This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.mft File: A1EE5D09A0F5D0D87611013175C62E35777DA926.mft (raw, json) Hash identifier: SncVBrsczcZUDlgkLw1s+nisRQShPsJzYQzvJ3kxuHY= Subject key identifier: 4E:F9:B2:3C:1A:3C:47:19:07:1A:FB:88:6F:CB:3D:D5:43:D3:D1:80 Authority key identifier: A1:EE:5D:09:A0:F5:D0:D8:76:11:01:31:75:C6:2E:35:77:7D:A9:26 Certificate issuer: /CN=A1EE5D09A0F5D0D87611013175C62E35777DA926 Certificate serial: 6972578D3F3A185D320633ADA1A248C5C531D4B3 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.mft Manifest number: 030D Signing time: Sun 25 Jan 2026 07:41:36 +0000 Manifest this update: Sun 25 Jan 2026 07:36:36 +0000 Manifest next update: Mon 26 Jan 2026 08:13:36 +0000 Files and hashes: 1: 326131343a373538313a393165303a3a2f34382d3438203d3e20323135333634.roa (hash: 2aDuD/D+lIpzPYcnGpfR3f4GvH7bzD6tXNlt4SzLv7s=) 2: 326131343a373538313a393031303a3a2f34342d3438203d3e20313430393135.roa (hash: 34CzDRdWck3x5QdKwY21JLn4ljy5X8PbpWV6VL1UPl8=) 3: 326131343a373538313a393066653a3a2f34382d3438203d3e20323135333634.roa (hash: MyeYfbLc0//rjwnR8ZJ3TnxqQq4JflTHlrUTLQvk3gU=) 4: 326131343a373538313a393130303a3a2f34382d3438203d3e20323134383431.roa (hash: TejNBoLvDqd6zzS1lptpFez+EdbwzXYJ6yM06vDQ9j0=) 5: 326131343a373538313a393030303a3a2f33382d3338203d3e20323135333634.roa (hash: coziJfcvV7NZzAVbts1JQ6BKxT5yxFwdbwzsra8WCDw=) 6: 326131343a373538313a393061303a3a2f34332d3438203d3e20323135333634.roa (hash: imEjvtvCCz1eqwuI8/eFHCFB+WwTlJEDfPXRombfVNU=) 7: 326131343a373538313a393230303a3a2f34302d3438203d3e203134343437.roa (hash: kZ5VHXe1kAhX5tvSZsX77jhReBFDdvoZNrdYu896udw=) 8: A1EE5D09A0F5D0D87611013175C62E35777DA926.crl (hash: A5iE09/xcDCrLOPhiGOoUMVDsftVn1nB1p0KyztwmW4=) 9: 326131343a373538313a393062303a3a2f34342d3438203d3e203134343437.roa (hash: 0s1d24KMFu1kYJPCMrebtn4XcHECqVsweN9wGCszluU=) 10: 326131343a373538313a393065653a3a2f34382d3438203d3e20323135333634.roa (hash: 5IFSShC1J1DPKr9fgEjy0DHzTqmR8W17B+sGrWUb29Q=) 11: 326131343a373538313a393130613a3a2f34382d3438203d3e20323135313438.roa (hash: g9TWsQZsTWz7mSDp6Y61gNZDSwAn6dADsEyVm1AJtlU=) 12: 326131343a373538313a6666303a3a2f34382d3438203d3e20323135333634.roa (hash: nCwmmbP9gIjoEy95/v504iaQnyadcB1V8SB+J8/exJE=) 13: 326131343a373538313a393061303a3a2f34332d3438203d3e203134343437.roa (hash: jsviVwthOZBlV5+oRRFYDUvQF+OHc4iDYR8PVPHLwkA=) 14: 326131343a373538313a393066663a3a2f34382d3438203d3e20323135363137.roa (hash: JYfFIGSSsdhSc4V2wOJu9QFkSSC76MmCAjKsdTBmtQA=) 15: 