This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/2/86DD27EAC36DD2299C2889AA376F963DAE72F42B.mft File: 86DD27EAC36DD2299C2889AA376F963DAE72F42B.mft (raw, json) Hash identifier: i2JyW++4WbE5Y8zxF2tW6uZmMeC6q/rZiniHTZ64wx4= Subject key identifier: C1:9B:AD:CE:59:D9:93:75:16:CC:D7:DD:42:9F:05:BA:07:59:6F:66 Authority key identifier: 86:DD:27:EA:C3:6D:D2:29:9C:28:89:AA:37:6F:96:3D:AE:72:F4:2B Certificate issuer: /CN=86dd27eac36dd2299c2889aa376f963dae72f42b Certificate serial: 2622EB72D66DBF49E7C3B6417F23F290DBBBC780 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ht0n6sNt0imcKImqN2-WPa5y9Cs.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/2/86DD27EAC36DD2299C2889AA376F963DAE72F42B.mft Manifest number: 1E Signing time: Sun 25 Jan 2026 22:01:27 +0000 Manifest this update: Sun 25 Jan 2026 21:56:27 +0000 Manifest next update: Mon 26 Jan 2026 23:09:27 +0000 Files and hashes: 1: 86DD27EAC36DD2299C2889AA376F963DAE72F42B.crl (hash: k90jWTihMd25EzUv2CbInFgXLd0Vkw2Y6qd+5ndahQc=) 2: AS204518.asa (hash: +a70Dretrb4KJ4yzwih5lF1Jn0AeV/QnsDhvKdho2Ts=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/2/86DD27EAC36DD2299C2889AA376F963DAE72F42B.crl rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/2/86DD27EAC36DD2299C2889AA376F963DAE72F42B.mft rsync://rpki.ripe.net/repository/DEFAULT/ht0n6sNt0imcKImqN2-WPa5y9Cs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:22:eb:72:d6:6d:bf:49:e7:c3:b6:41:7f:23:f2:90:db:bb:c7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86dd27eac36dd2299c2889aa376f963dae72f42b Validity Not Before: Jan 25 21:56:27 2026 GMT Not After : Jan 26 23:09:27 2026 GMT Subject: CN=C19BADCE59D9937516CCD7DD429F05BA07596F66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:80:d4:bc:55:82:f4:90:fe:c2:45:52:0b:ee: 05:ed:18:6d:64:1c:db:ee:6e:de:e0:a9:ee:9e:0d: bd:ff:90:44:cc:b5:15:8e:cb:2c:64:3c:12:de:f6: f8:bf:54:d0:8a:a9:30:c2:1c:80:ae:02:9c:0d:65: 2c:48:95:88:bd:b7:a6:ff:22:95:68:d8:77:d4:bc: 50:5c:46:fa:32:b9:63:fd:6f:b2:b5:aa:fc:fe:29: 08:ca:c2:d7:da:0a:a2:be:43:03:09:c2:d3:00:98: b6:a2:ad:07:98:94:22:e2:2e:09:2a:b7:9f:cd:9e: f1:51:8b:2f:43:c2:51:20:5e:29:3a:29:ec:af:9a: d4:dd:37:44:81:db:1c:3d:ae:81:95:bd:6e:72:28: 6f:20:2b:8b:15:37:c2:90:66:a5:b3:2b:2e:6b:37: bd:26:0b:91:e3:3a:44:e8:64:85:f6:eb:ea:fb:33: f7:f5:4e:ce:81:3d:00:47:5f:6a:3a:86:2e:3c:9b: 3d:0b:67:0f:61:e4:fa:1f:79:7d:97:9c:b3:2b:a2: 9b:9c:6f:d9:f9:24:69:af:72:69:2c:36:b2:9e:46: a8:6a:76:60:6f:97:27:02:03:96:fd:3e:a2:ee:c0: 24:0b:c3:da:da:e8:8a:00:2b:7e:77:f6:86:38:f2: e8:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:9B:AD:CE:59:D9:93:75:16:CC:D7:DD:42:9F:05:BA:07:59:6F:66 X509v3 Authority Key Identifier: keyid:86:DD:27:EA:C3:6D:D2:29:9C:28:89:AA:37:6F:96:3D:AE:72:F4:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/2/86DD27EAC36DD2299C2889AA376F963DAE72F42B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ht0n6sNt0imcKImqN2-WPa5y9Cs.