This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.mft File: 5ECB4CADBBADD500F49CA697D566A2761E017608.mft (raw, json) Hash identifier: 4D5DPCECWpz8FobwRgIWecie06i6NzJc69ZVBmJJBS4= Subject key identifier: 4E:31:10:8B:0B:18:2F:77:4B:63:4D:8D:C5:74:2A:0D:B4:6A:4D:0D Authority key identifier: 5E:CB:4C:AD:BB:AD:D5:00:F4:9C:A6:97:D5:66:A2:76:1E:01:76:08 Certificate issuer: /CN=5ecb4cadbbadd500f49ca697d566a2761e017608 Certificate serial: 0B0E7D0391F4C10A93D03442800F0D2288BAB8D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XstMrbut1QD0nKaX1Waidh4Bdgg.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.mft Manifest number: 0254 Signing time: Sat 24 Jan 2026 20:59:54 +0000 Manifest this update: Sat 24 Jan 2026 20:54:54 +0000 Manifest next update: Mon 26 Jan 2026 00:23:54 +0000 Files and hashes: 1: 3231332e3235342e3137302e302f32342d3234203d3e20323038343833.roa (hash: gjwDheXZBS8eOtwo7Ja5xPFcujfV7TC07EH1z972oQ4=) 2: 3231332e3235342e3137302e302f32342d3234203d3e20323134393431.roa (hash: WuIyFXGDgkt2cltxoxT/RYao20HHu+r0Sn5rfpjFnHA=) 3: 3137302e36322e3139302e302f32342d3234203d3e203438393235.roa (hash: 8/++60jg7XtzmZ45FRECeqxUVy5048XlFvcQJYMNUjo=) 4: 38302e37352e3232312e302f32342d3234203d3e203438393235.roa (hash: Q4yUdFFGtrq1xUVDtHn0DoNWjht0ICRHxiUX7p+xRAQ=) 5: 3231332e3235342e3137302e302f32342d3234203d3e203438363738.roa (hash: ttSPLNkVmnmfbB1Jg0U4OFMRv4cZWxzTg6oBluFltrk=) 6: 38362e35342e3137322e302f32342d3234203d3e20323134343332.roa (hash: +6HuSGy13PoSBfdgi660PmTLE8Z52TLvw+ru7fcB7AI=) 7: 5ECB4CADBBADD500F49CA697D566A2761E017608.crl (hash: zxSBfEL5DoI/1ED/R7/WD2YXy/dVaGaTTQLl0xjRXlc=) 8: 3134312e3139332e3232382e302f32342d3234203d3e20323134323038.roa (hash: p1kuPenqcy6Et0XPjwxcCLB+vpEy3ekHhe4EodnqolI=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.crl rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.mft rsync://rpki.ripe.net/repository/DEFAULT/XstMrbut1QD0nKaX1Waidh4Bdgg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 00:23:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:0e:7d:03:91:f4:c1:0a:93:d0:34:42:80:0f:0d:22:88:ba:b8:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ecb4cadbbadd500f49ca697d566a2761e017608 Validity Not Before: Jan 24 20:54:54 2026 GMT Not After : Jan 26 00:23:54 2026 GMT Subject: CN=4E31108B0B182F774B634D8DC5742A0DB46A4D0D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:6b:4d:c9:82:27:ba:24:7b:08:69:95:c7:d5: 69:c8:cd:27:51:02:3f:46:55:ef:df:f6:ca:e1:61: 90:81:2f:51:58:0f:7b:90:8b:50:a7:20:e6:c0:0c: 20:7d:cd:c6:d8:9a:d6:ba:de:5b:35:e3:18:c5:2b: c3:49:f8:81:4e:08:73:8d:d5:b8:e8:2e:23:29:c4: 0f:aa:ba:f3:99:f7:4a:ab:78:df:96:34:6f:b6:ae: 87:ce:12:79:68:fe:45:94:f7:23:bb:80:e3:c3:c7: e5:aa:8b:ad:6c:1f:55:f8:8b:69:41:8b:f2:bc:12: eb:ed:59:15:63:34:53:aa:a7:9f:45:01:40:cd:0b: 81:ea:9e:ff:bd:ff:7d:29:4c:52:0d:7c:c3:5f:18: f9:7d:e7:1b:af:cd:fd:ef:4f:a2:5c:1d:9c:b9:ff: 05:15:57:63:b4:81:d3:fe:b0:a7:36:bc:c5:8b:66: 7f:c7:3a:34:97:3e:c5:ac:f7:58:31:86:52:00:b3: 73:91:ee:2d:0e:3a:7f:59:81:bf:c7:f0:37:b6:1d: 4a:98:11:82:f0:46:2c:a0:9e:77:78:3f:b2:66:f0: f7:71:af:fe:a6:98:1c:d2:17:52:93:60:1b:d0:a3: fd:44:10:8b:88:3d:63:dc:6b:06:1b:e9:3a:b9:86: 6e:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:31:10:8B:0B:18:2F:77:4B:63:4D:8D:C5:74:2A:0D:B4:6A:4D:0D X509v3 Authority Key Identifier: keyid:5E:CB:4C:AD:BB:AD:D5:00:F4:9C:A6:97:D5:66:A2:76:1E:01:76:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XstMrbut1QD0nKaX1Waidh4Bdgg.