This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.mft File: B149F23A3E99C4760297DD7104B400C835D86D19.mft (raw, json) Hash identifier: xcNfMUrhqKKbsRgOKtI8xXykuAtD1Dc9JtooqMtJij8= Subject key identifier: DC:03:E0:C9:17:46:1A:E1:FA:96:41:35:4F:A5:15:23:5C:90:AD:8B Authority key identifier: B1:49:F2:3A:3E:99:C4:76:02:97:DD:71:04:B4:00:C8:35:D8:6D:19 Certificate issuer: /CN=B149F23A3E99C4760297DD7104B400C835D86D19 Certificate serial: 71FFDA0BD42C8625F610CB5A2649A2101BB0B32D Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B149F23A3E99C4760297DD7104B400C835D86D19.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.mft Manifest number: D9 Signing time: Sat 24 Jan 2026 17:02:19 +0000 Manifest this update: Sat 24 Jan 2026 16:57:19 +0000 Manifest next update: Sun 25 Jan 2026 19:37:19 +0000 Files and hashes: 1: 326131343a373538333a663436303a3a2f34342d3438203d3e20323034353339.roa (hash: eK2I8NNfEPTCbHsIoeKMUzU2EbiQp+1aLucAqTV09UA=) 2: 326131343a373538333a663436303a3a2f34342d3438203d3e20323131353735.roa (hash: LMFmuLJ4IgxIQCv2slhgNeKFDMCx6rSWhmkOn3RblbI=) 3: 326131343a373538333a663436303a3a2f34342d3438203d3e20323134373230.roa (hash: 4YEjtMXLVEjj9+5CMQ85BeokEYmpgzJkQtl+GYY10z4=) 4: B149F23A3E99C4760297DD7104B400C835D86D19.crl (hash: jhiLIvQQ2lMT4NL0xowMCSaeu8k8RJCeCTSdvzrg3pY=) 5: ECC2D1AF90663968C0983906E34503A5F531FBA9.cer (hash: 7yhtiP6LYY9iuIZqKiSw4vGWqamY84tAaUqjWikPsq8=) 6: E2D8063C20C5FF1C1C1ACC3AD4E9D0C0C8648229.cer (hash: ttIHeVow2IErbUXmp4n67KjX2H68UmfVMTfPkOmulDw=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.crl rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B149F23A3E99C4760297DD7104B400C835D86D19.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 19:37:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:ff:da:0b:d4:2c:86:25:f6:10:cb:5a:26:49:a2:10:1b:b0:b3:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B149F23A3E99C4760297DD7104B400C835D86D19 Validity Not Before: Jan 24 16:57:19 2026 GMT Not After : Jan 25 19:37:19 2026 GMT Subject: CN=DC03E0C917461AE1FA9641354FA515235C90AD8B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:ba:75:6a:bd:95:02:27:75:3b:55:7a:33:ff: 1b:f8:61:90:31:c6:b0:a7:ed:d6:c5:c5:20:d1:fe: 43:80:41:54:a1:f0:0c:41:2a:d3:2a:8f:d2:2d:1a: 0c:5d:c2:08:ef:df:04:a5:2c:9f:7c:1f:cc:8d:80: ad:52:10:fa:e3:5f:c6:41:8c:fd:bf:e2:66:4b:4d: 57:56:aa:ae:65:68:40:90:b1:c8:7c:78:88:a2:0c: bc:df:d5:9f:68:6a:ab:d4:3f:72:9b:b3:0b:1f:de: 1f:cd:e4:fe:d6:98:35:aa:16:c3:c2:7c:88:1e:16: 78:32:b4:d1:45:94:d1:f1:64:e7:4e:48:91:d5:f0: cf:4d:b5:ad:c0:04:2e:4f:26:4b:bd:44:8d:d2:e0: cd:d4:de:2b:c9:28:85:13:c3:bf:09:66:18:cf:91: a0:e0:93:b6:7c:0c:dd:8e:ca:e9:84:86:3d:50:eb: 26:4c:ac:2c:d0:f2:99:00:eb:c1:91:67:05:76:bc: 5c:09:a6:9f:f6:9b:ec:2d:89:75:9b:f6:9b:19:54: a8:a1:83:2e:9e:ee:c6:af:97:24:f5:9f:3a:69:e4: e0:c1:09:3a:9e:f5:20:14:0f:96:f8:97:a6:0f:5c: 78:66:7d:09:af:03:11:2b:7b:81:dc:95:42:bc:ed: 5a:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:03:E0:C9:17:46:1A:E1:FA:96:41:35:4F:A5:15:23:5C:90:AD:8B X509v3 Authority Key Identifier: keyid:B1:49:F2:3A:3E:99:C4:76:02:97:DD:71:04:B4:00:C8:35:D8:6D:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B149F23A3E99C4760297DD7104B400C835D86D19.