This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.mft File: 20914720382A1F52B950212C138E5E1E81BA69B7.mft (raw, json) Hash identifier: xARIE3SefmjizKN2SEYdkyEG2Mw1rVaCXyZDPt2jEdM= Subject key identifier: A6:68:A4:1E:86:21:F5:77:06:2F:FC:BB:60:63:1D:C7:27:4B:D4:8C Authority key identifier: 20:91:47:20:38:2A:1F:52:B9:50:21:2C:13:8E:5E:1E:81:BA:69:B7 Certificate issuer: /CN=20914720382A1F52B950212C138E5E1E81BA69B7 Certificate serial: 11FEEE918D3FFE564D1FA3A211AB92B75981CF59 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/20914720382A1F52B950212C138E5E1E81BA69B7.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.mft Manifest number: 3F Signing time: Sat 24 Jan 2026 22:59:36 +0000 Manifest this update: Sat 24 Jan 2026 22:54:36 +0000 Manifest next update: Sun 25 Jan 2026 23:21:36 +0000 Files and hashes: 1: 20914720382A1F52B950212C138E5E1E81BA69B7.crl (hash: RFxkLbd6pQunw2HCkAVz3wbxRNlEAqjo+Wrvg+dxpLw=) 2: 326131343a373538363a363130343a3a2f34382d3438203d3e20323034323131.roa (hash: Mx3SvpD488YSM7QhBcQhFXDhTEiCBu3kBzOrFFQvDHI=) 3: 326131343a373538363a363130303a3a2f34302d3430203d3e20323034323131.roa (hash: 19M0+L8lsNIFDtff0HfVclIoXr1C9PUiZKAd5BnzLVk=) 4: 326131343a373538363a363130323a3a2f34382d3438203d3e20323034323131.roa (hash: qV00rauBPvkNMm+ROCk1kFFtfkMd60Wl/gebvBC2C58=) 5: 140CF895225100CF571959173341D92070FF6E7C.cer (hash: +gzaj8eEKWdYwLDpey4WTnj+Qv54R/A4poIj/Ug/o3g=) 6: 326131343a373538363a363130333a3a2f34382d3438203d3e20323034323131.roa (hash: EI2JmFR4s32Lz8tNongWwvU2DoYm1aiqo+qr8ZW+vPo=) 7: 4B7AFD45B30392C9F4665CE2A7692D56E755DCEA.cer (hash: znj2KhD7dc90RL/SNmhicRPp3l/LZp/snY3wx3mPdJM=) 8: 67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F.cer (hash: pIADUm7hELp/Vqdstf8d4gGEQz21lMe/aoJyEiVS1CI=) 9: 326131343a373538363a363130303a3a2f34382d3438203d3e20323034323131.roa (hash: hfCW4qJm06QDdE+1PQmTBkAa6OyHhAnzRXdcN0xPhW4=) 10: 326131343a373538363a363130353a3a2f34382d3438203d3e20323034323131.roa (hash: dJUl+RAxxY+nIO2HtMh4e2KW3S6TxZr3e2E6ku/vRA8=) 11: 326131343a373538363a363130313a3a2f34382d3438203d3e20323034323131.roa (hash: DvKmhwWtZsD6TNvQ0eoVfIFrblMkYKUJ35ZR+X3ClBk=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.crl rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/20914720382A1F52B950212C138E5E1E81BA69B7.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:21:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:fe:ee:91:8d:3f:fe:56:4d:1f:a3:a2:11:ab:92:b7:59:81:cf:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20914720382A1F52B950212C138E5E1E81BA69B7 Validity Not Before: Jan 24 22:54:36 2026 GMT Not After : Jan 25 23:21:36 2026 GMT Subject: CN=A668A41E8621F577062FFCBB60631DC7274BD48C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:9e:c1:9e:2d:87:33:8b:7c:c1:78:e9:4c:4a: 0c:b5:da:b1:bb:02:30:59:76:d2:1a:ab:d9:99:e8: 74:75:ef:83:c1:41:ba:94:3b:cf:e1:f8:ae:5a:26: 7c:0d:ab:ad:e7:59:52:73:37:92:7c:ea:80:88:d8: 3b:a1:7b:58:a3:13:72:5a:04:89:10:2e:2b:84:2f: 7f:09:e7:27:84:4f:6a:b3:db:83:eb:29:1d:4a:df: 92:23:5a:89:2d:18:44:fd:b7:19:13:fb:8a:cc:ee: 70:d4:fc:2c:bb:67:81:bc:6b:64:50:c2:bc:29:c3: 44:1b:04:06:d4:5b:bc:c4:a6:e7:96:ab:9a:84:e4: d2:39:db:ce:d0:6f:0d:f9:be:51:34:bd:3e:b4:b2: 