This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/5/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.mft File: 5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.mft (raw, json) Hash identifier: zuUI2O3mrmk6EborAFvetbiLNXe9TkKSTp3IESnSdLQ= Subject key identifier: 9E:C9:D3:2A:56:35:99:DB:D1:0A:85:5F:D7:AE:99:5D:11:08:66:EB Authority key identifier: 5A:3F:78:19:35:3C:E0:FD:13:B8:FF:CD:CB:88:37:ED:0B:F5:91:5F Certificate issuer: /CN=5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F Certificate serial: 0685EC4F858BB53D861758723FE9FA6DF410A570 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/5/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.mft Manifest number: 0115 Signing time: Sun 25 Jan 2026 08:54:57 +0000 Manifest this update: Sun 25 Jan 2026 08:49:57 +0000 Manifest next update: Mon 26 Jan 2026 12:27:57 +0000 Files and hashes: 1: 326130363a396634313a3130303a3a2f34302d3430203d3e20323134373233.roa (hash: sTs8O8KBp3/QEgTlhnDJhb+nhykdynr848iPv4Z/TIo=) 2: 5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.crl (hash: 9Ghx8pm7JSrI7wFlP/gBjdHrGPdkBHzd6SOanho0JXk=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/5/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.crl rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/5/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.mft rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.cer rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.crl rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/06DB699D191D4B0289910C88E99CF94A671142F5.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:27:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:85:ec:4f:85:8b:b5:3d:86:17:58:72:3f:e9:fa:6d:f4:10:a5:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F Validity Not Before: Jan 25 08:49:57 2026 GMT Not After : Jan 26 12:27:57 2026 GMT Subject: CN=9EC9D32A563599DBD10A855FD7AE995D110866EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:60:97:b7:25:32:8d:23:03:8e:80:de:b7:8e: 15:db:4a:c0:23:a0:64:01:50:a9:bc:cc:d3:8c:2a: 5b:c2:bb:6b:a2:a8:f3:7c:1b:db:2d:2c:76:9b:19: 82:be:a1:3a:58:51:a3:f3:46:68:25:d1:6e:5d:ea: 18:1f:96:0e:08:a5:d7:58:37:86:9b:f4:53:a4:10: 9d:c6:9f:e7:76:2e:6f:f7:21:25:0b:25:d8:78:f2: 87:81:7a:bf:ac:4b:5b:0b:2d:71:72:4f:b9:6f:26: eb:88:8c:9c:20:a3:7b:01:09:11:d4:1f:eb:14:bb: 77:bb:32:32:b6:b3:ac:86:84:cf:60:b8:77:46:c4: 40:f1:e8:8b:dd:d9:70:81:e9:54:e3:c0:5e:ce:f6: 9e:3f:cf:7f:0d:e0:cb:23:09:b8:a0:0b:68:c7:c2: 5a:8b:8b:d1:d3:ad:45:ca:6d:ed:41:84:cc:14:30: 87:42:5f:07:f0:37:7b:75:da:ab:98:d0:11:3a:16: 30:1c:f2:b2:d2:91:2c:fd:bc:42:6f:f4:ea:51:c5: e9:a7:a4:fa:07:c9:4f:57:31:7d:df:2d:8b:7d:c3: a1:a3:1d:c8:9d:dd:ac:5d:e8:f4:2e:b9:7a:a7:17: f6:3c:d9:5b:b2:fe:c5:e4:eb:bc:00:63:f0:62:05: 20:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:C9:D3:2A:56:35:99:DB:D1:0A:85:5F:D7:AE:99:5D:11:08:66:EB