This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/212531c8-b248-4431-a18e-4e6dc8d6b6e8/0/0DD4CFA21D83ABD8B565498180680D141A81960F.mft File: 0DD4CFA21D83ABD8B565498180680D141A81960F.mft (raw, json) Hash identifier: LvVWUcZ25TrMBH3cKjJwuhxxtQZUNvH7AsY7+LCCMyQ= Subject key identifier: DD:FF:B9:55:97:D4:F2:17:9C:51:51:95:D1:47:5E:D6:3F:09:88:D5 Authority key identifier: 0D:D4:CF:A2:1D:83:AB:D8:B5:65:49:81:80:68:0D:14:1A:81:96:0F Certificate issuer: /CN=0dd4cfa21d83abd8b565498180680d141a81960f Certificate serial: 564EEB1608800F2F0CF46E84A6C4530737EBE58B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DdTPoh2Dq9i1ZUmBgGgNFBqBlg8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/212531c8-b248-4431-a18e-4e6dc8d6b6e8/0/0DD4CFA21D83ABD8B565498180680D141A81960F.mft Manifest number: E9 Signing time: Sun 18 Jan 2026 23:48:13 +0000 Manifest this update: Sun 18 Jan 2026 23:43:13 +0000 Manifest next update: Tue 20 Jan 2026 01:00:13 +0000 Files and hashes: 1: 3231322e362e34382e302f32342d3234203d3e20343031373833.roa (hash: xMLOXyY+BsMcBRRtKTQRzQvqncsTWn47VROaOw/TU2U=) 2: 0DD4CFA21D83ABD8B565498180680D141A81960F.crl (hash: NdXCpIMmxi5xO0I7O3ftOG/PAeUxs5CKGjlZLD8yjW4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/212531c8-b248-4431-a18e-4e6dc8d6b6e8/0/0DD4CFA21D83ABD8B565498180680D141A81960F.crl rsync://rsync.paas.rpki.ripe.net/repository/212531c8-b248-4431-a18e-4e6dc8d6b6e8/0/0DD4CFA21D83ABD8B565498180680D141A81960F.mft rsync://rpki.ripe.net/repository/DEFAULT/DdTPoh2Dq9i1ZUmBgGgNFBqBlg8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 01:00:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:4e:eb:16:08:80:0f:2f:0c:f4:6e:84:a6:c4:53:07:37:eb:e5:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dd4cfa21d83abd8b565498180680d141a81960f Validity Not Before: Jan 18 23:43:13 2026 GMT Not After : Jan 20 01:00:13 2026 GMT Subject: CN=DDFFB95597D4F2179C515195D1475ED63F0988D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:88:70:13:31:18:27:69:48:1e:4e:77:28:84: 54:cf:1e:24:7e:a1:6d:8f:48:6e:29:bf:c4:02:df: a7:37:4e:0b:75:d0:f9:20:5d:f8:fe:58:ac:ad:ea: a6:3a:28:95:95:fb:0e:0b:3c:8f:28:42:57:49:ff: 81:86:3f:f3:cc:81:4b:99:84:c3:e9:bf:69:0a:77: 81:40:6c:38:f7:39:cb:92:db:17:97:d0:7e:fe:99: 45:d5:03:38:d4:6c:f3:14:95:aa:cf:90:f8:cd:df: cf:73:d3:86:6a:44:5b:d6:85:d1:ad:f9:e4:71:57: 26:57:2f:82:19:66:36:c1:a1:1a:1d:32:14:ca:39: ca:31:45:37:88:b1:b4:56:ed:21:c6:1c:e3:32:f3: e5:a1:78:d9:46:79:98:72:4a:16:10:60:68:66:70: 0c:22:30:51:1b:75:7a:50:a1:f0:bd:d7:c8:53:81: 89:3b:10:8a:5d:12:6c:95:e5:76:b7:b9:32:f9:55: 3b:14:cb:d3:fb:97:e6:1e:c9:49:3b:14:af:f5:8d: b1:78:20:81:e4:40:a3:1e:9c:85:d0:dc:e6:e1:0c: dc:07:c9:7c:57:88:6c:55:3f:4c:e8:34:6c:9b:bb: 02:ca:68:99:20:31:87:90:f7:5b:fd:2d:5a:55:5e: 04:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:FF:B9:55:97:D4:F2:17:9C:51:51:95:D1:47:5E:D6:3F:09:88:D5 X509v3 Authority Key Identifier: keyid:0D:D4:CF:A2:1D:83:AB:D8:B5:65:49:81:80:68:0D:14:1A:81:96:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/212531c8-b248-4431-a18e-4e6dc8d6b6e8/0/0DD4CFA21D83ABD8B565498180680D141A81960F.