This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/90821899-77a6-43a7-9a82-0a38ff3b4ad0/0/EC5F579A068CE6CFBF46FDA7C3EB4DD6F94653F1.mft File: EC5F579A068CE6CFBF46FDA7C3EB4DD6F94653F1.mft (raw, json) Hash identifier: BnL9wo1NJOor+C6T98MsUuxzeJ7Ary0Va2bFVkhaVv0= Subject key identifier: 61:77:25:C2:2D:41:A1:B1:1A:C5:B5:49:B0:4B:F6:E2:39:D1:0D:70 Authority key identifier: EC:5F:57:9A:06:8C:E6:CF:BF:46:FD:A7:C3:EB:4D:D6:F9:46:53:F1 Certificate issuer: /CN=EC5F579A068CE6CFBF46FDA7C3EB4DD6F94653F1 Certificate serial: 0CBEF6AAB6FF4FC5182639E4E3633FE8C2D0E810 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/EC5F579A068CE6CFBF46FDA7C3EB4DD6F94653F1.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/90821899-77a6-43a7-9a82-0a38ff3b4ad0/0/EC5F579A068CE6CFBF46FDA7C3EB4DD6F94653F1.mft Manifest number: 10 Signing time: Sun 25 Jan 2026 09:00:37 +0000 Manifest this update: Sun 25 Jan 2026 08:55:37 +0000 Manifest next update: Mon 26 Jan 2026 12:21:37 +0000 Files and hashes: 1: 326131343a373538313a333830303a3a2f34302d3438203d3e20313531363733.roa (hash: r53+tlnjK7xAc5kJlxhFUell1c4S1jQNbSq/pievGCs=) 2: EC5F579A068CE6CFBF46FDA7C3EB4DD6F94653F1.crl (hash: RIAuuq1138EpQvki8idyeC3x0P4JviK+qxbYiNLmiM8=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/90821899-77a6-43a7-9a82-0a38ff3b4ad0/0/EC5F579A068CE6CFBF46FDA7C3EB4DD6F94653F1.crl rsync://rsync.paas.rpki.ripe.net/repository/90821899-77a6-43a7-9a82-0a38ff3b4ad0/0/EC5F579A068CE6CFBF46FDA7C3EB4DD6F94653F1.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/EC5F579A068CE6CFBF46FDA7C3EB4DD6F94653F1.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 01:36:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:be:f6:aa:b6:ff:4f:c5:18:26:39:e4:e3:63:3f:e8:c2:d0:e8:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EC5F579A068CE6CFBF46FDA7C3EB4DD6F94653F1 Validity Not Before: Jan 25 08:55:37 2026 GMT Not After : Jan 26 12:21:37 2026 GMT Subject: CN=617725C22D41A1B11AC5B549B04BF6E239D10D70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:49:f0:99:cb:39:4e:3c:e5:d9:50:62:a3:4c: c9:ff:d7:50:9a:fd:ba:f3:c0:29:4a:a2:e3:ed:a8: a2:73:ad:d4:91:b9:14:03:a6:ab:64:78:3f:da:8f: e7:54:93:bc:a0:89:b3:a9:12:ef:f1:9a:0f:7c:4e: 6f:d7:06:23:e7:1b:3a:38:31:db:80:fd:5b:b5:7c: d0:98:cd:53:e5:d8:3f:6c:73:91:6d:ad:d0:03:6d: 42:8b:d3:cc:4a:3a:3f:f2:6d:fc:54:cf:41:77:e9: 39:81:2b:77:85:d2:a4:63:1f:86:aa:e6:d4:21:2b: c4:18:2f:73:97:1f:69:95:7d:3a:7a:ba:23:10:13: a7:60:39:48:cf:ec:cf:79:65:8a:2d:82:88:bc:93: ab:08:24:77:ab:ec:73:c3:27:93:37:57:64:63:95: 82:53:a2:02:05:35:68:9e:a4:d9:d3:4b:a2:77:69: 74:67:15:fd:ec:d9:85:3e:6b:b3:89:95:50:84:1d: 04:6b:28:be:f0:7f:dd:07:4a:44:c8:d0:5a:c7:2a: 59:84:f8:ee:67:18:84:63:93:fe:86:4a:7e:e4:b6: 23:41:9d:43:90:93:26:6d:2c:4f:d0:a3:fa:75:0e: 35:7c:52:40:44:4f:c6:8b:39:9e:ff:d9:90:0f:d1: dc:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:77:25:C2:2D:41:A1:B1:1A:C5:B5:49:B0:4B:F6:E2:39:D1:0D:70 X509v3 Authority Key Identifier: keyid:EC:5F:57:9A:06:8C:E6:CF:BF:46:FD:A7:C3:EB:4D:D6:F9:46:53:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/90821899-77a6-43a7-9a82-0a38ff3b4ad0/0/EC5F579A068CE6CFBF46FDA7C3EB4DD6F94653F1.