This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/4/D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9.mft File: D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9.mft (raw, json) Hash identifier: NR3u8+rK6lHYTVUKwwSKDXwEg8F+ggSKKiFD4c9CrOk= Subject key identifier: 8A:C4:EE:4F:22:FC:57:E0:3B:C6:AF:57:B8:C3:2A:28:7E:6B:3B:D4 Authority key identifier: D5:EE:63:D9:B1:D2:D5:C6:FA:DC:9A:16:9E:9B:4A:F6:44:CF:37:E9 Certificate issuer: /CN=D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9 Certificate serial: 30308868F9B78ACFFD01C4FAEF19428972914AFE Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/4/D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9.mft Manifest number: 02 Signing time: Sun 18 Jan 2026 06:38:06 +0000 Manifest this update: Sun 18 Jan 2026 06:33:06 +0000 Manifest next update: Mon 19 Jan 2026 06:40:06 +0000 Files and hashes: 1: D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9.crl (hash: qThXFPZLjajrMsHSzYDcbecG6a62OpTYPzJRC+fQS+8=) 2: 326130663a316363353a6630303a3a2f34302d3438203d3e20323130333532.roa (hash: Qe+s8/fAnIQEeutwNPKlMCYxj4th5oSw8TX5K8siNS0=) 3: 326130663a316363353a6666663a3a2f34382d3438203d3e20323131353735.roa (hash: 9OCqZ/d+1rU6CR9p3YDhWbf8ZADN9O93ycDA5zxlgcg=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/4/D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9.crl rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/4/D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9.mft rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9.cer rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.crl rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.mft rsync://rpki.ripe.net/repository/DEFAULT/QR4tQR1oe8tEScPfRb7twEEAfZQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:30:88:68:f9:b7:8a:cf:fd:01:c4:fa:ef:19:42:89:72:91:4a:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9 Validity Not Before: Jan 18 06:33:06 2026 GMT Not After : Jan 19 06:40:06 2026 GMT Subject: CN=8AC4EE4F22FC57E03BC6AF57B8C32A287E6B3BD4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:fa:16:bb:da:f9:9c:1f:44:cf:dc:51:39:30: e0:e8:d2:46:73:f2:ff:3c:e2:6d:04:c0:c7:96:79: 62:aa:12:a0:39:70:48:1f:db:4d:60:59:42:48:35: d6:e6:b9:ea:6f:e3:b8:ef:e1:4b:9b:df:5f:53:c0: dd:46:42:9a:78:33:81:eb:c4:28:32:3c:cb:d9:1b: 23:9e:40:03:b7:77:dc:1e:d9:03:63:43:ed:3c:04: 63:0c:3f:db:de:93:28:46:80:39:b3:d8:b3:df:b5: 14:da:e8:0d:51:8e:3c:73:ef:92:ff:a9:bd:18:b1: 61:fb:54:b6:9c:c5:82:7f:b1:a6:8f:b2:96:80:6e: 73:29:0d:f4:e7:42:18:0f:65:b4:b9:e8:13:20:30: 65:63:1e:fc:43:56:de:13:fe:26:bc:27:3e:f8:d4: 92:46:79:0f:05:16:4e:ca:57:17:2c:f5:09:7e:27: 09:11:8b:83:4c:46:04:71:38:75:96:80:0b:99:9d: 29:f8:71:5b:e0:3d:79:02:90:43:23:d0:22:e9:18: 83:bf:fc:75:e2:6b:2c:72:ce:ba:4d:d3:db:c0:4b: 89:ae:f9:98:b2:25:f2:f1:12:4b:0d:3d:9c:72:01: 1b:28:c2:48:75:b1:a5:74:3f:94:5a:03:9b:ec:a9: 