This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/0/F4D1A7E9DFF0D90E760FB87D5605458BA870BF32.mft File: F4D1A7E9DFF0D90E760FB87D5605458BA870BF32.mft (raw, json) Hash identifier: 1WA11XBjfoLq+94yU+1Yp1NEkEiy/Y8KtDXvh0y7v0E= Subject key identifier: EE:A9:92:B1:5E:1F:FF:DB:D2:19:76:76:6D:16:D8:24:7D:09:87:31 Authority key identifier: F4:D1:A7:E9:DF:F0:D9:0E:76:0F:B8:7D:56:05:45:8B:A8:70:BF:32 Certificate issuer: /CN=F4D1A7E9DFF0D90E760FB87D5605458BA870BF32 Certificate serial: 6B1A168C89D50927196FB4326DC630BD5173D4AC Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F4D1A7E9DFF0D90E760FB87D5605458BA870BF32.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/0/F4D1A7E9DFF0D90E760FB87D5605458BA870BF32.mft Manifest number: 3D Signing time: Tue 20 Jan 2026 14:10:02 +0000 Manifest this update: Tue 20 Jan 2026 14:05:02 +0000 Manifest next update: Wed 21 Jan 2026 17:27:02 +0000 Files and hashes: 1: F4D1A7E9DFF0D90E760FB87D5605458BA870BF32.crl (hash: bLOMCdZpNkfHQVmPhyTwFq6QIkXuQOYU4Xnt10g6joI=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/0/F4D1A7E9DFF0D90E760FB87D5605458BA870BF32.crl rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/0/F4D1A7E9DFF0D90E760FB87D5605458BA870BF32.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F4D1A7E9DFF0D90E760FB87D5605458BA870BF32.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 15:30:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:1a:16:8c:89:d5:09:27:19:6f:b4:32:6d:c6:30:bd:51:73:d4:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F4D1A7E9DFF0D90E760FB87D5605458BA870BF32 Validity Not Before: Jan 20 14:05:02 2026 GMT Not After : Jan 21 17:27:02 2026 GMT Subject: CN=EEA992B15E1FFFDBD21976766D16D8247D098731 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:63:b5:bb:e1:cd:cb:73:5c:54:e2:29:eb:5f: 28:ff:29:c6:c1:c3:fc:3d:91:fa:f5:3b:c5:ff:74: c8:8c:8a:9b:31:6e:54:e8:f8:e9:cd:3c:64:18:50: 31:a4:48:9c:ec:67:7a:91:5f:33:87:9d:e6:ec:a1: d0:f1:7d:e8:a7:45:24:60:0a:c8:19:b0:6e:11:56: 28:3e:b7:8b:5a:e3:98:7e:51:02:f2:0c:13:48:59: 0d:c6:e5:cd:85:b1:40:aa:ab:fb:b0:8c:fe:41:54: 4b:06:cc:16:0d:d2:09:84:b4:40:0d:05:a2:cc:a1: 2d:42:15:40:d5:ab:d3:2f:a1:78:75:92:5d:60:bb: 4f:4e:c9:47:f1:b2:1e:64:65:75:20:83:06:8c:bb: d3:1d:f8:53:85:c4:93:5c:de:79:c5:ae:40:a0:fa: 92:36:d7:83:c9:47:1a:58:58:ee:df:a1:d2:d7:59: 0a:4c:b4:d5:f3:12:3e:41:e8:ed:eb:d8:51:5f:dc: d3:21:3e:c9:94:a0:ef:98:b1:a4:01:e6:1a:af:83: e1:2b:03:80:fd:b1:aa:47:95:12:fb:eb:b3:4c:a3: 67:08:1f:c8:82:8f:69:57:59:11:50:97:70:15:59: 15:71:9e:69:0c:18:f7:de:4b:a9:79:37:21:79:c1: 89:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:A9:92:B1:5E:1F:FF:DB:D2:19:76:76:6D:16:D8:24:7D:09:87:31 X509v3 Authority Key Identifier: keyid:F4:D1:A7:E9:DF:F0:D9:0E:76:0F:B8:7D:56:05:45:8B:A8:70:BF:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/0/F4D1A7E9DFF0D90E760FB87D5605458BA870BF32.