This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b8844318-35d7-482e-bbd5-b624cf0b2041/1/D36546790928F44FF74C564231471FA1D8D2A97B.mft File: D36546790928F44FF74C564231471FA1D8D2A97B.mft (raw, json) Hash identifier: MzbcE+uEzjidpA91Lnpl/AX1cLTt7feRXHejsD7nzM8= Subject key identifier: 33:D8:27:C3:93:0B:FA:A6:21:78:B5:2C:3B:1F:30:AC:AE:1F:31:3C Authority key identifier: D3:65:46:79:09:28:F4:4F:F7:4C:56:42:31:47:1F:A1:D8:D2:A9:7B Certificate issuer: /CN=D36546790928F44FF74C564231471FA1D8D2A97B Certificate serial: 3DB3007C9DCC8B5554E42DE87B909889BB73F827 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D36546790928F44FF74C564231471FA1D8D2A97B.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b8844318-35d7-482e-bbd5-b624cf0b2041/1/D36546790928F44FF74C564231471FA1D8D2A97B.mft Manifest number: 68 Signing time: Sun 25 Jan 2026 08:31:39 +0000 Manifest this update: Sun 25 Jan 2026 08:26:39 +0000 Manifest next update: Mon 26 Jan 2026 12:15:39 +0000 Files and hashes: 1: 326130363a313238333a626434303a3a2f34322d313238203d3e20323130373936.roa (hash: Uw0Yd63FHiLbrVWXi+u/Khr5x1SAZF46bRDWajH7ZJ4=) 2: D36546790928F44FF74C564231471FA1D8D2A97B.crl (hash: 4gu1uRk40r+66hFX8N1CGAOX+5FZDzCrG+bDYQJ21b4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b8844318-35d7-482e-bbd5-b624cf0b2041/1/D36546790928F44FF74C564231471FA1D8D2A97B.crl rsync://rsync.paas.rpki.ripe.net/repository/b8844318-35d7-482e-bbd5-b624cf0b2041/1/D36546790928F44FF74C564231471FA1D8D2A97B.mft rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D36546790928F44FF74C564231471FA1D8D2A97B.cer rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.crl rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.mft rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:15:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:b3:00:7c:9d:cc:8b:55:54:e4:2d:e8:7b:90:98:89:bb:73:f8:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D36546790928F44FF74C564231471FA1D8D2A97B Validity Not Before: Jan 25 08:26:39 2026 GMT Not After : Jan 26 12:15:39 2026 GMT Subject: CN=33D827C3930BFAA62178B52C3B1F30ACAE1F313C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:3b:5f:a9:7f:87:f8:36:c9:02:cd:2e:2c:02: 63:ea:b5:a8:06:6d:b0:c0:1d:5e:9f:26:7d:33:92: 2f:d6:26:37:ee:56:13:47:2c:89:27:60:9d:a0:a3: df:62:02:c6:5d:31:88:9c:1c:f3:eb:12:e5:24:82: 76:45:0f:b7:03:3f:d2:22:2c:c9:05:15:8b:4e:6c: 70:ec:21:e6:4e:6e:82:0e:1f:e7:03:c5:a1:8b:9c: 6d:f7:7f:1d:ea:3c:03:21:10:f7:ac:ca:9d:98:38: a6:72:4a:84:11:4f:38:97:e0:18:cb:65:32:6e:24: 20:08:f4:6a:26:75:12:59:8f:3b:09:09:05:73:e4: ee:f7:9a:a6:33:83:ab:a3:9e:e6:55:1d:2d:0d:39: 46:a2:c2:f0:b1:50:67:5d:13:6a:26:4d:3b:6c:53: 81:a1:86:82:93:14:7c:df:dd:41:ad:29:c5:28:1c: 64:11:7a:1b:9a:0c:03:07:63:94:a9:b6:6e:c5:81: ca:93:5e:87:24:05:81:a0:c9:9a:20:a9:24:5f:3f: 19:5b:f7:89:12:bc:c3:78:dc:13:81:8d:79:22:6b: 6b:9e:ec:78:8e:f9:5f:84:ea:61:8d:91:1b:e3:05: 6b:a6:60:70:dd:c5:cc:1c:bd:79:2c:24:bc:8b:4c: 18:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:D8:27:C3:93:0B:FA:A6:21:78:B5:2C:3B:1F:30:AC:AE:1F:31:3C X509v3 Authority Key Identifier: keyid:D3:65:46:79:09:28:F4:4F:F7:4C:56:42:31:47:1F:A1:D8:D2:A9:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b8844318-35d7-482e-bbd5-b624cf0b2041/1/D36546790928F44FF74C564231471FA1D8D2A97B.