326131343a373538313a393230303a3a2f34302d3430203d3e203134343437.roa (hash: wCZcPZ1Lk7X2Qee1qTSfN0RGP0Z21kPGqT0D7sgtD64=) 16: 326131343a373538313a393165313a3a2f34382d3438203d3e20323135333634.roa (hash: F9b5BNgK8TO7NWcYalz+qyjvcxyYqlq+/TYg6mk1sTI=) 17: 326131343a373538313a393330303a3a2f34302d3438203d3e20323039313039.roa (hash: TWxboGw6/lxhoMiWiDnyOg4O9SxsEOXusyizWuah2wo=) 18: 326131343a373538313a393032303a3a2f34342d3438203d3e203339373533.roa (hash: 0nNVfH0UNkgevPAH9ITuwY5tE24LlYCDjFx46F3vtM0=) 19: 326131343a373538313a393063303a3a2f34342d3438203d3e203134343437.roa (hash: 1KwjyQC5mQq96/1cZ1aeVWaWGIQIpF6Ei+ZSWIfd5WM=) 20: 326131343a373538313a393030303a3a2f34342d3438203d3e20323135333634.roa (hash: a41Xyu+1QM63sJBLjRXDXCMByy5FuK1D59e4kuksRCE=) 21: 326131343a373538313a393230303a3a2f34302d3438203d3e20323039313039.roa (hash: pMn1lmNiSpZ9TgFB+IRiwlTd7+lbxKBF0vBWWTkkXYs=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.crl rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 08:13:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:72:57:8d:3f:3a:18:5d:32:06:33:ad:a1:a2:48:c5:c5:31:d4:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A1EE5D09A0F5D0D87611013175C62E35777DA926 Validity Not Before: Jan 25 07:36:36 2026 GMT Not After : Jan 26 08:13:36 2026 GMT Subject: CN=4EF9B23C1A3C4719071AFB886FCB3DD543D3D180 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:e0:54:34:89:a5:92:d9:06:10:70:4e:ce:43: e4:b9:b3:c0:6b:0e:6a:e3:fa:dd:88:d9:9e:71:3d: 23:4a:b5:09:02:6b:dd:88:bb:e1:e6:55:e3:a9:04: 47:81:46:95:e0:6c:22:9f:dc:3f:e9:a1:11:b4:42: 72:a9:b5:f2:21:ed:2a:3d:76:ae:d6:ec:b4:0a:31: 8e:56:13:e6:49:f9:91:54:d0:0c:46:d7:e5:46:4c: 6d:ca:25:2d:7e:6c:e2:3d:d3:20:d2:21:bc:0b:16: 69:37:75:17:da:aa:14:30:0f:dc:2f:b1:81:73:d2: d1:50:e6:73:07:61:fd:19:b2:22:01:8f:8f:e8:a3: 6b:6e:1b:66:91:7e:8d:2d:ac:74:29:86:49:3b:4d: 9a:a7:11:81:fb:c7:01:6a:e8:d8:44:c0:37:fa:37: bf:ce:7d:76:1e:3e:04:c1:81:be:45:d2:10:ae:28: fe:52:ef:a6:6d:83:ff:75:16:db:ba:67:a7:58:99: fe:64:47:18:77:71:2a:8d:ec:bd:c4:52:e3:2d:80: 22:fe:6b:b7:a3:45:ae:91:20:74:9a:b9:97:93:dd: c8:9d:e0:33:46:48:36:bf:4e:b1:b7:21:52:f7:7d: 74:47:4b:c4:93:a9:aa:de:cc:3e:20:2b:e1:cc:c8: 4b:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:F9:B2:3C:1A:3C:47:19:07:1A:FB:88:6F:CB:3D:D5:43:D3:D1:80 X509v3 Authority Key Identifier: keyid:A1:EE:5D:09:A0:F5:D0:D8:76:11:01:31:75:C6:2E:35:77:7D:A9:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:75:e0:22:2a:2b:dd:3b:8d:5e:dd:8d:30:ff:c5:ec:57:2a: