This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/3/ECC2D1AF90663968C0983906E34503A5F531FBA9.mft File: ECC2D1AF90663968C0983906E34503A5F531FBA9.mft (raw, json) Hash identifier: bXXOvgwIZAJqXrsy2dgNlMOKoz1AGXYadi+CSA8fIEQ= Subject key identifier: B1:B0:D5:48:AD:6B:3E:5E:34:0D:89:E8:E0:49:49:19:07:2F:04:3C Authority key identifier: EC:C2:D1:AF:90:66:39:68:C0:98:39:06:E3:45:03:A5:F5:31:FB:A9 Certificate issuer: /CN=ECC2D1AF90663968C0983906E34503A5F531FBA9 Certificate serial: 68F92328272A168AB59690C8DEF03BA61C6F23F7 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/ECC2D1AF90663968C0983906E34503A5F531FBA9.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/3/ECC2D1AF90663968C0983906E34503A5F531FBA9.mft Manifest number: 13 Signing time: Thu 22 Jan 2026 13:12:53 +0000 Manifest this update: Thu 22 Jan 2026 13:07:53 +0000 Manifest next update: Fri 23 Jan 2026 13:27:53 +0000 Files and hashes: 1: ECC2D1AF90663968C0983906E34503A5F531FBA9.crl (hash: w6JtoXGKxbHqc5YpneQFuKxwKZhFLmB2Xz+lJF9disY=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/3/ECC2D1AF90663968C0983906E34503A5F531FBA9.crl rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/3/ECC2D1AF90663968C0983906E34503A5F531FBA9.mft rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/ECC2D1AF90663968C0983906E34503A5F531FBA9.cer rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.crl rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B149F23A3E99C4760297DD7104B400C835D86D19.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 23 Jan 2026 03:08:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:f9:23:28:27:2a:16:8a:b5:96:90:c8:de:f0:3b:a6:1c:6f:23:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ECC2D1AF90663968C0983906E34503A5F531FBA9 Validity Not Before: Jan 22 13:07:53 2026 GMT Not After : Jan 23 13:27:53 2026 GMT Subject: CN=B1B0D548AD6B3E5E340D89E8E0494919072F043C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:71:a7:8b:17:7f:fd:9c:ca:10:b7:cc:c3:c7: f2:00:50:83:82:54:27:fc:aa:d8:b8:35:d4:4b:7a: cf:dc:e6:69:a8:67:90:2c:b3:0e:94:fe:4f:b0:1f: b6:c1:92:1c:b5:39:1b:71:69:93:5e:b9:63:b3:d6: 5e:d1:66:aa:20:8b:d0:aa:33:bb:ce:9e:bb:3f:dc: 13:4e:9a:00:44:d3:76:d5:3f:88:08:0e:e2:29:0a: d5:e0:be:f0:66:bb:d7:db:1e:5a:46:dd:9a:d6:6d: 2b:e6:37:26:8d:e3:fd:bb:e0:38:a5:81:5d:6e:ee: a7:0a:12:d6:9c:38:d0:d0:70:17:25:0d:e0:26:a5: 1b:36:46:7b:1a:56:14:7c:f5:c4:d6:45:9d:ab:15: e5:3a:77:b1:6b:61:b5:9a:31:1e:08:99:46:b1:67: a2:c8:be:78:97:f0:c3:26:67:59:0f:4e:47:63:04: 78:ed:7d:c7:a2:b7:56:21:06:7e:2d:8d:a3:a0:40: 70:31:04:3f:58:99:ba:aa:54:11:c0:ab:28:58:62: 7a:a8:da:4e:06:7d:51:e4:04:b2:a1:02:f8:da:26: aa:91:a4:77:47:78:32:b0:ce:55:f0:55:81:32:bd: f7:28:e8:65:2c:67:a1:93:73:f5:28:06:4d:53:45: 8b:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:B0:D5:48:AD:6B:3E:5E:34:0D:89:E8:E0:49:49:19:07:2F:04:3C X509v3 Authority Key Identifier: keyid:EC:C2:D1:AF:90:66:39:68:C0:98:39:06:E3:45:03:A5:F5:31:FB:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/3/ECC2D1AF90663968C0983906E34503A5F531FBA9.