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D36546790928F44FF74C564231471FA1D8D2A97B.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b8844318-35d7-482e-bbd5-b624cf0b2041/1/D36546790928F44FF74C564231471FA1D8D2A97B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c2:d6:27:7f:e8:9d:6d:5d:67:7e:bf:c6:ed:c3:9e:b9:d9:16: 94:3a:8b:f0:08:b7:56:b1:da:86:77:ed:cf:d4:2d:cf:d6:a3: c1:d1:2d:ab:c3:f8:0f:a9:f0:d0:d3:e3:91:a6:9a:37:f5:9e: 54:7f:36:9f:ad:fb:f3:1d:ac:9d:cc:be:e8:55:30:76:8a:9e: 9a:b8:57:fc:30:7b:25:5d:b1:5e:60:62:ec:86:70:c0:6b:35: 89:63:8b:49:09:b2:e5:d8:ff:c4:42:e2:6b:d2:85:c8:29:48: fe:b9:81:20:73:23:68:29:ca:6e:bc:81:c2:94:36:5a:63:b7: 6f:d8:2c:69:ba:18:fb:7b:8c:1c:22:5d:98:57:56:28:45:3d: 1d:a3:75:9c:53:cd:8e:dc:eb:5c:c2:3d:f1:15:d7:5f:41:bd: 79:82:f3:e3:01:2b:3f:58:a4:12:57:27:2b:6f:bd:b5:3f:f3: 36:9e:29:62:30:84:97:82:00:f0:a8:3e:43:18:0b:06:22:c7: a5:c6:6f:6f:c4:8e:b8:fc:38:dc:91:ec:ae:49:61:aa:4e:17: 44:10:d7:44:a7:82:d8:aa:f8:b4:7a:25:ab:6f:c1:63:c6:bb: a8:65:9d:f6:9f:3d:b7:5b:b6:43:32:4d:9b:f6:4e:cf:3b:c6: 08:15:61:47 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUPbMAfJ3Mi1VU5C3oe5CYibtz+CcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM2NTQ2NzkwOTI4RjQ0RkY3NEM1NjQyMzE0NzFGQTFE OEQyQTk3QjAeFw0yNjAxMjUwODI2MzlaFw0yNjAxMjYxMjE1MzlaMDMxMTAvBgNV BAMTKDMzRDgyN0MzOTMwQkZBQTYyMTc4QjUyQzNCMUYzMEFDQUUxRjMxM0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWO1+pf4f4NskCzS4sAmPqtagG bbDAHV6fJn0zki/WJjfuVhNHLIknYJ2go99iAsZdMYicHPPrEuUkgnZFD7cDP9Ii LMkFFYtObHDsIeZOboIOH+cDxaGLnG33fx3qPAMhEPesyp2YOKZySoQRTziX4BjL ZTJuJCAI9GomdRJZjzsJCQVz5O73mqYzg6ujnuZVHS0NOUaiwvCxUGddE2omTTts U4GhhoKTFHzf3UGtKcUoHGQRehuaDAMHY5Sptm7FgcqTXockBYGgyZogqSRfPxlb 94kSvMN43BOBjXkia2ue7HiO+V+E6mGNkRvjBWumYHDdxcwcvXksJLyLTBhzAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUM9gnw5ML+qYheLUsOx8wrK4fMTwwHwYDVR0j BBgwFoAU02VGeQko9E/3TFZCMUcfodjSqXswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYjg4NDQzMTgtMzVkNy00ODJlLWJiZDUtYjYyNGNmMGIy MDQxLzEvRDM2NTQ2NzkwOTI4RjQ0RkY3NEM1NjQyMzE0NzFGQTFEOEQyQTk3Qi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82OGFiYWJiYi1mMDQ4LTRk ZTEtOTIwNi04ZDQwZjA3MTgwOGIvNi9EMzY1NDY3OTA5MjhGNDRGRjc0QzU2NDIz MTQ3MUZBMUQ4RDJBOTdCLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2I4ODQ0MzE4LTM1ZDctNDgyZS1iYmQ1LWI2MjRjZjBiMjA0MS8xL0QzNjU0Njc5 MDkyOEY0NEZGNzRDNTY0MjMxNDcxRkExRDhEMkE5N0IubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDC1id/ 6J1tXWd+v8btw5652RaUOovwCLdWsdqGd+3P1C3P1qPB0S2rw/gPqfDQ0+ORppo3 9Z5UfzafrfvzHaydzL7oVTB2ip6auFf8MHslXbFeYGLshnDAazWJY4tJCbLl2P/E QuJr0oXIKUj+uYEgcyNoKcpuvIHClDZaY7dv2Cxpuhj7e4wcIl2YV1YoRT0do3Wc U82O3Otcwj3xFddfQb15gvPjASs/WKQSVycrb721P/M2niliMISXggDwqD5DGAsG Iselxm9vxI64/DjckeyuSWGqThdEENdEp4LYqvi0eiWrb8FjxruoZZ32nz23W7ZD Mk2b9k7PO8YIFWFH -----END CERTIFICATE-----Generated at Sun Jan 25 23:11:05 2026 by rpki-client