This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.mft File: D8219647415018E4FFD3F11C27A807530D7B7CF1.mft (raw, json) Hash identifier: 6vfSIMRbYPthUmnXIzfwyCNQ/rfHSRbtL3iZDGE8rEY= Subject key identifier: C6:B2:E6:74:F3:A5:32:4E:2C:D8:8A:18:FA:17:D1:03:82:54:47:60 Authority key identifier: D8:21:96:47:41:50:18:E4:FF:D3:F1:1C:27:A8:07:53:0D:7B:7C:F1 Certificate issuer: /CN=d8219647415018e4ffd3f11c27a807530d7b7cf1 Certificate serial: 35C8A3B488705431243CCB3A48138AE787EA0FAD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2CGWR0FQGOT_0_EcJ6gHUw17fPE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.mft Manifest number: 036A Signing time: Sun 25 Jan 2026 05:11:04 +0000 Manifest this update: Sun 25 Jan 2026 05:06:04 +0000 Manifest next update: Mon 26 Jan 2026 08:04:04 +0000 Files and hashes: 1: AS215828.asa (hash: gn0zvNq0jqiLUYK3MJlHlnirErp0oB8cq8E7u3vxlhE=) 2: D8219647415018E4FFD3F11C27A807530D7B7CF1.crl (hash: rtztSEK6N+r8kI74Hruct2NfTeUFRaAKdqiSEk88jeY=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.crl rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.mft rsync://rpki.ripe.net/repository/DEFAULT/2CGWR0FQGOT_0_EcJ6gHUw17fPE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 08:04:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:c8:a3:b4:88:70:54:31:24:3c:cb:3a:48:13:8a:e7:87:ea:0f:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d8219647415018e4ffd3f11c27a807530d7b7cf1 Validity Not Before: Jan 25 05:06:04 2026 GMT Not After : Jan 26 08:04:04 2026 GMT Subject: CN=C6B2E674F3A5324E2CD88A18FA17D10382544760 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:a9:a4:48:8a:f3:98:d5:13:02:95:c4:45:82: 5a:40:cb:63:db:d7:21:bb:4c:93:b1:52:01:66:7d: b2:6e:3d:2d:3e:c5:5a:4d:30:1c:ac:34:24:24:4f: bc:a9:7b:e8:df:39:c4:c3:39:d6:5a:d4:e7:1f:d5: 9e:f4:04:27:2a:2a:cd:11:00:51:79:ab:18:a1:b3: 37:41:72:33:c3:2b:c9:cf:41:81:28:4b:1c:ff:c6: d5:fe:ce:6a:cb:e7:da:22:0e:6f:4f:ac:15:9e:c8: be:1b:da:1f:ec:0d:5c:9a:70:0a:05:08:49:b6:1f: c7:8b:11:cb:25:d3:58:53:ad:a0:52:ac:62:56:eb: 5e:f6:8b:8d:06:8a:a0:db:ad:21:ba:29:4f:8b:03: b3:fc:2c:cd:67:fb:3c:93:63:b9:d7:1a:2e:18:ec: c4:3a:9f:65:e6:43:88:2e:fe:9b:46:2d:8a:8f:b1: fc:33:49:26:7c:96:74:1a:95:e9:29:d1:e6:fb:b5: 86:0a:e2:7d:ae:91:ec:bf:0b:21:df:c9:46:3d:55: c8:f3:3c:8c:11:bc:da:eb:23:8b:b4:31:41:d3:fb: 2d:37:f0:d0:56:bc:7d:6a:a8:4a:fc:a5:b1:b2:ee: 74:5e:4f:38:43:2a:70:69:d6:82:6f:7e:a0:9c:f4: e1:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:B2:E6:74:F3:A5:32:4E:2C:D8:8A:18:FA:17:D1:03:82:54:47:60 X509v3 Authority Key Identifier: keyid:D8:21:96:47:41:50:18:E4:FF:D3:F1:1C:27:A8:07:53:0D:7B:7C:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2CGWR0FQGOT_0_EcJ6gHUw17fPE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:0b:73:4e:6a:fd:17:03:3f:9d:48:c1:40:e4:f4:f5:0d:25: bc:49:af:a7:1a:2c:e5:dd:d3:7d:be:eb:7f:4a:e1:d0:34:84: 65:a3:73:62:c9:eb:9e:6e:78:ed:8c:a8:f3:b0:38:67:9f:17: 4f:3e:4d:5d:11:3e:aa:ec:40:67:8a:57:01:10:91:60:07:1d: 91:5b:7e:a0:d1:92:8a:7e:70:19:71:ac:b4:c9:79:7d:e7:6e: d6:e3:ce:eb:38:43:a6:29:d1:ca:0f:19:e9:93:0e:a8:1c:dc: 9a:a6:0e:e1:1d:fe:03:dc:3f:95:84:45:63:b3:64:d0:3e:a8: 01:73:4a:a3:b9:0e:30:f3:23:ad:48:4b:95:bc:fc:aa:46:d0: 2c:68:06:2d:1d:22:95:cc:65:71:42:f5:d0:f7:1e:0a:1f:c2: 4f:84:19:b9:b4:fb:74:2f:69:1e:4b:42:e8:dc:53:05:b4:cf: 0c:a8:79:78:15:82:a5:0c:c1:b7:4d:2c:bd:66:54:1e:9e:2f: 3d:2a:04:58:04:f2:23:e1:00:67:3d:c3:79:a2:ac:75:45:06: 54:7b:19:91:e2:22:98:86:1c:30:62:ec:1a:80:ac:49:a4:9a: a4:78:81:5c:a9:27:18:38:a0:c1:c8:7b:c1:bb:39:0b:c2:21: fe:64:46:81 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUNcijtIhwVDEkPMs6SBOK54fqD60wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZDgyMTk2NDc0MTUwMThlNGZmZDNmMTFjMjdhODA3NTMw ZDdiN2NmMTAeFw0yNjAxMjUwNTA2MDRaFw0yNjAxMjYwODA0MDRaMDMxMTAvBgNV BAMTKEM2QjJFNjc0RjNBNTMyNEUyQ0Q4OEExOEZBMTdEMTAzODI1NDQ3NjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCqaRIivOY1RMClcRFglpAy2Pb 1yG7TJOxUgFmfbJuPS0+xVpNMBysNCQkT7ype+jfOcTDOdZa1Ocf1Z70BCcqKs0R AFF5qxihszdBcjPDK8nPQYEoSxz/xtX+zmrL59oiDm9PrBWeyL4b2h/sDVyacAoF CEm2H8eLEcsl01hTraBSrGJW6172i40GiqDbrSG6KU+LA7P8LM1n+zyTY7nXGi4Y 7MQ6n2XmQ4gu/ptGLYqPsfwzSSZ8lnQalekp0eb7tYYK4n2ukey/CyHfyUY9Vcjz PIwRvNrrI4u0MUHT+y038NBWvH1qqEr8pbGy7nReTzhDKnBp1oJvfqCc9OGvAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUxrLmdPOlMk4s2IoY+hfRA4JUR2AwHwYDVR0j BBgwFoAU2CGWR0FQGOT/0/EcJ6gHUw17fPEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWMwZWQwNDYtZmE5NS00NWMzLTkxNDYtOTcxZGI4YTll OGJiLzAvRDgyMTk2NDc0MTUwMThFNEZGRDNGMTFDMjdBODA3NTMwRDdCN0NGMS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJDR1dSMEZRR09UXzBfRWNKNmdIVXcx N2ZQRS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85YzBlZDA0Ni1m YTk1LTQ1YzMtOTE0Ni05NzFkYjhhOWU4YmIvMC9EODIxOTY0NzQxNTAxOEU0RkZE M0YxMUMyN0E4MDc1MzBEN0I3Q0YxLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcQtzTmr9FwM/nUjBQOT0 9Q0lvEmvpxos5d3Tfb7rf0rh0DSEZaNzYsnrnm547Yyo87A4Z58XTz5NXRE+quxA Z4pXARCRYAcdkVt+oNGSin5wGXGstMl5fedu1uPO6zhDpinRyg8Z6ZMOqBzcmqYO 4R3+A9w/lYRFY7Nk0D6oAXNKo7kOMPMjrUhLlbz8qkbQLGgGLR0ilcxlcUL10Pce Ch/CT4QZubT7dC9pHktC6NxTBbTPDKh5eBWCpQzBt00svWZUHp4vPSoEWATyI+EA Zz3DeaKsdUUGVHsZkeIimIYcMGLsGoCsSaSapHiBXKknGDigwch7wbs5C8Ih/mRG gQ== -----END CERTIFICATE-----Generated at Mon Jan 26 01:32:06 2026 by rpki-client