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/ECC2D1AF90663968C0983906E34503A5F531FBA9.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/3/ECC2D1AF90663968C0983906E34503A5F531FBA9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:11:e5:63:68:71:60:40:4d:82:99:8d:18:3b:05:c9:1d:ce: cb:a2:f6:f9:19:71:13:d2:51:f7:06:23:a3:a8:2d:ba:60:8f: 37:06:4b:8a:fa:e2:fe:c1:6a:d9:28:e5:90:63:22:43:77:ab: 85:b8:b3:ba:af:88:b3:63:e4:a9:83:6f:79:08:1f:a6:51:5b: 4f:5a:04:60:44:f4:9c:96:25:39:b5:2d:f3:52:0b:19:0c:04: dd:66:da:55:13:46:4a:a2:cc:e7:99:26:d0:4f:1c:99:76:95: b9:55:d6:54:a4:ab:17:48:f0:a5:f3:d5:2a:36:18:6f:03:50: 15:8f:e1:bd:1f:f1:38:b2:4e:67:e1:f2:3e:00:f7:6a:60:38: 40:2a:13:91:9f:fe:f4:71:28:ad:f5:33:be:f6:78:c1:50:60: c3:56:4c:27:0f:ca:f3:42:7d:f7:8f:6a:b8:c9:26:c8:61:c3: 6d:10:ef:f1:a7:68:bf:de:cd:c1:c3:ca:0b:cd:d3:0e:d4:04: 50:95:09:ea:05:be:ed:ff:23:e4:87:1a:2c:c0:ec:74:0c:70: a8:95:0c:9b:85:fc:16:94:5b:a5:d3:0e:22:3b:47:81:5f:ca: 27:7c:01:dc:35:9e:b1:d1:b0:90:90:c5:66:52:32:4c:33:f0: 69:4f:d6:45 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUaPkjKCcqFoq1lpDI3vA7phxvI/cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUNDMkQxQUY5MDY2Mzk2OEMwOTgzOTA2RTM0NTAzQTVG NTMxRkJBOTAeFw0yNjAxMjIxMzA3NTNaFw0yNjAxMjMxMzI3NTNaMDMxMTAvBgNV BAMTKEIxQjBENTQ4QUQ2QjNFNUUzNDBEODlFOEUwNDk0OTE5MDcyRjA0M0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFcaeLF3/9nMoQt8zDx/IAUIOC VCf8qti4NdRLes/c5mmoZ5Assw6U/k+wH7bBkhy1ORtxaZNeuWOz1l7RZqogi9Cq M7vOnrs/3BNOmgBE03bVP4gIDuIpCtXgvvBmu9fbHlpG3ZrWbSvmNyaN4/274Dil gV1u7qcKEtacONDQcBclDeAmpRs2RnsaVhR89cTWRZ2rFeU6d7FrYbWaMR4ImUax Z6LIvniX8MMmZ1kPTkdjBHjtfceit1YhBn4tjaOgQHAxBD9YmbqqVBHAqyhYYnqo 2k4GfVHkBLKhAvjaJqqRpHdHeDKwzlXwVYEyvfco6GUsZ6GTc/UoBk1TRYs5AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUsbDVSK1rPl40DYno4ElJGQcvBDwwHwYDVR0j BBgwFoAU7MLRr5BmOWjAmDkG40UDpfUx+6kwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTUxN2I1ZDAtMzMxNy00YjQ5LThlYzUtYmU5MGJjNzAw NjJmLzMvRUNDMkQxQUY5MDY2Mzk2OEMwOTgzOTA2RTM0NTAzQTVGNTMxRkJBOS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ODFmOTc4Mi04OThlLTRi ODMtOTVlNi00ZmY0YWI3NWM5ZGMvMi9FQ0MyRDFBRjkwNjYzOTY4QzA5ODM5MDZF MzQ1MDNBNUY1MzFGQkE5LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzE1MTdiNWQwLTMzMTctNGI0OS04ZWM1LWJlOTBiYzcwMDYyZi8zL0VDQzJEMUFG OTA2NjM5NjhDMDk4MzkwNkUzNDUwM0E1RjUzMUZCQTkubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCREeVj aHFgQE2CmY0YOwXJHc7Lovb5GXET0lH3BiOjqC26YI83BkuK+uL+wWrZKOWQYyJD d6uFuLO6r4izY+Spg295CB+mUVtPWgRgRPScliU5tS3zUgsZDATdZtpVE0ZKoszn mSbQTxyZdpW5VdZUpKsXSPCl89UqNhhvA1AVj+G9H/E4sk5n4fI+APdqYDhAKhOR n/70cSit9TO+9njBUGDDVkwnD8rzQn33j2q4ySbIYcNtEO/xp2i/3s3Bw8oLzdMO 1ARQlQnqBb7t/yPkhxoswOx0DHColQybhfwWlFul0w4iO0eBX8onfAHcNZ6x0bCQ kMVmUjJMM/BpT9ZF -----END CERTIFICATE-----Generated at Thu Jan 22 19:10:12 2026 by rpki-client