This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/3/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.mft File: D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.mft (raw, json) Hash identifier: 9Joe6/i7vLytBiI5JKlMG6Mv/suGUDKmhsZS7R57Ia8= Subject key identifier: 59:EC:7E:E7:05:02:44:FC:A2:DF:17:BD:2D:97:FE:BA:25:78:83:19 Authority key identifier: D6:15:AB:CB:A5:01:55:64:AD:E9:B4:73:D6:4F:1E:34:A0:BA:8D:4A Certificate issuer: /CN=D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A Certificate serial: 63CD4A3981CA02DA6E2D7CCCF59EE9442C033671 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/3/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.mft Manifest number: 0195 Signing time: Mon 26 Jan 2026 13:05:17 +0000 Manifest this update: Mon 26 Jan 2026 13:00:17 +0000 Manifest next update: Tue 27 Jan 2026 15:07:17 +0000 Files and hashes: 1: 326131343a373538303a3930323a3a2f34382d3438203d3e20323033383433.roa (hash: BFT8GbG7CSJ9YmzS1PjnMDrg1nwAcfXEJPEfuo5FzQk=) 2: 326131343a373538303a3930313a3a2f34382d3438203d3e20323033383433.roa (hash: XxS9zprV7IX1JjrBQQ+JptkD2bW89WKl615fH9J1hzc=) 3: 326131343a373538303a3930333a3a2f34382d3438203d3e203331383938.roa (hash: ypgUGD6Euz3HGS0A9GoVgCiVtLF78aI6ZX/YlUyvGd8=) 4: D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.crl (hash: aICfBfWXwvfzMz4KbOtCU8wkXisUe/b0usKn+VsNYpU=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/3/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.crl rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/3/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:07:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:cd:4a:39:81:ca:02:da:6e:2d:7c:cc:f5:9e:e9:44:2c:03:36:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A Validity Not Before: Jan 26 13:00:17 2026 GMT Not After : Jan 27 15:07:17 2026 GMT Subject: CN=59EC7EE7050244FCA2DF17BD2D97FEBA25788319 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:7b:54:99:49:11:8e:64:2b:92:95:22:8f:d0: a9:86:b2:08:f5:77:16:a1:08:54:3d:33:a5:c8:0e: 5d:1c:1c:ee:64:a7:fc:71:d9:1f:1a:a2:b5:0a:47: f5:71:5b:44:0c:01:3b:ed:6d:8f:f7:f5:6c:17:21: 32:0c:3b:d5:d3:d7:7f:e7:1e:89:97:95:90:7f:24: 14:e4:88:30:3b:64:ae:ed:b6:74:dc:1b:68:30:19: 16:3b:89:08:ef:bb:18:80:5c:33:e1:a4:d5:c9:3d: 43:a9:3b:c4:a0:ce:4a:18:7f:ab:aa:42:08:28:c0: f9:c2:d7:4f:38:39:64:fa:f6:fa:09:4c:47:39:06: a4:df:9c:ea:25:3e:9e:fe:5a:a0:dc:05:3c:a5:4f: db:15:e1:14:41:71:95:77:07:35:b4:1b:ab:3f:b1: 92:17:81:d7:71:59:79:50:e3:8f:ef:09:b6:fc:c7: 4f:c2:bb:c9:14:3c:c3:66:98:17:45:eb:82:ec:1b: 4a:9c:a1:94:d6:06:18:a1:3a:38:34:84:ab:9c:62: 58:f7:db:eb:87:c5:af:be:fb:b8:87:7b:2d:8e:36: 34:e2:be:e7:70:cd:1e:8d:e3:a9:40:7b:33:21:12: a9:63:d1:8d:0f:1f:65:dc:35:9c:4d:6e:71:54:6d: eb:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:EC:7E:E7:05:02:44:FC:A2:DF:17:BD:2D:97:FE:BA:25:78:83:19 