9a:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:C4:EE:4F:22:FC:57:E0:3B:C6:AF:57:B8:C3:2A:28:7E:6B:3B:D4 X509v3 Authority Key Identifier: keyid:D5:EE:63:D9:B1:D2:D5:C6:FA:DC:9A:16:9E:9B:4A:F6:44:CF:37:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/4/D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/4/D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:47:3f:f3:fe:5d:61:f0:aa:5b:8d:85:08:37:a6:28:2b:89: 06:8e:a2:ad:ac:15:0f:66:a0:6c:83:05:32:62:41:d6:58:da: 8a:71:e6:f5:0b:59:fd:48:bc:a8:0a:83:78:71:f2:f3:2a:2d: 49:67:f6:48:d2:5e:41:87:c2:5d:ea:9f:28:ad:c2:91:f2:0e: f5:c5:4d:31:6a:61:d9:ff:bb:78:e3:50:c1:ce:7a:b1:d5:79: 9c:08:cd:b0:50:17:ae:53:44:67:53:ce:b8:36:2f:2c:d7:fd: e3:dc:0e:dd:8c:84:ad:0b:ae:c4:56:a8:a7:ca:8d:02:ea:f4: 74:40:39:6c:b1:7c:9f:40:f1:3e:f3:4b:9e:01:93:c0:f4:ee: de:21:52:b9:f9:56:14:f7:5d:23:62:96:c6:c2:11:f7:5c:63: fd:52:89:52:77:b5:11:d6:64:d4:b1:2f:fe:5d:7a:ce:63:d8: 72:c4:8a:7b:43:08:3f:98:cb:1b:62:80:c0:62:94:5f:b2:8f: d9:22:12:6b:eb:1a:f0:00:ce:e5:75:ba:02:3f:b8:45:38:70: be:15:bb:94:90:a9:0c:f3:fc:70:d6:27:50:e5:99:c8:21:9c: fe:ac:82:2e:05:00:92:0e:11:a1:92:a6:91:ab:bf:34:ea:38: 88:cd:c4:40 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUMDCIaPm3is/9AcT67xlCiXKRSv4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDVFRTYzRDlCMUQyRDVDNkZBREM5QTE2OUU5QjRBRjY0 NENGMzdFOTAeFw0yNjAxMTgwNjMzMDZaFw0yNjAxMTkwNjQwMDZaMDMxMTAvBgNV BAMTKDhBQzRFRTRGMjJGQzU3RTAzQkM2QUY1N0I4QzMyQTI4N0U2QjNCRDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCj+ha72vmcH0TP3FE5MODo0kZz 8v884m0EwMeWeWKqEqA5cEgf201gWUJINdbmuepv47jv4Uub319TwN1GQpp4M4Hr xCgyPMvZGyOeQAO3d9we2QNjQ+08BGMMP9vekyhGgDmz2LPftRTa6A1Rjjxz75L/ qb0YsWH7VLacxYJ/saaPspaAbnMpDfTnQhgPZbS56BMgMGVjHvxDVt4T/ia8Jz74 1JJGeQ8FFk7KVxcs9Ql+JwkRi4NMRgRxOHWWgAuZnSn4cVvgPXkCkEMj0CLpGIO/ /HXiayxyzrpN09vAS4mu+ZiyJfLxEksNPZxyARsowkh1saV0P5RaA5vsqZqlAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUisTuTyL8V+A7xq9XuMMqKH5rO9QwHwYDVR0j BBgwFoAU1e5j2bHS1cb63JoWnptK9kTPN+kwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTUxN2I1ZDAtMzMxNy00YjQ5LThlYzUtYmU5MGJjNzAw NjJmLzQvRDVFRTYzRDlCMUQyRDVDNkZBREM5QTE2OUU5QjRBRjY0NENGMzdFOS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84YWZiNWZlMi0zYzJhLTQ5 MzktOTVlOS0wMDc3YjgwYjRmMGUvMC9ENUVFNjNEOUIxRDJENUM2RkFEQzlBMTY5 RTlCNEFGNjQ0Q0YzN0U5LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzE1MTdiNWQwLTMzMTctNGI0OS04ZWM1LWJlOTBiYzcwMDYyZi80L0Q1RUU2M0Q5 QjFEMkQ1QzZGQURDOUExNjlFOUI0QUY2NDRDRjM3RTkubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAdRz/z /l1h8KpbjYUIN6YoK4kGjqKtrBUPZqBsgwUyYkHWWNqKceb1C1n9SLyoCoN4cfLz Ki1JZ/ZI0l5Bh8Jd6p8orcKR8g71xU0xamHZ/7t441DBznqx1XmcCM2wUBeuU0Rn U864Ni8s1/3j3A7djIStC67EVqinyo0C6vR0QDlssXyfQPE+80ueAZPA9O7eIVK5 +VYU910jYpbGwhH3XGP9UolSd7UR1mTUsS/+XXrOY9hyxIp7Qwg/mMsbYoDAYpRf so/ZIhJr6xrwAM7ldboCP7hFOHC+FbuUkKkM8/xw1idQ5ZnIIZz+rIIuBQCSDhGh kqaRq7806jiIzcRA -----END CERTIFICATE-----Generated at Sun Jan 18 14:12:52 2026 by rpki-client