This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/1/A4A082EAE8EF48C7B407C40E742479EADD862089.mft File: A4A082EAE8EF48C7B407C40E742479EADD862089.mft (raw, json) Hash identifier: bWDalzDiEdtys707mGrnIA9tmPiuVhRWOnrPTB8sv+g= Subject key identifier: D4:1F:83:06:3A:00:A9:EF:59:F1:40:37:B0:F6:EB:D6:C9:48:57:87 Authority key identifier: A4:A0:82:EA:E8:EF:48:C7:B4:07:C4:0E:74:24:79:EA:DD:86:20:89 Certificate issuer: /CN=A4A082EAE8EF48C7B407C40E742479EADD862089 Certificate serial: 1A0627E01D9DC61E0DA3A293CD18FF7ED9120FB2 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/A4A082EAE8EF48C7B407C40E742479EADD862089.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/1/A4A082EAE8EF48C7B407C40E742479EADD862089.mft Manifest number: 01DE Signing time: Mon 26 Jan 2026 04:36:39 +0000 Manifest this update: Mon 26 Jan 2026 04:31:39 +0000 Manifest next update: Tue 27 Jan 2026 08:17:39 +0000 Files and hashes: 1: A4A082EAE8EF48C7B407C40E742479EADD862089.crl (hash: HImOs6dqulnALcBM5a28LPy4U87HlN5Nn/akz2ITxKQ=) 2: 326130663a383563313a3339303a3a2f34382d3438203d3e20323135343730.roa (hash: mky/ldC1XpVEwoLHqIyOpw4wZEQNfx0y97P4Ne2BiJs=) 3: 326130663a383563313a6234643a3a2f34382d3438203d3e20323133343238.roa (hash: MorJ8/zqWP+ENMZ78Dfg8lahRlU/VfcwHwmQyMuE7hc=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/1/A4A082EAE8EF48C7B407C40E742479EADD862089.crl rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/1/A4A082EAE8EF48C7B407C40E742479EADD862089.mft rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/A4A082EAE8EF48C7B407C40E742479EADD862089.cer rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 08:17:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:06:27:e0:1d:9d:c6:1e:0d:a3:a2:93:cd:18:ff:7e:d9:12:0f:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A4A082EAE8EF48C7B407C40E742479EADD862089 Validity Not Before: Jan 26 04:31:39 2026 GMT Not After : Jan 27 08:17:39 2026 GMT Subject: CN=D41F83063A00A9EF59F14037B0F6EBD6C9485787 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:f2:cf:51:df:b8:9d:f3:1b:7f:53:22:17:4e: 96:6c:80:09:a4:48:d6:52:9e:fc:4d:e9:2a:1e:0d: 2a:19:c7:15:b6:4f:2b:c5:72:2d:26:f4:0f:d1:a1: 4f:97:9c:61:60:7c:d7:9c:85:15:4a:bf:c7:e3:74: e4:f8:10:53:07:ad:1e:5d:40:b3:85:86:96:ce:75: b9:15:3c:d3:c7:04:cb:8d:e0:81:4e:c3:3b:3e:94: 09:18:dd:22:77:0f:61:18:6b:ca:00:35:92:33:a0: c6:a8:ba:5a:cb:4a:4b:b1:0d:0f:16:03:61:c8:47: 13:15:89:2c:94:c4:dc:69:63:6d:19:83:e0:98:f3: ff:80:15:6c:f4:2e:c9:16:76:44:c9:9b:34:c1:f2: c7:cd:0c:40:71:35:ca:d1:63:ec:ee:ba:9c:17:02: 23:a9:48:97:7a:6f:49:ac:74:70:a0:08:3f:74:2c: 89:be:f1:b5:f7:39:3f:fd:12:c9:4c:5c:9f:99:e1: 91:b5:0b:2f:2c:37:d1:52:a5:e2:d6:1f:3d:2d:77: 07:fd:89:49:43:9f:68:96:1b:75:93:e0:ef:b1:a4: 7c:d0:12:4f:80:45:70:97:24:70:3f:dc:df:37:6b: 84:d3:c8:fd:7b:38:be:b1:ef:0d:59:ce:22:d4:6c: d6:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:1F:83:06:3A:00:A9:EF:59:F1:40:37:B0:F6:EB:D6:C9:48:57:87 X509v3 Authority Key Identifier: keyid:A4:A0:82:EA:E8:EF:48:C7:B4:07:C4:0E:74:24:79:EA:DD:86:20:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/1/A4A082EAE8EF48C7B407C40E742479EADD862089.