This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft File: 3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft (raw, json) Hash identifier: lzPYBM2IP+PlRZemMSvqQrRgkQn8A/5aZNT/eisun5Q= Subject key identifier: FE:34:EA:75:74:F4:4F:9B:02:5A:91:5E:A9:CA:11:57:56:3B:D5:D4 Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B Certificate issuer: /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b Certificate serial: 620E4FA7F31B9DDC572641F8CB6AE880717BE04C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft Manifest number: 01AF Signing time: Tue 20 Jan 2026 20:15:47 +0000 Manifest this update: Tue 20 Jan 2026 20:10:47 +0000 Manifest next update: Thu 22 Jan 2026 00:00:47 +0000 Files and hashes: 1: AS214271.roa (hash: Ryxr7X7Ltqo6eG8diqWyYYKBcmlEtpuVl7WOq2jpWd4=) 2: AS61244.roa (hash: rBybT6KNUveYSpFmW0LV7SLnrcp5d5Ac6NXXIFW7N3g=) 3: AS9009.roa (hash: bsO+KEDdsh042ly3XKZ18x6W8Jx5Y/tMwuWQMMg9A7o=) 4: AS25198.roa (hash: fUzUdeAhxbvJ/kHVeJ/JIyPWWI1DdnEIta+2vySpSO8=) 5: AS3320.roa (hash: J0gCdn8aWPQr54/0F/uediEv8Z8fjukYJoHGgqTaPFs=) 6: AS57043.roa (hash: 5kt0gUPpPlXUEkEZgXCUZ1bMA7kcongFeMkYDKoEOqw=) 7: AS215607.roa (hash: hjzeRKOGuxePrHCNAH1PodoHFzwU51JvVTjyJ1ECaoQ=) 8: AS401776.roa (hash: ebLx46/uD/rPd1H9fx2yLVz5RrxFIjvh29qH51zn5WU=) 9: AS60128.roa (hash: LYwh4MoU7+i8XzsRvFs92IcyFCoJKzZY9vGXelEbElA=) 10: AS47690.roa (hash: ooqiQO4HpfGl3m9/7LtHIwFb/PWFu0EXUeXrqpQ+FtA=) 11: AS399073.roa (hash: 9W+8Rej68EJTWmEEI49+dSUZhcc+C37ptbroUQavDdM=) 12: AS401856.roa (hash: PcqYuWw+WLjFd7xYMMDLh2PknwsMH4AN2HIAPKmy7hg=) 13: AS202736.roa (hash: mvaFQ8VzOiSlC6osU1pagjFGEUjuXEDkXWP0QHArhMs=) 14: AS20326.roa (hash: bjlCs1cn8SZvrAA+XVOeFzTEEDwkFKKTeVLvOLa+FN0=) 15: AS401857.roa (hash: AxmtkOgTQdquXT8anj5909RTnMM/vn15UinPoYpdrdI=) 16: AS205886.roa (hash: sTiEMkgGikZqMsIZQnshE+5D76nt7ESMGpjidVFtNRc=) 17: 3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl (hash: qofiPdWc+yZxDx32sZhP0jnzZ9shapSI35AzE/aGOF8=) 18: AS401322.roa (hash: MlX3AczmJTECW2fIo7AdMzxOynmnFLfHxNf4/KkYkG8=) 19: AS152179.roa (hash: CLoHb65khJ/xkZgyKfE4QHe9gx+LzXYYD8aDDeekOmU=) 20: AS16276.roa (hash: KW9MPVc+GYoziUSGxGJkc9sN3s6o49VGu2rqobWKOO8=) 21: AS197537.roa (hash: JP3hx/IAvQ4SgOvsKr86baQJpbUUMchlqabqd0xftz0=) 22: AS7029.roa (hash: EQdsNpFUDlB6ynhRTbcYQBl7UF6yGjIXmjLtDYAN+1w=) 23: AS395793.roa (hash: V5JEB7lz8FwA4enu53vGQgB/6Qx37KJCclmB6l2ZUq0=) 24: AS63199.roa (hash: FvVb2cGLr9P58j2LmTYr+pmEv/okWzQ8pvU7Apnw+6Q=) 25: AS8820.roa (hash: 37NLowiuT9jy/dagftAxkW62Xv5potfYYsy61mpYIOM=) 26: AS13347.roa (hash: Vcr6EeUXObLLwMTr/P281IyX4fwZYhwUt1AVEFcBuD4=) 27: AS137409.roa (hash: Y9UvfHoHT/x96pt+KFD1GFP/gX4ktFwFm+kigGEhsmM=) 28: AS60123.roa (hash: QtgZXfsHBEnogO7UuZmZIr/ZqG9Z8/NgNBqi4sK9HBo=) 29: AS174.roa (hash: GDKtQAqWqIlmxFy0RbMTDj/zf9ai5j6YvIu7t3u1H1U=) 30: AS208545.roa (hash: QaFp0CtwymMb26LzXqGktL2J3jbDSYF8yfVJZ7bGYbw=) 31: AS32132.roa (hash: AnbuErehQXFxV+kWQt2eul6q993RKYVkoz7/H8Ifyq0=) 32: AS212238.roa (hash: 0IyslS3CG8KwMKdb6hG7WmS6/jX6BN24to036ny5Oec=) 33: AS13335.roa (hash: d1T4k2GKdCN6l2wTM8AzWL9EUnZokcmdFZNLtewAX9k=) 34: AS203446.roa (hash: oqoiqzh1+ViDUf4HKID2vR8MgIa8o5lwgPwsNCMr93E=) 35: AS207821.roa (hash: duP/7c0JhJ943FShftflbTsUFfvdFJVpDpIIC2INpqY=) 36: AS48266.roa (hash: wN58VW25Z+LecojZP+oOAtM/5chfYovrCCO/Cl8gTkE=) 37: AS206781.roa (hash: u5AtvuN8DZoybC5jmpdLGiJIsJAgQ1te19Ty/6LaNP8=) 38: AS42831.roa (hash: uuKI3/yP2w4woZt9biKewlb0tCO9hThIqZOmRiy7DQo=) 39: AS214483.roa (hash: 6RqqmAQfiH5vxDsevnysTOwpoPe3+DXp3DMdAvOkobQ=) 40: AS984.roa (hash: 9ATj70EvyOEJUloVaxSnzdXUrBuU3YdN7scbt4sKaSg=) 41: AS214025.roa (hash: VsFFsNld1pucwLKniAkBqkz16/RICmLe/L4l6awri4w=) 42: AS402044.roa (hash: TeXNOXPE0PZ4n/aRbVwNBzdg/LSUcNFTcaTL81QpG7c=) 43: AS5065.roa (hash: JGE9pcBF2Jpsr5+PtvnbT/gcrMiv31piwJgRI0akVTQ=) 44: AS834.roa (hash: kRQ22obmZZ3koodIaSIt0y5UcJWlJTACeHr+qqYRhoI=) 45: AS5650.roa (hash: Js0jrGQQyIbg26/8AZigTW/NGuPFZW8fhpgPYAsdnV8=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 15:30:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:0e:4f:a7:f3:1b:9d:dc:57:26:41:f8:cb:6a:e8:80:71:7b:e0:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b Validity Not Before: Jan 20 20:10:47 2026 GMT Not After : Jan 22 00:00:47 2026 GMT Subject: CN=FE34EA7574F44F9B025A915EA9CA1157563BD5D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:06:53:87:c5:59:de:09:30:ed:09:78:8f:23: 19:69:8a:b8:b3:71:e4:4a:a6:cd:1a:41:bb:30:f2: 54:8e:f1:61:ee:fd:62:f9:cc:d2:a8:9d:34:7e:e8: 18:03:43:b0:23:3b:87:2c:53:9f:cd:0c:6a:29:0c: 78:2e:b4:d2:8b:a9:0e:ea:e9:f9:c3:e6:28:e0:d6: e2:0b:f2:ba:15:f4:6e:a0:af:20:e2:0a:81:4b:2d: 7c:9b:11:c9:5d:16:8b:17:58:5d:c2:14:8e:61:9b: d1:0a:f0:8a:4b:d1:9c:51:53:32:af:7b:fc:0e:23: 14:fe:83:f0:e4:c7:fc:47:d3:03:30:37:3f:5a:cb: 16:58:e7:7f:f5:db:70:a2:11:04:a0:e9:7a:12:11: 03:cd:8d:10:eb:3a:da:78:ac:72:e0:a2:63:67:51: 56:19:bf:ee:03:b6:29:85:7e:37:14:5f:c4:5a:e4: da:c8:16:e4:4e:62:da:a9:b2:4f:4d:c9:e8:d5:77: e4:b9:84:36:fd:f5:fc:b1:0e:df:6b:08:eb:03:96: 17:46:b0:ac:23:40:52:d2:ab:7c:b0:35:11:de:a2: 38:f3:cb:f4:1a:c8:47:04:36:1c:85:d6:fb:24:ad: 39:5b:e7:f6:ac:75:c6:0d:1f:31:74:07:d9:02:6a: ff:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:34:EA:75:74:F4:4F:9B:02:5A:91:5E:A9:CA:11:57:56:3B:D5:D4 X509v3 