This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.mft File: 0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.mft (raw, json) Hash identifier: TnnkJB/vKTNpSrA5sRZgV1hGAsT7SdxMvizwJgquDTg= Subject key identifier: A1:50:3C:3D:59:13:32:BE:76:7A:FB:EC:DD:67:66:82:CD:CC:DC:C3 Authority key identifier: 0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3 Certificate issuer: /CN=0d7ffae300def0876bf84890fb6ea17be841a4d3 Certificate serial: 028E659AEA31B4A3FF1A4B966B92C4246E3E2CB7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.mft Manifest number: 0253 Signing time: Sat 24 Jan 2026 16:59:42 +0000 Manifest this update: Sat 24 Jan 2026 16:54:42 +0000 Manifest next update: Sun 25 Jan 2026 17:23:42 +0000 Files and hashes: 1: 3138352e3231332e3234382e302f32342d3234203d3e20323035383836.roa (hash: ODfn5/rpX0/qAWjZsS/cv+gVh3kFgfI7CdBECTg9zww=) 2: 38352e3131372e3233312e302f32342d3234203d3e20323133373234.roa (hash: ohyXGo6Fwg3029u2hdROae+jQf4VI2skgvLUXH3jI8w=) 3: 38352e3131372e3233302e302f32342d3234203d3e2035303635.roa (hash: 8/mMTd8OI6hx+rEazKaA5i9flVTt9So8wwSfFF6xpVo=) 4: 0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl (hash: V+ksUueRhmkxwEnQDe2yyBqRrGnneG4LBdYNBlTCv/Y=) 5: 3138352e3231332e3234382e302f32342d3234203d3e203235313938.roa (hash: sZxo3uMJdWqVPeybtzRbPRus3n/g4Q3Q2K1jBCVUZj0=) 6: 3138352e3231332e3234392e302f32342d3234203d3e203235313938.roa (hash: RAmqdtOqt2GXnv4T7A8gAKdg4H2+TG5CqjE3/MvQxnU=) 7: 3139342e33342e3235342e302f32342d3234203d3e203531383532.roa (hash: za0HM3w55tiDFbhPrhUh3FtVd5oKhUm8JuFZ8lH0DiA=) 8: 3138352e3231332e3235312e302f32342d3234203d3e20393834.roa (hash: A919/Bekrj6rZbVlRAQ3zY8i9Bm4Qio6XVxQpWLOfQM=) 9: 38352e3131372e3232392e302f32342d3234203d3e203138353236.roa (hash: VL0qbnMthkW/z4M9i7RCycr128NaCWPDKcNp8MPhOx8=) 10: 3139342e33342e3235332e302f32342d3234203d3e2035303635.roa (hash: tD+eYvXQsGkCcpnz6s7EBRYpOf8Iu4vdb3Qy27wUI6g=) 11: 3139342e33342e3235352e302f32342d3234203d3e20313431393638.roa (hash: iQ9RYSqOmsvIqARX4nqI9wEFn//drkKsHCDo7XaSdTU=) 12: 38352e3131372e3232382e302f32342d3234203d3e20323134343538.roa (hash: rcAG2FX2+ZD0Qb1+KeZK9os832Q7CwzkoxVHQi9yY7k=) 13: 3139342e33342e3235322e302f32342d3234203d3e203439353831.roa (hash: CdOWg7XQ7TdzzLDF2E3vbhyf4TDBRs7VuKir2QIc0i4=) 14: 3138352e3231332e3234392e302f32342d3234203d3e20343030393039.roa (hash: 4O3foUV7f18NUYJQaeBYgK+aW1lr+7o+ea8CcQjVzCw=) 15: 3138352e3231332e3235312e302f32342d3234203d3e20323032373336.roa (hash: k9NutrpE73eF9M1MGDaqB2MjGcD60li8mT4JnvFIELA=) 16: 3138352e3231332e3235302e302f32342d3234203d3e20323032383238.roa (hash: cvWbud/Q3B4zVr3PrPYyxiTjcQyvCffxgDgg+5VMZYE=) 17: 38352e3131372e3232392e302f32342d3234203d3e20313439313037.roa (hash: Mdj3IIZJ097ibJGhSOfHP4GOBLdG4jAp1zNpVSxesFg=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.mft rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 17:23:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:8e:65:9a:ea:31:b4:a3:ff:1a:4b:96:6b:92:c4:24:6e:3e:2c:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d7ffae300def0876bf84890fb6ea17be841a4d3 Validity Not Before: Jan 24 16:54:42 2026 GMT Not After : Jan 25 17:23:42 2026 GMT Subject: CN=A1503C3D591332BE767AFBECDD676682CDCCDCC3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:da:e8:ba:00:06:5f:c3:e2:73:3a:bc:5d:8d: 15:85:86:cb:d4:e5:1f:e4:56:d3:43:c5:c6:bf:e4: 94:c7:df:63:80:70:70:a5:d9:7d:5f:23:13:e5:05: 