This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a94df714-d37d-4942-8e94-91dd853ef7e3/0/637FD1BA3FED44454D6D7030247709D28DB3491A.mft File: 637FD1BA3FED44454D6D7030247709D28DB3491A.mft (raw, json) Hash identifier: b/w4CQ6C3wm0BYXFDIoro/b2chlCqwoKWQUovnSYDXo= Subject key identifier: 4F:6C:10:14:C4:05:75:13:0D:95:04:1D:AD:FE:DC:36:62:6C:A0:CB Authority key identifier: 63:7F:D1:BA:3F:ED:44:45:4D:6D:70:30:24:77:09:D2:8D:B3:49:1A Certificate issuer: /CN=637fd1ba3fed44454d6d7030247709d28db3491a Certificate serial: 39DE2C2064E6391AAA29B6F18FEAF8F0F03EA336 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y3_Ruj_tREVNbXAwJHcJ0o2zSRo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a94df714-d37d-4942-8e94-91dd853ef7e3/0/637FD1BA3FED44454D6D7030247709D28DB3491A.mft Manifest number: 044A Signing time: Sat 24 Jan 2026 15:24:41 +0000 Manifest this update: Sat 24 Jan 2026 15:19:41 +0000 Manifest next update: Sun 25 Jan 2026 17:34:41 +0000 Files and hashes: 1: 3133392e32382e32342e302f32342d3234203d3e20323132363039.roa (hash: Zbml066pXi3G2h7cDhaY/zBOXtPP1DXZek0hCHsXFhc=) 2: 3133392e32382e32352e302f32342d3234203d3e20323030303137.roa (hash: KTt7IBC5OKuP6muE0/6zCxuIwEkqcnypdMUhBFAyx18=) 3: 637FD1BA3FED44454D6D7030247709D28DB3491A.crl (hash: /pj/nsja7QOp/lIBPPqrqviL1O055MEsr+OF5nI+rxk=) 4: 3133392e32382e32352e302f32342d3234203d3e20323131343135.roa (hash: kj5wXeF4AQFWN9fpmE1MKtBmtMRLs1TA1rGuGr1+5eA=) 5: 3133392e32382e32372e302f32342d3234203d3e20323036313530.roa (hash: spk6NtqPTGXoBo4XJMsULHBo1PCje3tyvN9b3jHB/pA=) 6: 3133392e32382e32342e302f32342d3234203d3e20323131343430.roa (hash: eR+xyo+zY+fM9l50cFs0swlGeIX2NljYGKvE5SQX83U=) 7: 3133392e32382e32362e302f32342d3234203d3e20313337343039.roa (hash: 4dsufrRZZT3ng/M0mUxRioQsmJP0ZwUerMNQTCdj11A=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a94df714-d37d-4942-8e94-91dd853ef7e3/0/637FD1BA3FED44454D6D7030247709D28DB3491A.crl rsync://rsync.paas.rpki.ripe.net/repository/a94df714-d37d-4942-8e94-91dd853ef7e3/0/637FD1BA3FED44454D6D7030247709D28DB3491A.mft rsync://rpki.ripe.net/repository/DEFAULT/Y3_Ruj_tREVNbXAwJHcJ0o2zSRo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 17:34:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:de:2c:20:64:e6:39:1a:aa:29:b6:f1:8f:ea:f8:f0:f0:3e:a3:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=637fd1ba3fed44454d6d7030247709d28db3491a Validity Not Before: Jan 24 15:19:41 2026 GMT Not After : Jan 25 17:34:41 2026 GMT Subject: CN=4F6C1014C40575130D95041DADFEDC36626CA0CB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:32:53:cd:8a:97:56:00:ee:6c:2a:a9:23:67: 5c:01:48:a1:6b:c7:16:c6:05:4a:fb:79:ab:b6:f6: 0e:fd:54:2c:56:5e:b9:5a:ba:b8:da:3f:fb:e7:e9: 20:b7:27:6d:5e:78:92:68:da:c7:23:79:28:74:6c: 33:16:4a:d8:9b:22:40:b5:b3:70:6a:c2:5b:70:c4: 7c:e3:4b:92:66:97:84:e3:b7:9a:7c:25:94:34:97: 29:86:63:d9:34:8d:d8:ff:17:d5:49:e9:f3:64:79: a3:c3:9a:9a:d0:d1:d8:74:b6:2f:a0:59:27:27:b8: 07:52:44:e1:ec:c1:f8:41:49:c1:9d:d1:db:22:e9: 42:4e:31:bb:3d:59:8d:c4:9d:b4:89:8c:b0:79:8d: 36:23:01:16:a6:96:28:2a:03:3b:71:25:cb:c1:d1: 52:7a:02:36:1f:59:4c:56:2f:b9:3c:8a:a8:3a:d7: fc:f7:08:a9:37:11:c7:1c:ac:cf:d3:15:45:3e:a7: ab:d1:20:06:f5:76:16:78:27:af:18:c6:77:b6:b6: fa:0a:28:44:77:7e:f9:00:23:f9:4d:c2:7c:01:c4: 