This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft File: 88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft (raw, json) Hash identifier: Ur8sTJZK1VLDXfC7t4Q2fw6N0V/LlRS1NpTabx480ek= Subject key identifier: 9D:4F:61:F1:C9:33:88:4B:5E:1A:06:78:23:BF:75:0C:86:4F:FD:6C Authority key identifier: 88:CD:D9:C1:93:DA:91:85:A4:AC:15:B2:AD:E8:75:FE:97:B6:F4:91 Certificate issuer: /CN=88cdd9c193da9185a4ac15b2ade875fe97b6f491 Certificate serial: 070CD207E639E8A790EBC7167BB8A600B2A9E5BB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iM3ZwZPakYWkrBWyreh1_pe29JE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft Manifest number: 02C0 Signing time: Sun 25 Jan 2026 09:01:40 +0000 Manifest this update: Sun 25 Jan 2026 08:56:40 +0000 Manifest next update: Mon 26 Jan 2026 11:13:40 +0000 Files and hashes: 1: 326130643a623238373a653966663a3a2f34382d3438203d3e20323038373533.roa (hash: kmFg1Ubyi8msuCXkZq9wTUwo9VmgSHMiCqLO0oSubS4=) 2: 88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.crl (hash: 8079mVN9T4vGI/cJpUr2xZtyAsNm1EZUYEwSv2Qtw7I=) 3: 326130643a623238373a646430303a3a2f34302d3430203d3e20323136333039.roa (hash: mpzPSr1CBW6Ka5Te0DE52rLBHWk7ArDQlInbkbsiPzA=) 4: 3138352e3234322e3138332e302f32342d3234203d3e203431373230.roa (hash: V4bF3gDy6FE6zlNg9r0xUvpdAXLZEuLnN1FQtQz0KTM=) 5: 326130643a623238303a3a2f32392d3239203d3e203431373230.roa (hash: UtcmwgPmmxIsh/ra+btug0leCQZCVTQekME41LiPWtU=) 6: 3138352e3234322e3138302e302f32342d3234203d3e203431373230.roa (hash: m2CiuFBjrlRavusUidV8mkbKXKHzyUUUhDYGNFwtBAs=) 7: 326130643a623238373a656530303a3a2f34302d3430203d3e20323038333238.roa (hash: Q6Io7mv8dNkJZap1oGvqDaJWxZcBIoRNlU5W1SfkDVo=) 8: 326130643a623238373a656130303a3a2f34302d3430203d3e20323032373034.roa (hash: JNRd26hu5UclLm2ralvA5Swgz/zS0HyqV27DJFHZj6c=) 9: 326130643a623238373a656334313a3a2f34382d3438203d3e20323132353136.roa (hash: S10o6lJcne+SfvZMZmd0ndSNpfqn8OsjAJw8rNDdBSw=) 10: AS41720.asa (hash: 4An44TkWkAj35xBt6Xef84p/tUjH5ZEGoqkH2/CZIMo=) 11: 3138352e3234322e3138312e302f32342d3234203d3e203431373230.roa (hash: BJe1bO6YYCEXeriSlULaZwS25Q4hRdnweRF5hyXEuDY=) 12: 326130643a623238373a656230303a3a2f34302d3430203d3e20323133373039.roa (hash: Nk6ANHp8DkJz6kDCL9bvYoWgqeyO4UOw/aVOiTsobgk=) 13: 3139352e3138322e3231312e302f32342d3234203d3e203431373230.roa (hash: fKLQTu0IVvtIU1j1ED5jisbzx/ixZ3gIYrA73t09dNU=) 14: 326130643a623238373a653930303a3a2f34302d3430203d3e203437313532.roa (hash: Qmo3MoWwkKBWouocBexituyWf2OsxX6PDMEUO8aReSw=) 15: 326130643a623238303a383130303a3a2f34382d3438203d3e203431373230.roa (hash: ItyIHbG/IJlKjOf6vhLnjpZ9k/lt97Z65upW37DdGzA=) 16: 3138352e3234322e3138322e302f32342d3234203d3e203431373230.roa (hash: gAYzs7DeTkU9g1RDUiQKlOcpyqQALQV1LLqH3P6H/bU=) 17: 326130643a623238373a656330303a3a2f34302d3430203d3e20323038333238.roa (hash: eT5l/HEUwKyeWtm/1X7rr0MrwygNo9k95lPs1zLe884=) 18: 326130643a623238373a656334323a3a2f34382d3438203d3e20323134393235.roa (hash: JAmgJM2VGcbQzWkOuFvV1aRU7IhMtvcEw/0vm9hTp3I=) 19: 326130643a623238373a646164303a3a2f34342d3434203d3e20323038343337.roa (hash: Lh+NThTArglnDdFNJgAbksxydedvZ3VhoYilxW6dgHQ=) 20: 326130643a623238373a646130313a3a2f34382d3438203d3e20323132353339.roa (hash: PivPGN9xNNuplOmy9E3nfw1TUinsGI+X07yLclSfZdw=) 21: 326130643a623238373a646130303a3a2f34382d3438203d3e20323135313436.roa (hash: BOfTSY7wWayFslIYZyC++f09YnW0ZvOoQVsy6AzQanA=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.crl rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft rsync://rpki.ripe.net/repository/DEFAULT/iM3ZwZPakYWkrBWyreh1_pe29JE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:0c:d2:07:e6:39:e8:a7:90:eb:c7:16:7b:b8:a6:00:b2:a9:e5:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88cdd9c193da9185a4ac15b2ade875fe97b6f491 Validity Not Before: Jan 25 08:56:40 2026 GMT Not After : Jan 26 11:13:40 2026 GMT Subject: CN=9D4F61F1C933884B5E1A067823BF750C864FFD6C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:c2:7b:94:91:90:0f:c3:62:2c:71:88:71:af: f7:85:c9:5b:02:64:f1:6f:54:25:aa:60:8c:d5:3b: 42:c2:ff:47:9e:fa:bc:50:0b:fb:95:44:44:d7:de: 51:e0:6c:81:59:07:c1:2b:08:c0:4d:5f:7f:7e:80: 6b:13:f6:88:23:4d:81:12:dc:ff:0f:06:d5:8c:80: d0:05:b2:41:b3:66:fd:f6:02:99:90:c7:b2:d7:84: c3:06:d2:c1:09:6c:18:92:f7:15:81:dd:bf:78:4b: ea:a0:e2:c0:d0:8c:95:86:52:da:dc:c4:cd:3b:2f: 34:d3:3b:46:ff:60:b7:a0:c6:26:6c:0e:81:24:5e: d1:67:f8:81:8a:b2:e5:f8:98:74:97:94:20:c6:ea: ee:36:3b:3a:1f:10:fc:e8:48:fa:9b:87:7f:12:98: 78:8b:be:dd:8e:c1:7e:73:c6:13:8a:aa:37:20:2c: 95:06:38:a9:76:75:fb:82:7b:52:c0:14:6e:1c:ae: 52:2f:05:0e:8a:e3:65:6b:f4:63:2b:ff:23:7e:c1: 0e:cd:f1:ba:fd:1c:e3:58:e9:31:42:13:0f:b0:7e: f2:35:70:42:8d:53:5d:bd:25:7e:61:97:d9:26:fd: 4b:f7:fb:22:69:af:2d:16:ad:91:dc:8f:53:75:61: 86:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:4F:61:F1:C9:33:88:4B:5E:1A:06:78:23:BF:75:0C:86:4F:FD:6C X509v3 Authority Key Identifier: keyid:88:CD:D9:C1:93:DA:91:85:A4:AC:15:B2:AD:E8:75:FE:97:B6:F4:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iM3ZwZPakYWkrBWyreh1_pe29JE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:87:64:3b:a8:cd:49:5f:61:63:f9:e1:cf:10:8f:25:2f:94: ba:aa:b6:08:08:b8:40:b2:3f:5f:c1:14:50:45:06:c0:95:4f: e3:09:ed:9b:25:be:61:6c:14:18:8a:b4:ad:2d:7c:ed:66:ea: ce:73:2a:92:ef:0f:73:68:e8:ec:78:bf:64:b0:bc:99:08:97: a7:c3:d1:64:83:da:f0:b9:77:3a:2d:7e:06:19:8c:82:e7:9a: 3d:31:01:08:a2:b5:95:74:88:48:97:fb:d7:b7:12:a4:09:f1: ce:77:67:25:36:61:dc:46:83:0d:b3:82:6c:1c:3e:bf:82:0c: a4:89:e8:bb:93:e3:2c:15:fb:ed:25:e1:05:db:04:33:f4:2d: 83:e1:40:d4:c0:80:a4:ac:81:8a:6d:00:19:dc:46:01:07:ab: 45:8e:81:56:c3:c1:69:78:86:68:b8:64:36:44:6c:9f:7b:e6: 18:fa:83:de:1c:1e:4e:3e:35:02:c7:0c:b7:dd:31:2b:e1:a2: f1:f6:f7:f2:56:b0:0d:5c:db:26:6c:44:91:b1:91:e0:ad:4a: b0:e4:e0:f0:81:87:72:02:b2:2f:c3:8d:81:60:03:5d:b3:7f: 06:40:25:30:05:79:54:84:53:7b:5b:aa:27:43:5b:03:c9:7d: 9e:fb:70:cf -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUBwzSB+Y56KeQ68cWe7imALKp5bswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODhjZGQ5YzE5M2RhOTE4NWE0YWMxNWIyYWRlODc1ZmU5 N2I2ZjQ5MTAeFw0yNjAxMjUwODU2NDBaFw0yNjAxMjYxMTEzNDBaMDMxMTAvBgNV BAMTKDlENEY2MUYxQzkzMzg4NEI1RTFBMDY3ODIzQkY3NTBDODY0RkZENkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIwnuUkZAPw2IscYhxr/eFyVsC ZPFvVCWqYIzVO0LC/0ee+rxQC/uVRETX3lHgbIFZB8ErCMBNX39+gGsT9ogjTYES 3P8PBtWMgNAFskGzZv32ApmQx7LXhMMG0sEJbBiS9xWB3b94S+qg4sDQjJWGUtrc xM07LzTTO0b/YLegxiZsDoEkXtFn+IGKsuX4mHSXlCDG6u42OzofEPzoSPqbh38S mHiLvt2OwX5zxhOKqjcgLJUGOKl2dfuCe1LAFG4crlIvBQ6K42Vr9GMr/yN+wQ7N 8br9HONY6TFCEw+wfvI1cEKNU129JX5hl9km/Uv3+yJpry0WrZHcj1N1YYYJAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUnU9h8ckziEteGgZ4I791DIZP/WwwHwYDVR0j BBgwFoAUiM3ZwZPakYWkrBWyreh1/pe29JEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZTZhZmYyMzQtNjFjNS00MjkwLThhNmQtNWYyYjkwMjcz MjJmLzAvODhDREQ5QzE5M0RBOTE4NUE0QUMxNUIyQURFODc1RkU5N0I2RjQ5MS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2lNM1p3WlBha1lXa3JCV3lyZWgxX3Bl MjlKRS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lNmFmZjIzNC02 MWM1LTQyOTAtOGE2ZC01ZjJiOTAyNzMyMmYvMC84OENERDlDMTkzREE5MTg1QTRB QzE1QjJBREU4NzVGRTk3QjZGNDkxLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX4dkO6jNSV9hY/nhzxCP JS+Uuqq2CAi4QLI/X8EUUEUGwJVP4wntmyW+YWwUGIq0rS187WbqznMqku8Pc2jo 7Hi/ZLC8mQiXp8PRZIPa8Ll3Oi1+BhmMgueaPTEBCKK1lXSISJf717cSpAnxzndn JTZh3EaDDbOCbBw+v4IMpInou5PjLBX77SXhBdsEM/Qtg+FA1MCApKyBim0AGdxG AQerRY6BVsPBaXiGaLhkNkRsn3vmGPqD3hweTj41AscMt90xK+Gi8fb38lawDVzb JmxEkbGR4K1KsOTg8IGHcgKyL8ONgWADXbN/BkAlMAV5VIRTe1uqJ0NbA8l9nvtw zw== -----END CERTIFICATE-----Generated at Sun Jan 25 15:24:49 2026 by rpki-client