This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/13daa142-a245-47aa-a5dd-21202f6595a8/0/B7C75B0EE5281D7520B6724E8CC3CCF0A871CE8F.mft File: B7C75B0EE5281D7520B6724E8CC3CCF0A871CE8F.mft (raw, json) Hash identifier: FCkRTGKToD2MzyiBJRKjh+eidSyy/vEq11ObpoMOWk4= Subject key identifier: E9:54:76:20:CC:94:10:48:78:DD:DD:29:CC:3B:E2:92:36:6A:B7:C1 Authority key identifier: B7:C7:5B:0E:E5:28:1D:75:20:B6:72:4E:8C:C3:CC:F0:A8:71:CE:8F Certificate issuer: /CN=b7c75b0ee5281d7520b6724e8cc3ccf0a871ce8f Certificate serial: 6BBAAC277F3A1D509389AF29410D74CC9F62EBE9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t8dbDuUoHXUgtnJOjMPM8Khxzo8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/13daa142-a245-47aa-a5dd-21202f6595a8/0/B7C75B0EE5281D7520B6724E8CC3CCF0A871CE8F.mft Manifest number: 05 Signing time: Thu 08 Jan 2026 12:28:48 +0000 Manifest this update: Thu 08 Jan 2026 12:23:48 +0000 Manifest next update: Fri 09 Jan 2026 15:32:48 +0000 Files and hashes: 1: 38312e3139392e32362e302f32342d3234203d3e203632323430.roa (hash: a4QmPdfU2lZZxUtHw7kg4Y5Veo4u09TITUId9MZIWAo=) 2: 38312e3139392e33302e302f32342d3234203d3e203631333137.roa (hash: +/Y9IAaoRj6lloSKax9X5ltFHBv1WoOrcZ1Hrol4b74=) 3: 34352e3134302e3234372e302f32342d3234203d3e203239383032.roa (hash: 17d8EZwswl99vYfVGSPZn0UNeWHnAEV/6RqAI4Pc7X8=) 4: 38312e3139392e32342e302f32342d3234203d3e203630353036.roa (hash: V81BjlNQzsv1olpZAe5508YuSSx9IR1P12H/0KVXIgw=) 5: 38312e3139392e32392e302f32342d3234203d3e20333935333734.roa (hash: enyh8Pgkb8kCNqjK0iUrs5K7JVGsJfmEephM/1jo4no=) 6: 38312e3139392e32382e302f32342d3234203d3e2039333034.roa (hash: pA97BdM8AYYfQvgbqaA4wcFOZhq7+7h5RQ+DqjvYYXY=) 7: 38312e3139392e33312e302f32342d3234203d3e203631333137.roa (hash: MpGYXlIuAPT1KvI6BwV+qAOm4Q2yxx2/nHYo3lAwukI=) 8: B7C75B0EE5281D7520B6724E8CC3CCF0A871CE8F.crl (hash: sF7k7T8xYuXEW3Iy0KxtkFDz1LMuet+qINmJ0zeGG98=) 9: 34352e3134302e3234342e302f32342d3234203d3e20323131333733.roa (hash: VZE+m0hFRe+1+SKsPJ2iMqzOw/gI5S5chPRbn/oZfBs=) 10: 38312e3139392e32352e302f32342d3234203d3e203630353036.roa (hash: CSFX/8cooaaYbIuAL4Sf7HHp8K52J80b70vmIgNJGD4=) 11: 38312e3139392e32372e302f32342d3234203d3e20313337343039.roa (hash: u1OMxn9fmgWDHDojYdnaxRpsdwWdM9GH2itMefeBYj0=) 12: 34352e3134302e3234362e302f32342d3234203d3e20383334.roa (hash: 