This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.mft File: 4C189E42F35C944D463D9EA6501F093EB62BA785.mft (raw, json) Hash identifier: p+awU11+SikDR2cKJS/bEyn3Igk0ipPxB0qwaHtRNTI= Subject key identifier: 59:3E:0E:9B:99:FB:66:90:5D:90:32:61:BC:F1:AE:20:E5:3F:9A:E5 Authority key identifier: 4C:18:9E:42:F3:5C:94:4D:46:3D:9E:A6:50:1F:09:3E:B6:2B:A7:85 Certificate issuer: /CN=4c189e42f35c944d463d9ea6501f093eb62ba785 Certificate serial: 5B26AA6722E01D45529B64A4AF4F12D1D13089E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.mft Manifest number: 041D Signing time: Sun 25 Jan 2026 01:44:58 +0000 Manifest this update: Sun 25 Jan 2026 01:39:58 +0000 Manifest next update: Mon 26 Jan 2026 04:52:58 +0000 Files and hashes: 1: 3135392e3235332e302e302f32342d3234203d3e20323036323831.roa (hash: WedmFf2QIQuuVKf/1QK4DuIi+i1j87BtcRZVJGzgY68=) 2: 4C189E42F35C944D463D9EA6501F093EB62BA785.crl (hash: d/0KjnXEbCcRUFHXHzA5gE4OZB0xx8rBvWYBcO4674g=) 3: 3135392e3235332e372e302f32342d3234203d3e20323134313433.roa (hash: 8/3XzRXXjmYpSthB/PqRmvioB+R4a98BuFhtWRNYmtk=) 4: 3138352e31332e3232372e302f32342d3234203d3e2039333034.roa (hash: K2jdp87W7OWk11i68RJYc6WUM+0fdCVTP9+PN22bU6U=) 5: 3135392e3235332e332e302f32342d3234203d3e203533333536.roa (hash: uV5gP669aq0NtuCXuZBm6wWsNYwP/024H/522nPjCx8=) 6: 3135392e3235332e342e302f32342d3234203d3e20323134313433.roa (hash: JO9eMRAwPS+hZf1UF8eYFlm1nYrsRkC7Oj1Lhed/bAU=) 7: 3138352e31332e3232362e302f32342d3234203d3e20313532313739.roa (hash: kbUfx2g7/W6xr6BcRBqigrahrWSKqlZaZ80tT5+SQUk=) 8: 3138352e31332e3232352e302f32342d3234203d3e20323132323338.roa (hash: aEdAeNisTHp0DrhGmu6wes4iqejlgHHMcCeDYK0A3FQ=) 9: 3135392e3235332e362e302f32342d3234203d3e20323134313433.roa (hash: ium02BtB+GfbIHn2YGUt7i7of/NJnXnez2EEtYL+duE=) 10: 3135392e3235332e352e302f32342d3234203d3e203533333536.roa (hash: 9QDAlicDZU2dKA/slyHao02LhaPY7/2iCnESN6BbiqA=) 11: 3138352e31332e3232342e302f32342d3234203d3e20313335333931.roa (hash: Y4VGjNKxdM1kt8f9/kG9Dub6HzXbG7OXpVqySki/RW4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.crl rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.mft rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:52:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:26:aa:67:22:e0:1d:45:52:9b:64:a4:af:4f:12:d1:d1:30:89:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c189e42f35c944d463d9ea6501f093eb62ba785 Validity Not Before: Jan 25 01:39:58 2026 GMT Not After : Jan 26 04:52:58 2026 GMT Subject: CN=593E0E9B99FB66905D903261BCF1AE20E53F9AE5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:e4:d3:8e:bf:bd:12:53:84:ff:2c:97:f8:06: 61:dc:00:c1:7d:53:f2:72:88:4a:e8:96:2b:df:37: b9:52:d8:88:eb:18:df:0b:e9:95:da:a9:35:b6:1b: 18:5d:bb:95:1e:e6:af:2b:37:b8:aa:cb:f1:49:cd: ff:ab:1b:aa:b7:24:a4:e0:f4:d8:63:dc:27:ff:d5: b4:42:93:6a:29:3a:56:5f:e7:61:ed:b2:6a:de:48: 92:15:50:44:66:70:32:3d:23:2c:72:78:9c:cf:f0: b1:06:8a:fd:33:d5:da:8e:ad:c8:4e:7a:59:e0:78: 09:be:6d:c5:0e:20:6d:d4:b1:9b:0d:74:db:77:dc: a4:2b:91:88:08:71:7f:a4:bb:90:47:58:3c:49:4d: 9c:27:4b:48:0d:5d:a0:35:7c:0e:bf:c9:47:b2:8d: fe:a8:27:fc:bc:d9:97:26:c5:66:2f:a6:61:b6:3c: 73:87:43:51:06:13:64:63:a1:a7:4d:48:d7:cf:da: 2c:2d:ab:47:a6:75:60:22:71:39:f8:21:fc:d8:bf: e9:d3:07:7b:81:33:00:3a:dd:28:41:48:2f:23:b0: cb:42:5b:1e:c2:0c:0b:dc:00:f1:19:02:d4:4a:d9: 12:ac:fb:3a:0f:63:1c:c2:e3:d8:2f:59:51:54:34: e7:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:3E:0E:9B:99:FB:66:90:5D:90:32:61:BC:F1:AE:20:E5:3F:9A:E5 X509v3 Authority Key Identifier: keyid:4C:18:9E:42:F3:5C:94:4D:46:3D:9E:A6:50:1F:09:3E:B6:2B:A7:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:97:f6:08:e8:d9:65:fc:d8:08:a6:b3:17:9d:e5:79:93:16: d0:c9:ee:56:7f:dd:e9:5b:8d:eb:4e:a1:cd:3e:f4:24:ff:7d: 59:e6:21:5f:f6:98:d8:90:64:48:cf:84:c0:a3:79:11:4d:af: 28:c5:d0:91:95:b2:cc:89:37:92:d7:c3:21:de:fe:6a:c8:55: e0:31:4b:a0:43:3c:b6:3d:82:66:11:bd:2f:22:22:8d:81:dc: 35:70:25:f1:50:fc:06:65:9c:91:94:14:64:46:44:a0:38:5f: c9:b6:9b:f3:45:48:36:78:8e:59:0e:32:dc:d0:05:27:42:8d: 30:0f:30:04:f1:42:7c:1f:72:12:a0:33:4d:07:bc:a9:66:bb: 6d:59:3a:1b:1e:d5:d4:84:0b:1e:1e:7b:10:0e:61:23:32:a9: 47:3c:7e:7f:a0:13:58:3c:36:e4:4a:ee:05:9c:8f:30:27:46: ee:ad:48:57:a1:ae:e8:1b:07:7d:3f:c1:3a:a3:c4:de:e8:7e: e6:de:1e:1f:9a:4a:22:bb:d6:49:dd:06:1d:75:93:92:20:7c: 03:7b:92:a1:35:fc:59:31:73:5e:d6:9f:dd:49:28:be:d0:cd: 61:e1:cf:83:c7:55:5a:69:45:fe:23:2d:70:b4:dc:52:5d:17: f0:1a:45:ec -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUWyaqZyLgHUVSm2Skr08S0dEwieUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGMxODllNDJmMzVjOTQ0ZDQ2M2Q5ZWE2NTAxZjA5M2Vi NjJiYTc4NTAeFw0yNjAxMjUwMTM5NThaFw0yNjAxMjYwNDUyNThaMDMxMTAvBgNV BAMTKDU5M0UwRTlCOTlGQjY2OTA1RDkwMzI2MUJDRjFBRTIwRTUzRjlBRTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE5NOOv70SU4T/LJf4BmHcAMF9 U/JyiErolivfN7lS2IjrGN8L6ZXaqTW2Gxhdu5Ue5q8rN7iqy/FJzf+rG6q3JKTg 9Nhj3Cf/1bRCk2opOlZf52HtsmreSJIVUERmcDI9IyxyeJzP8LEGiv0z1dqOrchO elngeAm+bcUOIG3UsZsNdNt33KQrkYgIcX+ku5BHWDxJTZwnS0gNXaA1fA6/yUey jf6oJ/y82ZcmxWYvpmG2PHOHQ1EGE2RjoadNSNfP2iwtq0emdWAicTn4IfzYv+nT B3uBMwA63ShBSC8jsMtCWx7CDAvcAPEZAtRK2RKs+zoPYxzC49gvWVFUNOfHAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUWT4Om5n7ZpBdkDJhvPGuIOU/muUwHwYDVR0j BBgwFoAUTBieQvNclE1GPZ6mUB8JPrYrp4UwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2U1MTBlMTctMzFmYS00MTRiLTk4OWUtMDI2ZGJiNmZk ZjUxLzAvNEMxODlFNDJGMzVDOTQ0RDQ2M0Q5RUE2NTAxRjA5M0VCNjJCQTc4NS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1RCaWVRdk5jbEUxR1BaNm1VQjhKUHJZ cnA0VS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9jZTUxMGUxNy0z MWZhLTQxNGItOTg5ZS0wMjZkYmI2ZmRmNTEvMC80QzE4OUU0MkYzNUM5NDRENDYz RDlFQTY1MDFGMDkzRUI2MkJBNzg1Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOZf2COjZZfzYCKazF53l eZMW0MnuVn/d6VuN606hzT70JP99WeYhX/aY2JBkSM+EwKN5EU2vKMXQkZWyzIk3 ktfDId7+ashV4DFLoEM8tj2CZhG9LyIijYHcNXAl8VD8BmWckZQUZEZEoDhfybab 80VINniOWQ4y3NAFJ0KNMA8wBPFCfB9yEqAzTQe8qWa7bVk6Gx7V1IQLHh57EA5h IzKpRzx+f6ATWDw25EruBZyPMCdG7q1IV6Gu6BsHfT/BOqPE3uh+5t4eH5pKIrvW Sd0GHXWTkiB8A3uSoTX8WTFzXtaf3UkovtDNYeHPg8dVWmlF/iMtcLTcUl0X8BpF 7A== -----END CERTIFICATE-----Generated at Sun Jan 25 18:30:45 2026 by rpki-client