This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/1/C18020BDC5E6BA4A5474D3AA0DA4A962A68D98AB.mft File: C18020BDC5E6BA4A5474D3AA0DA4A962A68D98AB.mft (raw, json) Hash identifier: LOHtxD+AHTPDx0jxJuyc/r5/Y5aUMHcPOUGt4XyEuhI= Subject key identifier: 58:AE:D3:AA:BD:53:2D:EB:0A:55:2B:39:B9:65:06:BA:94:C3:FF:A3 Authority key identifier: C1:80:20:BD:C5:E6:BA:4A:54:74:D3:AA:0D:A4:A9:62:A6:8D:98:AB Certificate issuer: /CN=c18020bdc5e6ba4a5474d3aa0da4a962a68d98ab Certificate serial: 52E1048E6F2448FEA05F7BE46A9C6A6581FF7753 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wYAgvcXmukpUdNOqDaSpYqaNmKs.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/1/C18020BDC5E6BA4A5474D3AA0DA4A962A68D98AB.mft Manifest number: 9B Signing time: Sun 25 Jan 2026 01:19:36 +0000 Manifest this update: Sun 25 Jan 2026 01:14:36 +0000 Manifest next update: Mon 26 Jan 2026 03:11:36 +0000 Files and hashes: 1: C18020BDC5E6BA4A5474D3AA0DA4A962A68D98AB.crl (hash: 2jRjp8jOtOzbLkUQrkvOSA+7Cagcm0s9lFZCEBuLamk=) 2: AS204211.asa (hash: wnYdHYmPYu94UinXYM9D4bHW7w80uhSOgAn6mCM2gEg=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/1/C18020BDC5E6BA4A5474D3AA0DA4A962A68D98AB.crl rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/1/C18020BDC5E6BA4A5474D3AA0DA4A962A68D98AB.mft rsync://rpki.ripe.net/repository/DEFAULT/wYAgvcXmukpUdNOqDaSpYqaNmKs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 03:11:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:e1:04:8e:6f:24:48:fe:a0:5f:7b:e4:6a:9c:6a:65:81:ff:77:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c18020bdc5e6ba4a5474d3aa0da4a962a68d98ab Validity Not Before: Jan 25 01:14:36 2026 GMT Not After : Jan 26 03:11:36 2026 GMT Subject: CN=58AED3AABD532DEB0A552B39B96506BA94C3FFA3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:23:7b:dd:8b:fd:b3:04:0f:57:87:e4:63:51: 37:68:5a:25:ba:37:3e:37:2a:62:62:09:8b:14:be: 24:b9:2a:85:32:33:34:53:3e:4e:86:e5:65:d0:20: 5c:60:9e:40:1f:16:ce:69:aa:e5:85:72:8d:b2:73: c7:cc:7d:18:59:c2:19:a0:da:bb:aa:83:f8:e7:02: 03:92:a5:4f:55:6c:51:7b:1c:c1:ec:8a:27:0b:66: dc:c3:a9:86:28:0f:93:f6:2a:ff:75:2d:49:b4:b5: 51:9e:39:05:30:79:3d:f5:71:fd:28:4f:26:9a:78: 1b:8d:a3:34:06:8c:ed:fa:cc:96:6d:4b:ed:0b:14: c0:de:f7:0c:28:c4:e4:b7:df:b6:57:97:aa:10:da: 8e:91:2d:37:14:e5:99:f7:c3:f3:bf:42:36:81:d4: ac:91:59:be:d2:d6:e7:ce:63:39:83:1f:2f:11:10: ef:d4:11:1c:1a:97:9a:30:3c:e2:e7:ed:8a:df:26: 30:17:9a:ba:1b:2e:37:48:7e:43:ef:05:15:4e:9c: 15:f8:e7:c9:6d:b1:1a:88:d9:3b:e9:a4:0a:13:91: 4e:da:03:20:1b:c5:16:94:f9:72:5c:f6:b0:8a:6c: fc:4f:80:e0:61:3f:36:34:2c:7b:f5:e5:f1:de:cb: 36:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:AE:D3:AA:BD:53:2D:EB:0A:55:2B:39:B9:65:06:BA:94:C3:FF:A3 X509v3 Authority Key Identifier: keyid:C1:80:20:BD:C5:E6:BA:4A:54:74:D3:AA:0D:A4:A9:62:A6:8D:98:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/1/C18020BDC5E6BA4A5474D3AA0DA4A962A68D98AB.