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F4D1A7E9DFF0D90E760FB87D5605458BA870BF32.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/0/F4D1A7E9DFF0D90E760FB87D5605458BA870BF32.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:2d:5f:c4:c3:41:13:8d:7f:8b:4f:30:5c:5d:7f:7d:06:b2: e2:e9:22:ca:13:95:41:0f:68:fa:f0:91:c8:8f:4c:f4:0e:65: 1d:c3:61:d7:17:26:d2:aa:41:33:26:02:c4:34:4f:b5:2b:59: 97:22:74:46:cc:0f:69:7b:cc:a0:0f:17:7f:3e:b2:71:ad:03: cf:e7:97:0c:bb:0a:b3:39:cb:2d:1e:6f:17:e5:59:81:6d:46: 4f:c0:cf:09:9b:ac:ad:33:be:ca:14:4c:b2:06:fc:36:6b:b2: a2:2c:64:0a:72:51:c7:5d:d9:f5:8d:f4:7a:22:26:f2:4c:53: 79:60:0b:69:57:0f:ee:c5:fb:d2:37:27:3a:f4:31:1c:37:50: 0d:ff:2d:84:e9:7f:2c:33:4e:6b:22:66:87:40:63:7b:c1:ab: 31:87:84:04:35:d6:31:5a:08:18:7d:07:b3:0a:8d:86:d9:a3: 32:b5:cb:02:09:4e:85:3f:59:c3:94:38:5e:4f:1b:ea:db:50: 4e:a2:a5:34:06:1b:bb:71:8d:8d:18:d7:ba:fe:d1:82:9b:e6: 5f:b4:a1:c4:00:fe:a4:25:27:09:e7:41:27:4b:4c:0c:03:5f: 6b:63:96:90:58:cc:4e:e7:c7:9c:4c:9d:2a:9f:3b:ee:93:20: 85:75:f8:02 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUaxoWjInVCScZb7QybcYwvVFz1KwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjREMUE3RTlERkYwRDkwRTc2MEZCODdENTYwNTQ1OEJB ODcwQkYzMjAeFw0yNjAxMjAxNDA1MDJaFw0yNjAxMjExNzI3MDJaMDMxMTAvBgNV BAMTKEVFQTk5MkIxNUUxRkZGREJEMjE5NzY3NjZEMTZEODI0N0QwOTg3MzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMY7W74c3Lc1xU4inrXyj/KcbB w/w9kfr1O8X/dMiMipsxblTo+OnNPGQYUDGkSJzsZ3qRXzOHnebsodDxfeinRSRg CsgZsG4RVig+t4ta45h+UQLyDBNIWQ3G5c2FsUCqq/uwjP5BVEsGzBYN0gmEtEAN BaLMoS1CFUDVq9MvoXh1kl1gu09OyUfxsh5kZXUggwaMu9Md+FOFxJNc3nnFrkCg +pI214PJRxpYWO7fodLXWQpMtNXzEj5B6O3r2FFf3NMhPsmUoO+YsaQB5hqvg+Er A4D9sapHlRL767NMo2cIH8iCj2lXWRFQl3AVWRVxnmkMGPfeS6l5NyF5wYlXAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU7qmSsV4f/9vSGXZ2bRbYJH0JhzEwHwYDVR0j BBgwFoAU9NGn6d/w2Q52D7h9VgVFi6hwvzIwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDk3MThmMDgtYmIzOS00YTA5LWE0YzAtMWY0MDI0OGE2 ZDE1LzAvRjREMUE3RTlERkYwRDkwRTc2MEZCODdENTYwNTQ1OEJBODcwQkYzMi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9GNEQxQTdFOURGRjBEOTBFNzYwRkI4N0Q1 NjA1NDU4QkE4NzBCRjMyLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzA5NzE4ZjA4LWJiMzktNGEwOS1hNGMwLTFmNDAyNDhhNmQxNS8wL0Y0RDFBN0U5 REZGMEQ5MEU3NjBGQjg3RDU2MDU0NThCQTg3MEJGMzIubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAdLV/E w0ETjX+LTzBcXX99BrLi6SLKE5VBD2j68JHIj0z0DmUdw2HXFybSqkEzJgLENE+1 K1mXInRGzA9pe8ygDxd/PrJxrQPP55cMuwqzOcstHm8X5VmBbUZPwM8Jm6ytM77K FEyyBvw2a7KiLGQKclHHXdn1jfR6IibyTFN5YAtpVw/uxfvSNyc69DEcN1AN/y2E 6X8sM05rImaHQGN7wasxh4QENdYxWggYfQezCo2G2aMytcsCCU6FP1nDlDheTxvq 21BOoqU0Bhu7cY2NGNe6/tGCm+ZftKHEAP6kJScJ50EnS0wMA19rY5aQWMxO58ec TJ0qnzvukyCFdfgC -----END CERTIFICATE-----Generated at Tue Jan 20 23:49:50 2026 by rpki-client