X509v3 Authority Key Identifier: keyid:5A:3F:78:19:35:3C:E0:FD:13:B8:FF:CD:CB:88:37:ED:0B:F5:91:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/5/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/5/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:f8:82:27:f7:46:66:fd:6c:fe:4e:e4:c6:fc:75:d4:52:f1: 01:34:92:77:5a:1d:cf:7c:c5:1a:17:77:12:45:ba:42:4e:53: 5e:c5:fe:f6:bf:b6:ea:cc:c9:31:45:fc:df:10:e6:98:37:7c: 55:2e:63:d0:a7:4d:0f:b8:94:de:ac:db:45:13:94:24:06:64: 4a:54:f1:b9:3b:61:b6:e9:d7:84:e5:2f:51:19:73:5e:1b:7f: 4e:90:dd:31:7c:c5:57:4d:22:08:c1:9a:e3:6f:44:b4:9d:6e: 22:bc:ac:22:88:08:f6:3a:bc:68:a3:52:51:42:10:9b:45:76: 57:46:e6:2f:c9:54:23:46:a4:83:47:c8:6e:a8:f2:2f:90:7b: f2:55:e8:34:7d:47:03:d7:a5:11:65:94:7b:50:ab:c0:12:87: 3a:f2:bb:f9:47:00:92:1b:b7:68:7e:87:c9:8f:49:15:a9:ed: 12:b1:72:9c:ee:bb:97:27:e1:e6:3b:24:4c:9b:04:57:bf:0f: 9d:33:04:9e:c7:72:5a:fd:dc:c8:13:91:7c:93:3a:c8:df:0d: b7:e0:70:b5:fa:49:06:34:97:05:bb:07:8c:5d:35:73:3c:81: fb:e0:19:08:12:db:fd:a9:cb:6c:d2:52:43:c7:20:24:b2:7b: fd:56:2c:34 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUBoXsT4WLtT2GF1hyP+n6bfQQpXAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUEzRjc4MTkzNTNDRTBGRDEzQjhGRkNEQ0I4ODM3RUQw QkY1OTE1RjAeFw0yNjAxMjUwODQ5NTdaFw0yNjAxMjYxMjI3NTdaMDMxMTAvBgNV BAMTKDlFQzlEMzJBNTYzNTk5REJEMTBBODU1RkQ3QUU5OTVEMTEwODY2RUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGYJe3JTKNIwOOgN63jhXbSsAj oGQBUKm8zNOMKlvCu2uiqPN8G9stLHabGYK+oTpYUaPzRmgl0W5d6hgflg4IpddY N4ab9FOkEJ3Gn+d2Lm/3ISULJdh48oeBer+sS1sLLXFyT7lvJuuIjJwgo3sBCRHU H+sUu3e7MjK2s6yGhM9guHdGxEDx6Ivd2XCB6VTjwF7O9p4/z38N4MsjCbigC2jH wlqLi9HTrUXKbe1BhMwUMIdCXwfwN3t12quY0BE6FjAc8rLSkSz9vEJv9OpRxemn pPoHyU9XMX3fLYt9w6GjHcid3axd6PQuuXqnF/Y82Vuy/sXk67wAY/BiBSARAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUnsnTKlY1mdvRCoVf166ZXREIZuswHwYDVR0j BBgwFoAUWj94GTU84P0TuP/Ny4g37Qv1kV8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDdlNDU5MmUtMjNjMC00Y2NjLTk0ZGEtNmM5NTgwN2Y4 M2U3LzUvNUEzRjc4MTkzNTNDRTBGRDEzQjhGRkNEQ0I4ODM3RUQwQkY1OTE1Ri5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zMDExOTQ0ZC03ZWIzLTRm NjMtYTE1OS1jZmYwMmMwMjZhYmYvMi81QTNGNzgxOTM1M0NFMEZEMTNCOEZGQ0RD Qjg4MzdFRDBCRjU5MTVGLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2Q3ZTQ1OTJlLTIzYzAtNGNjYy05NGRhLTZjOTU4MDdmODNlNy81LzVBM0Y3ODE5 MzUzQ0UwRkQxM0I4RkZDRENCODgzN0VEMEJGNTkxNUYubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB5+IIn 90Zm/Wz+TuTG/HXUUvEBNJJ3Wh3PfMUaF3cSRbpCTlNexf72v7bqzMkxRfzfEOaY N3xVLmPQp00PuJTerNtFE5QkBmRKVPG5O2G26deE5S9RGXNeG39OkN0xfMVXTSII wZrjb0S0nW4ivKwiiAj2Orxoo1JRQhCbRXZXRuYvyVQjRqSDR8huqPIvkHvyVeg0 fUcD16URZZR7UKvAEoc68rv5RwCSG7dofofJj0kVqe0SsXKc7ruXJ+HmOyRMmwRX vw+dMwSex3Ja/dzIE5F8kzrI3w234HC1+kkGNJcFuweMXTVzPIH74BkIEtv9qcts 0lJDxyAksnv9Viw0 -----END CERTIFICATE-----Generated at Sun Jan 25 22:35:15 2026 by rpki-client