9IMsqbCD3Vl+fhh/JuymG+sCvsGmX3oEfcS1ykJH1BY=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/13daa142-a245-47aa-a5dd-21202f6595a8/0/B7C75B0EE5281D7520B6724E8CC3CCF0A871CE8F.crl rsync://rsync.paas.rpki.ripe.net/repository/13daa142-a245-47aa-a5dd-21202f6595a8/0/B7C75B0EE5281D7520B6724E8CC3CCF0A871CE8F.mft rsync://rpki.ripe.net/repository/DEFAULT/t8dbDuUoHXUgtnJOjMPM8Khxzo8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 15:32:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:ba:ac:27:7f:3a:1d:50:93:89:af:29:41:0d:74:cc:9f:62:eb:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b7c75b0ee5281d7520b6724e8cc3ccf0a871ce8f Validity Not Before: Jan 8 12:23:48 2026 GMT Not After : Jan 9 15:32:48 2026 GMT Subject: CN=E9547620CC94104878DDDD29CC3BE292366AB7C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:cb:e6:a7:09:89:10:c3:67:7e:46:c6:05:89: e4:a0:6a:d3:a6:46:01:d3:4c:88:9f:a7:c6:38:bf: 40:9c:ba:69:bd:c6:fc:db:ce:cb:7d:9b:f2:fa:ba: 0e:69:f1:9d:9e:2f:81:58:94:fe:cf:f9:c9:8b:4e: ac:ad:a4:5a:5d:c4:d1:ee:bb:6c:c7:54:d6:73:56: 01:b3:10:ad:34:54:05:10:33:9c:a1:17:76:9c:93: 0c:1f:b7:9b:29:d3:31:65:dd:1c:40:b1:b3:57:7a: 55:42:06:46:4e:4f:53:a7:04:77:8b:4f:c6:94:3b: 48:71:93:18:a2:e5:b9:07:95:bc:35:c5:8c:c2:ff: b1:71:22:a2:bf:33:1c:b7:02:11:16:06:30:0d:3a: 09:48:9c:56:be:07:cb:44:bb:95:eb:f4:4c:15:15: 65:2a:8d:c6:4d:9f:60:f2:e4:e7:73:34:81:90:da: 47:cd:66:20:38:71:84:08:72:53:f0:68:fb:cf:16: 07:ec:83:6f:cb:5e:42:5b:31:a1:5e:6e:64:47:65: 69:71:63:5c:2c:2e:79:ae:a1:6a:1d:6a:17:a4:35: 37:c2:de:6a:0a:8a:da:6b:17:1a:ed:b6:b1:95:ac: eb:8d:4d:3c:6f:75:3b:b4:9e:e7:19:ce:73:46:65: e8:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:54:76:20:CC:94:10:48:78:DD:DD:29:CC:3B:E2:92:36:6A:B7:C1 X509v3 Authority Key Identifier: keyid:B7:C7:5B:0E:E5:28:1D:75:20:B6:72:4E:8C:C3:CC:F0:A8:71:CE:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/13daa142-a245-47aa-a5dd-21202f6595a8/0/B7C75B0EE5281D7520B6724E8CC3CCF0A871CE8F.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t8dbDuUoHXUgtnJOjMPM8Khxzo8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/13daa142-a245-47aa-a5dd-21202f6595a8/0/B7C75B0EE5281D7520B6724E8CC3CCF0A871CE8F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c5:73:82:c7:73:77:f6:33:31:cf:99:ca:90:60:12:47:05:30: e6:74:aa:b2:25:f9:34:5e:6b:71:31:a3:15:04:08:3e:5a:6c: 4e:8a:59:80:14:f1:3b:a4:1a:a1:f6:13:e4:03:5f:37:09:85: 