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:f0:2b:5a:56:0e:1f:f6:7d:91:84:be:89:3e:25:f3:e2:65: a4:83:da:30:29:b5:15:8d:24:c6:58:6d:d0:54:e4:6b:df:fb: 7c:51:bd:b4:4d:c5:2b:1f:9e:27:7a:17:79:8e:f9:bb:1b:d9: 95:2a:8f:26:20:14:12:76:b3:40:ce:3d:91:96:d4:19:70:c6: 8d:ab:ad:c7:16:af:37:ee:5d:8d:fe:0b:dd:fb:f2:a8:f6:32: 73:97:d9:40:48:93:e9:f5:ed:3f:39:99:ec:8c:12:4b:03:16: 4a:c8:de:86:37:a5:60:9c:c0:28:a9:d7:67:74:e1:56:b9:1a: 1a:c4:3e:d7:06:8e:2f:8f:09:39:97:da:6b:53:1c:24:1c:b1: 39:e6:98:5e:8b:b8:33:a1:82:f5:fd:36:43:ac:ff:42:77:5a: 64:00:2c:44:49:c2:ec:9a:2d:de:39:58:a1:1d:4f:9a:18:70: 73:48:a7:4e:b8:49:51:e4:e7:85:4a:fc:99:65:56:16:ce:b7: 42:56:9d:1b:70:4b:69:92:fa:e4:0b:3a:9b:f1:16:10:73:a0: 03:49:47:ef:42:88:d6:5d:d9:c9:75:e0:92:79:4c:ed:53:49: 22:66:c6:c0:70:7f:3e:6a:29:d7:6e:5e:f7:76:9f:54:b2:c4: c8:d3:f6:aa -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUCw59A5H0wQqT0DRCgA8NIoi6uNQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNWVjYjRjYWRiYmFkZDUwMGY0OWNhNjk3ZDU2NmEyNzYx ZTAxNzYwODAeFw0yNjAxMjQyMDU0NTRaFw0yNjAxMjYwMDIzNTRaMDMxMTAvBgNV BAMTKDRFMzExMDhCMEIxODJGNzc0QjYzNEQ4REM1NzQyQTBEQjQ2QTREMEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCa03Jgie6JHsIaZXH1WnIzSdR Aj9GVe/f9srhYZCBL1FYD3uQi1CnIObADCB9zcbYmta63ls14xjFK8NJ+IFOCHON 1bjoLiMpxA+quvOZ90qreN+WNG+2rofOEnlo/kWU9yO7gOPDx+Wqi61sH1X4i2lB i/K8EuvtWRVjNFOqp59FAUDNC4Hqnv+9/30pTFINfMNfGPl95xuvzf3vT6JcHZy5 /wUVV2O0gdP+sKc2vMWLZn/HOjSXPsWs91gxhlIAs3OR7i0OOn9Zgb/H8De2HUqY EYLwRiygnnd4P7Jm8Pdxr/6mmBzSF1KTYBvQo/1EEIuIPWPcawYb6Tq5hm4pAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUTjEQiwsYL3dLY02NxXQqDbRqTQ0wHwYDVR0j BBgwFoAUXstMrbut1QD0nKaX1Waidh4BdggwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWMwZTEzZDgtYmZlMC00MjM1LWFmYjQtZDUzZWRmYmFj ZGQyLzAvNUVDQjRDQURCQkFERDUwMEY0OUNBNjk3RDU2NkEyNzYxRTAxNzYwOC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1hzdE1yYnV0MVFEMG5LYVgxV2FpZGg0 QmRnZy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYzBlMTNkOC1i ZmUwLTQyMzUtYWZiNC1kNTNlZGZiYWNkZDIvMC81RUNCNENBREJCQURENTAwRjQ5 Q0E2OTdENTY2QTI3NjFFMDE3NjA4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQvArWlYOH/Z9kYS+iT4l 8+JlpIPaMCm1FY0kxlht0FTka9/7fFG9tE3FKx+eJ3oXeY75uxvZlSqPJiAUEnaz QM49kZbUGXDGjautxxavN+5djf4L3fvyqPYyc5fZQEiT6fXtPzmZ7IwSSwMWSsje hjelYJzAKKnXZ3ThVrkaGsQ+1waOL48JOZfaa1McJByxOeaYXou4M6GC9f02Q6z/ QndaZAAsREnC7Jot3jlYoR1Pmhhwc0inTrhJUeTnhUr8mWVWFs63QladG3BLaZL6 5As6m/EWEHOgA0lH70KI1l3ZyXXgknlM7VNJImbGwHB/Pmop125e93afVLLEyNP2 qg== -----END CERTIFICATE-----Generated at Sun Jan 25 15:21:14 2026 by rpki-client