This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fb806978-5571-4dc9-a872-92397c4c8880/0/67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F.mft File: 67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F.mft (raw, json) Hash identifier: 7KafLgOcbQYKAWDreJ+7FRN1vwejcLd3wW4sg5DAL2g= Subject key identifier: 68:B3:9F:D0:99:F9:B9:37:5F:D1:C7:AA:36:91:D1:3A:40:42:91:A5 Authority key identifier: 67:E2:DB:CE:9C:00:B1:89:84:CA:C2:ED:BA:B4:2C:58:F4:39:9B:0F Certificate issuer: /CN=67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F Certificate serial: 795F5F819D2FD5FBBD2F2116ACB84129D184CC27 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fb806978-5571-4dc9-a872-92397c4c8880/0/67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F.mft Manifest number: 04 Signing time: Sun 25 Jan 2026 02:33:18 +0000 Manifest this update: Sun 25 Jan 2026 02:28:18 +0000 Manifest next update: Mon 26 Jan 2026 03:19:18 +0000 Files and hashes: 1: 326131343a373538363a363330303a3a2f34342d3438203d3e20313533333736.roa (hash: EmjH1JU+BsV2c2yZp0xHpfbOG+X2vne6qXcNiETAM44=) 2: 67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F.crl (hash: vPuJpFzrc3OHKxkIsM3/R1iz7Pd4xlM/bM0qRC+I4n8=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fb806978-5571-4dc9-a872-92397c4c8880/0/67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F.crl rsync://rsync.paas.rpki.ripe.net/repository/fb806978-5571-4dc9-a872-92397c4c8880/0/67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F.mft rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F.cer rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.crl rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/20914720382A1F52B950212C138E5E1E81BA69B7.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 01:36:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:5f:5f:81:9d:2f:d5:fb:bd:2f:21:16:ac:b8:41:29:d1:84:cc:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F Validity Not Before: Jan 25 02:28:18 2026 GMT Not After : Jan 26 03:19:18 2026 GMT Subject: CN=68B39FD099F9B9375FD1C7AA3691D13A404291A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:b2:15:11:af:f2:d7:9e:ed:9a:5d:38:0b:3b: eb:57:2a:f3:1e:2f:0f:47:60:55:fc:46:08:39:e8: 6b:b8:5a:81:a4:18:62:8f:f1:a7:e8:27:bf:c5:0b: 77:da:c9:49:9c:6a:7c:f3:83:34:fa:72:62:3e:9a: df:26:0c:ba:a5:0a:07:00:67:79:09:2d:d6:49:74: 26:c8:d5:13:a4:f3:c5:57:37:5d:fb:7c:36:7c:a5: 7c:fb:66:45:b2:a0:4b:6f:c6:36:40:2a:cb:4c:d3: 02:a7:0b:c0:ee:cd:b1:e9:dd:6b:7e:7f:05:94:bf: 7d:2f:31:9b:4f:bf:a2:d9:f0:40:df:c0:01:5a:de: e5:b2:3a:ca:56:7d:73:04:1a:e5:5c:af:ce:1d:03: 59:cd:f5:31:3c:d7:a1:59:00:f4:ac:5c:0b:3e:a5: 3f:17:79:3f:2a:bd:eb:7f:08:0e:20:e2:a8:20:19: 23:aa:60:de:68:30:09:3f:28:e7:53:06:26:0c:13: dc:97:39:9d:46:7c:d1:2f:a8:91:ec:e1:ad:66:bf: 7c:37:38:d2:34:d4:5f:34:bf:c0:5c:61:8c:9e:3d: 27:19:80:9b:5c:f9:30:5d:cb:7f:dc:90:56:c3:a6: ae:51:dd:bc:2c:87:84:04:39:83:0e:f6:c5:d1:dc: 48:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:B3:9F:D0:99:F9:B9:37:5F:D1:C7:AA:36:91:D1:3A:40:42:91:A5 