This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/0/DDDA7C4C6A985C465E66BFDE4C3E11BD0CFE08FF.mft File: DDDA7C4C6A985C465E66BFDE4C3E11BD0CFE08FF.mft (raw, json) Hash identifier: wN2ndfpMjJ8jMsZB0PDEErUX+vlXUUMdCaI13m6uUyU= Subject key identifier: 91:B6:73:A0:CF:F9:5E:60:F0:D3:DB:47:38:9F:E5:79:0C:76:8C:26 Authority key identifier: DD:DA:7C:4C:6A:98:5C:46:5E:66:BF:DE:4C:3E:11:BD:0C:FE:08:FF Certificate issuer: /CN=ddda7c4c6a985c465e66bfde4c3e11bd0cfe08ff Certificate serial: 21CE730C7DE13C8FACAF93165C90400015B73077 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3dp8TGqYXEZeZr_eTD4RvQz-CP8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/0/DDDA7C4C6A985C465E66BFDE4C3E11BD0CFE08FF.mft Manifest number: 24 Signing time: Sun 25 Jan 2026 09:48:04 +0000 Manifest this update: Sun 25 Jan 2026 09:43:04 +0000 Manifest next update: Tue 27 Jan 2026 09:48:04 +0000 Files and hashes: 1: DDDA7C4C6A985C465E66BFDE4C3E11BD0CFE08FF.crl (hash: dzfB5VrhsSobKCjRr/YRKkZKzpQRC4wOZzgaYQfblHM=) 2: AS205848.asa (hash: t73DOa6O2jmmW8CQgSEGd5OgdBrOTa4VVNoIf7BcHI0=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/0/DDDA7C4C6A985C465E66BFDE4C3E11BD0CFE08FF.crl rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/0/DDDA7C4C6A985C465E66BFDE4C3E11BD0CFE08FF.mft rsync://rpki.ripe.net/repository/DEFAULT/3dp8TGqYXEZeZr_eTD4RvQz-CP8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:ce:73:0c:7d:e1:3c:8f:ac:af:93:16:5c:90:40:00:15:b7:30:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ddda7c4c6a985c465e66bfde4c3e11bd0cfe08ff Validity Not Before: Jan 25 09:43:04 2026 GMT Not After : Jan 27 09:48:04 2026 GMT Subject: CN=91B673A0CFF95E60F0D3DB47389FE5790C768C26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:32:00:7f:36:b8:ab:25:e6:17:32:58:e2:82: 6b:b3:02:d0:9b:f0:19:a8:55:09:11:c4:1c:59:3e: 96:34:21:e8:1a:eb:73:57:65:ec:fa:9f:18:b7:a1: 13:a2:d9:59:06:d4:7c:c4:88:5f:3c:8b:b4:12:4b: 33:dd:f7:03:7a:c1:29:63:6e:33:a1:2b:ba:b7:9c: 98:ff:f7:5e:44:2e:49:d4:98:28:7f:9b:b6:99:a9: fd:28:d0:24:eb:e4:f4:4f:4e:24:fb:67:52:bd:7e: 71:67:b6:00:fb:f3:56:f7:32:8a:ac:8d:a7:84:2a: d7:67:b1:82:01:54:35:98:56:60:7c:64:e0:27:fa: e4:df:61:44:66:ab:fa:bf:0a:d6:4c:6f:b9:24:e3: 70:71:f6:c8:ea:5e:75:f9:c6:7c:25:20:d0:9e:9d: 06:40:94:fa:d8:10:88:94:b4:23:38:d9:01:89:90: cd:77:c5:00:f4:89:fd:f6:ec:05:6f:d0:ff:21:de: 62:39:ad:c3:f8:3c:0b:46:a9:29:b8:56:2d:5d:27: d7:94:d0:21:e7:66:58:82:8a:06:7c:a6:ef:03:7e: 74:0e:46:0e:f8:ec:50:97:e0:f8:7e:36:2c:01:7f: 2a:f0:8f:96:b5:01:58:e1:52:73:8e:47:11:a2:72: ff:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:B6:73:A0:CF:F9:5E:60:F0:D3:DB:47:38:9F:E5:79:0C:76:8C:26 X509v3 Authority Key Identifier: keyid:DD:DA:7C:4C:6A:98:5C:46:5E:66:BF:DE:4C:3E:11:BD:0C:FE:08:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/0/DDDA7C4C6A985C465E66BFDE4C3E11BD0CFE08FF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3dp8TGqYXEZeZr_eTD4RvQz-CP8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/0/DDDA7C4C6A985C465E66BFDE4C3E11BD0CFE08FF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:5f:65:6b:64:a7:b3:c9:15:1e:2d:c5:2d:7b:43:50:83:d1: a4:1d:de:cf:5c:1b:9b:73:63:4b:a5:7c:ab:a4:64:01:f7:bf: 3d:65:9b:9f:4d:b8:83:33:07:28:0c:52:08:c3:cd:fc:e7:ef: 99:c0:db:a5:83:61:b8:d8:23:23:0d:e1:34:bc:49:79:65:64: 5c:74:7d:6d:39:d4:15:e6:d8:5e:26:12:ce:fc:68:ff:23:ac: ce:14:53:9d:97:f9:4b:87:17:9d:9a:f3:29:9a:cf:bc:5d:34: cc:49:e3:2c:d7:56:f4:b3:da:f1:ec:a0:a5:24:87:e3:60:21: 15:cd:cb:f5:fb:12:6c:c8:e9:c9:22:96:ab:d7:7b:32:2f:f7: 6d:4d:64:e3:64:33:fe:b4:b5:4b:a7:fb:84:52:66:93:56:30: 0b:67:94:8d:20:c1:68:53:38:fd:f4:6e:d3:2a:05:c7:06:37: 04:20:36:14:13:86:60:06:58:24:cc:51:96:60:49:f2:21:42: 16:9d:2c:75:0e:72:83:d2:6a:12:17:29:f8:23:1b:41:e0:e7: 00:16:3a:af:98:8a:38:b3:75:e8:31:91:be:98:90:8b:72:73: 05:8c:28:4a:95:b6:a3:a4:eb:49:ff:8e:69:aa:f1:00:71:9a: 3b:e8:00:6c -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUIc5zDH3hPI+sr5MWXJBAABW3MHcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZGRkYTdjNGM2YTk4NWM0NjVlNjZiZmRlNGMzZTExYmQw Y2ZlMDhmZjAeFw0yNjAxMjUwOTQzMDRaFw0yNjAxMjcwOTQ4MDRaMDMxMTAvBgNV BAMTKDkxQjY3M0EwQ0ZGOTVFNjBGMEQzREI0NzM4OUZFNTc5MEM3NjhDMjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyMgB/NrirJeYXMljigmuzAtCb 8BmoVQkRxBxZPpY0Iega63NXZez6nxi3oROi2VkG1HzEiF88i7QSSzPd9wN6wSlj bjOhK7q3nJj/915ELknUmCh/m7aZqf0o0CTr5PRPTiT7Z1K9fnFntgD781b3Moqs jaeEKtdnsYIBVDWYVmB8ZOAn+uTfYURmq/q/CtZMb7kk43Bx9sjqXnX5xnwlINCe nQZAlPrYEIiUtCM42QGJkM13xQD0if327AVv0P8h3mI5rcP4PAtGqSm4Vi1dJ9eU 0CHnZliCigZ8pu8DfnQORg747FCX4Ph+NiwBfyrwj5a1AVjhUnOORxGicv+dAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUkbZzoM/5XmDw09tHOJ/leQx2jCYwHwYDVR0j BBgwFoAU3dp8TGqYXEZeZr/eTD4RvQz+CP8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTU5ZThjMmYtZTU5MC00YTRmLTg0NjMtODMxN2MyYTFj MDQ4LzAvREREQTdDNEM2QTk4NUM0NjVFNjZCRkRFNEMzRTExQkQwQ0ZFMDhGRi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNkcDhUR3FZWEVaZVpyX2VURDRSdlF6 LUNQOC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hNTllOGMyZi1l NTkwLTRhNGYtODQ2My04MzE3YzJhMWMwNDgvMC9ERERBN0M0QzZBOTg1QzQ2NUU2 NkJGREU0QzNFMTFCRDBDRkUwOEZGLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG19la2Sns8kVHi3FLXtD UIPRpB3ez1wbm3NjS6V8q6RkAfe/PWWbn024gzMHKAxSCMPN/OfvmcDbpYNhuNgj Iw3hNLxJeWVkXHR9bTnUFebYXiYSzvxo/yOszhRTnZf5S4cXnZrzKZrPvF00zEnj LNdW9LPa8eygpSSH42AhFc3L9fsSbMjpySKWq9d7Mi/3bU1k42Qz/rS1S6f7hFJm k1YwC2eUjSDBaFM4/fRu0yoFxwY3BCA2FBOGYAZYJMxRlmBJ8iFCFp0sdQ5yg9Jq Ehcp+CMbQeDnABY6r5iKOLN16DGRvpiQi3JzBYwoSpW2o6TrSf+OaarxAHGaO+gA bA== -----END CERTIFICATE-----Generated at Mon Jan 26 01:40:05 2026 by rpki-client