This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3c8e4e11-3aca-4305-acd4-f05e6c909115/1/0874801164DC95F0AB9CCD4BD304A3EF78E9F39B.mft File: 0874801164DC95F0AB9CCD4BD304A3EF78E9F39B.mft (raw, json) Hash identifier: Otsg4UC6kHHJatkWI8ATysjoHycbMp71Dm3HJY6l4MU= Subject key identifier: 60:08:2A:1C:B4:0E:23:FE:30:5A:4B:9A:BD:3E:3A:8B:07:90:0A:70 Authority key identifier: 08:74:80:11:64:DC:95:F0:AB:9C:CD:4B:D3:04:A3:EF:78:E9:F3:9B Certificate issuer: /CN=0874801164DC95F0AB9CCD4BD304A3EF78E9F39B Certificate serial: 279D5DC03D5B9ABC00AB7C53997A24F5D751A69B Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/0874801164DC95F0AB9CCD4BD304A3EF78E9F39B.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3c8e4e11-3aca-4305-acd4-f05e6c909115/1/0874801164DC95F0AB9CCD4BD304A3EF78E9F39B.mft Manifest number: 0104 Signing time: Tue 20 Jan 2026 08:29:05 +0000 Manifest this update: Tue 20 Jan 2026 08:24:05 +0000 Manifest next update: Wed 21 Jan 2026 11:26:05 +0000 Files and hashes: 1: 0874801164DC95F0AB9CCD4BD304A3EF78E9F39B.crl (hash: 1/HyB5jip122UChWywlZpibCt1i6Ksy0kQ9EQOFNZbg=) 2: 326131343a373538313a383030303a3a2f33362d3430203d3e203530333835.roa (hash: Em5jZEM0Z1oJ1UofjCQGnCq9Pql9aI7sK4Y5UkTysUg=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3c8e4e11-3aca-4305-acd4-f05e6c909115/1/0874801164DC95F0AB9CCD4BD304A3EF78E9F39B.crl rsync://rsync.paas.rpki.ripe.net/repository/3c8e4e11-3aca-4305-acd4-f05e6c909115/1/0874801164DC95F0AB9CCD4BD304A3EF78E9F39B.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/0874801164DC95F0AB9CCD4BD304A3EF78E9F39B.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 11:26:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:9d:5d:c0:3d:5b:9a:bc:00:ab:7c:53:99:7a:24:f5:d7:51:a6:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0874801164DC95F0AB9CCD4BD304A3EF78E9F39B Validity Not Before: Jan 20 08:24:05 2026 GMT Not After : Jan 21 11:26:05 2026 GMT Subject: CN=60082A1CB40E23FE305A4B9ABD3E3A8B07900A70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:66:7a:60:f5:31:33:48:5e:b2:3b:15:2c:51: 23:fd:cc:d5:dd:e5:fe:a2:fb:53:59:03:47:9a:0f: 0a:4b:30:dc:29:8b:d9:16:27:2a:7b:64:2e:2c:06: 8c:53:9c:a4:3f:e9:36:8e:e0:24:7d:e1:d4:e1:1d: 20:b8:3a:5e:85:a7:52:37:66:32:6c:d7:d0:f4:b3: 7d:11:00:be:cc:6a:91:d3:44:e6:fa:a9:cb:b2:85: 07:41:ee:15:29:6b:70:dc:f2:06:f6:b9:b5:b3:a8: 3a:3e:ca:6e:e3:64:e1:7d:14:d8:41:90:5d:8e:fa: 30:3e:59:1f:73:b2:ed:ab:b7:b3:b7:a5:ad:be:1e: dc:a7:22:63:1d:da:bc:0d:c9:3e:d1:a5:15:55:46: 2b:27:59:8d:ee:5a:5b:37:2b:3d:84:db:40:4d:aa: c5:3d:c1:9d:1a:b2:0a:2d:9b:bd:8f:ce:d2:cc:cd: de:48:bf:3e:8b:8a:1c:ac:90:91:56:77:c3:a1:26: 95:f2:52:5f:71:47:26:37:f5:29:8a:b2:50:5e:82: ba:b5:ba:eb:48:4f:79:fa:49:64:92:f4:68:3e:d3: 46:fa:8f:5d:62:fb:72:b4:17:6c:eb:b0:87:41:d3: c3:be:f3:0b:8c:cf:aa:72:1d:c2:74:9f:7b:7d:d4: f3:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:08:2A:1C:B4:0E:23:FE:30:5A:4B:9A:BD:3E:3A:8B:07:90:0A:70 X509v3 Authority Key Identifier: keyid:08:74:80:11:64:DC:95:F0:AB:9C:CD:4B:D3:04:A3:EF:78:E9:F3:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/3c8e4e11-3aca-4305-acd4-f05e6c909115/1/0874801164DC95F0AB9CCD4BD304A3EF78E9F39B.