This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/8/6578E79662000496EB1540D8BD8FA65ED8D63A62.mft File: 6578E79662000496EB1540D8BD8FA65ED8D63A62.mft (raw, json) Hash identifier: f1sXLQT5orsNQHJBYlefIMxUbdklo+vUJhNvBjrr234= Subject key identifier: 97:B1:0B:00:6A:36:E2:4A:07:68:89:2D:85:FC:20:51:AF:13:B4:09 Authority key identifier: 65:78:E7:96:62:00:04:96:EB:15:40:D8:BD:8F:A6:5E:D8:D6:3A:62 Certificate issuer: /CN=6578E79662000496EB1540D8BD8FA65ED8D63A62 Certificate serial: 4EEF03CF6120504112D4855F82C7F4B810878AA1 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6578E79662000496EB1540D8BD8FA65ED8D63A62.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/8/6578E79662000496EB1540D8BD8FA65ED8D63A62.mft Manifest number: CA Signing time: Mon 26 Jan 2026 14:22:06 +0000 Manifest this update: Mon 26 Jan 2026 14:17:06 +0000 Manifest next update: Tue 27 Jan 2026 14:29:06 +0000 Files and hashes: 1: 6578E79662000496EB1540D8BD8FA65ED8D63A62.crl (hash: Rczjrw2mM5ca0x4ISWSntMDFmwl2eWkvQuE8gUmrt2Q=) 2: 326130363a613030353a6432643a3a2f34382d3438203d3e20313532333638.roa (hash: 52mHsWa4VgNp8igpY75YRE/bqiZx2ZdwnVE8gr1/unY=) 3: 38352e3135352e3232372e302f32342d3234203d3e203530313034.roa (hash: ocAxx23XjwXyOYOHcEuZaqgQEocGKpcgw1PpjzeOLXQ=) 4: 38352e3135352e3232372e302f32342d3234203d3e203332323030.roa (hash: u3B6KKBKIUk9SO5JxQD+EeR9cSC3pRMQPnPBIW/RPYA=) 5: 38352e3135352e3232372e302f32342d3234203d3e20313339323035.roa (hash: F3nL+PATD3gOzZdjINpCRdbNyER8HiHmFGbm/cRvxqY=) 6: 326130363a613030353a6432643a3a2f34382d3438203d3e203530313034.roa (hash: CAs4yn2E+Z/tR5i90G5tFQhJLWheBQDwrBHMrZXdGBo=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/8/6578E79662000496EB1540D8BD8FA65ED8D63A62.crl rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/8/6578E79662000496EB1540D8BD8FA65ED8D63A62.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6578E79662000496EB1540D8BD8FA65ED8D63A62.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 14:29:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:ef:03:cf:61:20:50:41:12:d4:85:5f:82:c7:f4:b8:10:87:8a:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6578E79662000496EB1540D8BD8FA65ED8D63A62 Validity Not Before: Jan 26 14:17:06 2026 GMT Not After : Jan 27 14:29:06 2026 GMT Subject: CN=97B10B006A36E24A0768892D85FC2051AF13B409 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:50:ea:ac:2d:2a:2c:e2:77:6e:bd:3c:a3:e3: bb:9a:9f:42:6d:2f:ca:a6:15:fe:74:39:6c:1d:7c: eb:e3:87:2e:1a:8f:7d:49:87:67:70:0f:36:99:a7: 49:20:a0:12:51:e9:27:63:89:ac:cb:c3:56:1b:8a: ce:cc:e9:53:bb:7a:60:de:42:2a:e0:5d:3f:55:11: ea:2d:0c:75:40:56:23:a4:b4:f8:39:7d:38:21:46: da:7e:15:25:39:53:ce:31:e2:76:b1:01:c6:41:20: 77:f3:3b:1f:66:05:3a:97:39:6a:12:58:8d:ea:c1: 65:3a:86:0c:ce:59:55:c8:53:a6:f4:c9:3c:0d:95: 13:69:c0:f2:b3:09:b2:77:46:2b:ef:e9:81:45:cd: 51:58:86:2f:f5:58:44:72:b9:22:8a:bd:07:f0:69: 13:1c:4e:62:d5:d8:b9:c4:38:93:55:da:78:73:31: b7:64:8d:57:28:c3:05:1b:90:b6:30:e2:98:5b:9d: b4:4c:c7:fe:37:f9:b3:3b:2d:4a:1a:9f:80:8d:04: 0e:eb:86:ce:fa:c0:9e:24:44:46:7f:13:9b:05:32: f2:6e:41:95:ca:11:fa:76:71:4f:49:4e:20:e8:26: d3:87:6b:38:88:9c:42:32:2e:15:a8:c4:db:64:56: 83:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:B1:0B:00:6A:36:E2:4A:07:68:89:2D:85:FC:20:51:AF:13:B4:09 X509v3 Authority Key Identifier: keyid:65:78:E7:96:62:00:04:96:EB:15:40:D8:BD:8F:A6:5E:D8:D6:3A:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/8/6578E79662000496EB1540D8BD8FA65ED8D63A62.