45:c2:87:20:31:15:ec:8e:03:42:58:7a:a1:77:ce: e5:89:b0:1d:af:60:9e:c3:61:25:94:0f:8d:27:e6: ad:18:9a:19:23:41:6a:75:cc:d0:3f:67:a7:a8:05: 1e:f6:e5:e6:82:46:54:1e:07:34:44:7e:30:a9:a3: 1b:69:4c:9d:fa:1b:a2:69:6c:aa:4d:8c:18:98:6c: 26:ef:9e:c0:cd:00:b4:34:a8:c2:07:2a:a0:05:43: 2c:ba:c7:82:49:4e:7e:45:71:1e:11:f7:77:22:ff: 53:83:6c:d9:a1:f2:0a:91:bd:a6:2f:d1:83:53:14: 8f:8e:58:97:d8:27:7e:7d:f9:3b:d8:5f:b3:ad:57: 2f:45:01:35:3e:18:28:4f:9c:30:74:20:3c:aa:1f: 8d:66:d4:df:3b:69:21:1d:2d:94:85:97:56:ff:15: 1e:00:6b:0b:70:85:b5:d9:65:14:8c:34:4f:34:46: 2f:eb:57:20:43:8d:eb:00:ed:97:39:5f:02:f0:a6: f9:09:5c:2b:44:50:c3:f4:75:de:59:0a:40:a6:ba: 44:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:50:3C:3D:59:13:32:BE:76:7A:FB:EC:DD:67:66:82:CD:CC:DC:C3 X509v3 Authority Key Identifier: keyid:0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:bb:bb:34:6f:ee:d0:d5:16:92:6f:d0:05:13:d2:5b:ac:84: a0:36:32:44:fc:ee:ca:7a:35:fb:0e:c6:74:13:37:64:dd:61: 24:4b:52:55:1e:77:dd:f4:20:52:0c:3e:b6:1a:ce:bd:b6:06: 48:d3:0c:b4:40:05:e3:a4:2a:01:f2:8d:95:c9:b1:77:9f:23: b7:33:62:1d:42:4e:8e:78:92:5b:90:1a:bc:7f:0d:a8:0a:3b: 99:69:91:cd:04:60:61:32:95:50:7a:f8:81:a1:50:b7:1e:37: 8b:1e:e1:f9:64:d0:21:18:46:bc:da:67:14:5f:b9:2b:f2:39: 17:5f:d6:d9:17:dc:5a:85:f8:cc:2d:51:58:4b:21:b6:42:4e: ff:57:0d:14:3e:c5:a9:16:7d:8b:56:55:ee:c2:ba:d2:06:5d: 9c:e4:86:74:b4:8d:7b:b3:e6:69:22:70:9c:fb:46:44:76:3c: b2:77:97:35:e3:16:0f:17:06:4a:2f:27:da:8b:4a:6f:cf:e2: c7:cd:7b:82:4c:f5:20:e5:55:79:48:c2:bd:8f:9c:0b:f9:48: 38:a3:5b:a1:14:6f:10:dd:30:b3:4a:6b:d5:da:53:14:ef:b2: 12:ad:30:0f:c3:02:e2:5d:6c:3f:05:b1:c5:62:8c:db:47:53: d1:3c:91:d1 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUAo5lmuoxtKP/GkuWa5LEJG4+LLcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMGQ3ZmZhZTMwMGRlZjA4NzZiZjg0ODkwZmI2ZWExN2Jl ODQxYTRkMzAeFw0yNjAxMjQxNjU0NDJaFw0yNjAxMjUxNzIzNDJaMDMxMTAvBgNV BAMTKEExNTAzQzNENTkxMzMyQkU3NjdBRkJFQ0RENjc2NjgyQ0RDQ0RDQzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+2ui6AAZfw+JzOrxdjRWFhsvU 5R/kVtNDxca/5JTH32OAcHCl2X1fIxPlBUXChyAxFeyOA0JYeqF3zuWJsB2vYJ7D YSWUD40n5q0YmhkjQWp1zNA/Z6eoBR725eaCRlQeBzREfjCpoxtpTJ36G6JpbKpN jBiYbCbvnsDNALQ0qMIHKqAFQyy6x4JJTn5FcR4R93ci/1ODbNmh8gqRvaYv0YNT FI+OWJfYJ359+TvYX7OtVy9FATU+GChPnDB0IDyqH41m1N87aSEdLZSFl1b/FR4A awtwhbXZZRSMNE80Ri/rVyBDjesA7Zc5XwLwpvkJXCtEUMP0dd5ZCkCmukT1AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUoVA8PVkTMr52evvs3Wdmgs3M3MMwHwYDVR0j BBgwFoAUDX/64wDe8Idr+EiQ+26he+hBpNMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODExM2RkYTYtN2FkZS00NDVkLThjNmUtNDQ4YTc4ZTQ4 Y2ExLzEvMEQ3RkZBRTMwMERFRjA4NzZCRjg0ODkwRkI2RUExN0JFODQxQTREMy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RYXzY0d0RlOElkci1FaVEtMjZoZS1o QnBOTS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84MTEzZGRhNi03 YWRlLTQ0NWQtOGM2ZS00NDhhNzhlNDhjYTEvMS8wRDdGRkFFMzAwREVGMDg3NkJG ODQ4OTBGQjZFQTE3QkU4NDFBNEQzLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlru7NG/u0NUWkm/QBRPS W6yEoDYyRPzuyno1+w7GdBM3ZN1hJEtSVR533fQgUgw+thrOvbYGSNMMtEAF46Qq AfKNlcmxd58jtzNiHUJOjniSW5AavH8NqAo7mWmRzQRgYTKVUHr4gaFQtx43ix7h +WTQIRhGvNpnFF+5K/I5F1/W2RfcWoX4zC1RWEshtkJO/1cNFD7FqRZ9i1ZV7sK6 0gZdnOSGdLSNe7PmaSJwnPtGRHY8sneXNeMWDxcGSi8n2otKb8/ix817gkz1IOVV eUjCvY+cC/lIOKNboRRvEN0ws0pr1dpTFO+yEq0wD8MC4l1sPwWxxWKM20dT0TyR 0Q== -----END CERTIFICATE-----Generated at Sun Jan 25 10:47:46 2026 by rpki-client