This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.mft File: B172548FA3C460E26CB519EE524361BCA6C7132E.mft (raw, json) Hash identifier: TJRWghoXxzqQtsgAbNIngILKzo+t6TQ0fyBLDDmF9Q8= Subject key identifier: D1:EB:0A:1E:CB:84:FB:20:43:7F:58:17:63:B4:D5:D6:A1:F7:52:4F Authority key identifier: B1:72:54:8F:A3:C4:60:E2:6C:B5:19:EE:52:43:61:BC:A6:C7:13:2E Certificate issuer: /CN=b172548fa3c460e26cb519ee524361bca6c7132e Certificate serial: 012DBD17F9E262A99013A3988A94AF69F5E746EE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.mft Manifest number: 0473 Signing time: Sat 24 Jan 2026 20:44:53 +0000 Manifest this update: Sat 24 Jan 2026 20:39:53 +0000 Manifest next update: Sun 25 Jan 2026 21:16:53 +0000 Files and hashes: 1: 39332e39352e3131382e302f32342d3234203d3e20313336353537.roa (hash: RxEOrEQDuw8FdSr63g/e7GeuRwx0a/xo6StPeRUp3pQ=) 2: 39332e39352e3131322e302f32342d3234203d3e20333937393233.roa (hash: xW60VF00UJ78V2ZgHJcPViZgzWFpqx2V/5GdcswFg/k=) 3: 39332e39352e3131332e302f32342d3234203d3e203136323736.roa (hash: cS6LWz+NEHJoa0EQVb5z92UR8C9jaztUFOxHHwpRPsY=) 4: 39332e39352e3131342e302f32342d3234203d3e20383334.roa (hash: 9slNHWe/rU70bOx5vd9mZUqmB1nBl1QE+Gk0eZLBnt8=) 5: 39332e39352e3131362e302f32342d3234203d3e203630373831.roa (hash: wiR4lXrHDBacVR9rhY/OZ5EVnNOlMyR8f6ZVRqs7p88=) 6: B172548FA3C460E26CB519EE524361BCA6C7132E.crl (hash: 5aFlbQnJ4DLlW9eIUeWWDOaltaUheZu3BB8ffrfM1Yo=) 7: 39332e39352e3131392e302f32342d3234203d3e20323135343337.roa (hash: fzZO0LU0Zg6LT5tIVAqNcA3S+CyddC4kIOBWwsfw5Ho=) 8: 39332e39352e3131352e302f32342d3234203d3e20313938353834.roa (hash: FutqYRyHBMmN+0PD6TfHd0Z48pzfzxz1hCrgLY7AwAA=) 9: 39332e39352e3131352e302f32342d3234203d3e20313335333932.roa (hash: fGOsLQpuq7w+Mlth5Jlzw6zSul9g+K81meekR3kD4oA=) 10: 39332e39352e3131372e302f32342d3234203d3e203231383539.roa (hash: Un+iljfa6BQzZnEghHopYhiwkN2j6KkmFMitjF4eFLQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.crl rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.mft rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 21:16:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:2d:bd:17:f9:e2:62:a9:90:13:a3:98:8a:94:af:69:f5:e7:46:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b172548fa3c460e26cb519ee524361bca6c7132e Validity Not Before: Jan 24 20:39:53 2026 GMT Not After : Jan 25 21:16:53 2026 GMT Subject: CN=D1EB0A1ECB84FB20437F581763B4D5D6A1F7524F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:d9:4f:48:36:d3:36:b0:e2:a8:69:bc:e9:84: aa:98:60:e5:24:0b:07:12:a1:ee:9b:40:39:38:17: d3:4c:7c:ce:6f:10:2e:72:5f:3f:f0:80:f8:8b:3e: 06:4e:fc:d2:9c:5a:42:5e:fa:4b:f9:48:ef:29:93: bc:78:0c:52:38:a5:af:24:ed:aa:58:d3:1f:17:2f: 42:87:56:fd:e8:98:23:20:12:10:7b:22:a5:55:c9: 21:29:bb:e7:88:81:10:6d:de:cd:07:24:33:cf:d9: 6f:13:6e:35:c1:8b:82:71:b9:06:c6:5d:22:5e:bb: 40:21:28:2e:33:0c:21:64:41:24:21:14:54:0a:18: 67:73:08:50:c1:7d:83:55:79:1f:fe:00:e7:b9:35: 20:2c:19:78:bf:97:ac:55:a9:88:e8:e2:10:c7:f2: 36:96:dc:08:bd:0e:19:76:41:29:ed:65:9d:5d:f5: 