X509v3 Authority Key Identifier: keyid:D6:15:AB:CB:A5:01:55:64:AD:E9:B4:73:D6:4F:1E:34:A0:BA:8D:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/3/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/3/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d3:c6:f1:15:06:36:e8:be:88:a5:83:37:cb:ff:d3:31:e9:03: df:11:53:78:12:1c:da:d1:7a:d7:f7:6f:0f:28:39:bd:a1:8a: 62:a8:97:d8:61:63:ab:a7:3e:62:d5:e3:1c:43:26:fb:89:fc: 0f:ec:e7:a7:9d:45:ad:bb:da:cb:98:f7:07:66:39:ae:4b:13: 48:1d:6d:f2:be:83:13:7f:55:82:ad:a5:ea:05:ba:9f:8c:ac: 6f:08:c7:e2:1c:68:98:bf:82:a7:53:ad:45:0f:37:f2:6a:dd: 8e:10:4c:23:87:6a:22:38:6e:d9:7f:f6:9a:81:cc:31:2e:f1: 73:96:67:cd:2b:2d:cd:ba:7b:8e:6f:2a:69:7f:a1:4a:2a:2f: 7f:c1:12:f9:05:30:ee:2d:07:02:d6:73:58:ec:c4:1c:9a:b5: fb:b5:fd:2c:48:77:26:7c:cf:0c:93:2a:2a:a8:72:3f:14:d5: 79:5a:a3:89:2f:2e:8e:31:4b:ac:87:ea:b4:ea:f0:72:5a:e9: 38:03:13:f2:65:fd:cc:6a:f3:6f:31:1d:1a:fa:20:15:a0:48: 67:b7:bf:05:f1:bf:cb:5d:b6:50:91:7f:f6:86:4c:e2:cc:d6: 21:22:21:f7:77:0c:b3:db:9c:c7:b8:eb:64:5b:67:c4:45:bd: f4:9e:f8:9e -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUY81KOYHKAtpuLXzM9Z7pRCwDNnEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDYxNUFCQ0JBNTAxNTU2NEFERTlCNDczRDY0RjFFMzRB MEJBOEQ0QTAeFw0yNjAxMjYxMzAwMTdaFw0yNjAxMjcxNTA3MTdaMDMxMTAvBgNV BAMTKDU5RUM3RUU3MDUwMjQ0RkNBMkRGMTdCRDJEOTdGRUJBMjU3ODgzMTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7e1SZSRGOZCuSlSKP0KmGsgj1 dxahCFQ9M6XIDl0cHO5kp/xx2R8aorUKR/VxW0QMATvtbY/39WwXITIMO9XT13/n HomXlZB/JBTkiDA7ZK7ttnTcG2gwGRY7iQjvuxiAXDPhpNXJPUOpO8SgzkoYf6uq QggowPnC1084OWT69voJTEc5BqTfnOolPp7+WqDcBTylT9sV4RRBcZV3BzW0G6s/ sZIXgddxWXlQ44/vCbb8x0/Cu8kUPMNmmBdF64LsG0qcoZTWBhihOjg0hKucYlj3 2+uHxa+++7iHey2ONjTivudwzR6N46lAezMhEqlj0Y0PH2XcNZxNbnFUbetfAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUWex+5wUCRPyi3xe9LZf+uiV4gxkwHwYDVR0j BBgwFoAU1hWry6UBVWSt6bRz1k8eNKC6jUowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTNmNjg1NjEtMGE3NC00Y2NhLWJmOGYtMTJmYWFhZmM4 ZWI4LzMvRDYxNUFCQ0JBNTAxNTU2NEFERTlCNDczRDY0RjFFMzRBMEJBOEQ0QS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9ENjE1QUJDQkE1MDE1NTY0QURFOUI0NzNE NjRGMUUzNEEwQkE4RDRBLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzEzZjY4NTYxLTBhNzQtNGNjYS1iZjhmLTEyZmFhYWZjOGViOC8zL0Q2MTVBQkNC QTUwMTU1NjRBREU5QjQ3M0Q2NEYxRTM0QTBCQThENEEubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDTxvEV BjbovoilgzfL/9Mx6QPfEVN4Ehza0XrX928PKDm9oYpiqJfYYWOrpz5i1eMcQyb7 ifwP7OennUWtu9rLmPcHZjmuSxNIHW3yvoMTf1WCraXqBbqfjKxvCMfiHGiYv4Kn U61FDzfyat2OEEwjh2oiOG7Zf/aagcwxLvFzlmfNKy3NunuObyppf6FKKi9/wRL5 BTDuLQcC1nNY7MQcmrX7tf0sSHcmfM8MkyoqqHI/FNV5WqOJLy6OMUush+q06vBy Wuk4AxPyZf3MavNvMR0a+iAVoEhnt78F8b/LXbZQkX/2hkzizNYhIiH3dwyz25zH uOtkW2fERb30nvie -----END CERTIFICATE-----Generated at Tue Jan 27 08:32:27 2026 by rpki-client