This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9bb77c8a-2d69-4325-b4fa-603388c96bb3/0/DF083FC9C36AB37158AD80E5C84E76BE97ADC09F.mft File: DF083FC9C36AB37158AD80E5C84E76BE97ADC09F.mft (raw, json) Hash identifier: 5ykYOL8Ef5U1p1hsyzgtHnybIZDjIg82jNGWPzyqhUU= Subject key identifier: 58:F5:2B:A6:DD:DD:9C:4B:EB:7D:2D:77:9E:AE:EE:9E:92:20:BB:20 Authority key identifier: DF:08:3F:C9:C3:6A:B3:71:58:AD:80:E5:C8:4E:76:BE:97:AD:C0:9F Certificate issuer: /CN=df083fc9c36ab37158ad80e5c84e76be97adc09f Certificate serial: 1606F53E2AE69D5FCC44CC2A0C3C1E30439DE3EE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3wg_ycNqs3FYrYDlyE52vpetwJ8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9bb77c8a-2d69-4325-b4fa-603388c96bb3/0/DF083FC9C36AB37158AD80E5C84E76BE97ADC09F.mft Manifest number: 4F Signing time: Sun 25 Jan 2026 04:23:44 +0000 Manifest this update: Sun 25 Jan 2026 04:18:44 +0000 Manifest next update: Mon 26 Jan 2026 07:47:44 +0000 Files and hashes: 1: DF083FC9C36AB37158AD80E5C84E76BE97ADC09F.crl (hash: Xp6qCMilQA1yaVI2XNQk1gHl7XI1kHeT4CNeNAClNqk=) 2: 323030313a3637383a313134633a3a2f34382d3438203d3e20323034353335.roa (hash: 9p7lN4fPyJsdHWKsoNbq0ArF1KunMN6fkvMq7UIoE20=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9bb77c8a-2d69-4325-b4fa-603388c96bb3/0/DF083FC9C36AB37158AD80E5C84E76BE97ADC09F.crl rsync://rsync.paas.rpki.ripe.net/repository/9bb77c8a-2d69-4325-b4fa-603388c96bb3/0/DF083FC9C36AB37158AD80E5C84E76BE97ADC09F.mft rsync://rpki.ripe.net/repository/DEFAULT/3wg_ycNqs3FYrYDlyE52vpetwJ8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:47:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:06:f5:3e:2a:e6:9d:5f:cc:44:cc:2a:0c:3c:1e:30:43:9d:e3:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df083fc9c36ab37158ad80e5c84e76be97adc09f Validity Not Before: Jan 25 04:18:44 2026 GMT Not After : Jan 26 07:47:44 2026 GMT Subject: CN=58F52BA6DDDD9C4BEB7D2D779EAEEE9E9220BB20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:85:09:a0:b2:9e:76:4b:ec:ec:c5:bc:c9:e4: f1:61:f5:f0:f1:4c:db:57:cb:84:fe:f5:61:92:12: f4:ff:a2:ab:a2:6f:54:b4:e7:26:b0:c0:46:54:65: 48:1b:b2:ac:94:f6:89:a3:f5:ce:97:f1:f7:bd:69: bc:23:96:58:e1:50:e6:51:d2:1a:d2:3c:70:2a:c5: 5b:63:87:77:a9:87:cc:5a:9d:90:5d:45:34:7b:d3: 3f:34:36:20:c8:dc:ea:dd:89:3e:d5:6a:d8:ab:79: f4:3b:63:3e:08:01:78:6a:ba:ba:c3:f3:7c:74:4b: e8:15:b7:56:51:73:a2:b1:2b:08:af:f2:bc:0b:e7: 7e:c4:7a:d9:73:88:76:ca:84:b5:e9:30:a8:2b:7b: 8d:2e:34:4d:b5:0b:05:17:39:87:01:28:29:f1:4d: 37:00:9d:ce:5e:23:a4:09:04:64:fa:21:1b:81:ec: 78:82:36:5e:a9:53:22:ef:bc:79:92:1d:2a:98:70: 5a:72:f1:e5:28:70:72:73:e0:10:dd:e6:b6:71:af: 79:f3:9c:c3:28:ae:e1:ad:85:04:5c:d1:f4:b2:aa: 88:f5:11:55:3d:28:90:14:73:18:1b:d2:7a:46:be: 20:4d:ff:13:e4:fa:71:c5:ac:ae:9d:d8:e1:be:b7: 33:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:F5:2B:A6:DD:DD:9C:4B:EB:7D:2D:77:9E:AE:EE:9E:92:20:BB:20 X509v3 Authority Key Identifier: keyid:DF:08:3F:C9:C3:6A:B3:71:58:AD:80:E5:C8:4E:76:BE:97:AD:C0:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9bb77c8a-2d69-4325-b4fa-603388c96bb3/0/DF083FC9C36AB37158AD80E5C84E76BE97ADC09F.