Authority Key Identifier: keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:77:0e:cf:b4:63:1e:50:17:31:a4:0f:49:98:a7:ee:28:41: c5:3b:ec:8b:bc:72:9f:d3:17:53:ba:78:03:c4:45:a6:a1:97: 73:bf:a3:ce:c3:19:51:ce:a7:b1:06:52:0a:9e:21:16:f8:25: 22:56:77:74:0e:90:cd:fa:2e:57:0e:fc:b8:22:2f:7a:ba:72: 47:7c:86:3e:42:61:67:0d:4f:08:b6:23:f4:cd:e7:fd:35:c7: f8:25:8c:59:cb:88:e0:b6:5b:43:7a:6d:d2:62:9e:b5:c1:ae: 48:54:08:d8:e0:54:93:f6:8e:c2:2b:b0:bf:c2:34:db:ba:05: 71:17:71:25:e6:f0:2a:36:cc:35:be:3d:ab:bd:cc:6b:29:e7: ea:37:35:7d:96:74:a9:0f:c0:8a:80:dc:90:52:c5:eb:a2:a0: 06:50:82:80:75:cc:71:36:54:59:7b:bf:30:be:c8:18:20:b2: 7e:5a:40:9f:d0:40:7d:55:07:8a:a9:37:3c:3e:e2:41:08:fd: dc:cf:ed:a7:20:ce:8d:f4:a6:74:a3:8c:e9:f3:12:a9:86:f6: b1:9b:2e:36:37:56:19:28:c9:08:99:ab:a9:ed:f2:d8:c1:cb: f3:dd:6a:7e:e4:7e:a4:7b:f2:a8:63:27:c5:11:2f:b4:10:8f: 4c:9f:40:21 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUYg5Pp/MbndxXJkH4y2rogHF74EwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM2ZlY2NiMTdiZTUxZWU1OWVjNzRkNjRlZWQ5MTdlMjIx ZWUyOGExYjAeFw0yNjAxMjAyMDEwNDdaFw0yNjAxMjIwMDAwNDdaMDMxMTAvBgNV BAMTKEZFMzRFQTc1NzRGNDRGOUIwMjVBOTE1RUE5Q0ExMTU3NTYzQkQ1RDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYBlOHxVneCTDtCXiPIxlpiriz ceRKps0aQbsw8lSO8WHu/WL5zNKonTR+6BgDQ7AjO4csU5/NDGopDHgutNKLqQ7q 6fnD5ijg1uIL8roV9G6gryDiCoFLLXybEcldFosXWF3CFI5hm9EK8IpL0ZxRUzKv e/wOIxT+g/Dkx/xH0wMwNz9ayxZY53/123CiEQSg6XoSEQPNjRDrOtp4rHLgomNn UVYZv+4DtimFfjcUX8Ra5NrIFuROYtqpsk9NyejVd+S5hDb99fyxDt9rCOsDlhdG sKwjQFLSq3ywNRHeojjzy/QayEcENhyF1vskrTlb5/asdcYNHzF0B9kCav81AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU/jTqdXT0T5sCWpFeqcoRV1Y71dQwHwYDVR0j BBgwFoAUP+zLF75R7lnsdNZO7ZF+Ih7iihswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjJkYjc1NTUtOWFhNC00OTgzLTkzMTYtNzM4MDlkZDM1 NGJjLzAvM0ZFQ0NCMTdCRTUxRUU1OUVDNzRENjRFRUQ5MTdFMjIxRUUyOEExQi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1AtekxGNzVSN2xuc2ROWk83WkYtSWg3 aWlocy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yMmRiNzU1NS05 YWE0LTQ5ODMtOTMxNi03MzgwOWRkMzU0YmMvMC8zRkVDQ0IxN0JFNTFFRTU5RUM3 NEQ2NEVFRDkxN0UyMjFFRTI4QTFCLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMncOz7RjHlAXMaQPSZin 7ihBxTvsi7xyn9MXU7p4A8RFpqGXc7+jzsMZUc6nsQZSCp4hFvglIlZ3dA6Qzfou Vw78uCIverpyR3yGPkJhZw1PCLYj9M3n/TXH+CWMWcuI4LZbQ3pt0mKetcGuSFQI 2OBUk/aOwiuwv8I027oFcRdxJebwKjbMNb49q73Maynn6jc1fZZ0qQ/AioDckFLF 66KgBlCCgHXMcTZUWXu/ML7IGCCyflpAn9BAfVUHiqk3PD7iQQj93M/tpyDOjfSm dKOM6fMSqYb2sZsuNjdWGSjJCJmrqe3y2MHL891qfuR+pHvyqGMnxREvtBCPTJ9A IQ== -----END CERTIFICATE-----Generated at Tue Jan 20 23:52:51 2026 by rpki-client