This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/87ae25f3-706b-47ed-bb74-46684ae0ef2b/0/B3D0280F500695A43204251C9830454CA8A2E7AC.mft File: B3D0280F500695A43204251C9830454CA8A2E7AC.mft (raw, json) Hash identifier: CHdxeUhUJkrgKByG/TPm9laFjwwke4oIpfFY2GdbKEQ= Subject key identifier: 0C:AD:D3:97:DD:13:60:36:4E:0B:F0:17:05:BC:17:75:10:72:92:C3 Authority key identifier: B3:D0:28:0F:50:06:95:A4:32:04:25:1C:98:30:45:4C:A8:A2:E7:AC Certificate issuer: /CN=b3d0280f500695a43204251c9830454ca8a2e7ac Certificate serial: 3FA147EEF66DB911867F3BEE65E69F2AF87CA3DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s9AoD1AGlaQyBCUcmDBFTKii56w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/87ae25f3-706b-47ed-bb74-46684ae0ef2b/0/B3D0280F500695A43204251C9830454CA8A2E7AC.mft Manifest number: 0345 Signing time: Sun 25 Jan 2026 18:10:27 +0000 Manifest this update: Sun 25 Jan 2026 18:05:27 +0000 Manifest next update: Mon 26 Jan 2026 20:53:27 +0000 Files and hashes: 1: 3138352e3138362e32362e302f32342d3234203d3e20323135373033.roa (hash: 64uxD3jQtXWcavfYFljDhJHJgbOPhGll/0DiDk/jIuA=) 2: B3D0280F500695A43204251C9830454CA8A2E7AC.crl (hash: aYG2n/duDB1JYEKmpTqbTa/h703alyf98FupEF7QKwE=) 3: 3138352e3138362e32352e302f32342d3234203d3e203135343430.roa (hash: zbKaWYwmjPPC167P5YL6I94JcPZEWN0HKnmqpfcR9u4=) 4: 3138352e3138362e32352e302f32342d3234203d3e20323133373732.roa (hash: KbS5MjAty6bkNu2TCkQpJN6TOq9xU7ustWBHWVtQeSQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/87ae25f3-706b-47ed-bb74-46684ae0ef2b/0/B3D0280F500695A43204251C9830454CA8A2E7AC.crl rsync://rsync.paas.rpki.ripe.net/repository/87ae25f3-706b-47ed-bb74-46684ae0ef2b/0/B3D0280F500695A43204251C9830454CA8A2E7AC.mft rsync://rpki.ripe.net/repository/DEFAULT/s9AoD1AGlaQyBCUcmDBFTKii56w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:a1:47:ee:f6:6d:b9:11:86:7f:3b:ee:65:e6:9f:2a:f8:7c:a3:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b3d0280f500695a43204251c9830454ca8a2e7ac Validity Not Before: Jan 25 18:05:27 2026 GMT Not After : Jan 26 20:53:27 2026 GMT Subject: CN=0CADD397DD1360364E0BF01705BC1775107292C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:c8:2e:1c:94:af:73:91:69:1e:5c:ce:1d:85: ec:00:64:00:5c:e9:17:4d:8c:64:3d:29:6d:1b:87: 9b:1f:e4:2f:01:cb:8f:a0:1d:4b:ef:bf:6a:cc:22: 89:97:e9:98:30:64:bb:c2:4f:3a:e9:a2:84:c2:9b: 6b:07:e6:53:73:fa:37:cf:36:87:5c:b4:93:e5:0e: 6b:d9:7b:6c:fa:6f:cf:39:f1:ef:32:2b:6f:4d:3e: 36:85:11:e7:53:d7:d4:e6:85:d9:7f:e8:62:a6:b5: 77:95:16:12:e0:ef:1b:16:89:b5:14:90:f5:1c:d3: 07:8c:4f:75:88:4d:0b:01:7b:ba:c6:75:cf:7c:bf: 28:3e:4a:f0:87:87:4b:25:5d:2a:a4:b8:d6:22:15: a1:f4:38:97:1b:46:af:8e:7f:fc:9f:cc:71:71:fa: ea:85:c7:86:ee:68:3c:39:93:10:25:3a:6e:f9:63: cb:d2:86:e9:22:bf:72:02:0c:aa:ee:17:da:c5:88: ff:bb:d0:ff:88:25:d3:62:45:f3:17:02:da:39:30: 49:d7:4f:96:a4:23:a5:31:fe:92:5b:66:e7:25:9b: 1a:1b:9e:5e:29:19:57:cc:eb:89:e8:d6:ba:90:3b: 41:03:b0:61:94:01:a0:68:7c:57:61:cb:3a:cf:ab: 23:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:AD:D3:97:DD:13:60:36:4E:0B:F0:17:05:BC:17:75:10:72:92:C3 