2c:34:28:0e:7b:e3:21:78:d6:64:e9:c0:56:d4:9e: d5:74:30:b0:ad:a1:a2:6e:3a:0b:bf:c7:60:ec:36: 68:e0:c0:8e:32:0e:ba:bb:33:e4:72:8d:70:68:96: ff:02:6b:a7:d2:07:32:b9:21:06:f4:50:61:61:86: fd:5f:68:dc:d1:49:99:8a:22:b1:d8:89:46:66:7c: ab:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:EB:0A:1E:CB:84:FB:20:43:7F:58:17:63:B4:D5:D6:A1:F7:52:4F X509v3 Authority Key Identifier: keyid:B1:72:54:8F:A3:C4:60:E2:6C:B5:19:EE:52:43:61:BC:A6:C7:13:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:a0:84:69:8b:85:af:19:f9:60:12:f5:34:cf:c5:1c:13:8f: b6:3d:be:ee:34:6e:c5:20:92:77:e5:3e:ce:1e:62:5d:a9:e9: 69:f9:ff:b7:2f:f6:19:b2:bf:70:fe:6b:a9:47:eb:13:cf:d8: f3:b0:2e:50:5d:8c:b2:75:4a:8b:bf:32:bb:e2:98:e7:f0:43: d2:54:32:96:ec:87:0f:a5:87:aa:38:94:b4:26:ae:af:74:7b: e3:e6:ee:f3:29:ec:49:da:32:b6:6c:10:f2:c4:0c:49:ef:c0: a0:95:bf:88:92:2f:0d:f5:0e:fc:00:f6:7a:e1:f5:ab:da:f0: d1:2a:75:71:47:94:ca:a5:9f:73:be:e9:ca:34:2e:cc:2a:bf: 4e:0d:18:86:a2:a9:be:71:a4:b0:d1:8b:9a:a7:47:9a:f9:5e: e9:e1:62:3f:4c:71:02:36:e4:c7:2f:42:47:e0:c3:b3:f7:50: 19:00:14:0b:3c:a2:01:05:57:41:0e:13:63:d7:f0:11:c0:96: ec:f1:c2:77:3a:0c:91:c4:04:90:c3:7e:ce:82:81:c5:bf:b3: 66:f5:09:85:dd:a7:67:18:88:63:22:3c:f8:93:6a:9a:29:15: 11:65:c4:2f:c9:7e:cc:1c:17:4e:db:c0:38:ba:b3:0d:cd:f0: 67:b7:f8:5f -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUAS29F/niYqmQE6OYipSvafXnRu4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYjE3MjU0OGZhM2M0NjBlMjZjYjUxOWVlNTI0MzYxYmNh NmM3MTMyZTAeFw0yNjAxMjQyMDM5NTNaFw0yNjAxMjUyMTE2NTNaMDMxMTAvBgNV BAMTKEQxRUIwQTFFQ0I4NEZCMjA0MzdGNTgxNzYzQjRENUQ2QTFGNzUyNEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy2U9INtM2sOKoabzphKqYYOUk CwcSoe6bQDk4F9NMfM5vEC5yXz/wgPiLPgZO/NKcWkJe+kv5SO8pk7x4DFI4pa8k 7apY0x8XL0KHVv3omCMgEhB7IqVVySEpu+eIgRBt3s0HJDPP2W8TbjXBi4JxuQbG XSJeu0AhKC4zDCFkQSQhFFQKGGdzCFDBfYNVeR/+AOe5NSAsGXi/l6xVqYjo4hDH 8jaW3Ai9Dhl2QSntZZ1d9Sw0KA574yF41mTpwFbUntV0MLCtoaJuOgu/x2DsNmjg wI4yDrq7M+RyjXBolv8Ca6fSBzK5IQb0UGFhhv1faNzRSZmKIrHYiUZmfKtjAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU0esKHsuE+yBDf1gXY7TV1qH3Uk8wHwYDVR0j BBgwFoAUsXJUj6PEYOJstRnuUkNhvKbHEy4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOTY1NzNlODgtZGFiYS00YWM3LWEyZWQtMzIxYzgyNzdk MjVlLzAvQjE3MjU0OEZBM0M0NjBFMjZDQjUxOUVFNTI0MzYxQkNBNkM3MTMyRS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3NYSlVqNlBFWU9Kc3RSbnVVa05odkti SEV5NC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85NjU3M2U4OC1k YWJhLTRhYzctYTJlZC0zMjFjODI3N2QyNWUvMC9CMTcyNTQ4RkEzQzQ2MEUyNkNC NTE5RUU1MjQzNjFCQ0E2QzcxMzJFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOKCEaYuFrxn5YBL1NM/F HBOPtj2+7jRuxSCSd+U+zh5iXanpafn/ty/2GbK/cP5rqUfrE8/Y87AuUF2MsnVK i78yu+KY5/BD0lQyluyHD6WHqjiUtCaur3R74+bu8ynsSdoytmwQ8sQMSe/AoJW/ iJIvDfUO/AD2euH1q9rw0Sp1cUeUyqWfc77pyjQuzCq/Tg0YhqKpvnGksNGLmqdH mvle6eFiP0xxAjbkxy9CR+DDs/dQGQAUCzyiAQVXQQ4TY9fwEcCW7PHCdzoMkcQE kMN+zoKBxb+zZvUJhd2nZxiIYyI8+JNqmikVEWXEL8l+zBwXTtvAOLqzDc3wZ7f4 Xw== -----END CERTIFICATE-----Generated at Sun Jan 25 10:43:10 2026 by rpki-client