) Hash identifier: thRWM2uS315sH6XbWW7IZ7YeMG6eLqGZk+Js4opOKlM= Subject key identifier: E0:4D:CB:4D:F1:BD:AF:A5:59:E3:E5:D8:AA:36:51:47:00:D4:5C:A8 Authority key identifier: EC:34:2A:DD:81:63:36:58:33:01:12:D2:BF:8B:1D:E3:EE:19:F6:84 Certificate issuer: /CN=ec342add81633658330112d2bf8b1de3ee19f684 Certificate serial: 3B061C1CDEEE15E77815C2F705538CCDCDD0904D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7DQq3YFjNlgzARLSv4sd4-4Z9oQ.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/727b5ef7-d121-4ae2-bab6-410d205349b8/0/EC342ADD81633658330112D2BF8B1DE3EE19F684.mft Manifest number: 05 Signing time: Sat 24 Jan 2026 23:11:39 +0000 Manifest this update: Sat 24 Jan 2026 23:06:39 +0000 Manifest next update: Mon 26 Jan 2026 00:16:39 +0000 Files and hashes: 1: EC342ADD81633658330112D2BF8B1DE3EE19F684.crl (hash: EN7xcWG/7aoImP9r/x5gKMkM535EbWZ8UQK0UCAMfTY=) 2: AS214420.asa (hash: tOBgFhFeKhPKL8j6hl+YVclDNEAVdP8vQyMPoEBSkDM=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/727b5ef7-d121-4ae2-bab6-410d205349b8/0/EC342ADD81633658330112D2BF8B1DE3EE19F684.crl rsync://rsync.paas.rpki.ripe.net/repository/727b5ef7-d121-4ae2-bab6-410d205349b8/0/EC342ADD81633658330112D2BF8B1DE3EE19F684.mft rsync://rpki.ripe.net/repository/DEFAULT/7DQq3YFjNlgzARLSv4sd4-4Z9oQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 00:16:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:06:1c:1c:de:ee:15:e7:78:15:c2:f7:05:53:8c:cd:cd:d0:90:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec342add81633658330112d2bf8b1de3ee19f684 Validity Not Before: Jan 24 23:06:39 2026 GMT Not After : Jan 26 00:16:39 2026 GMT Subject: CN=E04DCB4DF1BDAFA559E3E5D8AA36514700D45CA8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:cc:04:0c:54:79:4b:32:21:0a:dc:71:f3:0f: 54:59:88:c9:2b:a2:11:50:82:cf:97:27:c5:08:6c: 69:d7:2c:9f:38:7b:69:15:d6:5a:34:b2:8e:d9:bd: 52:16:91:59:de:b1:21:bd:0d:bb:b8:d3:f6:64:22: 68:dd:ee:49:5c:bb:0a:89:e0:3b:cd:39:74:4e:95: 01:e4:91:f5:55:c2:34:29:4c:c2:c5:f2:a6:17:63: 51:87:fa:f8:b7:da:ad:2b:6d:5b:ca:6c:92:d9:88: 85:19:d2:13:c8:7c:22:32:e0:c9:87:27:24:39:9c: 16:c8:e4:5f:81:eb:68:fc:1b:2f:64:b8:76:e1:e1: c1:bf:2f:00:15:ef:b8:64:99:04:14:7f:d9:c6:59: 81:75:4f:d0:cf:60:9c:d7:44:81:6b:49:5e:a7:4a: 4b:22:f1:ce:3a:1f:6e:ba:fa:de:3c:3d:04:b8:d5: 65:28:19:76:91:d1:18:ed:64:22:10:e0:fc:6f:37: ab:2e:24:61:b7:43:1d:0a:b3:8e:1b:3b:33:d6:ed: af:47:47:95:ef:6c:db:c4:d9:bc:32:a7:13:7f:81: a9:0d:15:be:d4:59:02:46:b1:60:6a:6b:53:39:81: 87:09:21:fa:39:a0:23:c8:c0:92:72:70:2f:76:f6: 2a:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:4D:CB:4D:F1:BD:AF:A5:59:E3:E5:D8:AA:36:51:47:00:D4:5C:A8 X509v3 Authority Key Identifier: keyid:EC:34:2A:DD:81:63:36:58:33:01:12:D2:BF:8B:1D:E3:EE:19:F6:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/727b5ef7-d121-4ae2-bab6-410d205349b8/0/EC342ADD81633658330112D2BF8B1DE3EE19F684.