This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/4/521525856CBBA6D9D2254221C280DC930734AAB8.mft File: 521525856CBBA6D9D2254221C280DC930734AAB8.mft (raw, json) Hash identifier: u8b7FgAwdlgZ3wP/J1371DLuJZCCrA9lzdHPSmGRbNg= Subject key identifier: A7:0E:F2:DF:5D:E8:9B:B2:E0:F6:50:E8:4F:90:4A:20:F6:9A:0F:11 Authority key identifier: 52:15:25:85:6C:BB:A6:D9:D2:25:42:21:C2:80:DC:93:07:34:AA:B8 Certificate issuer: /CN=521525856CBBA6D9D2254221C280DC930734AAB8 Certificate serial: 3C1071CC91BDE25119CA286D9A4685652301C851 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/521525856CBBA6D9D2254221C280DC930734AAB8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/4/521525856CBBA6D9D2254221C280DC930734AAB8.mft Manifest number: FE Signing time: Fri 09 Jan 2026 19:10:50 +0000 Manifest this update: Fri 09 Jan 2026 19:05:50 +0000 Manifest next update: Sat 10 Jan 2026 22:47:50 +0000 Files and hashes: 1: 326130363a613030333a3a2f34382d3438203d3e20323030363736.roa (hash: PNV+6g1yuxZfiOErO1rlD/OjvHSDnl045B3ycAeUEw8=) 2: 39342e32342e3130382e302f32342d3234203d3e20323030363736.roa (hash: hbkkIcLL2dVYKU+9BKXYxvOgTE4cVlfb37zj8sIKpS0=) 3: 326130363a613030333a313333373a3a2f34382d3438203d3e20323030363736.roa (hash: qr/bfrnor+1gB61vuOA1czljaK/VRJBauBs1U2EbENw=) 4: 326130363a613030333a623030623a3a2f34382d3438203d3e20323030363736.roa (hash: kunZD4UEEwcG2nc99Wb+xz1yK+IdIm7SjegbAra8chc=) 5: 326130363a613030333a313131313a3a2f34382d3438203d3e20323030363736.roa (hash: rOXq6KopS7nNrxLenr0thMMbHkGjihkrbeGzvVQ4fNc=) 6: 326130363a613030333a666666663a3a2f34382d3438203d3e203530373535.roa (hash: HVzJ9R68GMwZO9EL/DI2ZLp1a+F6uNrFmfl8+YGeZKc=) 7: 521525856CBBA6D9D2254221C280DC930734AAB8.crl (hash: C0JyPF8MRldU51z/PuL7Rhgg5LGLhAlWoAbt53EBaJs=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/4/521525856CBBA6D9D2254221C280DC930734AAB8.crl rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/4/521525856CBBA6D9D2254221C280DC930734AAB8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/521525856CBBA6D9D2254221C280DC930734AAB8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 21:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:10:71:cc:91:bd:e2:51:19:ca:28:6d:9a:46:85:65:23:01:c8:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521525856CBBA6D9D2254221C280DC930734AAB8 Validity Not Before: Jan 9 19:05:50 2026 GMT Not After : Jan 10 22:47:50 2026 GMT Subject: CN=A70EF2DF5DE89BB2E0F650E84F904A20F69A0F11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:d1:e6:c8:51:ea:47:c9:98:d2:36:d5:fe:28: a3:e4:e0:2d:b0:3e:23:e0:d3:39:07:13:40:d7:c5: 77:9f:a6:7e:85:6c:1b:59:69:3b:6a:2c:b4:5b:bf: c1:4d:63:15:6a:5f:24:13:f2:11:71:6f:bb:20:29: ec:eb:83:6f:93:2c:b8:80:c9:c2:3c:ae:d8:c1:9e: 99:ca:d8:eb:6f:f9:5f:9d:16:2c:70:62:2a:9f:88: 72:76:57:6c:9a:5b:ac:14:bb:5b:aa:6f:0b:ef:ee: fb:f6:e7:cf:1a:ef:4c:69:0d:eb:57:8b:02:7f:4b: 0e:5f:a0:e7:c7:41:93:6c:81:77:fd:19:86:ec:1f: 3e:8c:9a:85:6c:a4:66:ab:a0:20:a1:74:ea:7f:d3: 33:f7:c5:45:fc:e4:a5:5a:aa:6b:b4:89:aa:97:47: 5c:fd:55:51:1e:a5:70:95:fe:d5:39:d6:05:de:da: f0:15:10:02:e9:80:c6:af:9b:1a:27:9b:a3:9a:20: 52:47:eb:8d:fe:56:2c:4f:3a:17:b4:23:5d:bf:ac: 0b:4c:19:03:6e:22:86:da:4b:5d:ad:eb:cc:dd:08: 