This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/6/7D7059638411E3231E759E74A813BF9376209E77.mft File: 7D7059638411E3231E759E74A813BF9376209E77.mft (raw, json) Hash identifier: c9AbJLrqSqI0A1+SUXdS+TqAxYQvxOyarPEFUbDgGp4= Subject key identifier: A5:F2:AC:38:7C:12:92:26:16:A6:7F:25:C5:A5:18:0B:B6:EC:AC:F2 Authority key identifier: 7D:70:59:63:84:11:E3:23:1E:75:9E:74:A8:13:BF:93:76:20:9E:77 Certificate issuer: /CN=7d7059638411e3231e759e74a813bf9376209e77 Certificate serial: 65538D9BA0CBE96B4A4BDF8B96B759EDA63E6EEC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fXBZY4QR4yMedZ50qBO_k3Ygnnc.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/6/7D7059638411E3231E759E74A813BF9376209E77.mft Manifest number: 02C0 Signing time: Sun 25 Jan 2026 14:32:14 +0000 Manifest this update: Sun 25 Jan 2026 14:27:14 +0000 Manifest next update: Mon 26 Jan 2026 14:52:14 +0000 Files and hashes: 1: 7D7059638411E3231E759E74A813BF9376209E77.crl (hash: 8AMxYvjvJ0I1cngVdeAPW05ZYN0lVOkCwB28KMpWy3c=) 2: AS215849.asa (hash: zDqRf1CmpsA1KFLVwsUM6m+4OIs88BLCSJXXlOwSvmc=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/6/7D7059638411E3231E759E74A813BF9376209E77.crl rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/6/7D7059638411E3231E759E74A813BF9376209E77.mft rsync://rpki.ripe.net/repository/DEFAULT/fXBZY4QR4yMedZ50qBO_k3Ygnnc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 14:52:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:53:8d:9b:a0:cb:e9:6b:4a:4b:df:8b:96:b7:59:ed:a6:3e:6e:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d7059638411e3231e759e74a813bf9376209e77 Validity Not Before: Jan 25 14:27:14 2026 GMT Not After : Jan 26 14:52:14 2026 GMT Subject: CN=A5F2AC387C12922616A67F25C5A5180BB6ECACF2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:fb:d7:b9:01:a9:77:49:b1:84:2c:c6:8b:b8: 1c:5e:6c:e9:ff:2d:03:ea:20:e3:46:42:60:5b:db: 5a:42:d4:15:22:57:bc:9b:31:5f:07:69:fe:b0:84: 01:a7:35:a5:9f:27:37:bd:10:18:8c:d6:49:9f:9e: 84:72:aa:ba:b1:01:83:49:36:4a:f3:a1:cb:ec:66: 6d:ab:f7:11:28:91:c5:91:60:55:eb:94:d9:a1:3b: 84:18:88:86:26:0c:fc:3c:cd:60:ec:cd:51:4a:28: 22:0e:5b:0e:05:e6:ba:6a:fe:d2:cf:c2:aa:37:f2: 38:81:26:73:20:9a:08:ab:3b:cd:40:40:60:ad:f6: ea:06:b3:f2:e4:86:20:49:fb:2e:1b:de:27:5c:64: 9d:95:34:8e:ce:15:86:e6:b9:a9:b7:b2:90:74:92: d1:1a:03:5a:81:f3:93:1b:c6:b9:4b:b4:4f:23:be: a1:36:3b:dc:78:65:e0:26:32:82:2c:c5:da:33:80: 67:e8:37:bb:06:10:f7:87:ff:72:5e:83:95:91:bb: f6:25:fb:ad:76:39:2a:8c:d0:24:dd:de:3c:37:da: 55:86:2b:eb:4d:f4:5e:44:80:30:2a:40:08:f1:f4: c1:d4:ec:d9:66:f3:04:c6:0c:71:45:c1:47:a7:e7: 7c:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:F2:AC:38:7C:12:92:26:16:A6:7F:25:C5:A5:18:0B:B6:EC:AC:F2 X509v3 Authority Key Identifier: keyid:7D:70:59:63:84:11:E3:23:1E:75:9E:74:A8:13:BF:93:76:20:9E:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/6/7D7059638411E3231E759E74A813BF9376209E77.