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/A4A082EAE8EF48C7B407C40E742479EADD862089.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/1/A4A082EAE8EF48C7B407C40E742479EADD862089.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:c6:45:90:55:9e:00:d9:99:5c:53:55:b6:af:d8:22:ac:6f: b6:15:43:d6:67:a7:5b:73:f9:e1:85:a7:fe:ff:61:97:9f:9a: 1f:ef:81:a4:38:74:f2:bd:3f:c1:8f:61:a3:f7:55:4a:98:cd: 16:4c:75:21:f7:88:2a:c5:0e:1c:50:cf:2e:15:9d:8f:05:50: 9c:dc:e1:2e:cd:e1:6b:d2:02:ab:f2:ef:e9:f4:99:4c:6a:80: 29:0b:a4:8b:66:31:2e:b6:bf:b1:89:b6:e9:19:ac:5c:7c:fa: 6f:54:fc:b7:00:7e:0b:70:e2:80:7f:56:3b:78:7f:9d:10:ec: 1c:0f:6a:fd:6e:b8:61:c5:4b:fe:7b:63:53:40:0d:e3:ef:35: c4:68:4d:2d:d1:18:a4:bb:9b:4b:1d:79:88:33:e2:ec:35:37: ad:4e:41:a7:46:f3:f0:53:b4:ae:62:b4:55:38:ed:c1:bf:44: 39:99:40:8e:e2:1f:6e:7c:7e:03:91:a3:6c:f9:8b:f2:c8:55: 18:9a:b1:90:2d:26:3a:7e:ff:76:cc:be:91:84:a8:01:e0:af: 06:b8:25:a9:b9:c5:7e:a1:0e:c6:64:87:cf:29:3c:da:9c:78: 6e:9e:db:ac:e3:47:e7:50:4a:e0:69:01:3f:4e:f6:f0:75:1c: 41:67:80:8a -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUGgYn4B2dxh4No6KTzRj/ftkSD7IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTRBMDgyRUFFOEVGNDhDN0I0MDdDNDBFNzQyNDc5RUFE RDg2MjA4OTAeFw0yNjAxMjYwNDMxMzlaFw0yNjAxMjcwODE3MzlaMDMxMTAvBgNV BAMTKEQ0MUY4MzA2M0EwMEE5RUY1OUYxNDAzN0IwRjZFQkQ2Qzk0ODU3ODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD8s9R37id8xt/UyIXTpZsgAmk SNZSnvxN6SoeDSoZxxW2TyvFci0m9A/RoU+XnGFgfNechRVKv8fjdOT4EFMHrR5d QLOFhpbOdbkVPNPHBMuN4IFOwzs+lAkY3SJ3D2EYa8oANZIzoMaoulrLSkuxDQ8W A2HIRxMViSyUxNxpY20Zg+CY8/+AFWz0LskWdkTJmzTB8sfNDEBxNcrRY+zuupwX AiOpSJd6b0msdHCgCD90LIm+8bX3OT/9EslMXJ+Z4ZG1Cy8sN9FSpeLWHz0tdwf9 iUlDn2iWG3WT4O+xpHzQEk+ARXCXJHA/3N83a4TTyP17OL6x7w1ZziLUbNZrAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU1B+DBjoAqe9Z8UA3sPbr1slIV4cwHwYDVR0j BBgwFoAUpKCC6ujvSMe0B8QOdCR56t2GIIkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTlhYTlkYTctZjFlNC00ZDk4LWJmOTUtOWZkZmNmNDQ4 Zjc3LzEvQTRBMDgyRUFFOEVGNDhDN0I0MDdDNDBFNzQyNDc5RUFERDg2MjA4OS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84NGQ1MTgxMC0xOTg3LTQ3 MDEtOGYxZi04NDI1MTExOTY0ZjQvMC9BNEEwODJFQUU4RUY0OEM3QjQwN0M0MEU3 NDI0NzlFQUREODYyMDg5LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzE5YWE5ZGE3LWYxZTQtNGQ5OC1iZjk1LTlmZGZjZjQ0OGY3Ny8xL0E0QTA4MkVB RThFRjQ4QzdCNDA3QzQwRTc0MjQ3OUVBREQ4NjIwODkubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQByxkWQ VZ4A2ZlcU1W2r9girG+2FUPWZ6dbc/nhhaf+/2GXn5of74GkOHTyvT/Bj2Gj91VK mM0WTHUh94gqxQ4cUM8uFZ2PBVCc3OEuzeFr0gKr8u/p9JlMaoApC6SLZjEutr+x ibbpGaxcfPpvVPy3AH4LcOKAf1Y7eH+dEOwcD2r9brhhxUv+e2NTQA3j7zXEaE0t 0Riku5tLHXmIM+LsNTetTkGnRvPwU7SuYrRVOO3Bv0Q5mUCO4h9ufH4DkaNs+Yvy yFUYmrGQLSY6fv92zL6RhKgB4K8GuCWpucV+oQ7GZIfPKTzanHhuntus40fnUErg aQE/TvbwdRxBZ4CK -----END CERTIFICATE-----Generated at Tue Jan 27 00:36:48 2026 by rpki-client