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:7c:a4:5a:3d:95:80:e8:a9:ba:d0:73:b6:7d:3c:9c:49:bf: 25:7e:8e:67:1a:5c:17:c9:b6:14:02:96:7c:47:c0:9f:19:36: d4:e1:94:9e:30:56:de:43:c4:5f:bc:ce:39:48:cf:1c:55:31: 71:2f:7b:a5:81:82:a0:d5:38:44:5c:3f:2d:87:23:d9:6e:99: 4b:7c:2d:9f:86:82:82:1e:03:b7:16:2e:88:60:f9:30:91:38: b9:97:73:9f:de:06:15:8e:14:9e:6e:f3:81:bd:54:56:81:44: ad:d2:93:c3:88:e9:6a:e0:ea:9f:ed:c3:e0:2f:7a:88:5b:ce: b0:c4:80:32:a7:6d:d4:d9:8b:a2:2b:97:c8:8a:cd:0d:80:e6: 73:7e:fc:f8:47:a7:53:54:3d:a9:e3:87:0a:6f:84:6a:37:e2: 3a:0b:02:a9:7d:5b:d4:89:20:16:0c:3e:f3:94:69:46:3f:b5: 47:b0:45:08:9a:f0:24:0e:ac:14:45:b0:99:19:16:7c:cd:e5: 46:cc:4e:37:04:79:88:ff:03:50:11:39:a5:e5:49:c1:9c:07: 89:bb:33:66:69:6b:19:3b:e2:4f:a8:05:65:1c:9c:db:a3:09: 44:51:b8:a8:62:19:2d:62:50:a3:5a:e9:a0:c4:ba:55:04:59: 98:7b:aa:37 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUcf/aC9QshiX2EMtaJkmiEBuwsy0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjE0OUYyM0EzRTk5QzQ3NjAyOTdERDcxMDRCNDAwQzgz NUQ4NkQxOTAeFw0yNjAxMjQxNjU3MTlaFw0yNjAxMjUxOTM3MTlaMDMxMTAvBgNV BAMTKERDMDNFMEM5MTc0NjFBRTFGQTk2NDEzNTRGQTUxNTIzNUM5MEFEOEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhunVqvZUCJ3U7VXoz/xv4YZAx xrCn7dbFxSDR/kOAQVSh8AxBKtMqj9ItGgxdwgjv3wSlLJ98H8yNgK1SEPrjX8ZB jP2/4mZLTVdWqq5laECQsch8eIiiDLzf1Z9oaqvUP3Kbswsf3h/N5P7WmDWqFsPC fIgeFngytNFFlNHxZOdOSJHV8M9Nta3ABC5PJku9RI3S4M3U3ivJKIUTw78JZhjP kaDgk7Z8DN2OyumEhj1Q6yZMrCzQ8pkA68GRZwV2vFwJpp/2m+wtiXWb9psZVKih gy6e7savlyT1nzpp5ODBCTqe9SAUD5b4l6YPXHhmfQmvAxEre4HclUK87VptAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU3APgyRdGGuH6lkE1T6UVI1yQrYswHwYDVR0j BBgwFoAUsUnyOj6ZxHYCl91xBLQAyDXYbRkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOTgxZjk3ODItODk4ZS00YjgzLTk1ZTYtNGZmNGFiNzVj OWRjLzIvQjE0OUYyM0EzRTk5QzQ3NjAyOTdERDcxMDRCNDAwQzgzNUQ4NkQxOS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9CMTQ5RjIzQTNFOTlDNDc2MDI5N0RENzEw NEI0MDBDODM1RDg2RDE5LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 Lzk4MWY5NzgyLTg5OGUtNGI4My05NWU2LTRmZjRhYjc1YzlkYy8yL0IxNDlGMjNB M0U5OUM0NzYwMjk3REQ3MTA0QjQwMEM4MzVEODZEMTkubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAnfKRa PZWA6Km60HO2fTycSb8lfo5nGlwXybYUApZ8R8CfGTbU4ZSeMFbeQ8RfvM45SM8c VTFxL3ulgYKg1ThEXD8thyPZbplLfC2fhoKCHgO3Fi6IYPkwkTi5l3Of3gYVjhSe bvOBvVRWgUSt0pPDiOlq4Oqf7cPgL3qIW86wxIAyp23U2YuiK5fIis0NgOZzfvz4 R6dTVD2p44cKb4RqN+I6CwKpfVvUiSAWDD7zlGlGP7VHsEUImvAkDqwURbCZGRZ8 zeVGzE43BHmI/wNQETml5UnBnAeJuzNmaWsZO+JPqAVlHJzbowlEUbioYhktYlCj WumgxLpVBFmYe6o3 -----END CERTIFICATE-----Generated at Sun Jan 25 14:21:31 2026 by rpki-client