This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/3/DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.mft File: DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.mft (raw, json) Hash identifier: 1IFD+TUoJT+6Dra9FoDTHeWF+ww5JpM9+WjiHROm2jY= Subject key identifier: A2:BD:D0:DD:8D:57:DD:F2:F9:97:7F:3B:21:24:A2:2C:07:85:2A:3B Authority key identifier: DB:5B:BD:B3:02:10:31:4E:90:40:B6:C9:9D:BF:69:EE:85:FA:4E:E1 Certificate issuer: /CN=DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1 Certificate serial: 1167564263ABE7F33DE09157BF759BB3D5DC8C66 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/3/DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.mft Manifest number: 06 Signing time: Sun 18 Jan 2026 06:58:34 +0000 Manifest this update: Sun 18 Jan 2026 06:53:34 +0000 Manifest next update: Mon 19 Jan 2026 08:00:34 +0000 Files and hashes: 1: 326130663a316363353a326430323a3a2f34382d3438203d3e20323134393535.roa (hash: VVawYWTXQjQEBU4mla6uw3/riEywDPfxqIz2zpx9eTU=) 2: DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.crl (hash: +IIlGLLBc9eLiN6Bl38GWHdC9SziGBlck+Q7Ewv0WkQ=) 3: 326130663a316363353a326430313a3a2f34382d3438203d3e20323134393535.roa (hash: l0RMqMiAhgGDzLpuD3ZJuPudrozfegvLREqyl+4aP2I=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/3/DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.crl rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/3/DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.mft rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.cer rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.crl rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.mft rsync://rpki.ripe.net/repository/DEFAULT/QR4tQR1oe8tEScPfRb7twEEAfZQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:67:56:42:63:ab:e7:f3:3d:e0:91:57:bf:75:9b:b3:d5:dc:8c:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1 Validity Not Before: Jan 18 06:53:34 2026 GMT Not After : Jan 19 08:00:34 2026 GMT Subject: CN=A2BDD0DD8D57DDF2F9977F3B2124A22C07852A3B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:87:7a:40:1e:57:43:d7:9d:bd:3f:9d:ed:de: 4c:ce:73:05:e5:14:10:4d:5e:af:f1:d7:66:48:e4: 82:38:59:75:a5:ae:f6:74:d7:43:44:d6:f5:aa:4c: c4:e3:96:5b:cf:14:e1:04:64:60:26:db:49:3e:76: ae:86:85:39:79:cb:38:fa:6a:3f:89:6c:09:e5:6a: 6a:c8:0d:a3:1c:08:fe:fd:4e:8d:d8:ad:7f:3e:01: d5:ae:69:e9:d1:9b:ec:dd:69:10:59:4c:6d:5f:e0: d5:cf:a2:c6:e7:dd:9a:50:5e:81:d0:9f:52:15:56: 5f:65:70:33:d6:57:6f:00:7d:0e:57:a4:3d:60:7d: b9:df:71:13:98:3b:67:6b:41:a6:fe:ee:2f:b1:64: 29:e5:34:52:c7:ce:d9:e7:1a:94:6b:f4:3a:24:1c: 9b:f4:54:14:0a:d9:d3:93:74:e7:c5:3a:12:86:d7: da:ef:b7:54:7f:4e:50:fc:e3:39:b1:97:b3:7f:0f: f5:5e:05:7b:f9:3b:10:5a:6e:cd:0f:0d:50:39:2a: e3:bc:02:d2:8a:70:97:7e:88:5f:09:f3:e5:ec:f7: 0d:ac:0a:3b:a6:b8:e5:e8:d8:d2:47:00:f2:71:9a: 58:af:9a:d3:50:a4:c4:3b:d9:90:a5:c2:b4:cf:3a: e7:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:BD:D0:DD:8D:57:DD:F2:F9:97:7F:3B:21:24:A2:2C:07:85:2A:3B X509v3 Authority Key Identifier: keyid:DB:5B:BD:B3:02:10:31:4E:90:40:B6:C9:9D:BF:69:EE:85:FA:4E:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/3/DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/3/DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:a3:75:c4:bd:3d:5d:73:71:89:ca:8c:98:be:89:cf:f8:62: 3b:a9:28:9f:0c:29:cd:87:ed:26:83:76:cd:28:a2:43:3b:26: 55:d9:b0:89:96:8c:17:c8:05:fd:80:2c:87:1f:f8:dc:e6:92: 0f:cf:0f:e7:f6:44:7e:73:9a:d6:e1:0e:f7:eb:23:b9:64:91: 9d:c9:b1:11:65:76:19:13:81:43:f9:67:b7:2c:d3:0f:61:40: b4:ba:62:13:19:15:8a:16:3a:0b:9c:18:5f:f4:95:9c:c6:18: 5b:1d:75:e5:e4:72:60:49:dc:92:dd:14:36:19:df:23:31:f0: ee:f9:1f:9e:b3:a2:09:17:5b:07:b6:b8:42:ec:da:b4:55:0b: 85:57:ae:c1:a4:c3:7c:79:de:7e:f3:13:5d:5c:1b:ba:74:c3: 8a:5b:38:65:26:64:32:92:b3:85:db:16:a7:b4:bc:93:2b:75: bd:82:2a:39:cf:1b:ee:36:4e:8a:93:b8:5a:3e:cc:8d:bb:ac: 1b:1e:c8:76:cb:46:94:95:35:b7:35:e0:95:9b:1c:a9:a0:0e: e4:67:dc:d6:a4:c5:ed:76:7c:3b:92:5c:73:17:ae:77:7f:44: 38:88:e1:70:69:33:69:5e:4e:61:2f:9d:ae:5e:80:3c:44:9c: f9:e6:ba:a8 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUEWdWQmOr5/M94JFXv3Wbs9XcjGYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREI1QkJEQjMwMjEwMzE0RTkwNDBCNkM5OURCRjY5RUU4 NUZBNEVFMTAeFw0yNjAxMTgwNjUzMzRaFw0yNjAxMTkwODAwMzRaMDMxMTAvBgNV BAMTKEEyQkREMEREOEQ1N0RERjJGOTk3N0YzQjIxMjRBMjJDMDc4NTJBM0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAh3pAHldD1529P53t3kzOcwXl FBBNXq/x12ZI5II4WXWlrvZ010NE1vWqTMTjllvPFOEEZGAm20k+dq6GhTl5yzj6 aj+JbAnlamrIDaMcCP79To3YrX8+AdWuaenRm+zdaRBZTG1f4NXPosbn3ZpQXoHQ n1IVVl9lcDPWV28AfQ5XpD1gfbnfcROYO2drQab+7i+xZCnlNFLHztnnGpRr9Dok HJv0VBQK2dOTdOfFOhKG19rvt1R/TlD84zmxl7N/D/VeBXv5OxBabs0PDVA5KuO8 AtKKcJd+iF8J8+Xs9w2sCjumuOXo2NJHAPJxmlivmtNQpMQ72ZClwrTPOudVAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUor3Q3Y1X3fL5l387ISSiLAeFKjswHwYDVR0j BBgwFoAU21u9swIQMU6QQLbJnb9p7oX6TuEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvM2Y5OWU2NmQtNGM3Yi00MTMwLTkxZDUtNGZiZDg0MzU3 NzkyLzMvREI1QkJEQjMwMjEwMzE0RTkwNDBCNkM5OURCRjY5RUU4NUZBNEVFMS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84YWZiNWZlMi0zYzJhLTQ5 MzktOTVlOS0wMDc3YjgwYjRmMGUvMC9EQjVCQkRCMzAyMTAzMTRFOTA0MEI2Qzk5 REJGNjlFRTg1RkE0RUUxLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzNmOTllNjZkLTRjN2ItNDEzMC05MWQ1LTRmYmQ4NDM1Nzc5Mi8zL0RCNUJCREIz MDIxMDMxNEU5MDQwQjZDOTlEQkY2OUVFODVGQTRFRTEubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBso3XE vT1dc3GJyoyYvonP+GI7qSifDCnNh+0mg3bNKKJDOyZV2bCJlowXyAX9gCyHH/jc 5pIPzw/n9kR+c5rW4Q736yO5ZJGdybERZXYZE4FD+We3LNMPYUC0umITGRWKFjoL nBhf9JWcxhhbHXXl5HJgSdyS3RQ2Gd8jMfDu+R+es6IJF1sHtrhC7Nq0VQuFV67B pMN8ed5+8xNdXBu6dMOKWzhlJmQykrOF2xantLyTK3W9gio5zxvuNk6Kk7haPsyN u6wbHsh2y0aUlTW3NeCVmxypoA7kZ9zWpMXtdnw7klxzF653f0Q4iOFwaTNpXk5h L52uXoA8RJz55rqo -----END CERTIFICATE-----Generated at Sun Jan 18 14:11:55 2026 by rpki-client