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DdTPoh2Dq9i1ZUmBgGgNFBqBlg8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/212531c8-b248-4431-a18e-4e6dc8d6b6e8/0/0DD4CFA21D83ABD8B565498180680D141A81960F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:eb:fd:0b:56:84:02:0d:7e:a4:cb:29:01:da:3b:10:a5:8a: 6c:f1:20:ff:f6:33:22:28:8c:74:de:41:06:9f:ee:a6:9c:35: e5:55:7c:4e:57:fa:68:dc:fc:a1:13:32:59:b6:74:8a:9d:7a: 80:b6:b2:04:32:17:0f:9b:0f:d6:72:18:4d:ea:e9:5e:4a:7a: 5b:e0:59:ad:d0:25:06:ca:f1:9a:b8:1e:34:ae:91:fd:be:a3: c2:cd:c4:f7:c7:bb:40:30:9f:f3:18:e3:b5:2e:fd:b2:48:61: 0b:29:ff:71:bb:f2:41:bc:51:bb:61:7b:f4:19:b4:a9:e3:e8: e7:3d:c5:fb:50:41:95:8c:58:e1:f2:2f:e1:e9:cc:5a:b7:71: db:68:5e:ab:2c:74:bf:21:01:7d:db:b1:0a:72:a5:9d:78:65: 3e:14:f8:d1:30:39:93:92:a1:55:5d:3a:4e:8d:20:e6:a7:3d: 48:98:44:e5:dd:01:73:83:eb:17:de:0c:e0:c3:cc:f7:d8:58: dc:11:93:e0:3e:5f:20:06:0e:dc:5f:9c:87:70:72:eb:5d:ef: 73:e5:23:22:8e:5a:98:15:bf:1f:d3:c2:a5:98:c4:72:c2:3d: 85:7d:59:65:5f:0f:4a:3c:5d:ce:4f:4c:2f:ab:2d:53:e7:0e: 2c:db:29:70 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUVk7rFgiADy8M9G6EpsRTBzfr5YswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMGRkNGNmYTIxZDgzYWJkOGI1NjU0OTgxODA2ODBkMTQx YTgxOTYwZjAeFw0yNjAxMTgyMzQzMTNaFw0yNjAxMjAwMTAwMTNaMDMxMTAvBgNV BAMTKERERkZCOTU1OTdENEYyMTc5QzUxNTE5NUQxNDc1RUQ2M0YwOTg4RDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIiHATMRgnaUgeTncohFTPHiR+ oW2PSG4pv8QC36c3Tgt10PkgXfj+WKyt6qY6KJWV+w4LPI8oQldJ/4GGP/PMgUuZ hMPpv2kKd4FAbDj3OcuS2xeX0H7+mUXVAzjUbPMUlarPkPjN389z04ZqRFvWhdGt +eRxVyZXL4IZZjbBoRodMhTKOcoxRTeIsbRW7SHGHOMy8+WheNlGeZhyShYQYGhm cAwiMFEbdXpQofC918hTgYk7EIpdEmyV5Xa3uTL5VTsUy9P7l+YeyUk7FK/1jbF4 IIHkQKMenIXQ3ObhDNwHyXxXiGxVP0zoNGybuwLKaJkgMYeQ91v9LVpVXgTlAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU3f+5VZfU8hecUVGV0Ude1j8JiNUwHwYDVR0j BBgwFoAUDdTPoh2Dq9i1ZUmBgGgNFBqBlg8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjEyNTMxYzgtYjI0OC00NDMxLWExOGUtNGU2ZGM4ZDZi NmU4LzAvMERENENGQTIxRDgzQUJEOEI1NjU0OTgxODA2ODBEMTQxQTgxOTYwRi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RkVFBvaDJEcTlpMVpVbUJnR2dORkJx QmxnOC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yMTI1MzFjOC1i MjQ4LTQ0MzEtYTE4ZS00ZTZkYzhkNmI2ZTgvMC8wREQ0Q0ZBMjFEODNBQkQ4QjU2 NTQ5ODE4MDY4MEQxNDFBODE5NjBGLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASOv9C1aEAg1+pMspAdo7 EKWKbPEg//YzIiiMdN5BBp/uppw15VV8Tlf6aNz8oRMyWbZ0ip16gLayBDIXD5sP 1nIYTerpXkp6W+BZrdAlBsrxmrgeNK6R/b6jws3E98e7QDCf8xjjtS79skhhCyn/ cbvyQbxRu2F79Bm0qePo5z3F+1BBlYxY4fIv4enMWrdx22heqyx0vyEBfduxCnKl nXhlPhT40TA5k5KhVV06To0g5qc9SJhE5d0Bc4PrF94M4MPM99hY3BGT4D5fIAYO 3F+ch3By613vc+UjIo5amBW/H9PCpZjEcsI9hX1ZZV8PSjxdzk9ML6stU+cOLNsp cA== -----END CERTIFICATE-----Generated at Mon Jan 19 13:05:48 2026 by rpki-client