This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.mft File: F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.mft (raw, json) Hash identifier: arucv8OeYe1vWYnDcq4zB3jQXxxe1zlhTdHq/Qxuedw= Subject key identifier: E7:0F:B9:5C:94:97:77:65:E4:64:E5:67:A6:DF:80:6F:F3:6C:AD:43 Authority key identifier: F9:F7:A2:88:5C:F3:01:2F:A1:39:0D:3B:32:59:FC:78:AE:F7:AD:1A Certificate issuer: /CN=F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A Certificate serial: 55FDA19588162D7533AF23414966AC846675C505 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.mft Manifest number: 0381 Signing time: Sun 25 Jan 2026 09:39:03 +0000 Manifest this update: Sun 25 Jan 2026 09:34:03 +0000 Manifest next update: Mon 26 Jan 2026 11:28:03 +0000 Files and hashes: 1: F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.crl (hash: I2FsuMYKvI0OcCSOr179NgOy37uCG1kKsnjQWid5UJQ=) 2: 326131343a373538313a6634303a3a2f34342d3438203d3e20323134363433.roa (hash: jjg3HPw+XVWQVO0XHgF/TKZW97oaDPDZVvcbfhgJX94=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.crl rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 01:36:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:fd:a1:95:88:16:2d:75:33:af:23:41:49:66:ac:84:66:75:c5:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A Validity Not Before: Jan 25 09:34:03 2026 GMT Not After : Jan 26 11:28:03 2026 GMT Subject: CN=E70FB95C94977765E464E567A6DF806FF36CAD43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:d8:e1:2e:6c:eb:23:62:1c:86:5e:66:e5:cb: 0e:3d:78:7d:18:fc:b2:a0:fa:b6:e7:24:ee:7b:a9: 11:bb:23:23:f7:73:84:c3:f6:94:d0:bb:a4:a7:b9: 07:37:84:96:64:74:97:d3:85:05:79:5a:b4:a5:bb: 35:fd:b9:f4:63:45:a7:cd:13:90:ea:d8:88:fb:91: 63:de:3e:43:38:65:1d:7d:50:99:19:8c:68:60:79: 67:6d:f7:88:0f:0d:92:bb:85:8f:18:9a:d7:d1:bb: 10:16:f6:ef:c6:cc:c2:a0:11:d9:2a:6f:7d:1e:24: 83:5a:60:aa:6a:1e:1b:3d:36:72:67:41:2d:c9:40: ce:19:84:12:7f:d1:81:45:a7:bb:10:78:49:63:df: ad:7a:1d:80:cc:44:02:87:97:fb:67:5d:8f:bb:e1: e1:23:33:a6:6b:7d:0f:4e:d6:4e:5b:8c:5a:a0:68: 41:e1:78:14:d9:fd:09:98:5e:8a:d8:59:eb:16:c0: f0:85:4a:cc:ec:14:e2:0e:26:8a:c5:19:a1:49:6a: e0:35:31:ed:4d:84:c1:1d:1c:e2:a8:7c:ca:94:a9: a5:52:d8:0f:60:6b:7c:05:e5:13:f8:24:c2:8f:00: 2e:8b:08:0e:a7:91:f6:b9:15:3e:84:e7:63:d0:86: 47:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:0F:B9:5C:94:97:77:65:E4:64:E5:67:A6:DF:80:6F:F3:6C:AD:43 X509v3 Authority Key Identifier: keyid:F9:F7:A2:88:5C:F3:01:2F:A1:39:0D:3B:32:59:FC:78:AE:F7:AD:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c7:89:c5:22:24:1f:99:87:2f:83:f1:44:c8:f2:34:ae:ea:0e: d5:45:22:e3:37:eb:bf:ca:13:c9:0d:7e:d6:de:ec:3f:3f:69: 4b:ff:db:bb:d0:d7:21:04:f7:b9:07:d9:5c:04:96:77:5a:50: e6:9e:a8:d0:cd:08:e4:f3:de:b5:48:c9:f2:cc:ad:cc:2e:61: af:14:34:73:66:2e:74:06:3b:6f:e4:25:fe:c7:cb:bc:d3:c8: 0c:34:70:e1:b6:35:3c:2c:68:cb:ec:3c:fd:d5:58:46:ea:8e: 88:c7:4e:81:65:9c:6b:7e:f8:31:62:9b:53:1b:8d:a3:bb:b4: c1:30:e9:54:ce:c8:9b:b9:ca:d8:03:50:6f:04:9f:fd:b5:93: 62:6c:c5:2f:86:f8:d5:89:96:34:04:39:da:aa:24:8b:ff:09: 00:95:37:3e:d9:7a:ab:36:5a:2c:77:cb:ed:cd:7d:fa:54:7f: dc:de:cb:5c:32:0f:b3:65:8d:2d:74:84:cd:76:68:38:7b:01: 89:0f:2c:fc:94:1f:63:d9:8d:55:d4:65:42:7d:44:de:6f:a7: ee:62:52:e3:46:63:1c:ec:71:d3:57:42:70:d1:1e:95:9c:93: de:21:82:30:74:46:4c:a5:72:7e:81:5f:56:81:e1:0e:8e:e6: 96:a8:94:3f -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUVf2hlYgWLXUzryNBSWashGZ1xQUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjlGN0EyODg1Q0YzMDEyRkExMzkwRDNCMzI1OUZDNzhB RUY3QUQxQTAeFw0yNjAxMjUwOTM0MDNaFw0yNjAxMjYxMTI4MDNaMDMxMTAvBgNV BAMTKEU3MEZCOTVDOTQ5Nzc3NjVFNDY0RTU2N0E2REY4MDZGRjM2Q0FENDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCl2OEubOsjYhyGXmblyw49eH0Y /LKg+rbnJO57qRG7IyP3c4TD9pTQu6SnuQc3hJZkdJfThQV5WrSluzX9ufRjRafN E5Dq2Ij7kWPePkM4ZR19UJkZjGhgeWdt94gPDZK7hY8YmtfRuxAW9u/GzMKgEdkq b30eJINaYKpqHhs9NnJnQS3JQM4ZhBJ/0YFFp7sQeElj3616HYDMRAKHl/tnXY+7 4eEjM6ZrfQ9O1k5bjFqgaEHheBTZ/QmYXorYWesWwPCFSszsFOIOJorFGaFJauA1 Me1NhMEdHOKofMqUqaVS2A9ga3wF5RP4JMKPAC6LCA6nkfa5FT6E52PQhkeDAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU5w+5XJSXd2XkZOVnpt+Ab/NsrUMwHwYDVR0j BBgwFoAU+feiiFzzAS+hOQ07Mln8eK73rRowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZGI4ZDhiN2QtYzQ4Ni00MjM5LTlkOWYtOGY4ZjVkY2Vk OGQwLzEvRjlGN0EyODg1Q0YzMDEyRkExMzkwRDNCMzI1OUZDNzhBRUY3QUQxQS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9GOUY3QTI4ODVDRjMwMTJGQTEzOTBEM0Iz MjU5RkM3OEFFRjdBRDFBLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2RiOGQ4YjdkLWM0ODYtNDIzOS05ZDlmLThmOGY1ZGNlZDhkMC8xL0Y5RjdBMjg4 NUNGMzAxMkZBMTM5MEQzQjMyNTlGQzc4QUVGN0FEMUEubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDHicUi JB+Zhy+D8UTI8jSu6g7VRSLjN+u/yhPJDX7W3uw/P2lL/9u70NchBPe5B9lcBJZ3 WlDmnqjQzQjk8961SMnyzK3MLmGvFDRzZi50Bjtv5CX+x8u808gMNHDhtjU8LGjL 7Dz91VhG6o6Ix06BZZxrfvgxYptTG42ju7TBMOlUzsibucrYA1BvBJ/9tZNibMUv hvjViZY0BDnaqiSL/wkAlTc+2XqrNlosd8vtzX36VH/c3stcMg+zZY0tdITNdmg4 ewGJDyz8lB9j2Y1V1GVCfUTeb6fuYlLjRmMc7HHTV0Jw0R6VnJPeIYIwdEZMpXJ+ gV9WgeEOjuaWqJQ/ -----END CERTIFICATE-----Generated at Sun Jan 25 13:50:44 2026 by rpki-client