This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ebb6890d-0d6b-4ea9-a2ef-92d34a3ae64d/0/31F76CE2EF4D020F925E37D7A9D8E35398C7C017.mft File: 31F76CE2EF4D020F925E37D7A9D8E35398C7C017.mft (raw, json) Hash identifier: VS7z0FpfpwdcyerlUu9BajDkRhmSe2kO7zh18QVbH8s= Subject key identifier: 1F:C0:45:0E:7D:AA:81:70:0E:86:6E:25:CF:EA:48:70:79:BE:DC:85 Authority key identifier: 31:F7:6C:E2:EF:4D:02:0F:92:5E:37:D7:A9:D8:E3:53:98:C7:C0:17 Certificate issuer: /CN=31F76CE2EF4D020F925E37D7A9D8E35398C7C017 Certificate serial: 479CCB499E8406953B7D26CCC84FF63E7474C37C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/31F76CE2EF4D020F925E37D7A9D8E35398C7C017.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ebb6890d-0d6b-4ea9-a2ef-92d34a3ae64d/0/31F76CE2EF4D020F925E37D7A9D8E35398C7C017.mft Manifest number: 8C Signing time: Sat 24 Jan 2026 18:20:30 +0000 Manifest this update: Sat 24 Jan 2026 18:15:30 +0000 Manifest next update: Sun 25 Jan 2026 20:02:30 +0000 Files and hashes: 1: 31F76CE2EF4D020F925E37D7A9D8E35398C7C017.crl (hash: bmGjkxzvWoU1km7XfHd2aIanVVNj+lwNVT6J375LHDo=) 2: 326131343a373538313a3738363a3a2f34382d3438203d3e20323034383731.roa (hash: d7JuEn5B8KAwVz8SpkU4AMcAJkaWbbl+bWkksQthj/k=) 3: 326131343a373538313a3730303a3a2f34382d3438203d3e20323034383731.roa (hash: u8e0eoyomRFMkD/JcQQfwJ+uqGsBt5QX6wzg4Fq5J9M=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ebb6890d-0d6b-4ea9-a2ef-92d34a3ae64d/0/31F76CE2EF4D020F925E37D7A9D8E35398C7C017.crl rsync://rsync.paas.rpki.ripe.net/repository/ebb6890d-0d6b-4ea9-a2ef-92d34a3ae64d/0/31F76CE2EF4D020F925E37D7A9D8E35398C7C017.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/31F76CE2EF4D020F925E37D7A9D8E35398C7C017.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 20:02:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:9c:cb:49:9e:84:06:95:3b:7d:26:cc:c8:4f:f6:3e:74:74:c3:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31F76CE2EF4D020F925E37D7A9D8E35398C7C017 Validity Not Before: Jan 24 18:15:30 2026 GMT Not After : Jan 25 20:02:30 2026 GMT Subject: CN=1FC0450E7DAA81700E866E25CFEA487079BEDC85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:d7:49:8e:ff:02:59:32:d0:57:cb:dc:e7:9e: a2:ac:b0:4b:6e:9b:36:bd:01:bc:94:9a:b3:e5:0a: 14:91:fa:1d:fb:a0:a3:25:4a:b5:2b:c0:ac:91:ab: b2:57:b8:20:89:5e:5c:cc:0f:74:6e:2d:ad:04:e7: b8:27:fa:d6:82:a7:1f:ac:ae:28:cf:88:b7:da:f4: 08:57:b3:cf:3e:eb:88:45:30:01:0b:9f:88:e3:1a: cb:b0:a6:36:4d:17:ce:76:5b:53:33:67:a2:0d:22: 29:d7:3c:ce:96:56:a3:fa:f5:ec:fb:cb:35:14:52: d8:99:4a:d2:06:f9:37:24:cc:13:e1:06:17:49:44: c2:41:84:89:55:a7:8c:9d:76:c9:a6:12:29:7e:b9: 16:ad:3d:6a:15:89:58:0e:19:49:e5:d5:91:11:4b: 3d:29:8a:a5:98:97:68:85:52:03:9c:f3:fa:9f:83: eb:0a:56:d9:d8:39:fe:7d:48:20:3e:69:3f:75:e9: 00:a4:bd:20:dc:95:6d:dc:95:c1:16:af:16:0f:5f: ec:ca:1c:5e:5a:39:91:af:64:53:d3:5e:cf:4f:70: 42:58:28:23:97:59:65:f0:26:4f:0f:b0:e4:46:99: 69:eb:e1:c2:3f:31:33:6b:aa:f3:d5:ff:bd:3c:6e: c7:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:C0:45:0E:7D:AA:81:70:0E:86:6E:25:CF:EA:48:70:79:BE:DC:85 X509v3 Authority Key Identifier: keyid:31:F7:6C:E2:EF:4D:02:0F:92:5E:37:D7:A9:D8:E3:53:98:C7:C0:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ebb6890d-0d6b-4ea9-a2ef-92d34a3ae64d/0/31F76CE2EF4D020F925E37D7A9D8E35398C7C017.