This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/1/3537F961668E4765578095AB33A4351BB72C9A63.mft File: 3537F961668E4765578095AB33A4351BB72C9A63.mft (raw, json) Hash identifier: 5yJmfTTAtipF/qSL/Sd3AS+5czrI+a8fG1Lquoyjs4s= Subject key identifier: C4:B0:CB:EC:5F:76:98:11:A9:E2:9C:A3:93:66:32:26:AA:EE:75:61 Authority key identifier: 35:37:F9:61:66:8E:47:65:57:80:95:AB:33:A4:35:1B:B7:2C:9A:63 Certificate issuer: /CN=3537F961668E4765578095AB33A4351BB72C9A63 Certificate serial: 24BB8EB7B19821CA792F4BF5FDC962F5FEFD4D87 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/3537F961668E4765578095AB33A4351BB72C9A63.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/1/3537F961668E4765578095AB33A4351BB72C9A63.mft Manifest number: 22 Signing time: Fri 23 Jan 2026 22:23:04 +0000 Manifest this update: Fri 23 Jan 2026 22:18:04 +0000 Manifest next update: Sun 25 Jan 2026 22:23:04 +0000 Files and hashes: 1: 326130363a313238323a33303a3a2f34342d313238203d3e20323035383438.roa (hash: 292hBxtVOQ3Gd5+8ak4aSN6nAB9tGh6AJvrUIN5uGbs=) 2: 326130363a313238323a31303a3a2f34342d313238203d3e20323035383438.roa (hash: 0PI46warPOAGZrQe90bl3lA4fAE4MCISdbWQKd8cmUk=) 3: 38392e3138372e36382e302f32342d3332203d3e20323035383438.roa (hash: BDGbr95VQ36FR9Tfnaz/+ZZ7HPpklQMInwdbSElUj64=) 4: 326130363a313238323a32303a3a2f34342d313238203d3e20323035383438.roa (hash: VD8/e5WUGI5SMs1h4LuaM43eCjUy2NSH/je82Dvnymo=) 5: 326130363a313238323a34303a3a2f34342d313238203d3e20323035383438.roa (hash: JwzUDkANLXs6XgTehrq1Pd6d6jeZ2m35Wq5ZDkXHhLE=) 6: 32372e302e3233342e302f32342d3332203d3e20323035383438.roa (hash: ypMnhHsuYXQJ1uLaU18OSLrBvWg449VDZ1ZcIgNWVGg=) 7: 3537F961668E4765578095AB33A4351BB72C9A63.crl (hash: qjznM/50pO+z8jjfPB89DcKggNIYP/1Ji+jMCbVqTi0=) 8: 326130363a313238323a3a2f34342d313238203d3e20323035383438.roa (hash: e6xgcJdZcTjLmV7L7mIIS0ZbS4iA5+TX8cpRfsgZaUk=) 9: 32372e302e3233352e302f32342d3332203d3e20323035383438.roa (hash: tHR53zr4UgIS56fxg0rrIzo3BRWKByol9KLXj3FQw2s=) 10: 38392e3138372e36392e302f32342d3332203d3e20323035383438.roa (hash: kzFIPBC46TZNAynPGWUoS4YA8aSHjAgWh6LKaHRaEWE=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/1/3537F961668E4765578095AB33A4351BB72C9A63.crl rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/1/3537F961668E4765578095AB33A4351BB72C9A63.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/3537F961668E4765578095AB33A4351BB72C9A63.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:bb:8e:b7:b1:98:21:ca:79:2f:4b:f5:fd:c9:62:f5:fe:fd:4d:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3537F961668E4765578095AB33A4351BB72C9A63 Validity Not Before: Jan 23 22:18:04 2026 GMT Not After : Jan 25 22:23:04 2026 GMT Subject: CN=C4B0CBEC5F769811A9E29CA393663226AAEE7561 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:ec:87:64:20:8e:a6:8b:ba:6a:d1:c0:c6:6a: d5:9d:ea:b4:de:2b:76:29:f4:72:21:70:7d:a6:1a: 2a:6b:08:60:3d:37:97:13:5b:5a:be:00:0b:cf:22: 98:48:41:53:c1:38:83:24:d9:19:49:cc:4a:34:e4: 2c:b4:06:99:87:b8:b5:4f:19:59:32:4b:c6:c3:8d: 7a:62:b0:7c:02:01:80:65:ec:50:9c:79:80:3a:c4: 7f:28:dd:b4:b9:7c:4c:7a:7d:cb:79:7a:36:3a:4e: 0d:cc:64:0a:d8:c0:6c:f2:b7:32:58:0a:e3:e1:6e: ea:d8:5c:c7:3f:5c:16:c5:e9:d8:e8:33:1d:b9:90: cc:45:43:6a:bd:ff:84:38:c8:7b:16:50:03:14:80: 2d:c8:ad:d1:8f:1f:c7:e5:09:a2:70:f2:63:d5:63: b5:75:c9:25:d7:9d:90:51:d0:44:b8:57:fa:61:ef: 