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6578E79662000496EB1540D8BD8FA65ED8D63A62.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/8/6578E79662000496EB1540D8BD8FA65ED8D63A62.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:c9:f7:96:1f:20:b8:cc:26:17:3f:5d:c9:b3:66:e7:c9:9e: 22:ea:69:0e:59:0d:f4:93:97:a6:4c:f5:b4:4a:c2:97:0a:bb: 43:d3:93:d6:28:9a:cc:64:89:04:09:40:1a:37:a1:1a:3e:5d: 63:0d:25:a9:e2:5b:c4:61:e2:92:6b:de:c3:7a:0b:94:21:ae: d7:a4:9b:02:af:82:31:92:82:3c:fc:74:fa:fe:d4:b4:08:db: 5a:44:44:21:84:53:cd:bb:da:57:5c:43:49:7a:c6:29:8f:be: 42:69:21:ca:39:9a:e3:44:df:be:00:04:ac:0d:99:bd:41:d5: c3:f1:6b:ed:13:fb:f1:1f:6e:52:77:83:ed:55:88:ad:85:62: ad:43:71:01:f6:37:ea:94:b4:00:2b:39:03:c9:eb:1c:0f:41: 90:41:84:4a:23:79:68:cd:69:08:c8:f6:5f:01:1a:63:eb:1e: ee:c0:ea:45:12:0b:a1:5e:46:71:1c:ec:d4:43:55:b7:f9:10: 13:af:54:1a:6b:65:fc:58:ae:d0:21:a4:99:e3:e0:2a:6c:36: 1f:49:90:86:03:17:d5:78:65:02:bb:83:86:d5:2c:5c:c5:24: 42:e8:4e:03:b8:03:e3:28:1f:d6:92:02:ad:b0:8a:e4:a3:5f: 51:dd:80:18 -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUTu8Dz2EgUEES1IVfgsf0uBCHiqEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjU3OEU3OTY2MjAwMDQ5NkVCMTU0MEQ4QkQ4RkE2NUVE OEQ2M0E2MjAeFw0yNjAxMjYxNDE3MDZaFw0yNjAxMjcxNDI5MDZaMDMxMTAvBgNV BAMTKDk3QjEwQjAwNkEzNkUyNEEwNzY4ODkyRDg1RkMyMDUxQUYxM0I0MDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSUOqsLSos4nduvTyj47uan0Jt L8qmFf50OWwdfOvjhy4aj31Jh2dwDzaZp0kgoBJR6SdjiazLw1Ybis7M6VO7emDe QirgXT9VEeotDHVAViOktPg5fTghRtp+FSU5U84x4naxAcZBIHfzOx9mBTqXOWoS WI3qwWU6hgzOWVXIU6b0yTwNlRNpwPKzCbJ3Rivv6YFFzVFYhi/1WERyuSKKvQfw aRMcTmLV2LnEOJNV2nhzMbdkjVcowwUbkLYw4phbnbRMx/43+bM7LUoan4CNBA7r hs76wJ4kREZ/E5sFMvJuQZXKEfp2cU9JTiDoJtOHaziInEIyLhWoxNtkVoMXAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUl7ELAGo24koHaIkthfwgUa8TtAkwHwYDVR0j BBgwFoAUZXjnlmIABJbrFUDYvY+mXtjWOmIwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMWJkMzA2YjQtZTVjMy00OGY5LWIyZWUtMzZhOWJkZGVk OGM0LzgvNjU3OEU3OTY2MjAwMDQ5NkVCMTU0MEQ4QkQ4RkE2NUVEOEQ2M0E2Mi5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvNjU3OEU3OTY2MjAwMDQ5NkVCMTU0MEQ4QkQ4RkE2NUVEOEQ2 M0E2Mi5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xYmQzMDZiNC1l NWMzLTQ4ZjktYjJlZS0zNmE5YmRkZWQ4YzQvOC82NTc4RTc5NjYyMDAwNDk2RUIx NTQwRDhCRDhGQTY1RUQ4RDYzQTYyLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE8n3lh8guMwmFz9dybNm 58meIuppDlkN9JOXpkz1tErClwq7Q9OT1iiazGSJBAlAGjehGj5dYw0lqeJbxGHi kmvew3oLlCGu16SbAq+CMZKCPPx0+v7UtAjbWkREIYRTzbvaV1xDSXrGKY++Qmkh yjma40TfvgAErA2ZvUHVw/Fr7RP78R9uUneD7VWIrYVirUNxAfY36pS0ACs5A8nr HA9BkEGESiN5aM1pCMj2XwEaY+se7sDqRRILoV5GcRzs1ENVt/kQE69UGmtl/Fiu 0CGkmePgKmw2H0mQhgMX1XhlAruDhtUsXMUkQuhOA7gD4ygf1pICrbCK5KNfUd2A GA== -----END CERTIFICATE-----Generated at Mon Jan 26 21:53:17 2026 by rpki-client