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wYAgvcXmukpUdNOqDaSpYqaNmKs.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/1/C18020BDC5E6BA4A5474D3AA0DA4A962A68D98AB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:44:8c:3d:d5:9e:3d:c9:dd:c0:27:4a:bc:16:e8:94:c5:49: f3:e2:3e:81:2b:6b:2d:a5:07:cb:d3:03:90:8b:93:47:d7:92: 6b:a1:be:ce:c9:67:90:bd:41:26:22:c1:74:93:b8:a1:e4:ef: e2:1b:a7:17:78:08:b4:da:ca:56:f2:ed:d5:38:5c:8e:3b:0e: c8:c1:16:5d:65:f1:56:df:e4:c3:5a:b6:cf:bd:48:fb:9a:63: 3d:38:82:0b:34:bd:99:8b:07:5f:17:e4:ef:56:a3:41:ca:28: 5b:75:dc:c3:af:e0:26:11:2b:92:ce:77:fd:18:64:1b:a7:7d: a0:6c:b3:07:59:87:f9:8e:2d:8e:bc:07:eb:da:1a:6a:c1:34: fc:77:d2:98:ec:7f:2f:be:ec:1e:a7:51:93:7f:d7:91:7b:c1: bd:0b:2b:cc:cd:8c:d1:5e:40:f5:88:24:f5:66:4c:ef:3b:1b: 96:bd:4d:04:3f:e1:a2:44:27:60:49:f6:ad:a4:a2:9c:1f:36: f5:79:9d:db:63:3a:16:64:ca:f4:4c:20:b0:ed:19:91:de:f1: ad:86:15:23:47:21:4a:cc:98:f6:7b:11:9d:3f:eb:84:6c:c7: 0a:53:5c:d3:d5:cc:5d:01:b1:80:02:33:6a:42:a7:1b:1f:37: 60:68:48:3c -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUUuEEjm8kSP6gX3vkapxqZYH/d1MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYzE4MDIwYmRjNWU2YmE0YTU0NzRkM2FhMGRhNGE5NjJh NjhkOThhYjAeFw0yNjAxMjUwMTE0MzZaFw0yNjAxMjYwMzExMzZaMDMxMTAvBgNV BAMTKDU4QUVEM0FBQkQ1MzJERUIwQTU1MkIzOUI5NjUwNkJBOTRDM0ZGQTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKI3vdi/2zBA9Xh+RjUTdoWiW6 Nz43KmJiCYsUviS5KoUyMzRTPk6G5WXQIFxgnkAfFs5pquWFco2yc8fMfRhZwhmg 2ruqg/jnAgOSpU9VbFF7HMHsiicLZtzDqYYoD5P2Kv91LUm0tVGeOQUweT31cf0o TyaaeBuNozQGjO36zJZtS+0LFMDe9wwoxOS337ZXl6oQ2o6RLTcU5Zn3w/O/QjaB 1KyRWb7S1ufOYzmDHy8REO/UERwal5owPOLn7YrfJjAXmrobLjdIfkPvBRVOnBX4 58ltsRqI2TvppAoTkU7aAyAbxRaU+XJc9rCKbPxPgOBhPzY0LHv15fHeyzaXAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUWK7Tqr1TLesKVSs5uWUGupTD/6MwHwYDVR0j BBgwFoAUwYAgvcXmukpUdNOqDaSpYqaNmKswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZjUzMmI5ZWItMmZhZS00OGE4LTk3OTMtMzNlZWMwNjdj ZTM5LzEvQzE4MDIwQkRDNUU2QkE0QTU0NzREM0FBMERBNEE5NjJBNjhEOThBQi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3dZQWd2Y1htdWtwVWROT3FEYVNwWXFh Tm1Lcy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mNTMyYjllYi0y ZmFlLTQ4YTgtOTc5My0zM2VlYzA2N2NlMzkvMS9DMTgwMjBCREM1RTZCQTRBNTQ3 NEQzQUEwREE0QTk2MkE2OEQ5OEFCLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh0SMPdWePcndwCdKvBbo lMVJ8+I+gStrLaUHy9MDkIuTR9eSa6G+zslnkL1BJiLBdJO4oeTv4hunF3gItNrK VvLt1ThcjjsOyMEWXWXxVt/kw1q2z71I+5pjPTiCCzS9mYsHXxfk71ajQcooW3Xc w6/gJhErks53/RhkG6d9oGyzB1mH+Y4tjrwH69oaasE0/HfSmOx/L77sHqdRk3/X kXvBvQsrzM2M0V5A9Ygk9WZM7zsblr1NBD/hokQnYEn2raSinB829Xmd22M6FmTK 9EwgsO0Zkd7xrYYVI0chSsyY9nsRnT/rhGzHClNc09XMXQGxgAIzakKnGx83YGhI PA== -----END CERTIFICATE-----Generated at Sun Jan 25 18:13:49 2026 by rpki-client