This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.mft File: DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.mft (raw, json) Hash identifier: PPX4iGwlNjjeIsEWcG0K9RxE7cD08DJV1SA9QYfZomw= Subject key identifier: C6:7C:4C:1E:6E:E1:39:96:FA:D6:4C:2E:14:D5:D2:4C:DF:FF:67:3D Authority key identifier: DD:C2:5A:D2:F1:A4:89:24:77:13:EE:39:B1:C0:3E:A2:FD:DA:41:18 Certificate issuer: /CN=DDC25AD2F1A489247713EE39B1C03EA2FDDA4118 Certificate serial: 6134380EFD7E6F75E6F6A07534B2771FAD3EB3E3 Authority info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.mft Manifest number: 01EF Signing time: Mon 26 Jan 2026 00:30:05 +0000 Manifest this update: Mon 26 Jan 2026 00:25:05 +0000 Manifest next update: Tue 27 Jan 2026 14:02:05 +0000 Files and hashes: 1: 326130623a346530373a363030303a3a2f34302d3438203d3e20323134373031.roa (hash: mhaYla+UsHdOX7ijGa8kmFH/Ey3jwcszbuWBzNvxxRw=) 2: DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.crl (hash: IYS5q+y5fiBPcZT1dKRYdrHDALOidArRD77Vqzu3Ozw=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.crl rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.mft rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.cer rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 18:44:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:34:38:0e:fd:7e:6f:75:e6:f6:a0:75:34:b2:77:1f:ad:3e:b3:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DDC25AD2F1A489247713EE39B1C03EA2FDDA4118 Validity Not Before: Jan 26 00:25:05 2026 GMT Not After : Jan 27 14:02:05 2026 GMT Subject: CN=C67C4C1E6EE13996FAD64C2E14D5D24CDFFF673D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:30:a0:59:2f:4c:87:3b:d4:a3:67:fe:14:59: b6:04:d1:97:95:fd:e8:32:85:88:3c:92:75:89:35: f3:da:4b:1e:09:b3:3b:ca:1e:4c:14:7f:52:3c:c8: d2:6c:ce:cc:37:93:e4:f4:a4:ef:79:26:c3:dd:7e: 36:40:a9:fb:36:50:a4:d4:b7:6f:81:3d:4a:72:9c: 1b:7a:c5:22:8c:6a:5b:74:a4:c7:6b:32:eb:9e:24: 42:94:a2:d4:b2:5b:99:cd:12:41:05:b8:6e:3c:5c: 78:c2:21:06:a5:36:ba:74:74:16:1f:c9:49:ed:c4: 22:76:0e:6e:ed:d9:e4:b9:e5:3e:be:d0:1f:15:93: 82:e9:7c:29:95:2e:34:cc:57:cb:25:27:3e:16:34: d6:87:06:ef:23:08:25:0f:ff:da:4d:04:46:e3:56: 25:8f:f4:e9:65:60:fc:41:1b:c3:a3:b2:88:e8:79: f8:8d:2c:bf:3d:2d:8b:5d:bd:d1:d9:6e:35:a8:c7: 48:af:1f:28:75:0d:4c:77:3c:6e:b9:37:78:49:32: f3:46:d9:ad:1c:2c:a7:32:96:9a:01:2b:0e:6b:95: cf:af:f7:f6:01:ca:4c:cd:3e:9c:eb:1d:03:7e:43: 57:a2:80:35:3d:dd:1c:1f:46:6f:be:70:d7:4f:0f: c4:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:7C:4C:1E:6E:E1:39:96:FA:D6:4C:2E:14:D5:D2:4C:DF:FF:67:3D X509v3 Authority Key Identifier: keyid:DD:C2:5A:D2:F1:A4:89:24:77:13:EE:39:B1:C0:3E:A2:FD:DA:41:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:5a:44:71:f6:f0:ee:b8:27:c5:fd:4e:f8:67:07:5c:84:dd: a6:b5:0f:e2:e5:bf:24:8f:85:c0:ea:2e:c0:82:b0:28:7f:02: a6:5d:fd:78:11:86:99:99:11:7d:20:36:17:d5:0c:31:a8:1c: a9:2d:dd:0c:60:f7:f6:b0:84:9c:6d:0c:cc:49:05:58:42:35: 40:41:60:b7:d4:31:a1:19:4b:b4:17:db:b9:44:9b:c1:7c:6c: 33:a9:ba:48:99:95:45:5a:81:e0:d7:c0:dd:1b:b4:ed:64:84: 50:ef:ae:d1:a5:c2:e9:91:ba:3f:cf:fb:04:d4:32:a7:81:4f: 9e:ea:ea:3e:ae:8d:18:d8:d2:a5:36:0a:c6:cb:a6:8d:1f:34: fd:b8:ae:5f:7a:b3:bd:eb:ea:c4:fd:32:8f:bb:49:c5:9f:f7: 86:01:c0:f4:7c:92:12:7d:34:c8:39:68:07:3d:fc:89:9c:f5: 90:27:6f:bd:cc:d9:6e:4f:6e:83:81:09:a7:db:bf:25:16:b1: 48:5c:22:32:e2:26:5d:be:2a:b5:9f:1c:c5:32:94:d4:ea:c6: 37:ad:94:a9:6a:f5:b0:60:30:38:c8:c7:20:2b:63:4c:d9:d4: 80:74:32:da:ab:86:9e:ee:b1:87:5e:9f:44:0f:e9:ec:85:33: 3d:d5:66:f5 -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUYTQ4Dv1+b3Xm9qB1NLJ3H60+s+MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRERDMjVBRDJGMUE0ODkyNDc3MTNFRTM5QjFDMDNFQTJG RERBNDExODAeFw0yNjAxMjYwMDI1MDVaFw0yNjAxMjcxNDAyMDVaMDMxMTAvBgNV BAMTKEM2N0M0QzFFNkVFMTM5OTZGQUQ2NEMyRTE0RDVEMjRDREZGRjY3M0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUMKBZL0yHO9SjZ/4UWbYE0ZeV /egyhYg8knWJNfPaSx4JszvKHkwUf1I8yNJszsw3k+T0pO95JsPdfjZAqfs2UKTU t2+BPUpynBt6xSKMalt0pMdrMuueJEKUotSyW5nNEkEFuG48XHjCIQalNrp0dBYf yUntxCJ2Dm7t2eS55T6+0B8Vk4LpfCmVLjTMV8slJz4WNNaHBu8jCCUP/9pNBEbj ViWP9OllYPxBG8OjsojoefiNLL89LYtdvdHZbjWox0ivHyh1DUx3PG65N3hJMvNG 2a0cLKcylpoBKw5rlc+v9/YBykzNPpzrHQN+Q1eigDU93RwfRm++cNdPD8TFAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUxnxMHm7hOZb61kwuFNXSTN//Zz0wHwYDVR0j BBgwFoAU3cJa0vGkiSR3E+45scA+ov3aQRgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYmVhZDJkY2YtZWFkNS00OTU0LWFkODQtNjU4MGNkMmE5 YzUwLzMvRERDMjVBRDJGMUE0ODkyNDc3MTNFRTM5QjFDMDNFQTJGRERBNDExOC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQz MDUzZjgyMGY1LzEvRERDMjVBRDJGMUE0ODkyNDc3MTNFRTM5QjFDMDNFQTJGRERB NDExOC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iZWFkMmRjZi1l YWQ1LTQ5NTQtYWQ4NC02NTgwY2QyYTljNTAvMy9EREMyNUFEMkYxQTQ4OTI0Nzcx M0VFMzlCMUMwM0VBMkZEREE0MTE4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsFpEcfbw7rgnxf1O+GcH XITdprUP4uW/JI+FwOouwIKwKH8Cpl39eBGGmZkRfSA2F9UMMagcqS3dDGD39rCE nG0MzEkFWEI1QEFgt9QxoRlLtBfbuUSbwXxsM6m6SJmVRVqB4NfA3Ru07WSEUO+u 0aXC6ZG6P8/7BNQyp4FPnurqPq6NGNjSpTYKxsumjR80/biuX3qzvevqxP0yj7tJ xZ/3hgHA9HySEn00yDloBz38iZz1kCdvvczZbk9ug4EJp9u/JRaxSFwiMuImXb4q tZ8cxTKU1OrGN62UqWr1sGAwOMjHICtjTNnUgHQy2quGnu6xh16fRA/p7IUzPdVm 9Q== -----END CERTIFICATE-----Generated at Mon Jan 26 07:11:33 2026 by rpki-client