This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/0/94521D5EA7B7900080F6E66836D4DEDA347054FD.mft File: 94521D5EA7B7900080F6E66836D4DEDA347054FD.mft (raw, json) Hash identifier: oNMn5V0zSvkMzYvjyTIoFVEQvum+nMJ43Tj+SGGiCXw= Subject key identifier: 52:CC:CD:4A:7E:10:1B:7E:C3:0B:B5:4D:59:D1:88:98:1A:DF:85:69 Authority key identifier: 94:52:1D:5E:A7:B7:90:00:80:F6:E6:68:36:D4:DE:DA:34:70:54:FD Certificate issuer: /CN=94521d5ea7b7900080f6e66836d4deda347054fd Certificate serial: 26753BEEC9FD7AA2B284CF0E27AC4AEAD090C720 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lFIdXqe3kACA9uZoNtTe2jRwVP0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/0/94521D5EA7B7900080F6E66836D4DEDA347054FD.mft Manifest number: 0246 Signing time: Mon 26 Jan 2026 06:45:09 +0000 Manifest this update: Mon 26 Jan 2026 06:40:09 +0000 Manifest next update: Tue 27 Jan 2026 19:35:09 +0000 Files and hashes: 1: AS214701.asa (hash: EwiuTDTlJzzW3BaZbT2OcjZ0BGKln2twmg9+cBCEmTw=) 2: 94521D5EA7B7900080F6E66836D4DEDA347054FD.crl (hash: KpDdnR0OCiEO4BVJdd2/4irZrh1C+8Jlb8sHZovh2oY=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/0/94521D5EA7B7900080F6E66836D4DEDA347054FD.crl rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/0/94521D5EA7B7900080F6E66836D4DEDA347054FD.mft rsync://rpki.ripe.net/repository/DEFAULT/lFIdXqe3kACA9uZoNtTe2jRwVP0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:75:3b:ee:c9:fd:7a:a2:b2:84:cf:0e:27:ac:4a:ea:d0:90:c7:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94521d5ea7b7900080f6e66836d4deda347054fd Validity Not Before: Jan 26 06:40:09 2026 GMT Not After : Jan 27 19:35:09 2026 GMT Subject: CN=52CCCD4A7E101B7EC30BB54D59D188981ADF8569 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:7b:b7:38:9a:de:85:17:54:c0:00:a4:a0:80: 3e:62:e9:11:79:33:14:55:a9:28:02:c1:3f:ce:a7: 68:7e:37:2c:3d:56:c4:23:7b:72:b9:82:a1:96:8c: f5:0a:ba:75:97:3d:e4:56:83:c4:d6:2d:28:1d:34: cf:4c:ab:52:40:3a:35:7e:3b:93:54:dc:56:41:2a: 94:fd:3e:97:d8:50:02:2a:f9:10:52:e8:4a:be:16: 8e:6b:93:d7:ea:6d:57:1d:00:85:80:c4:84:c7:e3: 6a:b7:e6:b3:bd:57:05:2c:c5:9b:bf:b4:9d:9a:18: c1:8a:83:33:54:4f:3d:28:fa:e4:6c:b7:0c:77:b6: c9:52:3a:46:60:09:5f:fb:3e:8e:7f:90:9a:98:e5: f0:03:61:1f:32:6d:6c:7d:53:34:6e:7a:0a:ea:af: 79:d9:29:e4:53:c9:28:44:ff:37:b7:1d:b9:4a:15: 82:3f:15:ed:8c:8b:e7:93:6c:7f:41:46:74:82:6f: 24:16:44:81:4d:00:dd:1c:93:fc:00:b4:47:7e:64: e2:d3:ee:58:db:d8:fc:dc:c0:0a:15:71:63:c5:87: cb:a7:25:38:63:bf:d6:9e:16:ba:64:65:01:12:dd: ba:12:90:7d:b5:54:61:c0:36:6a:00:f2:00:2f:c4: b7:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:CC:CD:4A:7E:10:1B:7E:C3:0B:B5:4D:59:D1:88:98:1A:DF:85:69 X509v3 Authority Key Identifier: keyid:94:52:1D:5E:A7:B7:90:00:80:F6:E6:68:36:D4:DE:DA:34:70:54:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/0/94521D5EA7B7900080F6E66836D4DEDA347054FD.