X509v3 Authority Key Identifier: keyid:B3:D0:28:0F:50:06:95:A4:32:04:25:1C:98:30:45:4C:A8:A2:E7:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/87ae25f3-706b-47ed-bb74-46684ae0ef2b/0/B3D0280F500695A43204251C9830454CA8A2E7AC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9AoD1AGlaQyBCUcmDBFTKii56w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/87ae25f3-706b-47ed-bb74-46684ae0ef2b/0/B3D0280F500695A43204251C9830454CA8A2E7AC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:ae:13:88:13:a7:b2:1f:40:f4:08:dc:92:fb:2b:d7:49:72: 9d:79:6b:8a:3f:2e:84:65:5a:1a:3c:8a:0b:95:f6:14:0a:e3: 93:49:80:04:17:74:9b:c1:03:24:bd:eb:ad:e2:2a:10:a4:5b: b3:04:ea:cf:d5:c8:4b:42:e9:ad:bf:44:f9:f9:8c:67:3c:ff: dd:18:89:1c:c1:8a:ee:e6:49:63:c7:2d:5b:6d:33:16:cc:9a: b2:01:1b:3f:1f:d5:58:db:e0:d5:45:5c:9c:98:d3:82:ea:aa: ea:c2:9e:12:e0:ae:51:ea:19:62:27:18:9e:8f:9d:2b:7e:21: 36:78:d8:cd:9b:a1:57:cf:5f:5e:32:a5:88:c8:55:04:c8:92: 5b:e3:10:3a:8c:fe:24:80:09:80:20:e5:a9:a3:25:60:28:63: 56:84:d0:0a:f6:d2:5b:4f:d8:00:df:8e:44:d5:15:c5:7e:7b: 9f:47:a1:ac:47:37:75:0c:1b:a7:35:4c:d3:9a:62:51:d6:56: b6:2e:4f:08:87:70:5c:15:ac:96:66:7a:b9:e6:dd:7d:79:6b: c5:eb:d5:97:0c:d3:5a:89:df:75:ba:2a:8f:7e:cc:07:0e:7d: 79:36:b3:03:2d:0f:ad:c3:ee:ef:db:f4:85:fd:bf:e4:69:2b: 0b:4d:c7:af -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUP6FH7vZtuRGGfzvuZeafKvh8o98wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYjNkMDI4MGY1MDA2OTVhNDMyMDQyNTFjOTgzMDQ1NGNh OGEyZTdhYzAeFw0yNjAxMjUxODA1MjdaFw0yNjAxMjYyMDUzMjdaMDMxMTAvBgNV BAMTKDBDQUREMzk3REQxMzYwMzY0RTBCRjAxNzA1QkMxNzc1MTA3MjkyQzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCKyC4clK9zkWkeXM4dhewAZABc 6RdNjGQ9KW0bh5sf5C8By4+gHUvvv2rMIomX6ZgwZLvCTzrpooTCm2sH5lNz+jfP NodctJPlDmvZe2z6b8858e8yK29NPjaFEedT19Tmhdl/6GKmtXeVFhLg7xsWibUU kPUc0weMT3WITQsBe7rGdc98vyg+SvCHh0slXSqkuNYiFaH0OJcbRq+Of/yfzHFx +uqFx4buaDw5kxAlOm75Y8vShukiv3ICDKruF9rFiP+70P+IJdNiRfMXAto5MEnX T5akI6Ux/pJbZuclmxobnl4pGVfM64no1rqQO0EDsGGUAaBofFdhyzrPqyPpAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUDK3Tl90TYDZOC/AXBbwXdRByksMwHwYDVR0j BBgwFoAUs9AoD1AGlaQyBCUcmDBFTKii56wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODdhZTI1ZjMtNzA2Yi00N2VkLWJiNzQtNDY2ODRhZTBl ZjJiLzAvQjNEMDI4MEY1MDA2OTVBNDMyMDQyNTFDOTgzMDQ1NENBOEEyRTdBQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3M5QW9EMUFHbGFReUJDVWNtREJGVEtp aTU2dy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84N2FlMjVmMy03 MDZiLTQ3ZWQtYmI3NC00NjY4NGFlMGVmMmIvMC9CM0QwMjgwRjUwMDY5NUE0MzIw NDI1MUM5ODMwNDU0Q0E4QTJFN0FDLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaq4TiBOnsh9A9Ajckvsr 10lynXlrij8uhGVaGjyKC5X2FArjk0mABBd0m8EDJL3rreIqEKRbswTqz9XIS0Lp rb9E+fmMZzz/3RiJHMGK7uZJY8ctW20zFsyasgEbPx/VWNvg1UVcnJjTguqq6sKe EuCuUeoZYicYno+dK34hNnjYzZuhV89fXjKliMhVBMiSW+MQOoz+JIAJgCDlqaMl YChjVoTQCvbSW0/YAN+ORNUVxX57n0ehrEc3dQwbpzVM05piUdZWti5PCIdwXBWs lmZ6uebdfXlrxevVlwzTWonfdboqj37MBw59eTazAy0PrcPu79v0hf2/5GkrC03H rw== -----END CERTIFICATE-----Generated at Sun Jan 25 21:10:40 2026 by rpki-client