This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.mft File: 069FAF47FF48AEF4C98F5097074530A74C111AB9.mft (raw, json) Hash identifier: Zsd3zQOa1x9sc+imo6eO9rx4Ipa76RlM1RbxNEmCyCw= Subject key identifier: 1C:2A:96:8B:9F:4D:9A:98:00:C6:76:E6:63:B3:74:30:63:6C:BB:4F Authority key identifier: 06:9F:AF:47:FF:48:AE:F4:C9:8F:50:97:07:45:30:A7:4C:11:1A:B9 Certificate issuer: /CN=069FAF47FF48AEF4C98F5097074530A74C111AB9 Certificate serial: 2CBE3BB4C201E20A1045AC1844F7849C8C5802D6 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/069FAF47FF48AEF4C98F5097074530A74C111AB9.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.mft Manifest number: 0455 Signing time: Mon 26 Jan 2026 01:07:18 +0000 Manifest this update: Mon 26 Jan 2026 01:02:18 +0000 Manifest next update: Tue 27 Jan 2026 03:35:18 +0000 Files and hashes: 1: 326130663a383563313a3336333a3a2f34382d3438203d3e20323135363137.roa (hash: nWVf9Vd1/pxv69WaHKM1e/8vQ/po0I7aidbKnzISSgo=) 2: 326130663a383563313a3335313a3a2f34382d3438203d3e20343031333836.roa (hash: pdFac+QI0R/UPdzS1q2a9ExUPSLxlAAabS/RPyMDKJ0=) 3: 326130663a383563313a3335373a3a2f34382d3438203d3e20323135363137.roa (hash: mT7wNp38f47L+2MAFo1ah1wV4i3g7EwDZhqEAFbd0PU=) 4: 069FAF47FF48AEF4C98F5097074530A74C111AB9.crl (hash: wEB8550HoxmzyvRy7ZG8Pv68PuEVfjoGDdWui0LRGDY=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.crl rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.mft rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/069FAF47FF48AEF4C98F5097074530A74C111AB9.cer rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 03:35:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:be:3b:b4:c2:01:e2:0a:10:45:ac:18:44:f7:84:9c:8c:58:02:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=069FAF47FF48AEF4C98F5097074530A74C111AB9 Validity Not Before: Jan 26 01:02:18 2026 GMT Not After : Jan 27 03:35:18 2026 GMT Subject: CN=1C2A968B9F4D9A9800C676E663B37430636CBB4F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:6a:97:92:0b:01:b4:a1:cd:0f:63:2f:51:db: f8:b0:52:a9:c9:78:f2:0e:61:0d:0a:e1:f1:4e:56: 45:6e:4c:b8:a5:2f:4b:74:c7:d8:2c:20:1c:10:03: 99:83:0e:0c:0c:fe:a3:db:f2:68:02:05:0b:0c:85: 61:68:8c:68:87:75:7d:8e:15:b3:d3:30:49:08:e7: e3:0f:24:96:bc:41:d1:21:42:dc:6b:18:17:ae:a8: c5:8a:4a:15:2f:1e:52:c2:53:a9:6d:3d:20:aa:4a: 37:4e:26:a6:9c:39:ea:f4:09:24:87:b5:18:4f:8a: 0e:14:f4:b4:dc:24:7c:90:79:02:d1:86:d6:8d:67: 62:cc:35:4c:18:da:9a:a6:38:6a:e7:e5:0b:51:1d: 75:e0:71:bf:c8:b7:db:c1:d8:63:47:62:bb:73:48: d7:01:39:09:0e:ce:6d:53:b6:a4:5d:ac:6a:29:6c: 5e:95:20:7c:0c:75:7f:ab:76:93:0e:68:70:2e:8c: ab:3a:e8:fd:42:0d:c3:36:82:58:b7:93:8c:3b:9e: 90:ae:4e:45:58:29:51:84:f6:96:d4:78:a2:d4:e7: 69:80:bb:04:0e:a5:6a:a1:69:2c:5d:60:fa:f6:5b: 99:f3:e1:18:bf:1d:a8:51:b0:b9:42:22:4d:09:0e: c3:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:2A:96:8B:9F:4D:9A:98:00:C6:76:E6:63:B3:74:30:63:6C:BB:4F X509v3 Authority Key Identifier: keyid:06:9F:AF:47:FF:48:AE:F4:C9:8F:50:97:07:45:30:A7:4C:11:1A:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/069FAF47FF48AEF4C98F5097074530A74C111AB9.