e9:85:7d:87:95:43:1a:f8:15:d9:d7:64:33:79:76:4b:75:2f: 2d:89:10:b6:35:25:e7:d3:87:05:43:43:3f:5f:62:3a:f1:dc: 80:a4:7b:2e:da:bb:a8:0e:ca:ee:2b:3f:85:a0:95:1a:3a:6b: 3c:17:7a:5f:d8:7b:35:a0:6e:3e:a4:e5:66:71:8c:50:fd:69: 26:89:97:d2:0f:14:5f:dd:03:2d:08:88:97:5d:4a:25:76:43: 8f:ca:04:2e:a0:f1:5c:6d:4d:4c:9b:79:b7:4e:ae:b5:09:2b: cf:3b:4c:ab:39:6c:64:60:c9:a0:35:66:2a:44:9f:4a:0b:51: de:f0:73:ee:90:a9:96:0a:77:08:77:97:82:63:23:33:36:4d: 8d:cc:53:f0:c4:b8:d7:4b:b0:e0:e7:b0:5f:1c:c0:72:aa:31: 93:3f:c2:f5:1c:b1:a7:39:70:03:eb:23:c9:fa:55:2c:fe:87: 52:14:db:da:1b:1a:62:fd:aa:79:86:68:68:4d:41:4a:e0:56: 85:fc:90:c7:52:59:36:32:e1:16:5f:c9:44:26:17:39:8b:d7: f8:2c:ba:6c:95:ec:e4:0d:c9:8e:ac:65:87:59:f4:e3:c1:5e: 93:02:95:42 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUaXJXjT86GF0yBjOtoaJIxcUx1LMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTFFRTVEMDlBMEY1RDBEODc2MTEwMTMxNzVDNjJFMzU3 NzdEQTkyNjAeFw0yNjAxMjUwNzM2MzZaFw0yNjAxMjYwODEzMzZaMDMxMTAvBgNV BAMTKDRFRjlCMjNDMUEzQzQ3MTkwNzFBRkI4ODZGQ0IzREQ1NDNEM0QxODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH4FQ0iaWS2QYQcE7OQ+S5s8Br Dmrj+t2I2Z5xPSNKtQkCa92Iu+HmVeOpBEeBRpXgbCKf3D/poRG0QnKptfIh7So9 dq7W7LQKMY5WE+ZJ+ZFU0AxG1+VGTG3KJS1+bOI90yDSIbwLFmk3dRfaqhQwD9wv sYFz0tFQ5nMHYf0ZsiIBj4/oo2tuG2aRfo0trHQphkk7TZqnEYH7xwFq6NhEwDf6 N7/OfXYePgTBgb5F0hCuKP5S76Ztg/91Ftu6Z6dYmf5kRxh3cSqN7L3EUuMtgCL+ a7ejRa6RIHSauZeT3cid4DNGSDa/TrG3IVL3fXRHS8STqarezD4gK+HMyEv9AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUTvmyPBo8RxkHGvuIb8s91UPT0YAwHwYDVR0j BBgwFoAUoe5dCaD10Nh2EQExdcYuNXd9qSYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODU1YzdkNWEtMTVjNC00NTg5LTg1ZmEtYjQ5MWEwNzEw NDhjLzAvQTFFRTVEMDlBMEY1RDBEODc2MTEwMTMxNzVDNjJFMzU3NzdEQTkyNi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9BMUVFNUQwOUEwRjVEMEQ4NzYxMTAxMzE3 NUM2MkUzNTc3N0RBOTI2LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 Lzg1NWM3ZDVhLTE1YzQtNDU4OS04NWZhLWI0OTFhMDcxMDQ4Yy8wL0ExRUU1RDA5 QTBGNUQwRDg3NjExMDEzMTc1QzYyRTM1Nzc3REE5MjYubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBGdeAi KivdO41e3Y0w/8XsVyrphX2HlUMa+BXZ12QzeXZLdS8tiRC2NSXn04cFQ0M/X2I6 8dyApHsu2ruoDsruKz+FoJUaOms8F3pf2Hs1oG4+pOVmcYxQ/WkmiZfSDxRf3QMt CIiXXUoldkOPygQuoPFcbU1Mm3m3Tq61CSvPO0yrOWxkYMmgNWYqRJ9KC1He8HPu kKmWCncId5eCYyMzNk2NzFPwxLjXS7Dg57BfHMByqjGTP8L1HLGnOXAD6yPJ+lUs /odSFNvaGxpi/ap5hmhoTUFK4FaF/JDHUlk2MuEWX8lEJhc5i9f4LLpslezkDcmO rGWHWfTjwV6TApVC -----END CERTIFICATE-----Generated at Sun Jan 25 21:22:37 2026 by rpki-client