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lFIdXqe3kACA9uZoNtTe2jRwVP0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/0/94521D5EA7B7900080F6E66836D4DEDA347054FD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:79:af:e1:84:1c:2c:17:0e:61:5b:7a:45:d9:d8:94:c3:5e: f0:43:36:78:61:19:3f:97:3a:e5:01:a7:a1:74:63:98:01:89: 3a:4b:c4:57:bf:05:b4:85:f1:06:50:24:01:74:87:fb:ee:96: 82:54:8c:ab:02:f8:22:01:7a:a3:d2:f8:21:02:77:a6:ef:85: 4a:a8:63:53:da:e8:2a:90:9e:92:53:f8:29:34:ce:41:28:58: ea:a3:fe:59:81:b5:57:4a:4e:d1:82:6f:67:3f:29:47:3a:a9: 25:be:7a:dd:13:1c:66:59:65:a6:fc:a7:db:d9:11:af:c9:13: c4:d2:33:b4:33:cb:37:70:d8:fe:a4:7e:62:22:bf:3e:92:28: d3:ea:ca:d4:11:a6:95:d0:70:48:02:77:4f:c5:cc:9a:b8:f2: 40:92:33:ba:07:25:9d:77:87:98:6e:61:ca:14:7f:72:40:21: 60:39:8b:ed:2d:8d:33:b7:03:75:fb:cf:41:bb:0a:b0:9c:73: 13:d9:11:72:82:ac:18:46:c5:e7:47:cb:24:54:d9:5b:47:a2: 0a:ce:b4:2e:2e:3c:2b:b3:34:ec:02:fc:23:a6:0c:72:c3:a1: 62:ad:5e:bc:0f:1e:0f:b1:54:39:bc:13:ab:a4:f1:7b:c0:3e: e9:ab:25:1d -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUJnU77sn9eqKyhM8OJ6xK6tCQxyAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTQ1MjFkNWVhN2I3OTAwMDgwZjZlNjY4MzZkNGRlZGEz NDcwNTRmZDAeFw0yNjAxMjYwNjQwMDlaFw0yNjAxMjcxOTM1MDlaMDMxMTAvBgNV BAMTKDUyQ0NDRDRBN0UxMDFCN0VDMzBCQjU0RDU5RDE4ODk4MUFERjg1NjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoe7c4mt6FF1TAAKSggD5i6RF5 MxRVqSgCwT/Op2h+Nyw9VsQje3K5gqGWjPUKunWXPeRWg8TWLSgdNM9Mq1JAOjV+ O5NU3FZBKpT9PpfYUAIq+RBS6Eq+Fo5rk9fqbVcdAIWAxITH42q35rO9VwUsxZu/ tJ2aGMGKgzNUTz0o+uRstwx3tslSOkZgCV/7Po5/kJqY5fADYR8ybWx9UzRuegrq r3nZKeRTyShE/ze3HblKFYI/Fe2Mi+eTbH9BRnSCbyQWRIFNAN0ck/wAtEd+ZOLT 7ljb2PzcwAoVcWPFh8unJThjv9aeFrpkZQES3boSkH21VGHANmoA8gAvxLe/AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUUszNSn4QG37DC7VNWdGImBrfhWkwHwYDVR0j BBgwFoAUlFIdXqe3kACA9uZoNtTe2jRwVP0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYmVhZDJkY2YtZWFkNS00OTU0LWFkODQtNjU4MGNkMmE5 YzUwLzAvOTQ1MjFENUVBN0I3OTAwMDgwRjZFNjY4MzZENERFREEzNDcwNTRGRC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2xGSWRYcWUza0FDQTl1Wm9OdFRlMmpS d1ZQMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iZWFkMmRjZi1l YWQ1LTQ5NTQtYWQ4NC02NTgwY2QyYTljNTAvMC85NDUyMUQ1RUE3Qjc5MDAwODBG NkU2NjgzNkQ0REVEQTM0NzA1NEZELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAonmv4YQcLBcOYVt6RdnY lMNe8EM2eGEZP5c65QGnoXRjmAGJOkvEV78FtIXxBlAkAXSH++6WglSMqwL4IgF6 o9L4IQJ3pu+FSqhjU9roKpCeklP4KTTOQShY6qP+WYG1V0pO0YJvZz8pRzqpJb56 3RMcZlllpvyn29kRr8kTxNIztDPLN3DY/qR+YiK/PpIo0+rK1BGmldBwSAJ3T8XM mrjyQJIzugclnXeHmG5hyhR/ckAhYDmL7S2NM7cDdfvPQbsKsJxzE9kRcoKsGEbF 50fLJFTZW0eiCs60Li48K7M07AL8I6YMcsOhYq1evA8eD7FUObwTq6Txe8A+6asl HQ== -----END CERTIFICATE-----Generated at Mon Jan 26 09:02:06 2026 by rpki-client