This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/1/8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E.mft File: 8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E.mft (raw, json) Hash identifier: XZ6n/QcWU7f/ThqeGh7qTY1qHtEvyOsiOrackXbQzZg= Subject key identifier: 4A:C4:59:B1:47:AD:C3:F7:3B:9D:C8:E6:B4:BF:A0:38:DD:C2:F4:50 Authority key identifier: 8B:CE:7E:72:AB:BB:AD:00:53:63:93:A0:84:0B:BA:0A:BF:3A:A2:8E Certificate issuer: /CN=8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E Certificate serial: 0AD97311EBA6A29E83BB2FC57823619AC6D46603 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/1/8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E.mft Manifest number: 35 Signing time: Sun 18 Jan 2026 09:01:41 +0000 Manifest this update: Sun 18 Jan 2026 08:56:41 +0000 Manifest next update: Mon 19 Jan 2026 12:30:41 +0000 Files and hashes: 1: 326130663a316363353a313730303a3a2f34302d3438203d3e20323032393339.roa (hash: UEeOHO3GGvYWxfR4E2Tbh4+FLPM0KvboVmPBm/zMcrM=) 2: 8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E.crl (hash: SQgs/rHtxJZYadTbEMzqkk4GvLJZKAb4A4JqVyJrWqw=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/1/8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E.crl rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/1/8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E.mft rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E.cer rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.crl rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.mft rsync://rpki.ripe.net/repository/DEFAULT/QR4tQR1oe8tEScPfRb7twEEAfZQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:d9:73:11:eb:a6:a2:9e:83:bb:2f:c5:78:23:61:9a:c6:d4:66:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E Validity Not Before: Jan 18 08:56:41 2026 GMT Not After : Jan 19 12:30:41 2026 GMT Subject: CN=4AC459B147ADC3F73B9DC8E6B4BFA038DDC2F450 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:b0:41:29:b4:51:6e:0e:08:8b:c2:2a:d1:a8: 08:c3:36:b0:9c:a8:2d:eb:db:79:40:6c:5b:e0:c4: 19:ef:bd:ff:cd:5f:7c:d1:20:dc:5d:bb:c5:f6:df: f8:0f:3e:99:7b:9f:a8:c3:44:e2:34:ee:41:ba:a1: d3:1a:e5:55:46:12:56:9f:ca:a1:de:8f:58:a8:0f: 8a:21:fc:a2:d5:eb:bc:ef:59:41:93:18:9a:46:86: da:26:b1:0b:2f:84:81:55:51:aa:e1:86:6a:af:cf: cf:e6:f5:4b:96:d4:ca:c3:74:c5:25:1d:ea:d0:7c: 6b:92:e4:20:d9:2d:41:87:cd:b3:03:cb:df:18:39: 4e:7e:1b:ae:be:29:5c:17:96:1c:fb:2b:51:7b:ec: 83:0f:14:ca:3c:e9:94:35:eb:56:17:33:eb:b5:c7: ec:e8:05:51:c3:15:4a:8d:41:f0:8b:12:92:4a:c9: 5e:e9:d8:5b:e1:34:45:48:cb:4a:09:28:53:83:e2: bf:2c:f4:03:86:23:3e:70:58:d2:fa:94:f8:7e:57: 23:23:51:94:9a:8b:4b:75:2f:1f:7d:02:98:5f:82: 3f:ff:01:4a:05:d9:97:0e:c9:c7:4f:0f:82:97:a8: 15:4c:db:a9:ca:2d:85:8f:7c:c4:a8:45:b0:5f:74: 77:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:C4:59:B1:47:AD:C3:F7:3B:9D:C8:E6:B4:BF:A0:38:DD:C2:F4:50 