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/0874801164DC95F0AB9CCD4BD304A3EF78E9F39B.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3c8e4e11-3aca-4305-acd4-f05e6c909115/1/0874801164DC95F0AB9CCD4BD304A3EF78E9F39B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:c3:55:7d:f9:2e:2e:c9:fd:1a:85:5e:c5:bd:7a:2c:c8:10: f6:fa:03:3e:71:a7:7f:ab:2d:68:00:1f:5d:46:51:9a:7d:3f: af:c2:b3:99:7d:1c:b3:d5:51:96:ba:d2:a6:75:f9:36:fa:82: d0:89:34:f9:0a:bd:7f:b4:53:f5:ea:39:44:a8:be:47:26:7b: 3a:63:aa:3d:98:d2:b0:68:55:cc:8b:1f:dc:93:13:d6:ea:88: 35:37:8a:46:52:18:8b:e7:4a:6e:16:48:ad:97:11:0a:80:65: c3:d2:95:4e:89:81:36:32:16:66:d4:2f:2b:33:a7:d1:01:cd: da:ba:82:ad:ea:d6:3f:e8:c9:73:49:8e:4e:a5:9c:9e:25:ad: 14:f5:24:1b:f7:06:88:e3:f3:a7:5f:d1:08:3e:27:36:9f:cb: 26:e3:f4:71:0f:18:27:3c:d2:e6:ac:c1:78:10:89:4f:5b:83: b8:36:e8:cc:d2:5d:7e:e1:07:13:bd:af:77:91:17:76:96:ac: d1:f1:8a:95:c5:1e:11:c0:7c:ab:56:7a:5c:10:16:af:22:d9: c8:d2:13:12:e1:81:6f:6c:61:5a:f0:e5:c2:1e:46:48:71:54: 78:44:b6:89:82:94:d8:43:c1:76:be:38:8b:7d:fa:00:53:06: 3b:15:93:b8 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUJ51dwD1bmrwAq3xTmXok9ddRppswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDg3NDgwMTE2NERDOTVGMEFCOUNDRDRCRDMwNEEzRUY3 OEU5RjM5QjAeFw0yNjAxMjAwODI0MDVaFw0yNjAxMjExMTI2MDVaMDMxMTAvBgNV BAMTKDYwMDgyQTFDQjQwRTIzRkUzMDVBNEI5QUJEM0UzQThCMDc5MDBBNzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrZnpg9TEzSF6yOxUsUSP9zNXd 5f6i+1NZA0eaDwpLMNwpi9kWJyp7ZC4sBoxTnKQ/6TaO4CR94dThHSC4Ol6Fp1I3 ZjJs19D0s30RAL7MapHTROb6qcuyhQdB7hUpa3Dc8gb2ubWzqDo+ym7jZOF9FNhB kF2O+jA+WR9zsu2rt7O3pa2+HtynImMd2rwNyT7RpRVVRisnWY3uWls3Kz2E20BN qsU9wZ0asgotm72PztLMzd5Ivz6LihyskJFWd8OhJpXyUl9xRyY39SmKslBegrq1 uutIT3n6SWSS9Gg+00b6j11i+3K0F2zrsIdB08O+8wuMz6pyHcJ0n3t91PP5AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUYAgqHLQOI/4wWkuavT46iweQCnAwHwYDVR0j BBgwFoAUCHSAEWTclfCrnM1L0wSj73jp85swDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvM2M4ZTRlMTEtM2FjYS00MzA1LWFjZDQtZjA1ZTZjOTA5 MTE1LzEvMDg3NDgwMTE2NERDOTVGMEFCOUNDRDRCRDMwNEEzRUY3OEU5RjM5Qi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8wODc0ODAxMTY0REM5NUYwQUI5Q0NENEJE MzA0QTNFRjc4RTlGMzlCLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzNjOGU0ZTExLTNhY2EtNDMwNS1hY2Q0LWYwNWU2YzkwOTExNS8xLzA4NzQ4MDEx NjREQzk1RjBBQjlDQ0Q0QkQzMDRBM0VGNzhFOUYzOUIubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBIw1V9 +S4uyf0ahV7FvXosyBD2+gM+cad/qy1oAB9dRlGafT+vwrOZfRyz1VGWutKmdfk2 +oLQiTT5Cr1/tFP16jlEqL5HJns6Y6o9mNKwaFXMix/ckxPW6og1N4pGUhiL50pu FkitlxEKgGXD0pVOiYE2MhZm1C8rM6fRAc3auoKt6tY/6MlzSY5OpZyeJa0U9SQb 9waI4/OnX9EIPic2n8sm4/RxDxgnPNLmrMF4EIlPW4O4NujM0l1+4QcTva93kRd2 lqzR8YqVxR4RwHyrVnpcEBavItnI0hMS4YFvbGFa8OXCHkZIcVR4RLaJgpTYQ8F2 vjiLffoAUwY7FZO4 -----END CERTIFICATE-----Generated at Tue Jan 20 23:52:50 2026 by rpki-client