3f:9d:04:02:94:d9:58:20:9e:29:77:e8:16:26:ef: 20:c6:14:de:ea:c2:ca:2f:34:24:89:a2:02:e2:e3: 4d:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:6C:10:14:C4:05:75:13:0D:95:04:1D:AD:FE:DC:36:62:6C:A0:CB X509v3 Authority Key Identifier: keyid:63:7F:D1:BA:3F:ED:44:45:4D:6D:70:30:24:77:09:D2:8D:B3:49:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a94df714-d37d-4942-8e94-91dd853ef7e3/0/637FD1BA3FED44454D6D7030247709D28DB3491A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y3_Ruj_tREVNbXAwJHcJ0o2zSRo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a94df714-d37d-4942-8e94-91dd853ef7e3/0/637FD1BA3FED44454D6D7030247709D28DB3491A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:33:17:f5:55:61:4a:6f:75:9d:bd:8e:13:81:94:43:29:6b: 7c:d4:c2:e6:6c:08:34:53:49:63:8d:39:dc:d8:02:f3:01:03: 7c:b4:63:df:6d:da:10:d1:92:35:c0:60:4f:e0:44:35:ed:5b: d0:d8:9e:c2:c9:24:8f:a3:f7:06:df:5d:54:be:4f:43:8d:86: 1e:c3:a5:64:39:42:6f:eb:0c:85:2d:c5:17:6b:cb:98:04:0b: 1d:0a:9a:47:d7:58:1e:7e:02:13:38:5f:78:66:13:e5:46:26: 83:0c:fb:59:ea:41:82:73:78:70:90:0c:49:61:0a:31:24:7e: bf:63:ab:de:d5:09:09:c0:03:0b:6e:d8:45:3d:47:d8:20:f2: fc:73:21:96:0b:cc:1c:cd:36:ef:92:ea:e1:61:e4:db:26:81: 35:0e:6e:8f:2d:7d:9d:a4:38:a3:6f:44:43:fe:fe:bf:82:42: 68:2f:1f:b6:17:03:14:cd:2d:66:a4:f6:8e:78:f5:ff:0f:e0: 62:36:95:cf:a2:e8:61:8a:59:c5:f1:4b:6b:30:50:7e:4a:d6: 2b:fb:8a:ca:a3:92:95:f2:f9:e5:cd:83:31:f8:ee:9d:9c:76: 71:3e:d4:d5:e4:6d:92:7d:e6:26:af:da:2a:87:41:97:d5:b6: 6e:97:bf:4e -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUOd4sIGTmORqqKbbxj+r48PA+ozYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjM3ZmQxYmEzZmVkNDQ0NTRkNmQ3MDMwMjQ3NzA5ZDI4 ZGIzNDkxYTAeFw0yNjAxMjQxNTE5NDFaFw0yNjAxMjUxNzM0NDFaMDMxMTAvBgNV BAMTKDRGNkMxMDE0QzQwNTc1MTMwRDk1MDQxREFERkVEQzM2NjI2Q0EwQ0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqMlPNipdWAO5sKqkjZ1wBSKFr xxbGBUr7eau29g79VCxWXrlaurjaP/vn6SC3J21eeJJo2scjeSh0bDMWStibIkC1 s3BqwltwxHzjS5Jml4Tjt5p8JZQ0lymGY9k0jdj/F9VJ6fNkeaPDmprQ0dh0ti+g WScnuAdSROHswfhBScGd0dsi6UJOMbs9WY3EnbSJjLB5jTYjARamligqAztxJcvB 0VJ6AjYfWUxWL7k8iqg61/z3CKk3EcccrM/TFUU+p6vRIAb1dhZ4J68Yxne2tvoK KER3fvkAI/lNwnwBxD+dBAKU2Vggnil36BYm7yDGFN7qwsovNCSJogLi401PAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUT2wQFMQFdRMNlQQdrf7cNmJsoMswHwYDVR0j BBgwFoAUY3/Ruj/tREVNbXAwJHcJ0o2zSRowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTk0ZGY3MTQtZDM3ZC00OTQyLThlOTQtOTFkZDg1M2Vm N2UzLzAvNjM3RkQxQkEzRkVENDQ0NTRENkQ3MDMwMjQ3NzA5RDI4REIzNDkxQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1kzX1J1al90UkVWTmJYQXdKSGNKMG8y elNSby5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hOTRkZjcxNC1k MzdkLTQ5NDItOGU5NC05MWRkODUzZWY3ZTMvMC82MzdGRDFCQTNGRUQ0NDQ1NEQ2 RDcwMzAyNDc3MDlEMjhEQjM0OTFBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfTMX9VVhSm91nb2OE4GU QylrfNTC5mwINFNJY4053NgC8wEDfLRj323aENGSNcBgT+BENe1b0Niewskkj6P3 Bt9dVL5PQ42GHsOlZDlCb+sMhS3FF2vLmAQLHQqaR9dYHn4CEzhfeGYT5UYmgwz7 WepBgnN4cJAMSWEKMSR+v2Or3tUJCcADC27YRT1H2CDy/HMhlgvMHM0275Lq4WHk 2yaBNQ5ujy19naQ4o29EQ/7+v4JCaC8fthcDFM0tZqT2jnj1/w/gYjaVz6LoYYpZ xfFLazBQfkrWK/uKyqOSlfL55c2DMfjunZx2cT7U1eRtkn3mJq/aKodBl9W2bpe/ Tg== -----END CERTIFICATE-----Generated at Sun Jan 25 12:29:56 2026 by rpki-client