This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.mft File: 5ECB4CADBBADD500F49CA697D566A2761E017608.mft (raw, json) Hash identifier: 0hSdaV0k+PNTV/NiAWAr3mpmhzxa7xzSXOartPmLin0= Subject key identifier: 52:29:F5:20:11:1C:E0:6A:F8:46:71:F1:C6:68:3C:0A:B6:07:8E:01 Authority key identifier: 5E:CB:4C:AD:BB:AD:D5:00:F4:9C:A6:97:D5:66:A2:76:1E:01:76:08 Certificate issuer: /CN=5ecb4cadbbadd500f49ca697d566a2761e017608 Certificate serial: 3CA9FC233B37B5C2C90DDCA1AF335BE50A9068EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XstMrbut1QD0nKaX1Waidh4Bdgg.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.mft Manifest number: 0256 Signing time: Mon 26 Jan 2026 08:46:12 +0000 Manifest this update: Mon 26 Jan 2026 08:41:12 +0000 Manifest next update: Tue 27 Jan 2026 11:05:12 +0000 Files and hashes: 1: 3137302e36322e3139302e302f32342d3234203d3e203438393235.roa (hash: 8/++60jg7XtzmZ45FRECeqxUVy5048XlFvcQJYMNUjo=) 2: 38362e35342e3137322e302f32342d3234203d3e20323134343332.roa (hash: +6HuSGy13PoSBfdgi660PmTLE8Z52TLvw+ru7fcB7AI=) 3: 3231332e3235342e3137302e302f32342d3234203d3e20323134393431.roa (hash: WuIyFXGDgkt2cltxoxT/RYao20HHu+r0Sn5rfpjFnHA=) 4: 5ECB4CADBBADD500F49CA697D566A2761E017608.crl (hash: 8Zyem2/GpQA5kM8FnAcGrv11pg1XAJmYPZBttiuxVuc=) 5: 3231332e3235342e3137302e302f32342d3234203d3e203438363738.roa (hash: ttSPLNkVmnmfbB1Jg0U4OFMRv4cZWxzTg6oBluFltrk=) 6: 3231332e3235342e3137302e302f32342d3234203d3e20323038343833.roa (hash: gjwDheXZBS8eOtwo7Ja5xPFcujfV7TC07EH1z972oQ4=) 7: 3134312e3139332e3232382e302f32342d3234203d3e20323134323038.roa (hash: p1kuPenqcy6Et0XPjwxcCLB+vpEy3ekHhe4EodnqolI=) 8: 38302e37352e3232312e302f32342d3234203d3e203438393235.roa (hash: Q4yUdFFGtrq1xUVDtHn0DoNWjht0ICRHxiUX7p+xRAQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.crl rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.mft rsync://rpki.ripe.net/repository/DEFAULT/XstMrbut1QD0nKaX1Waidh4Bdgg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:a9:fc:23:3b:37:b5:c2:c9:0d:dc:a1:af:33:5b:e5:0a:90:68:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ecb4cadbbadd500f49ca697d566a2761e017608 Validity Not Before: Jan 26 08:41:12 2026 GMT Not After : Jan 27 11:05:12 2026 GMT Subject: CN=5229F520111CE06AF84671F1C6683C0AB6078E01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:cc:e9:14:e4:8c:c0:b2:13:d4:c7:99:fa:7b: fe:50:2d:94:ae:31:9d:91:99:88:ac:d0:e3:0f:b6: 0d:c2:b3:ae:63:ee:5f:65:0f:f7:87:a3:cf:56:95: 8d:8b:ca:ad:9b:83:96:4b:44:19:ef:d4:31:59:8d: 2d:4d:9c:bc:d1:71:92:0b:e6:6c:0f:e7:88:7a:e2: a5:f3:0d:dd:10:fd:d0:6c:e5:22:d8:9a:85:93:77: 7d:e5:7b:1a:86:c3:27:c9:79:0a:b1:00:25:e2:af: ab:21:ab:63:7e:7d:99:7b:84:59:a4:80:c3:ca:07: 3b:04:2a:ec:eb:b7:f0:4c:72:d1:ba:bb:b6:20:e2: e9:4a:f7:ad:d1:61:65:ba:64:64:13:7d:f7:b2:41: e5:80:fb:89:e5:0c:c5:d8:21:1a:cf:02:39:61:27: 1e:ad:ab:ae:09:83:83:84:2c:3d:09:95:f1:9a:cc: d8:ba:cc:27:b7:56:ee:e4:17:19:04:ba:0d:47:4d: f3:81:94:57:98:ef:26:5d:04:17:6d:d7:c8:f7:9d: d7:eb:cb:7b:e5:fb:a2:fa:b1:86:5a:16:e7:93:f6: a3:22:b9:1b:ef:2c:cb:05:23:b9:11:b0:15:b0:6d: 8a:66:7c:33:c4:2c:f1:94:a1:ed:c7:a6:49:39:66: c6:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:29:F5:20:11:1C:E0:6A:F8:46:71:F1:C6:68:3C:0A:B6:07:8E:01 X509v3 Authority Key Identifier: keyid:5E:CB:4C:AD:BB:AD:D5:00:F4:9C:A6:97:D5:66:A2:76:1E:01:76:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XstMrbut1QD0nKaX1Waidh4Bdgg.