5c:a4:01:92:c8:06:d0:5a:25:a1:09:4d:bd:76:28: d3:53:62:16:b8:dd:b8:09:f6:e1:85:d3:e9:af:c4: a0:57:7b:2c:0d:a8:22:f8:80:78:a4:3e:6d:16:f7: 1c:d0:0d:58:7a:bf:eb:a2:8c:b5:e8:95:f3:2b:1b: 4d:a2:fd:c4:cf:96:88:f6:b0:3d:96:97:41:28:f9: f9:53:9e:df:f6:3a:43:19:8f:98:3c:12:fe:38:70: 7b:c6:57:6a:9b:10:af:94:ee:ba:47:4a:85:28:a4: 87:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:68:A4:1E:86:21:F5:77:06:2F:FC:BB:60:63:1D:C7:27:4B:D4:8C X509v3 Authority Key Identifier: keyid:20:91:47:20:38:2A:1F:52:B9:50:21:2C:13:8E:5E:1E:81:BA:69:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/20914720382A1F52B950212C138E5E1E81BA69B7.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:22:61:8a:a5:0a:7c:0d:29:d3:c8:68:10:fd:3c:4f:0b:60: 85:94:fd:16:93:9e:55:3b:c0:f0:a6:4a:01:94:96:45:8e:ec: 91:aa:f4:0e:3b:f4:6b:dd:c0:af:0d:c7:e8:bf:59:0a:fe:e9: f8:ab:33:8b:4c:c0:81:70:d9:33:e1:55:22:4a:92:55:8c:fa: 78:ab:5a:1b:5b:e2:b9:22:8b:6e:1a:b5:17:df:4b:ff:97:66: 9f:d1:0f:a5:72:57:68:75:7f:98:4f:03:83:7d:d5:17:72:43: d2:ae:19:cf:75:e1:b0:33:38:92:c9:90:99:2b:c8:d6:8b:aa: 79:9e:bc:57:fb:3d:fe:0d:74:99:eb:43:4c:e6:79:a7:c0:9b: ee:24:79:32:59:70:3e:fa:98:b0:81:8a:ae:93:66:d8:47:9b: 7b:15:0e:07:ed:d4:80:c7:a8:be:10:51:98:a5:07:ae:f5:54: 77:98:f3:58:c4:e6:0f:3e:b4:1e:44:b1:3c:1f:bb:89:da:db: e3:07:47:44:fc:12:be:f4:fa:a0:4d:52:6a:66:3e:3b:44:09: 93:52:de:b0:78:00:3a:22:a5:54:34:1a:6c:f9:4a:6e:88:1a: 2a:96:69:d2:c0:a2:cb:62:67:c9:a1:09:9d:40:ee:50:04:0d: 8f:ea:87:7d -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUEf7ukY0//lZNH6OiEauSt1mBz1kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjA5MTQ3MjAzODJBMUY1MkI5NTAyMTJDMTM4RTVFMUU4 MUJBNjlCNzAeFw0yNjAxMjQyMjU0MzZaFw0yNjAxMjUyMzIxMzZaMDMxMTAvBgNV BAMTKEE2NjhBNDFFODYyMUY1NzcwNjJGRkNCQjYwNjMxREM3Mjc0QkQ0OEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5nsGeLYczi3zBeOlMSgy12rG7 AjBZdtIaq9mZ6HR174PBQbqUO8/h+K5aJnwNq63nWVJzN5J86oCI2Duhe1ijE3Ja BIkQLiuEL38J5yeET2qz24PrKR1K35IjWoktGET9txkT+4rM7nDU/Cy7Z4G8a2RQ wrwpw0QbBAbUW7zEpueWq5qE5NI5287Qbw35vlE0vT60slykAZLIBtBaJaEJTb12 KNNTYha43bgJ9uGF0+mvxKBXeywNqCL4gHikPm0W9xzQDVh6v+uijLXolfMrG02i /cTPloj2sD2Wl0Eo+flTnt/2OkMZj5g8Ev44cHvGV2qbEK+U7rpHSoUopIcNAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUpmikHoYh9XcGL/y7YGMdxydL1IwwHwYDVR0j BBgwFoAUIJFHIDgqH1K5UCEsE45eHoG6abcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZjUzMmI5ZWItMmZhZS00OGE4LTk3OTMtMzNlZWMwNjdj ZTM5LzMvMjA5MTQ3MjAzODJBMUY1MkI5NTAyMTJDMTM4RTVFMUU4MUJBNjlCNy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8yMDkxNDcyMDM4MkExRjUyQjk1MDIxMkMx MzhFNUUxRTgxQkE2OUI3LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2Y1MzJiOWViLTJmYWUtNDhhOC05NzkzLTMzZWVjMDY3Y2UzOS8zLzIwOTE0NzIw MzgyQTFGNTJCOTUwMjEyQzEzOEU1RTFFODFCQTY5QjcubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBBImGK pQp8DSnTyGgQ/TxPC2CFlP0Wk55VO8DwpkoBlJZFjuyRqvQOO/Rr3cCvDcfov1kK /un4qzOLTMCBcNkz4VUiSpJVjPp4q1obW+K5IotuGrUX30v/l2af0Q+lcldodX+Y TwODfdUXckPSrhnPdeGwMziSyZCZK8jWi6p5nrxX+z3+DXSZ60NM5nmnwJvuJHky WXA++piwgYquk2bYR5t7FQ4H7dSAx6i+EFGYpQeu9VR3mPNYxOYPPrQeRLE8H7uJ 2tvjB0dE/BK+9PqgTVJqZj47RAmTUt6weAA6IqVUNBps+UpuiBoqlmnSwKLLYmfJ oQmdQO5QBA2P6od9 -----END CERTIFICATE-----Generated at Sun Jan 25 12:17:35 2026 by rpki-client