This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/eca25350-9e3f-46e1-ae2b-1c61b6ea5ae2/0/578D7DC9779B27815EBB5C3F5FCF07CC583708B3.mft File: 578D7DC9779B27815EBB5C3F5FCF07CC583708B3.mft (raw, json) Hash identifier: WpyUNxA0Iy9NfaqrxWcRS2SLfvzRFdbFSJeEBXp1RAM= Subject key identifier: E5:20:E8:BC:FC:50:6D:57:67:8F:B9:A4:EC:0D:52:94:D1:D1:E5:0F Authority key identifier: 57:8D:7D:C9:77:9B:27:81:5E:BB:5C:3F:5F:CF:07:CC:58:37:08:B3 Certificate issuer: /CN=578d7dc9779b27815ebb5c3f5fcf07cc583708b3 Certificate serial: 23FC80BCAB64B711FB3F2A6975DA0DF6AFE4F99E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V419yXebJ4Feu1w_X88HzFg3CLM.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/eca25350-9e3f-46e1-ae2b-1c61b6ea5ae2/0/578D7DC9779B27815EBB5C3F5FCF07CC583708B3.mft Manifest number: 01D1 Signing time: Sun 25 Jan 2026 06:15:26 +0000 Manifest this update: Sun 25 Jan 2026 06:10:26 +0000 Manifest next update: Mon 26 Jan 2026 08:14:26 +0000 Files and hashes: 1: 323030313a3637633a6533633a3a2f34382d3438203d3e20323135323936.roa (hash: RGTgCra6z97DL3zPw+EaFuLG0rQZ9DlytQ3X3ko6llc=) 2: AS215296.asa (hash: OtSM7n/M5H4Gr1eK1WwYJcN3J5IxezG9iWmcyo289w0=) 3: 578D7DC9779B27815EBB5C3F5FCF07CC583708B3.crl (hash: vftDLbRRRoPVLkiFUGzT8cZ/ybfwC4KvOa0sKs7+rXo=) 4: 3130332e3134372e3135332e302f32342d3234203d3e20323135323936.roa (hash: O+6twnNOV5ruNsTz6gyqZDCueGHR/39L745XmWi2d5I=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/eca25350-9e3f-46e1-ae2b-1c61b6ea5ae2/0/578D7DC9779B27815EBB5C3F5FCF07CC583708B3.crl rsync://rsync.paas.rpki.ripe.net/repository/eca25350-9e3f-46e1-ae2b-1c61b6ea5ae2/0/578D7DC9779B27815EBB5C3F5FCF07CC583708B3.mft rsync://rpki.ripe.net/repository/DEFAULT/V419yXebJ4Feu1w_X88HzFg3CLM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 08:14:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:fc:80:bc:ab:64:b7:11:fb:3f:2a:69:75:da:0d:f6:af:e4:f9:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=578d7dc9779b27815ebb5c3f5fcf07cc583708b3 Validity Not Before: Jan 25 06:10:26 2026 GMT Not After : Jan 26 08:14:26 2026 GMT Subject: CN=E520E8BCFC506D57678FB9A4EC0D5294D1D1E50F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:5d:41:42:68:18:e4:1c:c4:23:6f:02:26:dc: 67:3a:38:6c:a6:8f:0b:f5:cc:98:79:41:58:4e:05: 7f:3e:08:e8:5b:78:a5:94:63:73:54:80:72:df:c4: ad:ee:58:8d:73:81:6a:d9:e4:6b:b4:0b:19:4d:66: 04:42:91:40:1c:0d:1f:01:1d:26:44:28:7f:e8:ff: 7d:3a:98:3e:c5:aa:4d:49:55:62:e6:61:4e:ff:08: a5:fe:95:3f:9e:1b:22:d9:b9:d5:d8:de:d8:6f:7d: 84:f6:6d:bd:9a:e0:26:f8:cf:d5:2c:ec:19:3e:a8: 48:83:9a:95:a6:06:23:5b:00:58:c2:61:55:30:24: 51:a6:78:cf:f6:6e:4a:9a:65:5e:73:b3:5d:e9:31: 67:5b:71:53:92:b4:f3:29:b2:47:53:76:88:46:83: da:50:56:a7:ec:c9:cf:db:7b:f7:f8:9f:4f:19:b6: 00:30:49:99:d1:85:1a:1a:96:35:56:a8:65:fb:6f: 34:e3:43:40:d1:97:e4:82:62:6d:dd:17:39:f2:34: 49:9e:0f:d8:10:f0:a5:eb:a9:05:57:71:43:61:e8: 34:bc:de:91:26:4a:8e:03:68:38:60:2d:56:72:04: 3a:d3:e4:cd:12:8b:d1:21:59:0b:b4:ee:8c:8c:22: 1a:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:20:E8:BC:FC:50:6D:57:67:8F:B9:A4:EC:0D:52:94:D1:D1:E5:0F X509v3 Authority Key Identifier: keyid:57:8D:7D:C9:77:9B:27:81:5E:BB:5C:3F:5F:CF:07:CC:58:37:08:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/eca25350-9e3f-46e1-ae2b-1c61b6ea5ae2/0/578D7DC9779B27815EBB5C3F5FCF07CC583708B3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V419yXebJ4Feu1w_X88HzFg3CLM.