This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2ed4b7eb-17a7-44e1-9ca2-098a32383c90/1/34DEF610B33BA719BA344A660C4BDA8333112372.mft File: 34DEF610B33BA719BA344A660C4BDA8333112372.mft (raw, json) Hash identifier: DX9DsZMkYiyLpn+zzwiv7S0+LD8Fv4yUVkGyV+enAxs= Subject key identifier: D5:BC:71:39:BD:1B:6F:88:6A:7B:10:F2:EC:34:58:17:CC:07:73:B4 Authority key identifier: 34:DE:F6:10:B3:3B:A7:19:BA:34:4A:66:0C:4B:DA:83:33:11:23:72 Certificate issuer: /CN=34DEF610B33BA719BA344A660C4BDA8333112372 Certificate serial: 1B0F8FFB32C498148062C91F2D016A3B50CA6002 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/34DEF610B33BA719BA344A660C4BDA8333112372.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2ed4b7eb-17a7-44e1-9ca2-098a32383c90/1/34DEF610B33BA719BA344A660C4BDA8333112372.mft Manifest number: 07 Signing time: Tue 20 Jan 2026 03:54:30 +0000 Manifest this update: Tue 20 Jan 2026 03:49:30 +0000 Manifest next update: Wed 21 Jan 2026 06:21:30 +0000 Files and hashes: 1: 326131343a373538313a333730303a3a2f34302d3438203d3e20323134323233.roa (hash: OM1UlQNl1s10FY6z5IKjFPtWVdQjSiXHznymmRP/YvA=) 2: 326131343a373538363a373030303a3a2f33362d3438203d3e20323134323233.roa (hash: cR9vCxq+QNlbo4d+tncW/wsq3Jmq5gmf6sfBypzY7KM=) 3: 34DEF610B33BA719BA344A660C4BDA8333112372.crl (hash: nUX1sZcLYoebULhStknhJ7NjgSRWUh7XTROU2vtYBzI=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2ed4b7eb-17a7-44e1-9ca2-098a32383c90/1/34DEF610B33BA719BA344A660C4BDA8333112372.crl rsync://rsync.paas.rpki.ripe.net/repository/2ed4b7eb-17a7-44e1-9ca2-098a32383c90/1/34DEF610B33BA719BA344A660C4BDA8333112372.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/34DEF610B33BA719BA344A660C4BDA8333112372.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 06:21:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:0f:8f:fb:32:c4:98:14:80:62:c9:1f:2d:01:6a:3b:50:ca:60:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34DEF610B33BA719BA344A660C4BDA8333112372 Validity Not Before: Jan 20 03:49:30 2026 GMT Not After : Jan 21 06:21:30 2026 GMT Subject: CN=D5BC7139BD1B6F886A7B10F2EC345817CC0773B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:3c:fb:60:44:1c:00:97:8c:4f:0e:dd:65:a6: ef:78:9e:15:c1:89:96:ff:df:c1:28:43:b4:09:4f: e2:c8:a2:09:ee:97:8f:8e:fa:2a:62:9a:a5:87:b4: 8a:a8:25:a6:9f:c1:22:bd:56:09:15:8d:18:b2:dd: c1:ff:b8:ae:90:91:dd:70:9e:70:7c:8f:42:c1:f0: 28:37:31:7b:65:3b:06:9d:00:c4:86:cb:aa:ba:ce: 78:49:1e:26:33:c6:ea:e2:55:34:35:59:24:20:d2: 1d:1c:ef:cd:7a:da:cf:28:a3:82:49:e4:80:6b:9e: 14:04:a4:a5:b2:70:6f:3d:a8:86:2f:56:14:9c:5c: aa:4b:c6:d2:89:ef:23:ee:b3:3a:64:ab:f7:98:a3: 1c:ef:24:d0:31:17:09:28:b1:d8:83:5a:8c:8e:4f: 25:79:99:b6:5f:b8:01:5b:4f:2e:00:ec:d0:44:5f: 54:f3:4e:57:68:91:a8:b1:a2:d7:f2:1f:db:82:75: 15:c5:04:07:ab:c2:92:18:5b:84:c9:85:3c:6d:68: 63:9a:e7:8b:6b:df:21:c9:36:d3:05:b3:9c:5b:10: 73:6a:c3:ff:39:8b:4e:99:25:3d:0e:f8:2a:19:cc: f3:ce:6a:a8:f1:3c:91:7d:92:48:25:f2:3b:90:d6: 80:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:BC:71:39:BD:1B:6F:88:6A:7B:10:F2:EC:34:58:17:CC:07:73:B4 X509v3 Authority Key Identifier: keyid:34:DE:F6:10:B3:3B:A7:19:BA:34:4A:66:0C:4B:DA:83:33:11:23:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2ed4b7eb-17a7-44e1-9ca2-098a32383c90/1/34DEF610B33BA719BA344A660C4BDA8333112372.