X509v3 Authority Key Identifier: keyid:8B:CE:7E:72:AB:BB:AD:00:53:63:93:A0:84:0B:BA:0A:BF:3A:A2:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/1/8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/1/8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:f3:fd:6b:e3:94:99:63:18:d5:b8:dc:be:91:76:56:1f:d9: c8:cd:4c:4b:cf:40:1d:42:a3:73:00:2a:00:ff:c7:6c:6c:fe: 19:b4:e8:b4:25:5e:ee:e4:2b:eb:56:02:5d:82:62:a9:61:bd: 66:ed:6e:e2:51:8a:de:94:6d:35:89:1f:ee:b3:41:c9:1e:1e: 17:3e:82:29:da:5d:b6:9c:e7:b2:c4:45:57:b2:0e:78:13:ab: eb:85:1a:2c:73:9a:91:9f:e6:64:dc:24:c5:77:be:39:7f:6a: f9:1f:5f:ee:aa:27:5c:b9:d7:17:43:67:83:45:8d:da:5b:fe: 31:8e:03:17:89:8f:9b:b1:af:94:a6:34:ef:a7:8d:e9:ec:27: 53:6b:c0:6e:4a:98:06:44:fa:07:46:d0:0d:92:56:1f:25:82: 58:eb:89:e5:5d:cc:b1:e9:f5:38:b2:35:04:53:9b:42:7d:76: fe:54:d5:28:6b:0d:44:a5:51:d4:57:5a:e3:75:4a:86:46:89: d0:e3:84:94:26:1b:f4:03:e8:da:77:e1:8c:9e:43:50:76:53: 15:d6:18:2e:d8:59:b0:37:6c:37:62:34:9e:fd:f1:f7:c8:9b: 6e:36:31:d7:57:ee:d0:e0:96:fe:f0:c4:30:dd:05:42:74:c0: f6:49:5c:24 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUCtlzEeumop6Duy/FeCNhmsbUZgMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEJDRTdFNzJBQkJCQUQwMDUzNjM5M0EwODQwQkJBMEFC RjNBQTI4RTAeFw0yNjAxMTgwODU2NDFaFw0yNjAxMTkxMjMwNDFaMDMxMTAvBgNV BAMTKDRBQzQ1OUIxNDdBREMzRjczQjlEQzhFNkI0QkZBMDM4RERDMkY0NTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbsEEptFFuDgiLwirRqAjDNrCc qC3r23lAbFvgxBnvvf/NX3zRINxdu8X23/gPPpl7n6jDROI07kG6odMa5VVGElaf yqHej1ioD4oh/KLV67zvWUGTGJpGhtomsQsvhIFVUarhhmqvz8/m9UuW1MrDdMUl HerQfGuS5CDZLUGHzbMDy98YOU5+G66+KVwXlhz7K1F77IMPFMo86ZQ161YXM+u1 x+zoBVHDFUqNQfCLEpJKyV7p2FvhNEVIy0oJKFOD4r8s9AOGIz5wWNL6lPh+VyMj UZSai0t1Lx99Aphfgj//AUoF2ZcOycdPD4KXqBVM26nKLYWPfMSoRbBfdHcZAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUSsRZsUetw/c7ncjmtL+gON3C9FAwHwYDVR0j BBgwFoAUi85+cqu7rQBTY5OghAu6Cr86oo4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMzA4ZjhiM2UtMDUxZS00YzQ0LTljYjUtN2I4MzMxZWY5 YTA0LzEvOEJDRTdFNzJBQkJCQUQwMDUzNjM5M0EwODQwQkJBMEFCRjNBQTI4RS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84YWZiNWZlMi0zYzJhLTQ5 MzktOTVlOS0wMDc3YjgwYjRmMGUvMC84QkNFN0U3MkFCQkJBRDAwNTM2MzkzQTA4 NDBCQkEwQUJGM0FBMjhFLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzMwOGY4YjNlLTA1MWUtNGM0NC05Y2I1LTdiODMzMWVmOWEwNC8xLzhCQ0U3RTcy QUJCQkFEMDA1MzYzOTNBMDg0MEJCQTBBQkYzQUEyOEUubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCX8/1r 45SZYxjVuNy+kXZWH9nIzUxLz0AdQqNzACoA/8dsbP4ZtOi0JV7u5CvrVgJdgmKp Yb1m7W7iUYrelG01iR/us0HJHh4XPoIp2l22nOeyxEVXsg54E6vrhRosc5qRn+Zk 3CTFd745f2r5H1/uqidcudcXQ2eDRY3aW/4xjgMXiY+bsa+UpjTvp43p7CdTa8Bu SpgGRPoHRtANklYfJYJY64nlXcyx6fU4sjUEU5tCfXb+VNUoaw1EpVHUV1rjdUqG RonQ44SUJhv0A+jad+GMnkNQdlMV1hgu2FmwN2w3YjSe/fH3yJtuNjHXV+7Q4Jb+ 8MQw3QVCdMD2SVwk -----END CERTIFICATE-----Generated at Sun Jan 18 14:12:47 2026 by rpki-client