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:f0:70:41:a1:be:f6:fe:43:80:86:4e:30:4e:d2:96:02:0d: a6:d3:a4:67:e7:0b:43:2e:6f:80:d5:0c:7c:68:2d:46:c3:fa: 5c:8c:4f:b3:ab:bc:a9:a6:44:b5:b0:b6:cd:56:8b:72:d0:d0: a7:0d:bf:32:a8:2b:e0:a4:0a:33:0c:14:36:30:7b:22:8d:7e: 64:3b:64:fa:96:1b:bd:b9:e7:9d:25:ef:af:3f:b6:a6:ee:20: 2c:c9:16:8c:b2:ff:74:8a:0c:9f:69:e4:6b:0b:04:d8:eb:71: 31:dc:3b:d9:36:db:8e:60:e7:4b:aa:99:2a:06:9c:46:fd:30: 9f:0e:10:5f:c9:8d:0f:a0:d3:c9:1e:c8:8e:46:81:c7:75:81: ca:32:1c:eb:dc:60:b9:66:26:a3:87:bb:f3:43:6e:80:3e:2a: 8a:63:dc:a9:65:6e:d3:5d:8c:17:6d:5e:4a:ae:de:d0:bb:61: 41:5e:ab:56:08:c7:9a:de:ab:8d:6c:6d:59:8b:53:ab:17:64: 08:a8:af:90:43:ce:6e:9c:3b:b8:a1:1b:ba:e8:84:bb:0b:ab: 9a:c0:95:e2:52:f7:f6:63:cc:44:bd:c9:9a:7b:c2:4f:b0:c1: e6:3f:27:9b:61:de:f2:d7:a2:ef:fa:25:0c:04:03:0e:c4:ce: f5:7d:66:5f -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUPKn8Izs3tcLJDdyhrzNb5QqQaOowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNWVjYjRjYWRiYmFkZDUwMGY0OWNhNjk3ZDU2NmEyNzYx ZTAxNzYwODAeFw0yNjAxMjYwODQxMTJaFw0yNjAxMjcxMTA1MTJaMDMxMTAvBgNV BAMTKDUyMjlGNTIwMTExQ0UwNkFGODQ2NzFGMUM2NjgzQzBBQjYwNzhFMDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLzOkU5IzAshPUx5n6e/5QLZSu MZ2RmYis0OMPtg3Cs65j7l9lD/eHo89WlY2Lyq2bg5ZLRBnv1DFZjS1NnLzRcZIL 5mwP54h64qXzDd0Q/dBs5SLYmoWTd33lexqGwyfJeQqxACXir6shq2N+fZl7hFmk gMPKBzsEKuzrt/BMctG6u7Yg4ulK963RYWW6ZGQTffeyQeWA+4nlDMXYIRrPAjlh Jx6tq64Jg4OELD0JlfGazNi6zCe3Vu7kFxkEug1HTfOBlFeY7yZdBBdt18j3ndfr y3vl+6L6sYZaFueT9qMiuRvvLMsFI7kRsBWwbYpmfDPELPGUoe3Hpkk5ZsZFAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUUin1IBEc4Gr4RnHxxmg8CrYHjgEwHwYDVR0j BBgwFoAUXstMrbut1QD0nKaX1Waidh4BdggwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWMwZTEzZDgtYmZlMC00MjM1LWFmYjQtZDUzZWRmYmFj ZGQyLzAvNUVDQjRDQURCQkFERDUwMEY0OUNBNjk3RDU2NkEyNzYxRTAxNzYwOC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1hzdE1yYnV0MVFEMG5LYVgxV2FpZGg0 QmRnZy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYzBlMTNkOC1i ZmUwLTQyMzUtYWZiNC1kNTNlZGZiYWNkZDIvMC81RUNCNENBREJCQURENTAwRjQ5 Q0E2OTdENTY2QTI3NjFFMDE3NjA4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASvBwQaG+9v5DgIZOME7S lgINptOkZ+cLQy5vgNUMfGgtRsP6XIxPs6u8qaZEtbC2zVaLctDQpw2/Mqgr4KQK MwwUNjB7Io1+ZDtk+pYbvbnnnSXvrz+2pu4gLMkWjLL/dIoMn2nkawsE2OtxMdw7 2TbbjmDnS6qZKgacRv0wnw4QX8mND6DTyR7IjkaBx3WByjIc69xguWYmo4e780Nu gD4qimPcqWVu012MF21eSq7e0LthQV6rVgjHmt6rjWxtWYtTqxdkCKivkEPObpw7 uKEbuuiEuwurmsCV4lL39mPMRL3JmnvCT7DB5j8nm2He8tei7/olDAQDDsTO9X1m Xw== -----END CERTIFICATE-----Generated at Mon Jan 26 11:10:35 2026 by rpki-client