This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/2/64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05.mft File: 64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05.mft (raw, json) Hash identifier: ukiNOArDo+4aZIOgZk1H5H7sK937lE9hjqbEFHVKkGg= Subject key identifier: F5:99:86:DA:AD:E7:73:97:6C:32:AB:99:1A:3C:B8:16:55:CF:00:FA Authority key identifier: 64:D6:29:AA:3C:F3:8F:9F:77:0A:DB:BB:20:C6:DE:BD:0B:8C:DE:05 Certificate issuer: /CN=64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05 Certificate serial: 0E2EA74195A5AFA247ACCF0F6E06B42189A2E744 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/2/64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05.mft Manifest number: 98 Signing time: Sun 25 Jan 2026 17:04:38 +0000 Manifest this update: Sun 25 Jan 2026 16:59:38 +0000 Manifest next update: Mon 26 Jan 2026 18:45:38 +0000 Files and hashes: 1: 326131343a373538313a333039303a3a2f34382d3438203d3e20323034323131.roa (hash: nGLAdkRiCVIQwTrXrRH2GZTJEYm4l5K5Qg4h/njNDzU=) 2: 64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05.crl (hash: dGiD4gEoire3FVlrjbjId3N4WQxHOS622iSv3gpdq0M=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/2/64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05.crl rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/2/64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05.mft rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05.cer rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.crl rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 05:53:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:2e:a7:41:95:a5:af:a2:47:ac:cf:0f:6e:06:b4:21:89:a2:e7:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05 Validity Not Before: Jan 25 16:59:38 2026 GMT Not After : Jan 26 18:45:38 2026 GMT Subject: CN=F59986DAADE773976C32AB991A3CB81655CF00FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:35:e0:20:99:60:3a:48:94:c7:ee:65:a3:fe: dc:9f:95:93:52:a8:4f:cd:4f:0d:b3:ba:99:35:54: b0:63:86:fc:33:fe:2d:13:41:44:36:4b:03:7e:61: ae:60:80:a3:ab:7d:19:5e:26:bc:d3:fb:45:e0:e4: 11:14:a2:31:54:d4:ad:d5:b1:92:35:77:19:23:8e: 44:8c:35:f0:c0:01:17:1c:24:7b:b6:73:95:fd:93: 96:c4:a0:8a:22:c5:9c:69:f9:be:2f:16:c9:e3:19: e0:f8:84:9f:c5:81:2a:13:09:48:df:59:4c:b8:37: c4:4b:38:11:11:07:c8:91:83:1b:08:e8:61:aa:8c: e7:a4:eb:c4:a3:64:03:00:dc:73:5e:6b:70:b0:b6: 03:ee:3c:ac:7b:6d:7a:f5:54:05:02:c8:5e:45:3b: d6:7d:53:b4:8c:e2:f2:f2:72:a2:e1:34:04:d3:57: 63:2c:a5:e7:c2:12:cf:0f:fa:db:85:4f:32:7b:7b: 53:88:5b:e3:ea:e5:69:7b:e9:0e:6c:47:72:3b:7a: 1e:dc:c6:97:74:16:7b:d1:f9:94:d8:43:99:d0:b6: fe:b3:4d:ba:34:15:cf:2c:f4:22:d4:92:71:cc:90: eb:cd:64:ee:93:67:91:a6:b0:f5:2b:46:3b:c5:b7: 1a:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:99:86:DA:AD:E7:73:97:6C:32:AB:99:1A:3C:B8:16:55:CF:00:FA X509v3 Authority Key