This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.mft File: BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.mft (raw, json) Hash identifier: T3nWUBTc5iEpEad+MQpPZDI2GM+/l2C+OJ28Xc946yQ= Subject key identifier: FC:FE:79:CC:F7:97:5D:61:D7:71:A6:63:C8:79:18:7A:EF:4E:1A:34 Authority key identifier: BE:0B:B7:88:69:CD:B2:AD:0C:97:1A:6A:85:8A:30:21:3E:AE:C4:7D Certificate issuer: /CN=be0bb78869cdb2ad0c971a6a858a30213eaec47d Certificate serial: 38BD12E027A97B694D83784B0F9293284B8D577C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vgu3iGnNsq0MlxpqhYowIT6uxH0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.mft Manifest number: 01D4 Signing time: Sun 25 Jan 2026 06:35:13 +0000 Manifest this update: Sun 25 Jan 2026 06:30:13 +0000 Manifest next update: Mon 26 Jan 2026 10:25:13 +0000 Files and hashes: 1: 3139352e34322e3131322e302f32342d3234203d3e203438343335.roa (hash: tbJb4NeQxaqdUwJnx0mi5eYh93xW1wx/PyQm3nNKQlk=) 2: 3139332e3136392e37382e302f32332d3234203d3e203530343334.roa (hash: Ozt3uRUP9szxnq6Y/BlUHZo63N6fYBwOlNZT3blQYnY=) 3: 3137382e3234382e37322e302f32342d3234203d3e20313531383732.roa (hash: wHwcwoFIrN2jLP/C8OzdoSzmdobOAFysYNlbWgxelzw=) 4: 3139352e34322e3131322e302f32332d3233203d3e203438343335.roa (hash: SO5iYpxppDi067L1otYSj19apV4zwNvimr95590708A=) 5: 3137382e3234382e37352e302f32342d3234203d3e20313939303538.roa (hash: 32SDZVJ37JJ5kdrs24paGjp5boRcUJ2fYJyMfyL4cw4=) 6: 3139332e3136392e37382e302f32332d3234203d3e203438343335.roa (hash: 7BonRadnccE5oClU90cDWqb2zFnrszRs5TdXh7lrUTg=) 7: 3137382e3234382e37342e302f32342d3234203d3e20323039313831.roa (hash: JOjM4S47fNK82HVGI3kzft2889UH/2/CmD3owvdrCqM=) 8: 3137382e3234382e37362e302f32342d3234203d3e203432383331.roa (hash: FQiM0Ff1DCSzma5DiHQMrsfmN7QznFFoSzW1a5q9Q2M=) 9: 3137382e3234382e37382e302f32342d3234203d3e20323132333834.roa (hash: 55oHxRvhLlFnFgVNA6T2hJ74AYC9yyl40HSKUWc/res=) 10: BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.crl (hash: lrKaoXf6jfDwwVywoO1X15q0XqmX0shkR/7/ix/mHzs=) 11: 3137382e3234382e37332e302f32342d3234203d3e20313431393638.roa (hash: zMoHCJaZZ5vI4uszw9fV0p+6ygU9pfTnJ4jfa1DsJEg=) 12: 3137382e3234382e37392e302f32342d3234203d3e20313335333932.roa (hash: YE6bAehCH8ruShBFJdgU4NCX9qGkifZ5lR9x24K4y2c=) 13: 3137382e3234382e37372e302f32342d3234203d3e20323133373833.roa (hash: QA/AmBx/vt6J6eDW0Y/+kHvJueiOPr7O1NVAvBIe9GY=) 14: 3139352e34322e3131332e302f32342d3234203d3e203438343335.roa (hash: pchbJm+Br/uCuzzDsgfU4W3Dq3tZwJWDYbuhydm/Eyc=) 15: 3139332e3136392e37382e302f32332d3233203d3e203438343335.roa (hash: CCPO6h/MpNSX08leEvwwJIjESWw2OEutpIc59PlyY9E=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.crl rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.mft rsync://rpki.ripe.net/repository/DEFAULT/vgu3iGnNsq0MlxpqhYowIT6uxH0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:bd:12:e0:27:a9:7b:69:4d:83:78:4b:0f:92:93:28:4b:8d:57:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be0bb78869cdb2ad0c971a6a858a30213eaec47d Validity Not Before: Jan 25 06:30:13 2026 GMT Not After : Jan 26 10:25:13 2026 GMT Subject: CN=FCFE79CCF7975D61D771A663C879187AEF4E1A34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:1e:8c:4d:16:a4:72:4f:24:3b:4c:f4:f8:69: 5e:d3:42:16:58:fb:0b:6e:9b:e8:2b:ac:93:f3:44: 5d:90:f5:d0:a5:e1:f9:77:d8:ac:d2:15:d6:41:45: c7:1a:e4:4d:30:c7:35:50:bb:da:b0:67:69:3d:39: 20:fb:8d:4c:23:b1:91:bb:24:3c:d3:d1:6f:f5:fa: d7:7e:e8:f6:e1:57:11:c4:c2:3f:f6:6b:f4:33:f2: 3a:33:ae:eb:b7:66:d6:ee:5f:1c:e9:0f:b0:14:ab: ca:68:9e:05:bf:56:f8:3d:60:0d:01:94:77:bf:b3: fd:a2:e5:e4:eb:df:51:82:2f:d7:3f:42:d1:f4:25: 07:40:45:33:59:fd:75:00:c0:0a:21:f7:5a:d4:f8: a4:aa:a0:35:b2:77:df:9a:f7:d2:bf:2a:cb:63:61: 35:93:5a:5a:52:12:ba:7d:40:d9:ae:24:cf:80:d6: 52:79:fd:dc:2d:b6:47:87:86:9e:e7:02:e1:c6:22: 49:af:eb:20:d8:05:65:5b:2c:1a:5f:79:4c:cf:1f: f5:5e:f6:a6:84:23:16:48:31:56:fe:9d:02:e7:41: 9e:2e:64:90:d4:8a:ff:ac:5e:52:c7:a4:c7:47:39: 5a:5c:0b:7f:49:a6:7e:b6:86:99:53:9a:17:e0:5d: 0b:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:FE:79:CC:F7:97:5D:61:D7:71:A6:63:C8:79:18:7A:EF:4E:1A:34 X509v3 Authority Key Identifier: keyid:BE:0B:B7:88:69:CD:B2:AD:0C:97:1A:6A:85:8A:30:21:3E:AE:C4:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vgu3iGnNsq0MlxpqhYowIT6uxH0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:aa:14:30:db:30:93:13:98:d6:77:d4:53:ac:a4:4e:66:e1: bb:fe:2d:cd:f8:f6:1b:c2:06:fb:ba:45:49:52:2b:f6:7b:72: 96:f3:e3:93:ff:e6:8b:fe:8b:3c:f0:a7:e9:96:43:ac:e3:74: 78:dc:68:21:5a:96:b2:ff:6a:bc:e1:49:55:32:4e:31:f9:8b: 21:c6:94:e4:bf:68:d9:d9:0d:0d:4d:0a:94:8b:1a:15:06:39: 8f:74:8d:36:63:1b:84:09:2d:0c:a4:04:db:8b:fc:d2:aa:17: f9:79:bb:24:f0:e2:50:43:7f:cc:12:36:75:52:34:7f:95:45: ed:09:fd:47:64:d6:7e:4b:fd:1d:93:53:6b:c2:a6:ea:72:49: 84:07:5a:f4:e9:e8:5e:ba:29:4a:ad:7b:35:85:80:cc:44:fc: 2e:4b:19:0c:cd:38:b1:d3:df:98:30:e3:39:f4:a6:10:07:59: ce:81:71:dd:02:5f:76:f7:c3:fd:b1:2f:e1:e7:1f:67:d2:6f: 6b:5a:87:4c:78:56:77:ae:7e:61:15:5b:34:ba:34:40:81:8d: 48:63:51:71:9b:ee:58:c5:c1:64:92:4d:b3:88:84:5a:24:8f: c4:f4:ad:20:bc:23:4d:2e:d5:81:84:1d:9a:20:fb:10:5f:ae: 80:c2:ab:f9 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUOL0S4Cepe2lNg3hLD5KTKEuNV3wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYmUwYmI3ODg2OWNkYjJhZDBjOTcxYTZhODU4YTMwMjEz ZWFlYzQ3ZDAeFw0yNjAxMjUwNjMwMTNaFw0yNjAxMjYxMDI1MTNaMDMxMTAvBgNV BAMTKEZDRkU3OUNDRjc5NzVENjFENzcxQTY2M0M4NzkxODdBRUY0RTFBMzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhHoxNFqRyTyQ7TPT4aV7TQhZY +wtum+grrJPzRF2Q9dCl4fl32KzSFdZBRcca5E0wxzVQu9qwZ2k9OSD7jUwjsZG7 JDzT0W/1+td+6PbhVxHEwj/2a/Qz8jozruu3ZtbuXxzpD7AUq8pongW/Vvg9YA0B lHe/s/2i5eTr31GCL9c/QtH0JQdARTNZ/XUAwAoh91rU+KSqoDWyd9+a99K/Kstj YTWTWlpSErp9QNmuJM+A1lJ5/dwttkeHhp7nAuHGIkmv6yDYBWVbLBpfeUzPH/Ve 9qaEIxZIMVb+nQLnQZ4uZJDUiv+sXlLHpMdHOVpcC39Jpn62hplTmhfgXQuTAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU/P55zPeXXWHXcaZjyHkYeu9OGjQwHwYDVR0j BBgwFoAUvgu3iGnNsq0MlxpqhYowIT6uxH0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWMxNDMzODctZjAxMy00OTIyLTgzOGUtZTE4ODY0YmUx ZTRhLzAvQkUwQkI3ODg2OUNEQjJBRDBDOTcxQTZBODU4QTMwMjEzRUFFQzQ3RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3ZndTNpR25Oc3EwTWx4cHFoWW93SVQ2 dXhIMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYzE0MzM4Ny1m MDEzLTQ5MjItODM4ZS1lMTg4NjRiZTFlNGEvMC9CRTBCQjc4ODY5Q0RCMkFEMEM5 NzFBNkE4NThBMzAyMTNFQUVDNDdELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlaoUMNswkxOY1nfUU6yk Tmbhu/4tzfj2G8IG+7pFSVIr9ntylvPjk//mi/6LPPCn6ZZDrON0eNxoIVqWsv9q vOFJVTJOMfmLIcaU5L9o2dkNDU0KlIsaFQY5j3SNNmMbhAktDKQE24v80qoX+Xm7 JPDiUEN/zBI2dVI0f5VF7Qn9R2TWfkv9HZNTa8Km6nJJhAda9OnoXropSq17NYWA zET8LksZDM04sdPfmDDjOfSmEAdZzoFx3QJfdvfD/bEv4ecfZ9Jva1qHTHhWd65+ YRVbNLo0QIGNSGNRcZvuWMXBZJJNs4iEWiSPxPStILwjTS7VgYQdmiD7EF+ugMKr +Q== -----END CERTIFICATE-----Generated at Sun Jan 25 14:45:21 2026 by rpki-client