This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2ed4b7eb-17a7-44e1-9ca2-098a32383c90/0/8ABC3240DDFB03E0CCAA63975F272973E713952B.mft File: 8ABC3240DDFB03E0CCAA63975F272973E713952B.mft (raw, json) Hash identifier: xX6ck+yNpwoqkRF1B2hcQOMm2R2f72+VZ1ezSKlT3qU= Subject key identifier: F3:A4:C6:57:FE:32:E9:55:F0:B4:C4:24:6B:F7:F3:52:62:F2:D2:BD Authority key identifier: 8A:BC:32:40:DD:FB:03:E0:CC:AA:63:97:5F:27:29:73:E7:13:95:2B Certificate issuer: /CN=8abc3240ddfb03e0ccaa63975f272973e713952b Certificate serial: 177471FC6172BCEA5AA755FA00A8DED49C7AC04D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/irwyQN37A-DMqmOXXycpc-cTlSs.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2ed4b7eb-17a7-44e1-9ca2-098a32383c90/0/8ABC3240DDFB03E0CCAA63975F272973E713952B.mft Manifest number: 08 Signing time: Tue 20 Jan 2026 23:04:30 +0000 Manifest this update: Tue 20 Jan 2026 22:59:30 +0000 Manifest next update: Thu 22 Jan 2026 02:32:30 +0000 Files and hashes: 1: AS214223.asa (hash: VAiDcJONMDsZuM3F5piV/7wrbAMpvItM3Z9y7cQTNTA=) 2: 8ABC3240DDFB03E0CCAA63975F272973E713952B.crl (hash: 6ZxYTEdrC2WLUgzEzzRc/LiHkQxeJiQyKCQSq+8CtMw=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2ed4b7eb-17a7-44e1-9ca2-098a32383c90/0/8ABC3240DDFB03E0CCAA63975F272973E713952B.crl rsync://rsync.paas.rpki.ripe.net/repository/2ed4b7eb-17a7-44e1-9ca2-098a32383c90/0/8ABC3240DDFB03E0CCAA63975F272973E713952B.mft rsync://rpki.ripe.net/repository/DEFAULT/irwyQN37A-DMqmOXXycpc-cTlSs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:74:71:fc:61:72:bc:ea:5a:a7:55:fa:00:a8:de:d4:9c:7a:c0:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8abc3240ddfb03e0ccaa63975f272973e713952b Validity Not Before: Jan 20 22:59:30 2026 GMT Not After : Jan 22 02:32:30 2026 GMT Subject: CN=F3A4C657FE32E955F0B4C4246BF7F35262F2D2BD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:47:3e:c6:c6:16:15:6d:7c:23:1a:f7:f5:a3: 7d:d2:94:b5:2c:a3:62:25:b4:1f:66:12:f5:ab:fa: 07:38:80:64:22:d3:11:0c:23:95:9f:dd:cd:37:ce: 8f:18:2d:41:50:09:83:25:67:57:07:70:de:39:3e: af:24:c0:12:41:d7:e4:7d:70:1f:25:77:ef:16:0a: dc:6c:a9:51:62:88:aa:8c:c2:e5:a4:99:7f:30:f8: 25:4c:53:49:62:57:0c:15:47:07:d4:02:b0:24:39: b1:44:fd:0f:f2:a2:d3:9c:c2:90:fe:a1:65:38:c0: ee:b2:3c:39:6c:f9:1c:b3:8d:01:3b:90:90:7f:56: 07:b0:e9:84:c5:6b:4d:64:03:a3:4c:93:00:4c:6c: 05:37:e6:0d:9d:fd:e9:9b:16:7b:1e:5a:21:77:d3: 72:45:75:fd:29:1f:89:47:49:39:04:d0:c0:e6:23: 6d:43:ac:de:a0:bc:36:08:cc:63:d5:66:40:8c:4d: 6b:34:f0:2f:ae:d1:c8:f8:7d:ff:93:96:5e:91:b8: 10:88:e2:51:11:55:1f:46:78:eb:e1:a7:fe:1b:d5: 24:54:d3:6d:0a:e9:d2:19:69:94:46:dc:90:85:92: 81:43:19:f9:ff:c4:76:87:bf:9d:5b:4f:a9:80:7d: 86:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:A4:C6:57:FE:32:E9:55:F0:B4:C4:24:6B:F7:F3:52:62:F2:D2:BD X509v3 Authority Key Identifier: keyid:8A:BC:32:40:DD:FB:03:E0:CC:AA:63:97:5F:27:29:73:E7:13:95:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2ed4b7eb-17a7-44e1-9ca2-098a32383c90/0/8ABC3240DDFB03E0CCAA63975F272973E713952B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/irwyQN37A-DMqmOXXycpc-cTlSs.