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/2/86DD27EAC36DD2299C2889AA376F963DAE72F42B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:fb:8a:20:49:ae:60:e0:28:14:50:ec:47:8b:e1:42:50:9e: d7:23:f7:32:8f:32:a3:86:7b:2b:0b:d6:0b:87:05:03:62:c1: e6:60:70:11:4b:5e:24:43:c2:ec:99:fe:a8:a9:5c:53:98:3e: 73:ac:01:a7:b4:4a:75:47:72:e4:70:2a:ec:91:e0:d2:9b:17: eb:f7:64:11:5e:0a:af:99:df:99:12:f2:cb:eb:50:0d:3c:5e: 8f:94:3f:d3:7a:55:c6:48:c6:f5:0b:04:ca:90:e6:8c:b8:b2: 71:46:16:28:02:95:b7:8d:76:45:f5:d5:ba:5d:75:92:e2:ef: 9e:f1:78:91:6a:3c:b7:83:62:56:c8:f6:d7:0f:db:13:a7:8d: 4b:aa:89:81:5e:5a:04:28:0d:d8:f7:f3:72:10:1c:91:b3:eb: 3c:49:f4:62:72:30:e6:84:ff:40:0c:16:2b:10:2e:4b:a3:56: ea:99:02:da:2e:78:2e:1d:d5:22:c7:27:68:92:0d:3a:fc:0e: bb:0d:32:f4:14:f5:ff:38:a3:3f:a3:a5:31:a7:54:82:2a:1e: 19:17:44:8c:e5:62:17:50:84:9c:d4:a9:f9:1a:20:15:cf:90: 1a:70:17:e0:37:87:c7:cf:1f:29:47:d1:43:d9:ea:e0:de:79: b2:37:fa:ca -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUJiLrctZtv0nnw7ZBfyPykNu7x4AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODZkZDI3ZWFjMzZkZDIyOTljMjg4OWFhMzc2Zjk2M2Rh ZTcyZjQyYjAeFw0yNjAxMjUyMTU2MjdaFw0yNjAxMjYyMzA5MjdaMDMxMTAvBgNV BAMTKEMxOUJBRENFNTlEOTkzNzUxNkNDRDdERDQyOUYwNUJBMDc1OTZGNjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQgNS8VYL0kP7CRVIL7gXtGG1k HNvubt7gqe6eDb3/kETMtRWOyyxkPBLe9vi/VNCKqTDCHICuApwNZSxIlYi9t6b/ IpVo2HfUvFBcRvoyuWP9b7K1qvz+KQjKwtfaCqK+QwMJwtMAmLairQeYlCLiLgkq t5/NnvFRiy9DwlEgXik6KeyvmtTdN0SB2xw9roGVvW5yKG8gK4sVN8KQZqWzKy5r N70mC5HjOkToZIX26+r7M/f1Ts6BPQBHX2o6hi48mz0LZw9h5PofeX2XnLMropuc b9n5JGmvcmksNrKeRqhqdmBvlycCA5b9PqLuwCQLw9ra6IoAK3539oY48uiLAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUwZutzlnZk3UWzNfdQp8FugdZb2YwHwYDVR0j BBgwFoAUht0n6sNt0imcKImqN2+WPa5y9CswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOGFmYjVmZTItM2MyYS00OTM5LTk1ZTktMDA3N2I4MGI0 ZjBlLzIvODZERDI3RUFDMzZERDIyOTlDMjg4OUFBMzc2Rjk2M0RBRTcyRjQyQi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2h0MG42c050MGltY0tJbXFOMi1XUGE1 eTlDcy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84YWZiNWZlMi0z YzJhLTQ5MzktOTVlOS0wMDc3YjgwYjRmMGUvMi84NkREMjdFQUMzNkREMjI5OUMy ODg5QUEzNzZGOTYzREFFNzJGNDJCLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEfuKIEmuYOAoFFDsR4vh QlCe1yP3Mo8yo4Z7KwvWC4cFA2LB5mBwEUteJEPC7Jn+qKlcU5g+c6wBp7RKdUdy 5HAq7JHg0psX6/dkEV4Kr5nfmRLyy+tQDTxej5Q/03pVxkjG9QsEypDmjLiycUYW KAKVt412RfXVul11kuLvnvF4kWo8t4NiVsj21w/bE6eNS6qJgV5aBCgN2PfzchAc kbPrPEn0YnIw5oT/QAwWKxAuS6NW6pkC2i54Lh3VIscnaJINOvwOuw0y9BT1/zij P6OlMadUgioeGRdEjOViF1CEnNSp+RogFc+QGnAX4DeHx88fKUfRQ9nq4N55sjf6 yg== -----END CERTIFICATE-----Generated at Mon Jan 26 01:40:12 2026 by rpki-client