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/EC5F579A068CE6CFBF46FDA7C3EB4DD6F94653F1.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/90821899-77a6-43a7-9a82-0a38ff3b4ad0/0/EC5F579A068CE6CFBF46FDA7C3EB4DD6F94653F1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:71:0e:d8:28:c0:b5:b1:f7:ff:77:78:dc:ad:8e:d4:38:c8: ab:5d:d5:59:82:1c:8d:53:b4:56:f3:b7:fd:94:d4:4f:11:72: b6:b0:99:08:da:ff:fa:cb:e0:7a:c6:13:e9:eb:25:18:e2:07: 3a:98:c1:9f:83:df:c1:06:bd:10:f3:df:ec:be:99:eb:96:61: d6:7e:1e:a1:90:8b:aa:6f:82:be:32:09:3a:c1:09:c4:6f:7a: 1c:95:cb:05:fc:cc:73:45:25:0b:d5:68:d3:f7:7f:b9:17:e9: dc:7d:f8:c4:ee:55:91:3d:cc:fd:49:1d:7a:5b:f9:5b:2a:ee: d5:cb:01:1f:f7:5b:e8:0c:2a:76:15:1b:04:60:17:5e:73:31: 97:91:4b:ee:9a:91:87:3f:96:c4:6f:9d:9f:1b:14:ab:6e:83: f9:dd:8b:3e:de:2d:da:48:bd:f5:d1:fc:a8:15:44:08:cf:73: 62:49:46:d8:4b:b6:69:53:c5:82:e5:b8:84:a6:e1:59:41:8d: 66:72:5c:e4:f5:b3:4d:13:97:ba:7f:a1:b9:7b:b3:4e:58:dd: 21:7b:76:1b:6a:73:b0:e8:7d:76:77:97:41:a0:e1:d6:17:01: 4c:af:1c:5a:50:1a:7c:9b:de:4b:03:f3:2c:6b:78:25:7f:02: e0:54:3d:65 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUDL72qrb/T8UYJjnk42M/6MLQ6BAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUM1RjU3OUEwNjhDRTZDRkJGNDZGREE3QzNFQjRERDZG OTQ2NTNGMTAeFw0yNjAxMjUwODU1MzdaFw0yNjAxMjYxMjIxMzdaMDMxMTAvBgNV BAMTKDYxNzcyNUMyMkQ0MUExQjExQUM1QjU0OUIwNEJGNkUyMzlEMTBENzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOSfCZyzlOPOXZUGKjTMn/11Ca /brzwClKouPtqKJzrdSRuRQDpqtkeD/aj+dUk7ygibOpEu/xmg98Tm/XBiPnGzo4 MduA/Vu1fNCYzVPl2D9sc5FtrdADbUKL08xKOj/ybfxUz0F36TmBK3eF0qRjH4aq 5tQhK8QYL3OXH2mVfTp6uiMQE6dgOUjP7M95ZYotgoi8k6sIJHer7HPDJ5M3V2Rj lYJTogIFNWiepNnTS6J3aXRnFf3s2YU+a7OJlVCEHQRrKL7wf90HSkTI0FrHKlmE +O5nGIRjk/6GSn7ktiNBnUOQkyZtLE/Qo/p1DjV8UkBET8aLOZ7/2ZAP0dwxAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUYXclwi1BobEaxbVJsEv24jnRDXAwHwYDVR0j BBgwFoAU7F9XmgaM5s+/Rv2nw+tN1vlGU/EwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOTA4MjE4OTktNzdhNi00M2E3LTlhODItMGEzOGZmM2I0 YWQwLzAvRUM1RjU3OUEwNjhDRTZDRkJGNDZGREE3QzNFQjRERDZGOTQ2NTNGMS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9FQzVGNTc5QTA2OENFNkNGQkY0NkZEQTdD M0VCNERENkY5NDY1M0YxLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzkwODIxODk5LTc3YTYtNDNhNy05YTgyLTBhMzhmZjNiNGFkMC8wL0VDNUY1NzlB MDY4Q0U2Q0ZCRjQ2RkRBN0MzRUI0REQ2Rjk0NjUzRjEubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAPcQ7Y KMC1sff/d3jcrY7UOMirXdVZghyNU7RW87f9lNRPEXK2sJkI2v/6y+B6xhPp6yUY 4gc6mMGfg9/BBr0Q89/svpnrlmHWfh6hkIuqb4K+Mgk6wQnEb3oclcsF/MxzRSUL 1WjT93+5F+ncffjE7lWRPcz9SR16W/lbKu7VywEf91voDCp2FRsEYBdeczGXkUvu mpGHP5bEb52fGxSrboP53Ys+3i3aSL310fyoFUQIz3NiSUbYS7ZpU8WC5biEpuFZ QY1mclzk9bNNE5e6f6G5e7NOWN0he3YbanOw6H12d5dBoOHWFwFMrxxaUBp8m95L A/Msa3glfwLgVD1l -----END CERTIFICATE-----Generated at Sun Jan 25 15:13:14 2026 by rpki-client