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:75:f1:09:41:6d:28:9b:4e:ad:50:e1:86:fd:e3:ab:93:21: cd:32:3c:52:cb:e4:58:6c:e2:1a:dd:04:97:e3:f3:8f:dc:4e: 92:24:9c:72:f9:94:77:3a:64:39:41:f1:d3:b2:ac:64:89:90: c5:52:f4:ec:71:e1:70:bb:a1:54:50:c6:52:3b:da:c3:d2:9f: 9b:0f:ce:fc:b5:f1:ff:10:85:9e:ea:b1:7d:7c:64:5f:f0:d0: f9:9c:62:54:04:07:4c:32:fb:ea:0f:71:91:50:7a:98:e8:6e: 4a:75:cf:65:95:3f:68:9c:52:71:b3:5e:44:f7:65:b2:d4:66: 60:61:fa:20:cd:9f:6f:5b:7f:70:02:70:4b:05:ec:9e:66:df: 1a:db:dc:5f:ae:63:d4:d6:93:45:af:95:90:ad:24:62:e2:1d: f2:de:5c:63:9b:76:0e:8d:ad:48:d4:4e:db:a8:b3:0f:cf:26: e7:6a:9d:f7:a6:6a:ac:7e:81:cd:6c:76:c9:03:89:2d:b2:79: a8:33:42:58:90:fe:b9:d3:27:ab:7c:63:a9:60:2e:a8:1c:ee: db:d1:cc:53:e8:91:48:9e:43:4a:9a:4b:d4:40:53:dc:56:09: 87:54:b9:67:18:f3:cd:6f:a7:12:47:0c:c2:b4:68:b7:87:14: 97:0a:93:77 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIULL47tMIB4goQRawYRPeEnIxYAtYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDY5RkFGNDdGRjQ4QUVGNEM5OEY1MDk3MDc0NTMwQTc0 QzExMUFCOTAeFw0yNjAxMjYwMTAyMThaFw0yNjAxMjcwMzM1MThaMDMxMTAvBgNV BAMTKDFDMkE5NjhCOUY0RDlBOTgwMEM2NzZFNjYzQjM3NDMwNjM2Q0JCNEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZapeSCwG0oc0PYy9R2/iwUqnJ ePIOYQ0K4fFOVkVuTLilL0t0x9gsIBwQA5mDDgwM/qPb8mgCBQsMhWFojGiHdX2O FbPTMEkI5+MPJJa8QdEhQtxrGBeuqMWKShUvHlLCU6ltPSCqSjdOJqacOer0CSSH tRhPig4U9LTcJHyQeQLRhtaNZ2LMNUwY2pqmOGrn5QtRHXXgcb/It9vB2GNHYrtz SNcBOQkOzm1TtqRdrGopbF6VIHwMdX+rdpMOaHAujKs66P1CDcM2gli3k4w7npCu TkVYKVGE9pbUeKLU52mAuwQOpWqhaSxdYPr2W5nz4Ri/HahRsLlCIk0JDsODAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUHCqWi59NmpgAxnbmY7N0MGNsu08wHwYDVR0j BBgwFoAUBp+vR/9IrvTJj1CXB0Uwp0wRGrkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjNkNWY2ODItYjUxYi00ODEyLWI4YjEtNDMwZTM4Njgz NzQ4LzIvMDY5RkFGNDdGRjQ4QUVGNEM5OEY1MDk3MDc0NTMwQTc0QzExMUFCOS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84NGQ1MTgxMC0xOTg3LTQ3 MDEtOGYxZi04NDI1MTExOTY0ZjQvMC8wNjlGQUY0N0ZGNDhBRUY0Qzk4RjUwOTcw NzQ1MzBBNzRDMTExQUI5LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzIzZDVmNjgyLWI1MWItNDgxMi1iOGIxLTQzMGUzODY4Mzc0OC8yLzA2OUZBRjQ3 RkY0OEFFRjRDOThGNTA5NzA3NDUzMEE3NEMxMTFBQjkubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCMdfEJ QW0om06tUOGG/eOrkyHNMjxSy+RYbOIa3QSX4/OP3E6SJJxy+ZR3OmQ5QfHTsqxk iZDFUvTsceFwu6FUUMZSO9rD0p+bD878tfH/EIWe6rF9fGRf8ND5nGJUBAdMMvvq D3GRUHqY6G5Kdc9llT9onFJxs15E92Wy1GZgYfogzZ9vW39wAnBLBeyeZt8a29xf rmPU1pNFr5WQrSRi4h3y3lxjm3YOja1I1E7bqLMPzybnap33pmqsfoHNbHbJA4kt snmoM0JYkP650yerfGOpYC6oHO7b0cxT6JFInkNKmkvUQFPcVgmHVLlnGPPNb6cS RwzCtGi3hxSXCpN3 -----END CERTIFICATE-----Generated at Mon Jan 26 18:23:22 2026 by rpki-client