This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/1/140CF895225100CF571959173341D92070FF6E7C.mft File: 140CF895225100CF571959173341D92070FF6E7C.mft (raw, json) Hash identifier: ZnAP9FvsexqZy5xxL+UXzvxyHwYolX9g2McEoBWwCSU= Subject key identifier: 83:D4:A5:C3:4D:8D:D3:57:08:B9:0D:67:D1:33:AA:4A:D7:AE:F3:33 Authority key identifier: 14:0C:F8:95:22:51:00:CF:57:19:59:17:33:41:D9:20:70:FF:6E:7C Certificate issuer: /CN=140CF895225100CF571959173341D92070FF6E7C Certificate serial: 7928A2209D15F76E8001A6F94D82480AF8AA067B Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/140CF895225100CF571959173341D92070FF6E7C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/1/140CF895225100CF571959173341D92070FF6E7C.mft Manifest number: 25 Signing time: Tue 20 Jan 2026 09:37:53 +0000 Manifest this update: Tue 20 Jan 2026 09:32:53 +0000 Manifest next update: Wed 21 Jan 2026 11:14:53 +0000 Files and hashes: 1: 326131343a373538363a363230303a3a2f34302d3438203d3e20323130333532.roa (hash: VyqY9yrEjpVeGa7fC0EnkjbydVqfbidJLnALhbzwu3k=) 2: 140CF895225100CF571959173341D92070FF6E7C.crl (hash: 0CCUwsEkQVenpY/2Kne9pMKO2RN4w2BufrdGykW4KhY=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/1/140CF895225100CF571959173341D92070FF6E7C.crl rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/1/140CF895225100CF571959173341D92070FF6E7C.mft rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/140CF895225100CF571959173341D92070FF6E7C.cer rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.crl rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/20914720382A1F52B950212C138E5E1E81BA69B7.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 11:14:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:28:a2:20:9d:15:f7:6e:80:01:a6:f9:4d:82:48:0a:f8:aa:06:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=140CF895225100CF571959173341D92070FF6E7C Validity Not Before: Jan 20 09:32:53 2026 GMT Not After : Jan 21 11:14:53 2026 GMT Subject: CN=83D4A5C34D8DD35708B90D67D133AA4AD7AEF333 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:76:71:36:b3:d2:bd:37:5b:58:74:ca:ed:09: 5f:be:3f:44:08:f5:89:5a:6c:87:3d:43:2b:e5:00: 11:3b:c4:d2:a3:67:84:fd:a6:2c:7f:e3:b4:e7:68: 77:5b:60:18:75:1d:fe:f2:62:2b:3c:c8:3b:a5:e5: 2f:cb:46:27:bb:0a:74:b1:07:dc:f4:5b:4e:82:4a: 90:09:40:66:51:ec:33:a9:d8:5c:e1:ec:95:df:8f: f6:69:0c:f1:c2:73:80:b7:c3:c6:42:23:9b:1e:e4: ca:7e:19:4d:eb:f0:54:c6:ee:f9:de:b6:79:14:ae: 70:be:81:f1:74:a8:f6:0e:18:a5:98:e0:a8:33:0b: dd:17:85:1e:0a:b6:34:ab:9d:d0:ea:16:12:f9:63: 4e:d7:c9:48:bf:8e:9a:01:58:df:8f:8d:fb:73:0b: 1f:c5:21:87:4d:4c:7e:86:12:f0:04:85:29:6f:a6: 07:93:12:95:0d:f2:53:d6:ba:31:89:d8:7e:6a:55: d4:14:97:2b:f3:eb:42:fb:59:1b:8f:96:6d:96:e1: 5e:ef:98:16:6f:bc:dc:fe:14:1a:da:8e:98:c6:14: 97:a0:a0:88:27:35:75:d2:6c:dd:fc:43:45:23:97: ce:df:f6:8d:4f:11:64:4b:fd:d7:ca:bb:e1:38:b0: bb:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:D4:A5:C3:4D:8D:D3:57:08:B9:0D:67:D1:33:AA:4A:D7:AE:F3:33 X509v3 Authority Key Identifier: keyid:14:0C:F8:95:22:51:00:CF:57:19:59:17:33:41:D9:20:70:FF:6E:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/1/140CF895225100CF571959173341D92070FF6E7C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/140CF895225100CF571959173341D92070FF6E7C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/1/140CF895225100CF571959173341D92070FF6E7C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:f2:8b:b0:1a:a5:d0:72:25:be:86:18:2b:f9:2e:6e:b6:40: 72:dd:fa:28:57:7e:08:36:3d:cc:4b:d7:de:a1:0f:ce:9d:28: 80:98:b6:a1:06:4a:46:63:4b:ab:f5:04:ac:1a:d6:94:2f:87: 22:4a:89:6f:73:ed:41:e6:3d:f5:ec:96:01:91:b7:26:4c:cc: 0c:b8:11:35:3b:64:03:6e:52:87:c8:b4:88:c6:ff:c9:fc:88: 08:fe:7c:4f:f2:6c:52:e2:83:ac:4f:7c:3b:21:6f:03:69:43: b5:d4:c7:16:2b:3c:55:37:66:fe:21:a3:12:cd:f8:01:90:27: b6:cf:51:a7:9e:64:16:74:07:9b:c4:38:97:60:2f:db:a5:68: ab:b2:62:b5:05:3c:df:ab:a7:5b:ba:f7:32:7e:c1:58:54:43: 26:ef:43:15:5f:13:a6:12:c9:a1:db:87:2f:c0:83:bd:65:2c: e9:a2:16:a2:b9:e3:53:e1:71:aa:db:b8:13:53:7e:d3:01:fc: 00:eb:76:1f:c7:9e:8c:8c:89:ff:98:2c:d1:7a:12:e0:bf:28: 7f:76:1c:bf:f4:ff:72:b5:4a:10:a0:da:53:9f:8f:0d:d0:ba: 96:48:9b:f2:cd:ac:ca:d0:e8:33:fe:8a:c2:a1:7a:56:17:fa: bd:6b:52:28 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUeSiiIJ0V926AAab5TYJICviqBnswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTQwQ0Y4OTUyMjUxMDBDRjU3MTk1OTE3MzM0MUQ5MjA3 MEZGNkU3QzAeFw0yNjAxMjAwOTMyNTNaFw0yNjAxMjExMTE0NTNaMDMxMTAvBgNV BAMTKDgzRDRBNUMzNEQ4REQzNTcwOEI5MEQ2N0QxMzNBQTRBRDdBRUYzMzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfdnE2s9K9N1tYdMrtCV++P0QI 9YlabIc9QyvlABE7xNKjZ4T9pix/47TnaHdbYBh1Hf7yYis8yDul5S/LRie7CnSx B9z0W06CSpAJQGZR7DOp2Fzh7JXfj/ZpDPHCc4C3w8ZCI5se5Mp+GU3r8FTG7vne tnkUrnC+gfF0qPYOGKWY4KgzC90XhR4KtjSrndDqFhL5Y07XyUi/jpoBWN+Pjftz Cx/FIYdNTH6GEvAEhSlvpgeTEpUN8lPWujGJ2H5qVdQUlyvz60L7WRuPlm2W4V7v mBZvvNz+FBrajpjGFJegoIgnNXXSbN38Q0Ujl87f9o1PEWRL/dfKu+E4sLujAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUg9Slw02N01cIuQ1n0TOqSteu8zMwHwYDVR0j BBgwFoAUFAz4lSJRAM9XGVkXM0HZIHD/bnwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTUxN2I1ZDAtMzMxNy00YjQ5LThlYzUtYmU5MGJjNzAw NjJmLzEvMTQwQ0Y4OTUyMjUxMDBDRjU3MTk1OTE3MzM0MUQ5MjA3MEZGNkU3Qy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mNTMyYjllYi0yZmFlLTQ4 YTgtOTc5My0zM2VlYzA2N2NlMzkvMy8xNDBDRjg5NTIyNTEwMENGNTcxOTU5MTcz MzQxRDkyMDcwRkY2RTdDLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzE1MTdiNWQwLTMzMTctNGI0OS04ZWM1LWJlOTBiYzcwMDYyZi8xLzE0MENGODk1 MjI1MTAwQ0Y1NzE5NTkxNzMzNDFEOTIwNzBGRjZFN0MubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBm8ouw GqXQciW+hhgr+S5utkBy3fooV34INj3MS9feoQ/OnSiAmLahBkpGY0ur9QSsGtaU L4ciSolvc+1B5j317JYBkbcmTMwMuBE1O2QDblKHyLSIxv/J/IgI/nxP8mxS4oOs T3w7IW8DaUO11McWKzxVN2b+IaMSzfgBkCe2z1GnnmQWdAebxDiXYC/bpWirsmK1 BTzfq6dbuvcyfsFYVEMm70MVXxOmEsmh24cvwIO9ZSzpohaiueNT4XGq27gTU37T AfwA63Yfx56MjIn/mCzRehLgvyh/dhy/9P9ytUoQoNpTn48N0LqWSJvyzazK0Ogz /orCoXpWF/q9a1Io -----END CERTIFICATE-----Generated at Wed Jan 21 02:48:43 2026 by rpki-client