Identifier: keyid:64:D6:29:AA:3C:F3:8F:9F:77:0A:DB:BB:20:C6:DE:BD:0B:8C:DE:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/2/64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/2/64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:25:34:8a:aa:31:8c:1e:5b:ba:ac:73:2c:80:2f:26:03:ca: 81:ae:59:f4:c0:cb:cb:76:09:58:54:02:4f:87:c9:cc:c8:1a: 8b:8d:58:3b:45:2e:10:6b:db:0f:10:36:a9:12:3b:3b:92:02: 92:7c:36:ff:78:e2:21:76:32:88:23:55:a8:55:d9:2f:fb:df: 87:4a:71:42:1d:d5:e3:43:84:e3:95:2b:d9:8a:2b:44:d8:f5: 66:cb:40:4e:98:87:ec:e1:f2:3a:ad:32:4e:79:48:75:8a:d1: 04:dc:57:ed:43:91:a7:f3:9f:39:7a:ab:20:27:d3:62:f1:aa: 54:59:b5:a2:ce:16:01:db:41:0d:c8:52:c9:7f:d0:75:b4:96: 19:70:ac:f6:04:45:89:4f:49:cc:b9:ba:8e:c2:6f:31:9d:a6: 09:c9:c5:44:10:62:b5:ac:26:93:cb:f6:0b:92:29:28:32:e1: 93:80:11:c9:b8:93:4c:1a:a7:6b:c0:ae:4a:e2:3c:0e:0f:5a: b1:c2:69:95:3c:0a:79:97:04:5f:f4:5e:e1:4c:5d:59:92:10: 29:af:bd:d4:23:83:f5:4d:ad:e7:97:77:4c:5a:ee:60:e3:d3: a6:65:c2:71:ab:73:f5:e3:94:64:6b:b6:43:12:1c:95:95:35: 66:41:79:e6 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUDi6nQZWlr6JHrM8Pbga0IYmi50QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjRENjI5QUEzQ0YzOEY5Rjc3MEFEQkJCMjBDNkRFQkQw QjhDREUwNTAeFw0yNjAxMjUxNjU5MzhaFw0yNjAxMjYxODQ1MzhaMDMxMTAvBgNV BAMTKEY1OTk4NkRBQURFNzczOTc2QzMyQUI5OTFBM0NCODE2NTVDRjAwRkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHNeAgmWA6SJTH7mWj/tyflZNS qE/NTw2zupk1VLBjhvwz/i0TQUQ2SwN+Ya5ggKOrfRleJrzT+0Xg5BEUojFU1K3V sZI1dxkjjkSMNfDAARccJHu2c5X9k5bEoIoixZxp+b4vFsnjGeD4hJ/FgSoTCUjf WUy4N8RLOBERB8iRgxsI6GGqjOek68SjZAMA3HNea3CwtgPuPKx7bXr1VAUCyF5F O9Z9U7SM4vLycqLhNATTV2MspefCEs8P+tuFTzJ7e1OIW+Pq5Wl76Q5sR3I7eh7c xpd0FnvR+ZTYQ5nQtv6zTbo0Fc8s9CLUknHMkOvNZO6TZ5GmsPUrRjvFtxp5AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU9ZmG2q3nc5dsMquZGjy4FlXPAPowHwYDVR0j BBgwFoAUZNYpqjzzj593Ctu7IMbevQuM3gUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZjUzMmI5ZWItMmZhZS00OGE4LTk3OTMtMzNlZWMwNjdj ZTM5LzIvNjRENjI5QUEzQ0YzOEY5Rjc3MEFEQkJCMjBDNkRFQkQwQjhDREUwNS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kOWJkMzg4OC05MzAyLTRi NmYtYTAxNy0yYjRiYmE1ZTU3YmIvMS82NEQ2MjlBQTNDRjM4RjlGNzcwQURCQkIy MEM2REVCRDBCOENERTA1LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2Y1MzJiOWViLTJmYWUtNDhhOC05NzkzLTMzZWVjMDY3Y2UzOS8yLzY0RDYyOUFB M0NGMzhGOUY3NzBBREJCQjIwQzZERUJEMEI4Q0RFMDUubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAeJTSK qjGMHlu6rHMsgC8mA8qBrln0wMvLdglYVAJPh8nMyBqLjVg7RS4Qa9sPEDapEjs7 kgKSfDb/eOIhdjKII1WoVdkv+9+HSnFCHdXjQ4TjlSvZiitE2PVmy0BOmIfs4fI6 rTJOeUh1itEE3FftQ5Gn8585eqsgJ9Ni8apUWbWizhYB20ENyFLJf9B1tJYZcKz2 BEWJT0nMubqOwm8xnaYJycVEEGK1rCaTy/YLkikoMuGTgBHJuJNMGqdrwK5K4jwO D1qxwmmVPAp5lwRf9F7hTF1ZkhApr73UI4P1Ta3nl3dMWu5g49OmZcJxq3P145Rk a7ZDEhyVlTVmQXnm -----END CERTIFICATE-----Generated at Sun Jan 25 21:00:09 2026 by rpki-client