This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/4/5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC.mft File: 5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC.mft (raw, json) Hash identifier: G+WghmWEyA7jIfaGi8KKSyyzNYJLbGB9x7QRI+8Rw6A= Subject key identifier: 53:4D:5A:42:37:32:28:5B:AE:56:89:D5:91:90:61:A5:B5:FB:B5:C2 Authority key identifier: 5E:B2:E5:DA:D0:C6:99:6D:0A:80:A7:B9:0F:3A:2A:A6:0F:B1:A7:AC Certificate issuer: /CN=5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC Certificate serial: 0A3ADCB76BF370FB95A1C4BE569E5B8172DEB335 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/4/5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC.mft Manifest number: 010B Signing time: Sat 24 Jan 2026 21:03:09 +0000 Manifest this update: Sat 24 Jan 2026 20:58:09 +0000 Manifest next update: Mon 26 Jan 2026 00:39:09 +0000 Files and hashes: 1: 5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC.crl (hash: pQ+4ZM1rQpYW09BW9Bl2bbCVS31XuqbtlMMLq2cyOaI=) 2: 326131333a393634343a333030303a3a2f34302d3438203d3e20323131343331.roa (hash: hR947RLO80MjAy1fUiecS1oEpdE+fjwemP68Afa7Bvc=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/4/5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC.crl rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/4/5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC.mft rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC.cer rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.crl rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.mft rsync://rpki.ripe.net/repository/DEFAULT/8dBXL-cpkb0yhUuscWZ269rSKs4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 00:39:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:3a:dc:b7:6b:f3:70:fb:95:a1:c4:be:56:9e:5b:81:72:de:b3:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC Validity Not Before: Jan 24 20:58:09 2026 GMT Not After : Jan 26 00:39:09 2026 GMT Subject: CN=534D5A423732285BAE5689D5919061A5B5FBB5C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:1f:eb:05:43:d6:19:11:fd:28:7e:52:31:75: 74:0f:36:ec:d3:bc:30:a2:ae:9c:b4:7f:c1:65:d0: 3b:70:18:69:0a:77:8e:46:da:c0:34:64:4b:be:87: 85:20:c7:c8:db:cc:b0:74:8c:c8:80:fe:fc:69:5b: 14:e6:e4:aa:c6:8d:d6:dc:07:cd:33:06:71:1c:cb: 5a:b2:c4:93:db:72:56:fb:e2:46:e9:5b:0b:bb:40: 3c:7c:eb:ee:db:43:83:a9:3c:db:00:78:13:93:69: ac:45:d5:28:b1:f9:85:f5:33:a1:54:04:4b:b8:31: 09:54:1b:46:dc:bd:10:4d:6a:69:34:f3:dc:c7:ea: 6f:8f:af:74:90:fd:00:ac:eb:47:a2:f1:f7:57:43: b5:6e:e1:61:92:c6:1c:46:9d:1c:b7:2f:db:7d:11: bf:13:8e:f7:a2:f3:2f:bd:e7:6f:a8:9a:3c:7b:ad: 83:1c:03:cb:71:36:72:53:76:4d:c0:62:85:5a:8f: 7d:8d:8a:cd:bb:86:fc:38:b5:f9:0b:46:64:5c:b9: c0:38:e4:c9:ea:2a:af:73:08:f6:50:04:51:46:30: 7e:f6:4e:97:71:1f:e6:bf:08:92:4b:20:15:7d:c5: 89:31:06:f6:e2:26:bf:37:7a:db:3f:f8:59:88:5f: a6:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:4D:5A:42:37:32:28:5B:AE:56:89:D5:91:90:61:A5:B5:FB:B5:C2 