8d:b1:92:50:2a:b8:67:7b:b7:26:82:cb:fe:aa:3f: 0f:13:03:fd:1d:1f:b2:f3:8f:6d:56:cc:c1:0f:cc: 3a:a7:cc:1d:7f:c0:02:7b:0e:53:7c:fd:9d:27:12: f2:5a:df:53:b9:c0:59:d6:b6:c4:c5:8e:7a:d5:9d: 77:75:86:76:64:1c:b5:2a:a3:54:43:5d:1f:b8:19: 25:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:B0:CB:EC:5F:76:98:11:A9:E2:9C:A3:93:66:32:26:AA:EE:75:61 X509v3 Authority Key Identifier: keyid:35:37:F9:61:66:8E:47:65:57:80:95:AB:33:A4:35:1B:B7:2C:9A:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/1/3537F961668E4765578095AB33A4351BB72C9A63.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/3537F961668E4765578095AB33A4351BB72C9A63.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/1/3537F961668E4765578095AB33A4351BB72C9A63.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:82:44:b7:b4:ea:eb:d4:47:fd:74:0b:27:bb:9e:8f:c0:62: d1:ea:88:2f:c5:a2:6b:c7:ef:47:dc:4f:0b:d9:b1:a7:df:43: c2:33:eb:4c:d0:ed:f3:d7:2d:58:6c:e5:bc:19:99:5c:79:11: bc:3e:de:e4:2b:a3:f1:a7:26:d2:56:57:b2:eb:04:33:b9:77: 6d:d5:d5:d6:11:8b:ea:20:ff:d2:1e:7c:19:fe:49:6d:4d:94: 49:ab:5a:ec:24:49:ce:f4:77:66:33:0f:c1:55:f4:d9:18:dc: 0a:27:ea:19:b3:e9:12:c7:47:89:14:46:00:1e:eb:22:11:d1: 29:56:7e:0c:41:03:40:46:1a:d3:dc:3e:22:fa:19:8f:11:b2: 75:65:40:e3:d7:5c:99:f3:eb:49:c4:7a:cd:d7:aa:26:60:e6: 0e:3f:91:d2:53:1b:1d:c9:c2:f4:46:e6:bd:ef:63:da:01:66: 8a:88:21:39:4f:e3:e8:b2:f2:5d:94:45:63:77:45:0d:ba:eb: 11:cf:d6:8b:b6:ab:9b:ef:03:0b:d3:75:76:71:63:87:76:93: c3:56:52:d6:42:44:bc:ad:f6:c5:3f:f9:08:f8:f9:07:f8:d0: f9:9a:43:b8:96:dd:dd:4b:30:a0:b7:8f:5e:69:dc:16:22:8d: 13:07:4f:55 -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUJLuOt7GYIcp5L0v1/cli9f79TYcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzUzN0Y5NjE2NjhFNDc2NTU3ODA5NUFCMzNBNDM1MUJC NzJDOUE2MzAeFw0yNjAxMjMyMjE4MDRaFw0yNjAxMjUyMjIzMDRaMDMxMTAvBgNV BAMTKEM0QjBDQkVDNUY3Njk4MTFBOUUyOUNBMzkzNjYzMjI2QUFFRTc1NjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL7IdkII6mi7pq0cDGatWd6rTe K3Yp9HIhcH2mGiprCGA9N5cTW1q+AAvPIphIQVPBOIMk2RlJzEo05Cy0BpmHuLVP GVkyS8bDjXpisHwCAYBl7FCceYA6xH8o3bS5fEx6fct5ejY6Tg3MZArYwGzytzJY CuPhburYXMc/XBbF6djoMx25kMxFQ2q9/4Q4yHsWUAMUgC3IrdGPH8flCaJw8mPV Y7V1ySXXnZBR0ES4V/ph742xklAquGd7tyaCy/6qPw8TA/0dH7Lzj21WzMEPzDqn zB1/wAJ7DlN8/Z0nEvJa31O5wFnWtsTFjnrVnXd1hnZkHLUqo1RDXR+4GSWLAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUxLDL7F92mBGp4pyjk2YyJqrudWEwHwYDVR0j BBgwFoAUNTf5YWaOR2VXgJWrM6Q1G7csmmMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTU5ZThjMmYtZTU5MC00YTRmLTg0NjMtODMxN2MyYTFj MDQ4LzEvMzUzN0Y5NjE2NjhFNDc2NTU3ODA5NUFCMzNBNDM1MUJCNzJDOUE2My5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvMzUzN0Y5NjE2NjhFNDc2NTU3ODA5NUFCMzNBNDM1MUJCNzJD OUE2My5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hNTllOGMyZi1l NTkwLTRhNGYtODQ2My04MzE3YzJhMWMwNDgvMS8zNTM3Rjk2MTY2OEU0NzY1NTc4 MDk1QUIzM0E0MzUxQkI3MkM5QTYzLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADYJEt7Tq69RH/XQLJ7ue j8Bi0eqIL8Wia8fvR9xPC9mxp99DwjPrTNDt89ctWGzlvBmZXHkRvD7e5Cuj8acm 0lZXsusEM7l3bdXV1hGL6iD/0h58Gf5JbU2USata7CRJzvR3ZjMPwVX02RjcCifq GbPpEsdHiRRGAB7rIhHRKVZ+DEEDQEYa09w+IvoZjxGydWVA49dcmfPrScR6zdeq JmDmDj+R0lMbHcnC9Ebmve9j2gFmioghOU/j6LLyXZRFY3dFDbrrEc/Wi7arm+8D C9N1dnFjh3aTw1ZS1kJEvK32xT/5CPj5B/jQ+ZpDuJbd3UswoLePXmncFiKNEwdP VQ== -----END CERTIFICATE-----Generated at Sun Jan 25 08:47:58 2026 by rpki-client