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/eca25350-9e3f-46e1-ae2b-1c61b6ea5ae2/0/578D7DC9779B27815EBB5C3F5FCF07CC583708B3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:50:d0:5f:21:dc:c1:8c:90:cd:ab:24:32:d1:1d:97:4c:54: 58:9b:e8:5f:42:53:9e:93:c1:00:2c:ec:4c:02:9b:44:43:71: 27:da:20:fd:10:af:9c:f3:23:55:a7:e7:ac:21:fb:11:8e:f7: 7a:9d:86:84:2c:ea:89:64:58:f3:c6:4a:cf:29:b4:08:ea:00: 0e:85:c0:28:a9:79:f1:a5:f6:e0:54:8c:e1:db:8b:f3:1f:fa: e0:66:b3:76:14:a2:14:f2:2f:c9:b1:d4:70:af:f0:05:53:58: c6:18:9b:fb:11:f7:35:65:e4:f8:15:be:5c:51:87:35:21:da: 93:8a:d8:c0:e1:a1:a6:ae:69:05:5c:25:b6:c9:ee:2b:e4:d8: 5d:9d:da:ea:1f:ba:ba:9b:07:44:8c:04:d9:0b:fc:7d:3c:99: f1:29:d8:1a:16:12:70:85:07:7a:02:f2:ea:a1:58:25:0d:ab: 8e:f8:dc:4c:79:0c:2e:41:a1:01:21:25:1b:4e:42:2d:3b:8d: 89:3b:b3:e6:bd:8c:1b:3d:6e:50:4a:c5:be:fe:74:2a:5d:ba: 43:b8:a4:78:17:d8:fd:5a:8d:86:21:4e:2e:0b:d8:7e:f9:78: 9d:ee:6a:5c:89:35:20:9b:4d:dc:4a:80:82:59:9a:90:4e:ef: 20:05:83:ef -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUI/yAvKtktxH7PyppddoN9q/k+Z4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTc4ZDdkYzk3NzliMjc4MTVlYmI1YzNmNWZjZjA3Y2M1 ODM3MDhiMzAeFw0yNjAxMjUwNjEwMjZaFw0yNjAxMjYwODE0MjZaMDMxMTAvBgNV BAMTKEU1MjBFOEJDRkM1MDZENTc2NzhGQjlBNEVDMEQ1Mjk0RDFEMUU1MEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYXUFCaBjkHMQjbwIm3Gc6OGym jwv1zJh5QVhOBX8+COhbeKWUY3NUgHLfxK3uWI1zgWrZ5Gu0CxlNZgRCkUAcDR8B HSZEKH/o/306mD7Fqk1JVWLmYU7/CKX+lT+eGyLZudXY3thvfYT2bb2a4Cb4z9Us 7Bk+qEiDmpWmBiNbAFjCYVUwJFGmeM/2bkqaZV5zs13pMWdbcVOStPMpskdTdohG g9pQVqfsyc/be/f4n08ZtgAwSZnRhRoaljVWqGX7bzTjQ0DRl+SCYm3dFznyNEme D9gQ8KXrqQVXcUNh6DS83pEmSo4DaDhgLVZyBDrT5M0Si9EhWQu07oyMIhpNAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU5SDovPxQbVdnj7mk7A1SlNHR5Q8wHwYDVR0j BBgwFoAUV419yXebJ4Feu1w/X88HzFg3CLMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZWNhMjUzNTAtOWUzZi00NmUxLWFlMmItMWM2MWI2ZWE1 YWUyLzAvNTc4RDdEQzk3NzlCMjc4MTVFQkI1QzNGNUZDRjA3Q0M1ODM3MDhCMy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Y0MTl5WGViSjRGZXUxd19YODhIekZn M0NMTS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lY2EyNTM1MC05 ZTNmLTQ2ZTEtYWUyYi0xYzYxYjZlYTVhZTIvMC81NzhEN0RDOTc3OUIyNzgxNUVC QjVDM0Y1RkNGMDdDQzU4MzcwOEIzLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAilDQXyHcwYyQzaskMtEd l0xUWJvoX0JTnpPBACzsTAKbRENxJ9og/RCvnPMjVafnrCH7EY73ep2GhCzqiWRY 88ZKzym0COoADoXAKKl58aX24FSM4duL8x/64GazdhSiFPIvybHUcK/wBVNYxhib +xH3NWXk+BW+XFGHNSHak4rYwOGhpq5pBVwltsnuK+TYXZ3a6h+6upsHRIwE2Qv8 fTyZ8SnYGhYScIUHegLy6qFYJQ2rjvjcTHkMLkGhASElG05CLTuNiTuz5r2MGz1u UErFvv50Kl26Q7ikeBfY/VqNhiFOLgvYfvl4ne5qXIk1IJtN3EqAglmakE7vIAWD 7w== -----END CERTIFICATE-----Generated at Sun Jan 25 19:22:48 2026 by rpki-client