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7DQq3YFjNlgzARLSv4sd4-4Z9oQ.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/727b5ef7-d121-4ae2-bab6-410d205349b8/0/EC342ADD81633658330112D2BF8B1DE3EE19F684.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:c5:df:ba:7a:59:62:2e:8e:6a:24:73:3a:1c:d9:7e:2f:f1: eb:05:27:aa:b9:75:9f:81:9e:2a:28:ca:48:32:6b:2f:42:df: b7:5c:af:5b:ce:73:50:bc:a8:5c:71:ff:c1:14:5e:e0:12:a9: 92:75:8e:60:51:d7:17:07:3e:9c:ef:82:2f:f3:21:66:03:ab: 8e:49:cb:ce:c0:0a:58:38:4b:19:8f:5c:92:93:d1:7b:28:f1: 88:42:f8:71:8e:af:ab:70:51:df:7f:f1:ff:b4:69:3a:93:45: 05:9c:96:3f:71:28:db:ff:bd:6c:b7:96:63:6f:b9:5e:b0:f2: 24:d1:d4:de:da:9b:09:c3:53:b5:8a:b8:c7:4e:be:b3:8d:18: 92:d4:69:cd:f7:94:6c:e6:a7:e3:90:c6:21:b5:ae:17:40:43: c8:3c:83:f7:68:bc:b9:4c:81:55:46:2b:4d:af:4d:bc:58:79: ac:93:5e:76:e2:c7:2a:5e:50:9c:c8:63:da:d0:1a:52:98:cf: f8:9c:b4:b1:b9:48:10:b2:2c:ac:c7:ea:3d:e1:cf:b3:2b:09: e6:3b:74:73:87:40:0e:73:00:34:a2:1c:9d:b8:e0:b4:b1:ef: 46:74:3c:d6:ea:89:69:aa:9e:1a:f2:12:5b:71:c3:b5:c7:cf: af:99:4f:f4 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUOwYcHN7uFed4FcL3BVOMzc3QkE0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZWMzNDJhZGQ4MTYzMzY1ODMzMDExMmQyYmY4YjFkZTNl ZTE5ZjY4NDAeFw0yNjAxMjQyMzA2MzlaFw0yNjAxMjYwMDE2MzlaMDMxMTAvBgNV BAMTKEUwNERDQjRERjFCREFGQTU1OUUzRTVEOEFBMzY1MTQ3MDBENDVDQTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8zAQMVHlLMiEK3HHzD1RZiMkr ohFQgs+XJ8UIbGnXLJ84e2kV1lo0so7ZvVIWkVnesSG9Dbu40/ZkImjd7klcuwqJ 4DvNOXROlQHkkfVVwjQpTMLF8qYXY1GH+vi32q0rbVvKbJLZiIUZ0hPIfCIy4MmH JyQ5nBbI5F+B62j8Gy9kuHbh4cG/LwAV77hkmQQUf9nGWYF1T9DPYJzXRIFrSV6n Sksi8c46H266+t48PQS41WUoGXaR0RjtZCIQ4PxvN6suJGG3Qx0Ks44bOzPW7a9H R5XvbNvE2bwypxN/gakNFb7UWQJGsWBqa1M5gYcJIfo5oCPIwJJycC929iqhAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU4E3LTfG9r6VZ4+XYqjZRRwDUXKgwHwYDVR0j BBgwFoAU7DQq3YFjNlgzARLSv4sd4+4Z9oQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzI3YjVlZjctZDEyMS00YWUyLWJhYjYtNDEwZDIwNTM0 OWI4LzAvRUMzNDJBREQ4MTYzMzY1ODMzMDExMkQyQkY4QjFERTNFRTE5RjY4NC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdEUXEzWUZqTmxnekFSTFN2NHNkNC00 WjlvUS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS83MjdiNWVmNy1k MTIxLTRhZTItYmFiNi00MTBkMjA1MzQ5YjgvMC9FQzM0MkFERDgxNjMzNjU4MzMw MTEyRDJCRjhCMURFM0VFMTlGNjg0Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACcXfunpZYi6OaiRzOhzZ fi/x6wUnqrl1n4GeKijKSDJrL0Lft1yvW85zULyoXHH/wRRe4BKpknWOYFHXFwc+ nO+CL/MhZgOrjknLzsAKWDhLGY9ckpPReyjxiEL4cY6vq3BR33/x/7RpOpNFBZyW P3Eo2/+9bLeWY2+5XrDyJNHU3tqbCcNTtYq4x06+s40YktRpzfeUbOan45DGIbWu F0BDyDyD92i8uUyBVUYrTa9NvFh5rJNeduLHKl5QnMhj2tAaUpjP+Jy0sblIELIs rMfqPeHPsysJ5jt0c4dADnMANKIcnbjgtLHvRnQ81uqJaaqeGvISW3HDtcfPr5lP 9A== -----END CERTIFICATE-----Generated at Sun Jan 25 17:35:01 2026 by rpki-client