This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/1/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.mft File: 4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.mft (raw, json) Hash identifier: f19MyomLWD/aLkhqa4H/mjIxEnM6047Yo+fB/WlcW/A= Subject key identifier: 84:2B:0D:3A:B0:ED:55:C3:DA:C7:97:7A:F8:5C:2D:80:10:BB:D5:69 Authority key identifier: 40:50:A1:7B:AE:1C:5F:37:63:D4:5A:38:DC:FE:AC:E0:FE:22:2B:D6 Certificate issuer: /CN=4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6 Certificate serial: 6AEA0649C3F1514ADDF9E097B6205F2BED6E5C12 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/1/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.mft Manifest number: 0237 Signing time: Sun 25 Jan 2026 16:14:35 +0000 Manifest this update: Sun 25 Jan 2026 16:09:35 +0000 Manifest next update: Mon 26 Jan 2026 17:53:35 +0000 Files and hashes: 1: 4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.crl (hash: 60b+tYCiIoCpf4dMtgS1Up3ERBvs098Chra0f7DjPFI=) 2: 326131343a373538313a396632303a3a2f34342d3434203d3e20323135323838.roa (hash: Si3nvIvR6vlJSP9N899TEpLNTv8CH8Xf9C307NCghTQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/1/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.crl rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/1/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:ea:06:49:c3:f1:51:4a:dd:f9:e0:97:b6:20:5f:2b:ed:6e:5c:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6 Validity Not Before: Jan 25 16:09:35 2026 GMT Not After : Jan 26 17:53:35 2026 GMT Subject: CN=842B0D3AB0ED55C3DAC7977AF85C2D8010BBD569 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:75:97:c3:5b:2c:a5:b1:3c:9a:f6:ce:20:83: 94:18:0e:cb:a9:71:1b:6f:0d:e5:71:4c:d6:e5:c8: 41:8f:d7:66:75:ae:6b:35:07:4c:0a:69:6f:ac:4c: 30:bb:26:87:a0:d2:ad:71:71:7c:24:49:cf:5a:66: 8e:8a:69:38:2b:c1:85:63:74:8c:a6:11:36:f9:1a: 5a:03:d9:98:f4:e2:d1:cb:f7:ab:71:19:e9:1e:96: 52:08:fd:95:39:d2:29:c0:53:4d:b0:5b:c8:9b:ac: f1:74:af:21:d7:68:26:5a:38:76:80:b2:8f:70:cf: c6:d2:d9:87:6c:00:e7:85:a5:0a:14:52:e0:18:68: c2:dc:16:f8:30:78:5a:d4:4d:b8:cf:a1:a8:ab:03: 43:bf:a8:7e:08:49:90:d4:4f:5c:95:52:8f:ad:5a: a6:7f:75:34:53:e0:32:e5:6d:e0:45:9e:d7:75:0d: 4a:17:bc:7a:e6:9d:cc:f5:b3:25:a3:ec:c7:b6:20: 8a:1d:f2:a3:90:0b:75:50:77:c3:20:08:dc:b8:f3: b3:54:6d:43:80:81:ce:e1:79:85:20:61:87:9c:07: 8e:47:8d:56:b5:da:58:2b:bd:b4:60:4f:ea:13:9d: 10:a4:13:0f:74:4a:70:be:7b:e0:d4:4d:4f:da:23: f7:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:2B:0D:3A:B0:ED:55:C3:DA:C7:97:7A:F8:5C:2D:80:10:BB:D5:69 X509v3 Authority Key Identifier: keyid:40:50:A1:7B:AE:1C:5F:37:63:D4:5A:38:DC:FE:AC:E0:FE:22:2B:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/1/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/1/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:d5:32:c1:24:7c:5c:41:c5:d5:df:06:7e:0a:38:ed:29:88: e1:91:59:dc:1a:a9:bc:c2:26:b2:65:6d:0d:c7:21:42:cd:06: 79:36:12:5a:7c:e4:cf:5a:c5:68:12:36:18:37:dd:6a:f5:1d: a1:3f:f3:46:42:7c:8c:15:8d:e5:6a:ba:9f:97:92:f9:95:61: b7:e0:fd:4a:e9:b0:31:6a:0a:cb:b5:97:b8:3c:98:f6:52:a7: 3d:b7:1c:a2:40:7b:ae:7b:d9:d3:65:b0:87:95:64:b6:ee:c0: 88:8b:d3:06:2d:df:05:04:9f:41:77:a8:23:97:da:0d:ff:e2: cc:81:e3:11:f6:13:c2:17:84:41:49:5f:ec:82:a7:66:cd:05: 20:85:01:fd:17:a5:1f:d9:be:9d:85:bf:af:95:3f:b2:9b:a1: ea:c1:a2:2b:9f:70:ec:81:02:61:2c:fe:f8:a8:97:f2:95:8f: 8a:b7:3c:72:1d:e2:bb:91:1c:2e:1e:bd:2f:de:df:80:78:5b: 6e:30:85:f5:58:d4:fd:e4:d4:01:18:0a:28:4c:43:f6:d3:18: ba:83:45:b0:18:f7:ec:f7:9f:81:5a:7a:a6:f8:bc:28:1d:00: d6:2f:99:a9:0d:23:6f:6e:91:80:75:fc:84:c5:cc:fb:fc:1a: b8:fb:84:cc -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUauoGScPxUUrd+eCXtiBfK+1uXBIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDA1MEExN0JBRTFDNUYzNzYzRDQ1QTM4RENGRUFDRTBG RTIyMkJENjAeFw0yNjAxMjUxNjA5MzVaFw0yNjAxMjYxNzUzMzVaMDMxMTAvBgNV BAMTKDg0MkIwRDNBQjBFRDU1QzNEQUM3OTc3QUY4NUMyRDgwMTBCQkQ1NjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKdZfDWyylsTya9s4gg5QYDsup cRtvDeVxTNblyEGP12Z1rms1B0wKaW+sTDC7Joeg0q1xcXwkSc9aZo6KaTgrwYVj dIymETb5GloD2Zj04tHL96txGekellII/ZU50inAU02wW8ibrPF0ryHXaCZaOHaA so9wz8bS2YdsAOeFpQoUUuAYaMLcFvgweFrUTbjPoairA0O/qH4ISZDUT1yVUo+t WqZ/dTRT4DLlbeBFntd1DUoXvHrmncz1syWj7Me2IIod8qOQC3VQd8MgCNy487NU bUOAgc7heYUgYYecB45HjVa12lgrvbRgT+oTnRCkEw90SnC+e+DUTU/aI/dnAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUhCsNOrDtVcPax5d6+FwtgBC71WkwHwYDVR0j BBgwFoAUQFChe64cXzdj1Fo43P6s4P4iK9YwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzg2YjY1YjEtNDVlOS00ZmIyLWFkYzUtODdiYTcxMWUy MWI3LzEvNDA1MEExN0JBRTFDNUYzNzYzRDQ1QTM4RENGRUFDRTBGRTIyMkJENi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC80MDUwQTE3QkFFMUM1RjM3NjNENDVBMzhE Q0ZFQUNFMEZFMjIyQkQ2LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2M4NmI2NWIxLTQ1ZTktNGZiMi1hZGM1LTg3YmE3MTFlMjFiNy8xLzQwNTBBMTdC QUUxQzVGMzc2M0Q0NUEzOERDRkVBQ0UwRkUyMjJCRDYubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAt1TLB JHxcQcXV3wZ+CjjtKYjhkVncGqm8wiayZW0NxyFCzQZ5NhJafOTPWsVoEjYYN91q 9R2hP/NGQnyMFY3larqfl5L5lWG34P1K6bAxagrLtZe4PJj2Uqc9txyiQHuue9nT ZbCHlWS27sCIi9MGLd8FBJ9Bd6gjl9oN/+LMgeMR9hPCF4RBSV/sgqdmzQUghQH9 F6Uf2b6dhb+vlT+ym6HqwaIrn3DsgQJhLP74qJfylY+KtzxyHeK7kRwuHr0v3t+A eFtuMIX1WNT95NQBGAooTEP20xi6g0WwGPfs95+BWnqm+LwoHQDWL5mpDSNvbpGA dfyExcz7/Bq4+4TM -----END CERTIFICATE-----Generated at Mon Jan 26 00:43:32 2026 by rpki-client