41:2b:5b:73:5f:99:e4:e7:d8:8d:40:8a:98:ba:1f: db:de:f7:70:df:4d:57:a5:98:35:6b:dd:c8:32:64: 09:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:0E:F2:DF:5D:E8:9B:B2:E0:F6:50:E8:4F:90:4A:20:F6:9A:0F:11 X509v3 Authority Key Identifier: keyid:52:15:25:85:6C:BB:A6:D9:D2:25:42:21:C2:80:DC:93:07:34:AA:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/4/521525856CBBA6D9D2254221C280DC930734AAB8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/521525856CBBA6D9D2254221C280DC930734AAB8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/4/521525856CBBA6D9D2254221C280DC930734AAB8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:17:58:73:da:72:87:1f:82:da:14:83:4e:d7:7c:0a:bf:9b: 3d:c4:8d:68:35:25:c7:c2:25:10:1b:5c:ab:bd:68:6b:1c:cd: ed:a0:37:a9:88:05:db:7f:56:46:35:74:02:03:d2:1b:0d:c0: 1a:3c:29:a6:b5:a1:4b:69:9a:98:7e:e5:da:5e:8f:25:a1:f1: 8a:fc:2e:c9:a5:4f:1f:d3:ca:6d:f8:a2:b5:a4:d0:ab:7f:af: 2d:fd:c3:8f:52:d0:06:d2:df:f5:57:53:c3:5a:78:59:1d:66: e9:21:bb:81:62:48:d2:73:e1:2b:35:ed:03:3b:8e:90:5b:55: cb:cc:c8:7f:8c:a5:bb:f8:f3:95:20:ab:69:2e:f4:30:b8:88: d2:68:0e:91:64:94:7a:e9:de:f2:d7:5a:3a:35:e5:c4:b8:e4: 90:fd:42:6f:48:18:bb:fb:2d:db:d1:93:b8:78:a1:33:89:bf: 89:72:a0:62:c5:e3:d6:c2:ee:a8:b6:dd:17:30:b1:e7:9e:8b: 11:15:40:b7:05:55:a1:77:19:01:72:48:3a:08:33:1f:c9:3c: 63:1c:88:bf:30:91:e9:22:14:e5:9d:e5:89:3a:bb:f0:e3:5c: 6c:e7:59:7d:8c:94:fe:17:cd:36:9c:0e:c6:e0:bd:25:ec:b6: df:69:53:40 -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUPBBxzJG94lEZyihtmkaFZSMByFEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTIxNTI1ODU2Q0JCQTZEOUQyMjU0MjIxQzI4MERDOTMw NzM0QUFCODAeFw0yNjAxMDkxOTA1NTBaFw0yNjAxMTAyMjQ3NTBaMDMxMTAvBgNV BAMTKEE3MEVGMkRGNURFODlCQjJFMEY2NTBFODRGOTA0QTIwRjY5QTBGMTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDX0ebIUepHyZjSNtX+KKPk4C2w PiPg0zkHE0DXxXefpn6FbBtZaTtqLLRbv8FNYxVqXyQT8hFxb7sgKezrg2+TLLiA ycI8rtjBnpnK2Otv+V+dFixwYiqfiHJ2V2yaW6wUu1uqbwvv7vv2588a70xpDetX iwJ/Sw5foOfHQZNsgXf9GYbsHz6MmoVspGaroCChdOp/0zP3xUX85KVaqmu0iaqX R1z9VVEepXCV/tU51gXe2vAVEALpgMavmxonm6OaIFJH643+VixPOhe0I12/rAtM GQNuIobaS12t68zdCEErW3NfmeTn2I1Aipi6H9ve93DfTVelmDVr3cgyZAlHAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUpw7y313om7Lg9lDoT5BKIPaaDxEwHwYDVR0j BBgwFoAUUhUlhWy7ptnSJUIhwoDckwc0qrgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMmFjYTNjYTYtMzRjYy00NzcyLWJhYzAtYTM1ZGQwMTk1 Y2U3LzQvNTIxNTI1ODU2Q0JCQTZEOUQyMjU0MjIxQzI4MERDOTMwNzM0QUFCOC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvNTIxNTI1ODU2Q0JCQTZEOUQyMjU0MjIxQzI4MERDOTMwNzM0 QUFCOC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yYWNhM2NhNi0z NGNjLTQ3NzItYmFjMC1hMzVkZDAxOTVjZTcvNC81MjE1MjU4NTZDQkJBNkQ5RDIy NTQyMjFDMjgwREM5MzA3MzRBQUI4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYhdYc9pyhx+C2hSDTtd8 Cr+bPcSNaDUlx8IlEBtcq71oaxzN7aA3qYgF239WRjV0AgPSGw3AGjwpprWhS2ma mH7l2l6PJaHxivwuyaVPH9PKbfiitaTQq3+vLf3Dj1LQBtLf9VdTw1p4WR1m6SG7 gWJI0nPhKzXtAzuOkFtVy8zIf4ylu/jzlSCraS70MLiI0mgOkWSUeune8tdaOjXl xLjkkP1Cb0gYu/st29GTuHihM4m/iXKgYsXj1sLuqLbdFzCx556LERVAtwVVoXcZ AXJIOggzH8k8YxyIvzCR6SIU5Z3liTq78ONcbOdZfYyU/hfNNpwOxuC9Jey232lT QA== -----END CERTIFICATE-----Generated at Sat Jan 10 04:40:37 2026 by rpki-client