X509v3 Authority Key Identifier: keyid:67:E2:DB:CE:9C:00:B1:89:84:CA:C2:ED:BA:B4:2C:58:F4:39:9B:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fb806978-5571-4dc9-a872-92397c4c8880/0/67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fb806978-5571-4dc9-a872-92397c4c8880/0/67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:0d:56:a0:39:18:2b:65:ca:b3:34:9b:bc:67:53:58:12:8b: 4f:73:fb:07:04:b2:c8:c7:5e:75:8a:55:5f:bf:5d:b9:2f:fe: da:b3:50:43:59:61:f3:79:58:95:29:e8:96:c8:f1:22:f9:60: 19:ea:65:99:f6:cf:de:f2:6e:d0:b0:19:20:bb:58:29:d6:4a: be:58:4b:95:f0:41:85:9a:a7:0a:dc:a8:21:87:23:5c:82:d1: d4:06:39:72:d6:58:75:99:24:3a:84:8e:d5:8f:66:fa:c1:10: ed:e8:8d:30:60:4a:d8:7e:88:73:33:70:b6:a5:c3:09:40:12: 70:dd:ad:69:0e:cb:e3:1a:ab:60:72:88:fe:11:c7:1b:9a:a2: 4a:04:f2:db:4f:99:56:54:e0:00:d6:95:df:87:08:ca:b1:f1: fa:12:03:94:ff:d0:98:81:cf:f8:67:2c:0d:b0:71:9b:90:57: d0:be:bb:6c:77:23:90:c0:34:24:a3:90:a1:e4:4d:79:fe:37: e9:a4:c7:03:55:38:03:83:e3:a8:a7:67:ad:b0:74:01:75:33: 25:98:f0:73:58:76:b7:5e:c8:73:05:bb:50:8b:ea:61:3d:2b: c4:86:a9:65:91:70:ff:ba:f1:53:7c:44:79:03:2a:b1:13:30: b1:8a:9a:08 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUeV9fgZ0v1fu9LyEWrLhBKdGEzCcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjdFMkRCQ0U5QzAwQjE4OTg0Q0FDMkVEQkFCNDJDNThG NDM5OUIwRjAeFw0yNjAxMjUwMjI4MThaFw0yNjAxMjYwMzE5MThaMDMxMTAvBgNV BAMTKDY4QjM5RkQwOTlGOUI5Mzc1RkQxQzdBQTM2OTFEMTNBNDA0MjkxQTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPshURr/LXnu2aXTgLO+tXKvMe Lw9HYFX8Rgg56Gu4WoGkGGKP8afoJ7/FC3fayUmcanzzgzT6cmI+mt8mDLqlCgcA Z3kJLdZJdCbI1ROk88VXN137fDZ8pXz7ZkWyoEtvxjZAKstM0wKnC8DuzbHp3Wt+ fwWUv30vMZtPv6LZ8EDfwAFa3uWyOspWfXMEGuVcr84dA1nN9TE816FZAPSsXAs+ pT8XeT8qvet/CA4g4qggGSOqYN5oMAk/KOdTBiYME9yXOZ1GfNEvqJHs4a1mv3w3 ONI01F80v8BcYYyePScZgJtc+TBdy3/ckFbDpq5R3bwsh4QEOYMO9sXR3Ej3AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUaLOf0Jn5uTdf0ceqNpHROkBCkaUwHwYDVR0j BBgwFoAUZ+LbzpwAsYmEysLturQsWPQ5mw8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmI4MDY5NzgtNTU3MS00ZGM5LWE4NzItOTIzOTdjNGM4 ODgwLzAvNjdFMkRCQ0U5QzAwQjE4OTg0Q0FDMkVEQkFCNDJDNThGNDM5OUIwRi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mNTMyYjllYi0yZmFlLTQ4 YTgtOTc5My0zM2VlYzA2N2NlMzkvMy82N0UyREJDRTlDMDBCMTg5ODRDQUMyRURC QUI0MkM1OEY0Mzk5QjBGLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2ZiODA2OTc4LTU1NzEtNGRjOS1hODcyLTkyMzk3YzRjODg4MC8wLzY3RTJEQkNF OUMwMEIxODk4NENBQzJFREJBQjQyQzU4RjQzOTlCMEYubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCCDVag ORgrZcqzNJu8Z1NYEotPc/sHBLLIx151ilVfv125L/7as1BDWWHzeViVKeiWyPEi +WAZ6mWZ9s/e8m7QsBkgu1gp1kq+WEuV8EGFmqcK3KghhyNcgtHUBjly1lh1mSQ6 hI7Vj2b6wRDt6I0wYErYfohzM3C2pcMJQBJw3a1pDsvjGqtgcoj+EccbmqJKBPLb T5lWVOAA1pXfhwjKsfH6EgOU/9CYgc/4ZywNsHGbkFfQvrtsdyOQwDQko5Ch5E15 /jfppMcDVTgDg+Oop2etsHQBdTMlmPBzWHa3XshzBbtQi+phPSvEhqllkXD/uvFT fER5AyqxEzCxipoI -----END CERTIFICATE-----Generated at Sun Jan 25 18:07:01 2026 by rpki-client