26:f2:81:0e:71:d0:3c:98:34:39:d9:86:35:bb:0b:f9:f7:fd: 6b:96:70:ee:9b:58:93:b4:af:c0:82:44:82:ce:a5:83:6b:7e: bb:82:62:ac:2b:95:bd:6d:44:7b:ce:c1:72:1d:cc:9a:84:95: de:3a:5e:76:3b:64:51:1f:ff:78:8d:27:a5:0b:5c:e2:65:c9: d8:f8:f9:5f:f2:97:61:f7:03:b6:c3:35:ba:94:fb:9c:d4:7d: 02:92:c2:9a:7c:a1:bc:b1:4f:40:fe:a7:e5:90:0a:52:2c:56: 43:57:7e:13:94:66:8f:ff:cb:e9:18:53:55:39:47:d8:a1:2b: a5:a3:d5:c9:5a:ec:3f:dd:1d:b0:4a:51:4b:93:2b:66:01:31: 5a:b2:17:b4:50:e8:2a:83:9f:2e:b2:ea:da:cf:07:26:ef:97: 19:47:c9:88:1a:32:ba:d9:3b:20:72:7d:3c:0b:3e:c7:11:39: dd:9d:c0:d4:68:0d:4c:aa:7c:a5:3b:4b:68:c6:48:28:23:38: 16:db:eb:b6 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUa7qsJ386HVCTia8pQQ10zJ9i6+kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYjdjNzViMGVlNTI4MWQ3NTIwYjY3MjRlOGNjM2NjZjBh ODcxY2U4ZjAeFw0yNjAxMDgxMjIzNDhaFw0yNjAxMDkxNTMyNDhaMDMxMTAvBgNV BAMTKEU5NTQ3NjIwQ0M5NDEwNDg3OEREREQyOUNDM0JFMjkyMzY2QUI3QzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCJy+anCYkQw2d+RsYFieSgatOm RgHTTIifp8Y4v0Ccumm9xvzbzst9m/L6ug5p8Z2eL4FYlP7P+cmLTqytpFpdxNHu u2zHVNZzVgGzEK00VAUQM5yhF3ackwwft5sp0zFl3RxAsbNXelVCBkZOT1OnBHeL T8aUO0hxkxii5bkHlbw1xYzC/7FxIqK/Mxy3AhEWBjANOglInFa+B8tEu5Xr9EwV FWUqjcZNn2Dy5OdzNIGQ2kfNZiA4cYQIclPwaPvPFgfsg2/LXkJbMaFebmRHZWlx Y1wsLnmuoWodahekNTfC3moKitprFxrttrGVrOuNTTxvdTu0nucZznNGZei9AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU6VR2IMyUEEh43d0pzDvikjZqt8EwHwYDVR0j BBgwFoAUt8dbDuUoHXUgtnJOjMPM8Khxzo8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTNkYWExNDItYTI0NS00N2FhLWE1ZGQtMjEyMDJmNjU5 NWE4LzAvQjdDNzVCMEVFNTI4MUQ3NTIwQjY3MjRFOENDM0NDRjBBODcxQ0U4Ri5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3Q4ZGJEdVVvSFhVZ3RuSk9qTVBNOEto eHpvOC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xM2RhYTE0Mi1h MjQ1LTQ3YWEtYTVkZC0yMTIwMmY2NTk1YTgvMC9CN0M3NUIwRUU1MjgxRDc1MjBC NjcyNEU4Q0MzQ0NGMEE4NzFDRThGLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxXOCx3N39jMxz5nKkGAS RwUw5nSqsiX5NF5rcTGjFQQIPlpsTopZgBTxO6QaofYT5ANfNwmFJvKBDnHQPJg0 OdmGNbsL+ff9a5Zw7ptYk7SvwIJEgs6lg2t+u4JirCuVvW1Ee87Bch3MmoSV3jpe djtkUR//eI0npQtc4mXJ2Pj5X/KXYfcDtsM1upT7nNR9ApLCmnyhvLFPQP6n5ZAK UixWQ1d+E5Rmj//L6RhTVTlH2KErpaPVyVrsP90dsEpRS5MrZgExWrIXtFDoKoOf LrLq2s8HJu+XGUfJiBoyutk7IHJ9PAs+xxE53Z3A1GgNTKp8pTtLaMZIKCM4Ftvr tg== -----END CERTIFICATE-----Generated at Fri Jan 9 08:56:55 2026 by rpki-client