This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/29C9C8CA32A12DE7C686B5240D01173FC43C71FF.mft File: 29C9C8CA32A12DE7C686B5240D01173FC43C71FF.mft (raw, json) Hash identifier: 2xh71nTcDUu/x6korT3yc+QwIzXE4634JogL7mTF/TU= Subject key identifier: 01:EF:15:0E:0F:E4:93:20:18:04:A8:69:BD:FD:C4:E9:12:0A:E6:BA Authority key identifier: 29:C9:C8:CA:32:A1:2D:E7:C6:86:B5:24:0D:01:17:3F:C4:3C:71:FF Certificate issuer: /CN=29c9c8ca32a12de7c686b5240d01173fc43c71ff Certificate serial: 42FE1A140B3733A7220453B37A6A421FE1BA283C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KcnIyjKhLefGhrUkDQEXP8Q8cf8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/29C9C8CA32A12DE7C686B5240D01173FC43C71FF.mft Manifest number: 05E7 Signing time: Mon 09 Feb 2026 02:40:15 +0000 Manifest this update: Mon 09 Feb 2026 02:35:15 +0000 Manifest next update: Tue 10 Feb 2026 06:01:15 +0000 Files and hashes: 1: 29C9C8CA32A12DE7C686B5240D01173FC43C71FF.crl (hash: eTtz+VHSgbUBLEI7ipRdVpSm76GFuJ3aflyfCCRVoWI=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/29C9C8CA32A12DE7C686B5240D01173FC43C71FF.crl rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/29C9C8CA32A12DE7C686B5240D01173FC43C71FF.mft rsync://rpki.ripe.net/repository/DEFAULT/KcnIyjKhLefGhrUkDQEXP8Q8cf8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:fe:1a:14:0b:37:33:a7:22:04:53:b3:7a:6a:42:1f:e1:ba:28:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29c9c8ca32a12de7c686b5240d01173fc43c71ff Validity Not Before: Feb 9 02:35:15 2026 GMT Not After : Feb 10 06:01:15 2026 GMT Subject: CN=01EF150E0FE493201804A869BDFDC4E9120AE6BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ba:15:b1:55:56:e4:b0:8d:f9:aa:ec:b7:9b: a4:41:62:5a:8c:58:51:46:3e:59:68:f1:ab:2f:16: e8:02:ce:d7:e8:86:a1:6f:74:c8:0e:7e:aa:0e:c6: 0f:69:7a:ab:96:b6:ba:74:aa:d2:2f:15:ba:f0:a5: 7e:92:9c:bc:9d:d9:c4:4e:ba:83:95:3b:e3:84:bd: d5:27:5e:ed:56:c0:b6:f5:c3:19:0d:ea:c8:aa:18: 0a:f8:ae:06:50:e8:9d:15:9a:82:ce:66:96:e9:fe: 8b:ed:85:af:0d:c6:f8:b7:9b:20:4d:7b:15:ce:44: cd:f2:34:85:c8:b7:7c:b7:94:e9:08:2e:fc:f5:b9: 44:91:fb:e1:21:5c:d4:00:15:fd:71:f4:6f:6d:36: a1:3c:e0:45:35:f2:04:19:d2:86:4a:c5:b0:8e:8a: f6:3c:ad:a4:d3:5d:44:76:9b:d8:03:b6:bd:43:ac: 7d:11:fd:fa:1a:ed:2d:88:7c:85:af:2f:87:ac:6a: 61:0c:66:c0:a4:53:10:f6:de:0d:6f:31:81:eb:1f: 64:20:11:39:0d:9a:f7:8a:95:21:e6:3b:3b:b1:2b: 3a:9f:14:d0:b1:fd:a1:fe:63:4b:68:f5:03:63:d5: 3b:0e:08:79:85:e7:67:b5:14:ea:02:34:10:a0:96: 59:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:EF:15:0E:0F:E4:93:20:18:04:A8:69:BD:FD:C4:E9:12:0A:E6:BA X509v3 Authority Key Identifier: keyid:29:C9:C8:CA:32:A1:2D:E7:C6:86:B5:24:0D:01:17:3F:C4:3C:71:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/29C9C8CA32A12DE7C686B5240D01173FC43C71FF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KcnIyjKhLefGhrUkDQEXP8Q8cf8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/29C9C8CA32A12DE7C686B5240D01173FC43C71FF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:93:4b:e6:18:b0:e5:a6:74:8a:37:2b:7b:92:cd:cf:e2:b9: 83:60:47:1c:bb:28:74:72:d7:a0:8e:dd:0b:59:a6:a6:7a:bc: c5:3b:d6:97:90:ba:bc:ed:b7:75:d4:62:99:c8:76:6a:af:46: 22:a3:3f:78:06:c8:bf:70:db:50:a0:85:33:ea:0a:40:f8:e2: 00:a4:af:40:12:ac:1c:3d:dd:8a:3a:95:66:7e:9c:22:07:54: 06:95:fb:61:d7:da:89:8d:e1:f9:2c:98:c6:89:a2:42:4c:44: a1:de:e4:1e:8d:3f:c6:8d:7d:58:8c:b1:1f:af:0b:9b:d5:eb: 6e:eb:52:b9:00:c4:e4:87:73:19:20:c1:de:f1:86:58:4e:ad: df:6a:f9:70:43:bd:d5:2f:b7:6d:e2:ac:15:11:be:a6:be:9a: 66:67:b0:fc:02:5b:b3:8e:9b:51:1a:de:91:2e:e1:4c:8b:a7: 85:cb:22:fa:0b:63:81:e8:96:ef:9c:b0:37:60:cf:c4:88:b9: 77:7e:df:20:87:72:6d:a9:1b:c9:b3:1c:a0:85:95:c4:21:10: 1f:73:6e:da:66:1f:bc:27:a6:3f:ad:f4:25:3c:70:97:59:eb: b1:11:86:ce:a1:be:0d:14:4f:cd:41:8a:9f:f6:9c:cb:b2:a7: 27:27:25:3f -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUQv4aFAs3M6ciBFOzempCH+G6KDwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjljOWM4Y2EzMmExMmRlN2M2ODZiNTI0MGQwMTE3M2Zj NDNjNzFmZjAeFw0yNjAyMDkwMjM1MTVaFw0yNjAyMTAwNjAxMTVaMDMxMTAvBgNV BAMTKDAxRUYxNTBFMEZFNDkzMjAxODA0QTg2OUJERkRDNEU5MTIwQUU2QkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyuhWxVVbksI35quy3m6RBYlqM WFFGPllo8asvFugCztfohqFvdMgOfqoOxg9pequWtrp0qtIvFbrwpX6SnLyd2cRO uoOVO+OEvdUnXu1WwLb1wxkN6siqGAr4rgZQ6J0VmoLOZpbp/ovtha8Nxvi3myBN exXORM3yNIXIt3y3lOkILvz1uUSR++EhXNQAFf1x9G9tNqE84EU18gQZ0oZKxbCO ivY8raTTXUR2m9gDtr1DrH0R/foa7S2IfIWvL4esamEMZsCkUxD23g1vMYHrH2Qg ETkNmveKlSHmOzuxKzqfFNCx/aH+Y0to9QNj1TsOCHmF52e1FOoCNBCglll3AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUAe8VDg/kkyAYBKhpvf3E6RIK5rowHwYDVR0j BBgwFoAUKcnIyjKhLefGhrUkDQEXP8Q8cf8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMWJmOGU5NzctNzI3OC00NmNmLWFiZDEtOTljZDFmZDJi ZTRlLzEvMjlDOUM4Q0EzMkExMkRFN0M2ODZCNTI0MEQwMTE3M0ZDNDNDNzFGRi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0tjbkl5aktoTGVmR2hyVWtEUUVYUDhR OGNmOC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xYmY4ZTk3Ny03 Mjc4LTQ2Y2YtYWJkMS05OWNkMWZkMmJlNGUvMS8yOUM5QzhDQTMyQTEyREU3QzY4 NkI1MjQwRDAxMTczRkM0M0M3MUZGLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABZNL5hiw5aZ0ijcre5LN z+K5g2BHHLsodHLXoI7dC1mmpnq8xTvWl5C6vO23ddRimch2aq9GIqM/eAbIv3Db UKCFM+oKQPjiAKSvQBKsHD3dijqVZn6cIgdUBpX7YdfaiY3h+SyYxomiQkxEod7k Ho0/xo19WIyxH68Lm9XrbutSuQDE5IdzGSDB3vGGWE6t32r5cEO91S+3beKsFRG+ pr6aZmew/AJbs46bURrekS7hTIunhcsi+gtjgeiW75ywN2DPxIi5d37fIIdybakb ybMcoIWVxCEQH3Nu2mYfvCemP630JTxwl1nrsRGGzqG+DRRPzUGKn/acy7KnJycl Pw== -----END CERTIFICATE-----Generated at Mon Feb 9 18:28:36 2026 by rpki-client