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3wg_ycNqs3FYrYDlyE52vpetwJ8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9bb77c8a-2d69-4325-b4fa-603388c96bb3/0/DF083FC9C36AB37158AD80E5C84E76BE97ADC09F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:34:20:80:3f:a0:e7:76:f8:ad:72:85:9e:d1:35:ff:75:66: e4:44:2e:f7:e4:2f:3f:fc:ff:1e:b4:96:6b:2f:95:05:ac:fc: 2d:4f:6d:85:a0:0a:97:98:f4:1c:a7:dd:6d:cf:ad:a0:99:20: a5:2b:64:a6:dd:b2:65:ff:30:47:e2:c6:3e:65:0d:9d:50:b4: a3:46:c4:86:cb:fe:ed:2b:da:56:25:2c:8e:b4:65:4f:9a:f1: 72:3e:f8:43:d5:3f:5f:42:24:58:a4:2d:87:ba:c2:b5:a7:3f: 1e:f2:6d:79:1a:2e:21:80:28:3c:c0:5a:dc:07:44:53:19:23: 7f:21:7e:c4:8d:a7:e3:56:06:9c:37:29:93:62:83:71:77:cf: cb:0b:6b:f7:7c:5c:34:c0:1c:0b:22:8d:c9:27:fb:56:aa:45: 15:3b:50:47:d6:0d:48:7b:a1:fd:2f:9a:48:55:20:0d:5b:68: 58:81:a9:79:42:01:7a:17:19:94:9e:35:ce:c8:cc:7b:e1:cb: cb:b3:c5:d3:c4:5e:8c:66:32:bb:cc:2e:c7:35:82:cb:e8:d2: 5d:01:d3:79:16:8f:5c:1a:84:de:9f:e6:ad:f9:4f:4d:f5:b1: 64:9a:f1:a2:7a:93:ac:13:08:28:64:da:29:55:32:7a:5d:13: e2:32:bd:35 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUFgb1PirmnV/MRMwqDDweMEOd4+4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZGYwODNmYzljMzZhYjM3MTU4YWQ4MGU1Yzg0ZTc2YmU5 N2FkYzA5ZjAeFw0yNjAxMjUwNDE4NDRaFw0yNjAxMjYwNzQ3NDRaMDMxMTAvBgNV BAMTKDU4RjUyQkE2RERERDlDNEJFQjdEMkQ3NzlFQUVFRTlFOTIyMEJCMjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxhQmgsp52S+zsxbzJ5PFh9fDx TNtXy4T+9WGSEvT/oquib1S05yawwEZUZUgbsqyU9omj9c6X8fe9abwjlljhUOZR 0hrSPHAqxVtjh3eph8xanZBdRTR70z80NiDI3OrdiT7VatirefQ7Yz4IAXhqurrD 83x0S+gVt1ZRc6KxKwiv8rwL537EetlziHbKhLXpMKgre40uNE21CwUXOYcBKCnx TTcAnc5eI6QJBGT6IRuB7HiCNl6pUyLvvHmSHSqYcFpy8eUocHJz4BDd5rZxr3nz nMMoruGthQRc0fSyqoj1EVU9KJAUcxgb0npGviBN/xPk+nHFrK6d2OG+tzMxAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUWPUrpt3dnEvrfS13nq7unpIguyAwHwYDVR0j BBgwFoAU3wg/ycNqs3FYrYDlyE52vpetwJ8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWJiNzdjOGEtMmQ2OS00MzI1LWI0ZmEtNjAzMzg4Yzk2 YmIzLzAvREYwODNGQzlDMzZBQjM3MTU4QUQ4MEU1Qzg0RTc2QkU5N0FEQzA5Ri5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzN3Z195Y05xczNGWXJZRGx5RTUydnBl dHdKOC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85YmI3N2M4YS0y ZDY5LTQzMjUtYjRmYS02MDMzODhjOTZiYjMvMC9ERjA4M0ZDOUMzNkFCMzcxNThB RDgwRTVDODRFNzZCRTk3QURDMDlGLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKzQggD+g53b4rXKFntE1 /3Vm5EQu9+QvP/z/HrSWay+VBaz8LU9thaAKl5j0HKfdbc+toJkgpStkpt2yZf8w R+LGPmUNnVC0o0bEhsv+7SvaViUsjrRlT5rxcj74Q9U/X0IkWKQth7rCtac/HvJt eRouIYAoPMBa3AdEUxkjfyF+xI2n41YGnDcpk2KDcXfPywtr93xcNMAcCyKNySf7 VqpFFTtQR9YNSHuh/S+aSFUgDVtoWIGpeUIBehcZlJ41zsjMe+HLy7PF08RejGYy u8wuxzWCy+jSXQHTeRaPXBqE3p/mrflPTfWxZJrxonqTrBMIKGTaKVUyel0T4jK9 NQ== -----END CERTIFICATE-----Generated at Sun Jan 25 20:07:06 2026 by rpki-client