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/31F76CE2EF4D020F925E37D7A9D8E35398C7C017.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ebb6890d-0d6b-4ea9-a2ef-92d34a3ae64d/0/31F76CE2EF4D020F925E37D7A9D8E35398C7C017.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:f9:e8:51:76:3f:3d:a9:32:4b:d9:a1:dc:39:98:73:be:a0: f9:65:1f:50:ee:86:b8:3a:5d:69:ff:b2:e9:64:46:bc:f8:44: 25:ac:9c:e9:7c:bb:34:aa:da:2e:92:9f:34:a8:b3:86:ca:52: 30:1e:eb:60:01:23:b2:3f:05:57:0a:2f:6f:7b:b7:54:53:06: e7:d3:a6:07:1f:9b:05:a5:12:33:89:9f:12:68:20:7b:dc:c3: cf:a0:49:25:76:2e:0d:f1:b4:b0:c7:c3:80:08:e0:08:76:3c: ea:64:8a:8f:55:2a:7b:08:3e:ea:ea:87:88:29:74:f1:81:ff: 8d:60:4e:d9:61:14:97:82:05:36:67:86:9e:6f:4c:f2:38:5d: f2:60:7c:78:e9:3b:a8:5c:1b:8e:c4:66:bb:2e:17:9d:30:f7: 06:0c:27:b6:fe:b0:02:ee:af:11:64:41:20:ce:84:e2:a5:a9: b4:dd:f3:0d:19:d9:c3:7e:d8:1b:2f:76:61:2b:12:ea:44:ef: 87:1d:78:da:9d:a9:04:e6:30:cf:d9:a2:2f:01:1f:21:b6:6c: 0b:84:15:94:78:d4:f4:c3:f3:77:22:35:96:d5:5f:c9:51:ce: 4a:7a:f4:dd:bc:ca:77:06:7b:ba:32:b1:2f:ae:53:cd:19:db: 10:4c:3e:6e -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUR5zLSZ6EBpU7fSbMyE/2PnR0w3wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzFGNzZDRTJFRjREMDIwRjkyNUUzN0Q3QTlEOEUzNTM5 OEM3QzAxNzAeFw0yNjAxMjQxODE1MzBaFw0yNjAxMjUyMDAyMzBaMDMxMTAvBgNV BAMTKDFGQzA0NTBFN0RBQTgxNzAwRTg2NkUyNUNGRUE0ODcwNzlCRURDODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZ10mO/wJZMtBXy9znnqKssEtu mza9AbyUmrPlChSR+h37oKMlSrUrwKyRq7JXuCCJXlzMD3RuLa0E57gn+taCpx+s rijPiLfa9AhXs88+64hFMAELn4jjGsuwpjZNF852W1MzZ6INIinXPM6WVqP69ez7 yzUUUtiZStIG+TckzBPhBhdJRMJBhIlVp4yddsmmEil+uRatPWoViVgOGUnl1ZER Sz0piqWYl2iFUgOc8/qfg+sKVtnYOf59SCA+aT916QCkvSDclW3clcEWrxYPX+zK HF5aOZGvZFPTXs9PcEJYKCOXWWXwJk8PsORGmWnr4cI/MTNrqvPV/708bscfAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUH8BFDn2qgXAOhm4lz+pIcHm+3IUwHwYDVR0j BBgwFoAUMfds4u9NAg+SXjfXqdjjU5jHwBcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZWJiNjg5MGQtMGQ2Yi00ZWE5LWEyZWYtOTJkMzRhM2Fl NjRkLzAvMzFGNzZDRTJFRjREMDIwRjkyNUUzN0Q3QTlEOEUzNTM5OEM3QzAxNy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8zMUY3NkNFMkVGNEQwMjBGOTI1RTM3RDdB OUQ4RTM1Mzk4QzdDMDE3LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2ViYjY4OTBkLTBkNmItNGVhOS1hMmVmLTkyZDM0YTNhZTY0ZC8wLzMxRjc2Q0Uy RUY0RDAyMEY5MjVFMzdEN0E5RDhFMzUzOThDN0MwMTcubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCB+ehR dj89qTJL2aHcOZhzvqD5ZR9Q7oa4Ol1p/7LpZEa8+EQlrJzpfLs0qtoukp80qLOG ylIwHutgASOyPwVXCi9ve7dUUwbn06YHH5sFpRIziZ8SaCB73MPPoEkldi4N8bSw x8OACOAIdjzqZIqPVSp7CD7q6oeIKXTxgf+NYE7ZYRSXggU2Z4aeb0zyOF3yYHx4 6TuoXBuOxGa7LhedMPcGDCe2/rAC7q8RZEEgzoTipam03fMNGdnDftgbL3ZhKxLq RO+HHXjanakE5jDP2aIvAR8htmwLhBWUeNT0w/N3IjWW1V/JUc5KevTdvMp3Bnu6 MrEvrlPNGdsQTD5u -----END CERTIFICATE-----Generated at Sun Jan 25 12:30:01 2026 by rpki-client