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fXBZY4QR4yMedZ50qBO_k3Ygnnc.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/6/7D7059638411E3231E759E74A813BF9376209E77.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:0c:57:8c:b2:15:00:29:b2:7e:27:88:19:fd:6b:f6:85:54: 88:24:7c:5f:71:56:58:4e:07:42:6c:e3:23:9a:f0:68:29:51: 53:18:48:23:c7:9e:9f:c5:eb:70:bf:60:15:2f:ee:8b:9f:df: af:e2:cc:a0:cc:a3:2d:fb:49:2c:35:cc:a1:c6:7e:d4:2d:48: fa:30:c2:ae:6d:d7:3d:c1:3a:71:df:7c:90:f5:a5:da:46:fd: 83:b7:6b:ff:7d:ff:29:e0:9d:07:ce:1d:30:63:b9:22:c9:e3: e1:f9:a6:79:4a:6a:6e:f5:5d:51:a6:75:f5:3f:3e:53:b0:99: 3e:dd:06:08:1c:0a:40:51:16:c2:26:d6:3c:8d:e0:4b:8e:1c: ae:80:3d:9c:93:8d:54:d7:10:45:3d:a8:7d:3c:e1:73:8b:d1: ba:75:3a:48:ac:80:09:3c:76:90:94:71:5c:c4:5e:ad:64:a3: 33:e4:40:f2:a6:85:da:02:af:fe:54:61:87:f0:f6:74:8e:57: 2d:c0:d9:a6:cb:7c:01:27:31:c5:36:f5:d3:fd:db:59:2b:aa: 25:da:0c:19:2f:30:e9:90:f1:fe:03:0f:15:f4:cd:f2:7b:29: 1d:1c:5c:af:f6:70:18:59:1a:e2:45:3f:31:82:93:05:c5:5e: bf:93:0e:e4 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUZVONm6DL6WtKS9+LlrdZ7aY+buwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN2Q3MDU5NjM4NDExZTMyMzFlNzU5ZTc0YTgxM2JmOTM3 NjIwOWU3NzAeFw0yNjAxMjUxNDI3MTRaFw0yNjAxMjYxNDUyMTRaMDMxMTAvBgNV BAMTKEE1RjJBQzM4N0MxMjkyMjYxNkE2N0YyNUM1QTUxODBCQjZFQ0FDRjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDo+9e5Aal3SbGELMaLuBxebOn/ LQPqIONGQmBb21pC1BUiV7ybMV8Haf6whAGnNaWfJze9EBiM1kmfnoRyqrqxAYNJ NkrzocvsZm2r9xEokcWRYFXrlNmhO4QYiIYmDPw8zWDszVFKKCIOWw4F5rpq/tLP wqo38jiBJnMgmgirO81AQGCt9uoGs/LkhiBJ+y4b3idcZJ2VNI7OFYbmuam3spB0 ktEaA1qB85MbxrlLtE8jvqE2O9x4ZeAmMoIsxdozgGfoN7sGEPeH/3Jeg5WRu/Yl +612OSqM0CTd3jw32lWGK+tN9F5EgDAqQAjx9MHU7Nlm8wTGDHFFwUen53zJAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUpfKsOHwSkiYWpn8lxaUYC7bsrPIwHwYDVR0j BBgwFoAUfXBZY4QR4yMedZ50qBO/k3YgnncwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWMwZWQwNDYtZmE5NS00NWMzLTkxNDYtOTcxZGI4YTll OGJiLzYvN0Q3MDU5NjM4NDExRTMyMzFFNzU5RTc0QTgxM0JGOTM3NjIwOUU3Ny5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZYQlpZNFFSNHlNZWRaNTBxQk9fazNZ Z25uYy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85YzBlZDA0Ni1m YTk1LTQ1YzMtOTE0Ni05NzFkYjhhOWU4YmIvNi83RDcwNTk2Mzg0MTFFMzIzMUU3 NTlFNzRBODEzQkY5Mzc2MjA5RTc3Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADwxXjLIVACmyfieIGf1r 9oVUiCR8X3FWWE4HQmzjI5rwaClRUxhII8een8XrcL9gFS/ui5/fr+LMoMyjLftJ LDXMocZ+1C1I+jDCrm3XPcE6cd98kPWl2kb9g7dr/33/KeCdB84dMGO5Isnj4fmm eUpqbvVdUaZ19T8+U7CZPt0GCBwKQFEWwibWPI3gS44croA9nJONVNcQRT2ofTzh c4vRunU6SKyACTx2kJRxXMRerWSjM+RA8qaF2gKv/lRhh/D2dI5XLcDZpst8AScx xTb10/3bWSuqJdoMGS8w6ZDx/gMPFfTN8nspHRxcr/ZwGFka4kU/MYKTBcVev5MO 5A== -----END CERTIFICATE-----Generated at Mon Jan 26 01:33:39 2026 by rpki-client