X509v3 Authority Key Identifier: keyid:5E:B2:E5:DA:D0:C6:99:6D:0A:80:A7:B9:0F:3A:2A:A6:0F:B1:A7:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/4/5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/4/5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:1d:e0:e9:6f:59:fe:f6:34:30:f8:43:ed:ad:e6:a6:dd:8f: 6d:ee:f8:69:b7:44:6b:5a:e0:15:11:d2:dd:25:b7:75:72:ca: 96:c4:df:67:5f:56:12:25:6d:49:92:dd:cb:55:be:0f:16:3b: 48:51:d9:5f:ca:3e:6c:02:94:0e:12:0d:7b:85:f9:7d:9c:41: 6f:3a:fe:e6:21:09:a1:a5:cd:ad:0a:67:ee:7d:3b:cd:85:8e: 93:cc:0e:2b:9f:76:14:d9:84:61:83:a4:e0:51:0e:8f:23:8c: 87:0b:e0:61:40:61:4a:7b:5e:be:32:97:98:a6:00:5d:64:e9: 63:48:88:56:56:66:15:f4:9b:74:bf:43:18:a9:95:78:27:e8: 81:1a:2f:fc:ce:27:6f:98:db:1d:76:0a:25:71:99:9a:be:ad: 83:79:35:11:89:82:3f:78:94:9f:db:0e:91:8e:0e:05:5c:8d: 60:8c:f6:b6:36:62:0d:5e:ad:2e:6b:93:c9:9e:cf:f9:23:0e: 8c:3d:e7:b9:69:b1:fe:a0:6d:ca:58:cc:d2:f1:bf:b4:a5:41: c4:34:d1:3b:fc:a5:81:73:16:39:d9:63:5c:11:64:fa:d2:48: 55:9e:fc:e9:8f:a9:fc:e1:29:01:bf:33:48:3e:f0:55:76:70: 63:e2:f1:01 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUCjrct2vzcPuVocS+Vp5bgXLeszUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUVCMkU1REFEMEM2OTk2RDBBODBBN0I5MEYzQTJBQTYw RkIxQTdBQzAeFw0yNjAxMjQyMDU4MDlaFw0yNjAxMjYwMDM5MDlaMDMxMTAvBgNV BAMTKDUzNEQ1QTQyMzczMjI4NUJBRTU2ODlENTkxOTA2MUE1QjVGQkI1QzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNH+sFQ9YZEf0oflIxdXQPNuzT vDCirpy0f8Fl0DtwGGkKd45G2sA0ZEu+h4Ugx8jbzLB0jMiA/vxpWxTm5KrGjdbc B80zBnEcy1qyxJPbclb74kbpWwu7QDx86+7bQ4OpPNsAeBOTaaxF1Six+YX1M6FU BEu4MQlUG0bcvRBNamk089zH6m+Pr3SQ/QCs60ei8fdXQ7Vu4WGSxhxGnRy3L9t9 Eb8Tjvei8y+952+omjx7rYMcA8txNnJTdk3AYoVaj32Nis27hvw4tfkLRmRcucA4 5MnqKq9zCPZQBFFGMH72TpdxH+a/CJJLIBV9xYkxBvbiJr83ets/+FmIX6Z/AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUU01aQjcyKFuuVonVkZBhpbX7tcIwHwYDVR0j BBgwFoAUXrLl2tDGmW0KgKe5Dzoqpg+xp6wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzk5MjY1ZWYtMjJhOS00MTAwLWEyM2QtNTFhOWQ5ZmVl YjdkLzQvNUVCMkU1REFEMEM2OTk2RDBBODBBN0I5MEYzQTJBQTYwRkIxQTdBQy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lMzBkZTg0Yi00MDBhLTRm ZDEtYWI4YS1lNzYxNmUyNDViNDkvMC81RUIyRTVEQUQwQzY5OTZEMEE4MEE3Qjkw RjNBMkFBNjBGQjFBN0FDLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2M5OTI2NWVmLTIyYTktNDEwMC1hMjNkLTUxYTlkOWZlZWI3ZC80LzVFQjJFNURB RDBDNjk5NkQwQTgwQTdCOTBGM0EyQUE2MEZCMUE3QUMubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQADHeDp b1n+9jQw+EPtream3Y9t7vhpt0RrWuAVEdLdJbd1csqWxN9nX1YSJW1Jkt3LVb4P FjtIUdlfyj5sApQOEg17hfl9nEFvOv7mIQmhpc2tCmfufTvNhY6TzA4rn3YU2YRh g6TgUQ6PI4yHC+BhQGFKe16+MpeYpgBdZOljSIhWVmYV9Jt0v0MYqZV4J+iBGi/8 zidvmNsddgolcZmavq2DeTURiYI/eJSf2w6Rjg4FXI1gjPa2NmINXq0ua5PJns/5 Iw6MPee5abH+oG3KWMzS8b+0pUHENNE7/KWBcxY52WNcEWT60khVnvzpj6n84SkB vzNIPvBVdnBj4vEB -----END CERTIFICATE-----Generated at Sun Jan 25 18:27:30 2026 by rpki-client