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/34DEF610B33BA719BA344A660C4BDA8333112372.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2ed4b7eb-17a7-44e1-9ca2-098a32383c90/1/34DEF610B33BA719BA344A660C4BDA8333112372.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:44:31:e9:5c:50:f0:18:02:bd:2b:f2:25:e6:85:12:4e:c9: 93:c2:a4:e7:5f:e5:77:f9:b8:7c:5d:46:07:d0:ad:f3:bd:71: 19:04:60:39:77:0d:1c:45:4c:74:1f:fa:b5:38:c8:43:8a:7d: da:f5:c8:b0:09:36:7a:84:b2:d7:a4:1d:04:b3:01:fd:1a:2a: 63:b5:78:97:dc:04:e5:1e:c6:89:9b:55:d2:55:f0:46:60:cf: ab:f3:ec:2d:e6:72:e7:d9:e6:20:fb:0c:7f:90:c5:a0:c3:4d: 15:67:20:a8:67:ef:07:65:5f:86:c3:7f:ea:89:3f:fa:e8:e9: 5c:ec:7a:a9:7c:89:b8:eb:57:54:ae:79:3d:10:29:72:7f:2d: 2c:e3:f1:f3:e6:e4:36:f8:f1:e6:ce:e7:f7:c2:75:02:63:94: d9:86:a6:3a:8d:31:64:97:b9:05:6f:bf:36:87:32:b1:9e:86: 14:5f:7c:31:7b:2d:b5:46:a0:34:21:83:6b:5b:7c:4d:0e:63: 5b:17:11:f2:ad:45:ec:71:e8:fc:41:7f:23:6f:59:0a:7f:16: f3:56:25:d6:97:af:b1:6a:4a:e7:7d:f6:51:4b:c8:b4:a4:76: ce:71:28:66:a8:c6:fa:1f:bc:b4:7b:12:3a:d2:14:8f:c2:3f: 03:3a:7f:23 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUGw+P+zLEmBSAYskfLQFqO1DKYAIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzRERUY2MTBCMzNCQTcxOUJBMzQ0QTY2MEM0QkRBODMz MzExMjM3MjAeFw0yNjAxMjAwMzQ5MzBaFw0yNjAxMjEwNjIxMzBaMDMxMTAvBgNV BAMTKEQ1QkM3MTM5QkQxQjZGODg2QTdCMTBGMkVDMzQ1ODE3Q0MwNzczQjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfPPtgRBwAl4xPDt1lpu94nhXB iZb/38EoQ7QJT+LIognul4+O+ipimqWHtIqoJaafwSK9VgkVjRiy3cH/uK6Qkd1w nnB8j0LB8Cg3MXtlOwadAMSGy6q6znhJHiYzxuriVTQ1WSQg0h0c78162s8oo4JJ 5IBrnhQEpKWycG89qIYvVhScXKpLxtKJ7yPuszpkq/eYoxzvJNAxFwkosdiDWoyO TyV5mbZfuAFbTy4A7NBEX1TzTldokaixotfyH9uCdRXFBAerwpIYW4TJhTxtaGOa 54tr3yHJNtMFs5xbEHNqw/85i06ZJT0O+CoZzPPOaqjxPJF9kkgl8juQ1oC/AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU1bxxOb0bb4hqexDy7DRYF8wHc7QwHwYDVR0j BBgwFoAUNN72ELM7pxm6NEpmDEvagzMRI3IwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMmVkNGI3ZWItMTdhNy00NGUxLTljYTItMDk4YTMyMzgz YzkwLzEvMzRERUY2MTBCMzNCQTcxOUJBMzQ0QTY2MEM0QkRBODMzMzExMjM3Mi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8zNERFRjYxMEIzM0JBNzE5QkEzNDRBNjYw QzRCREE4MzMzMTEyMzcyLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzJlZDRiN2ViLTE3YTctNDRlMS05Y2EyLTA5OGEzMjM4M2M5MC8xLzM0REVGNjEw QjMzQkE3MTlCQTM0NEE2NjBDNEJEQTgzMzMxMTIzNzIubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCXRDHp XFDwGAK9K/Il5oUSTsmTwqTnX+V3+bh8XUYH0K3zvXEZBGA5dw0cRUx0H/q1OMhD in3a9ciwCTZ6hLLXpB0EswH9GipjtXiX3ATlHsaJm1XSVfBGYM+r8+wt5nLn2eYg +wx/kMWgw00VZyCoZ+8HZV+Gw3/qiT/66Olc7HqpfIm461dUrnk9EClyfy0s4/Hz 5uQ2+PHmzuf3wnUCY5TZhqY6jTFkl7kFb782hzKxnoYUX3wxey21RqA0IYNrW3xN DmNbFxHyrUXscej8QX8jb1kKfxbzViXWl6+xakrnffZRS8i0pHbOcShmqMb6H7y0 exI60hSPwj8DOn8j -----END CERTIFICATE-----Generated at Tue Jan 20 23:48:59 2026 by rpki-client