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2ed4b7eb-17a7-44e1-9ca2-098a32383c90/0/8ABC3240DDFB03E0CCAA63975F272973E713952B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:b0:ea:c1:8f:8d:9b:d2:f8:3e:26:b4:20:25:38:c3:97:0a: c1:3e:10:62:9a:55:b0:67:a4:1b:21:e3:d1:97:51:2a:d8:66: df:75:ee:41:da:66:6b:fc:aa:91:2e:3f:72:5a:1a:2d:ba:62: ca:1b:15:46:b6:cd:07:09:cd:ab:b7:b3:8e:a5:cc:fe:4f:c1: 96:1d:c4:8b:cb:7c:a6:18:8d:14:b9:8f:51:8c:21:84:67:1f: 53:a9:e7:36:e9:2d:9b:2b:91:38:1b:d6:47:81:7f:de:5e:d5: 91:67:ee:62:ad:1c:e4:68:c8:5d:c9:36:09:d5:4e:99:90:4f: 54:cd:60:9b:9b:e7:30:45:30:52:81:25:e5:ed:3d:f2:9e:d3: 8e:37:49:63:6e:c3:60:5a:43:53:8e:2a:17:45:30:86:91:33: 5c:4a:eb:72:7e:f9:ac:09:91:45:54:b5:f2:bc:80:ed:6f:8f: 78:fc:44:7a:d6:7f:77:aa:5d:1c:0f:66:68:61:50:33:6d:66: 7b:4d:a5:55:fc:22:66:34:d5:97:f0:4b:fb:6b:ff:61:72:8a: 26:7d:23:ef:c1:a8:5a:6f:4d:d0:3f:77:5c:64:c9:2c:95:4b: 2a:2a:07:ab:93:51:e2:70:21:82:c9:2b:8f:e9:72:39:65:c7: b5:53:f1:a8 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUF3Rx/GFyvOpap1X6AKje1Jx6wE0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGFiYzMyNDBkZGZiMDNlMGNjYWE2Mzk3NWYyNzI5NzNl NzEzOTUyYjAeFw0yNjAxMjAyMjU5MzBaFw0yNjAxMjIwMjMyMzBaMDMxMTAvBgNV BAMTKEYzQTRDNjU3RkUzMkU5NTVGMEI0QzQyNDZCRjdGMzUyNjJGMkQyQkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdRz7GxhYVbXwjGvf1o33SlLUs o2IltB9mEvWr+gc4gGQi0xEMI5Wf3c03zo8YLUFQCYMlZ1cHcN45Pq8kwBJB1+R9 cB8ld+8WCtxsqVFiiKqMwuWkmX8w+CVMU0liVwwVRwfUArAkObFE/Q/yotOcwpD+ oWU4wO6yPDls+RyzjQE7kJB/Vgew6YTFa01kA6NMkwBMbAU35g2d/embFnseWiF3 03JFdf0pH4lHSTkE0MDmI21DrN6gvDYIzGPVZkCMTWs08C+u0cj4ff+Tll6RuBCI 4lERVR9GeOvhp/4b1SRU020K6dIZaZRG3JCFkoFDGfn/xHaHv51bT6mAfYZlAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU86TGV/4y6VXwtMQka/fzUmLy0r0wHwYDVR0j BBgwFoAUirwyQN37A+DMqmOXXycpc+cTlSswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMmVkNGI3ZWItMTdhNy00NGUxLTljYTItMDk4YTMyMzgz YzkwLzAvOEFCQzMyNDBEREZCMDNFMENDQUE2Mzk3NUYyNzI5NzNFNzEzOTUyQi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2lyd3lRTjM3QS1ETXFtT1hYeWNwYy1j VGxTcy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yZWQ0YjdlYi0x N2E3LTQ0ZTEtOWNhMi0wOThhMzIzODNjOTAvMC84QUJDMzI0MERERkIwM0UwQ0NB QTYzOTc1RjI3Mjk3M0U3MTM5NTJCLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgbDqwY+Nm9L4Pia0ICU4 w5cKwT4QYppVsGekGyHj0ZdRKthm33XuQdpma/yqkS4/cloaLbpiyhsVRrbNBwnN q7ezjqXM/k/Blh3Ei8t8phiNFLmPUYwhhGcfU6nnNuktmyuROBvWR4F/3l7VkWfu Yq0c5GjIXck2CdVOmZBPVM1gm5vnMEUwUoEl5e098p7TjjdJY27DYFpDU44qF0Uw hpEzXErrcn75rAmRRVS18ryA7W+PePxEetZ/d6pdHA9maGFQM21me02lVfwiZjTV l/BL+2v/YXKKJn0j78GoWm9N0D93XGTJLJVLKioHq5NR4nAhgskrj+lyOWXHtVPx qA== -----END CERTIFICATE-----Generated at Wed Jan 21 05:45:01 2026 by rpki-client