This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/40cba61d-4056-46a9-9392-a61dfc500dc9/1/2A91778ACCE76333081468D9784DE132C2985976.mft File: 2A91778ACCE76333081468D9784DE132C2985976.mft (raw, json) Hash identifier: f59DrW19T8YqWhO+NMkYKeQPx6Tp2/a4jXEO/ohP0wE= Subject key identifier: 60:C7:C6:76:38:02:7C:43:52:11:BF:B8:D8:D6:52:98:3D:F4:06:18 Authority key identifier: 2A:91:77:8A:CC:E7:63:33:08:14:68:D9:78:4D:E1:32:C2:98:59:76 Certificate issuer: /CN=2A91778ACCE76333081468D9784DE132C2985976 Certificate serial: 3DFA946AA7B251531F5471A501F82A2F5C4B0266 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/2A91778ACCE76333081468D9784DE132C2985976.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/40cba61d-4056-46a9-9392-a61dfc500dc9/1/2A91778ACCE76333081468D9784DE132C2985976.mft Manifest number: 0C Signing time: Mon 02 Feb 2026 00:50:25 +0000 Manifest this update: Mon 02 Feb 2026 00:45:25 +0000 Manifest next update: Tue 03 Feb 2026 04:02:25 +0000 Files and hashes: 1: 2A91778ACCE76333081468D9784DE132C2985976.crl (hash: IMvq1gTYvVPhMObz/hAqUrOn8RAFkCReizWQverQP7s=) 2: 326130663a316363353a323630303a3a2f34302d3438203d3e20323032333335.roa (hash: nzPrfU7/0C1uT8wK0Kkdb/GSWbML8Xt4edf9nME+bEg=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/40cba61d-4056-46a9-9392-a61dfc500dc9/1/2A91778ACCE76333081468D9784DE132C2985976.crl rsync://rsync.paas.rpki.ripe.net/repository/40cba61d-4056-46a9-9392-a61dfc500dc9/1/2A91778ACCE76333081468D9784DE132C2985976.mft rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/2A91778ACCE76333081468D9784DE132C2985976.cer rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.crl rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.mft rsync://rpki.ripe.net/repository/DEFAULT/QR4tQR1oe8tEScPfRb7twEEAfZQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 00:20:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:fa:94:6a:a7:b2:51:53:1f:54:71:a5:01:f8:2a:2f:5c:4b:02:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A91778ACCE76333081468D9784DE132C2985976 Validity Not Before: Feb 2 00:45:25 2026 GMT Not After : Feb 3 04:02:25 2026 GMT Subject: CN=60C7C67638027C435211BFB8D8D652983DF40618 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:4b:7e:5f:12:87:4e:87:27:aa:56:8b:cc:0d: c0:59:43:c9:47:58:b8:6e:be:b8:99:09:d2:63:c1: 63:7c:a8:1a:4a:99:81:81:87:b4:bf:f1:5c:65:62: 7b:04:44:1b:df:90:bb:94:c9:68:f4:e9:ea:86:7b: 56:03:c8:d9:85:73:3b:1a:57:c0:11:7b:06:16:22: 52:50:20:60:77:cf:d0:ba:ac:cd:c8:b8:50:b7:9e: 9d:72:ef:48:3d:1e:02:c1:28:e5:1d:cd:29:8f:d5: 7b:c1:17:a4:e8:0d:73:5d:25:3f:83:98:19:1d:bf: c8:e5:8b:4d:25:98:bb:53:82:32:68:e1:e6:63:da: fb:34:8b:13:ce:15:8a:a1:79:d9:d6:df:8e:ca:7a: c4:17:d7:ac:1b:68:da:a5:26:52:63:33:ca:e5:53: 63:09:f6:f6:27:d3:f6:f1:2e:a9:a6:e9:91:ae:2c: 1c:49:55:2e:0b:ab:db:ec:5e:64:56:fb:06:b2:02: 22:11:3c:a8:df:d3:16:bf:37:01:4c:24:0a:a9:4c: c7:40:ff:98:a6:3c:32:58:e6:9c:bd:63:f8:97:c5: 7a:73:d7:1e:b1:39:a9:84:0b:2b:6e:62:0e:b1:50: dc:13:32:81:cf:c9:43:7e:5d:32:51:0c:e8:2f:72: 23:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:C7:C6:76:38:02:7C:43:52:11:BF:B8:D8:D6:52:98:3D:F4:06:18 X509v3 Authority Key Identifier: keyid:2A:91:77:8A:CC:E7:63:33:08:14:68:D9:78:4D:E1:32:C2:98:59:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/40cba61d-4056-46a9-9392-a61dfc500dc9/1/2A91778ACCE76333081468D9784DE132C2985976.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/2A91778ACCE76333081468D9784DE132C2985976.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/40cba61d-4056-46a9-9392-a61dfc500dc9/1/2A91778ACCE76333081468D9784DE132C2985976.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:5c:53:25:ee:ac:83:7a:41:ed:57:ba:12:91:a2:27:a1:ca: 5e:d2:bb:47:f2:38:3f:4a:75:2f:26:11:05:8f:63:14:ef:34: be:c4:b3:8b:25:84:62:59:d7:5e:e7:80:3b:00:f5:bc:bb:ff: 36:1a:49:9e:f8:8e:6b:dd:0c:55:99:b6:50:f3:90:cd:0a:da: 07:dc:e3:d8:d5:e2:67:84:cc:55:c5:c8:26:bd:16:d9:a3:af: 8b:de:51:ed:f6:e5:02:16:92:20:54:ee:46:68:e0:5b:81:86: 7d:27:47:87:c8:14:a0:f0:2f:36:71:b5:06:b8:92:2d:99:8b: 21:4e:94:5d:0b:db:3e:75:ed:09:ef:c3:56:4d:52:bd:47:bb: ce:c0:e0:cf:cf:d7:80:f7:9d:59:dc:1d:ff:ad:d0:d8:7a:4f: 1f:84:34:74:3c:eb:9f:b0:28:18:80:09:59:f2:28:5f:66:4a: 63:3d:af:ee:e6:f8:2f:10:ce:c6:29:f4:7c:c5:92:c9:6e:ef: d9:f8:93:06:b5:ce:fa:8f:c8:62:c5:e8:4e:3b:78:b7:b3:20: 82:f9:b9:70:48:d3:64:fe:61:62:7a:a3:be:bd:b6:70:f5:74: 41:eb:62:66:b3:eb:73:c9:17:73:73:7f:ed:7a:b8:82:ee:fa: 42:47:d9:c3 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUPfqUaqeyUVMfVHGlAfgqL1xLAmYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkE5MTc3OEFDQ0U3NjMzMzA4MTQ2OEQ5Nzg0REUxMzJD Mjk4NTk3NjAeFw0yNjAyMDIwMDQ1MjVaFw0yNjAyMDMwNDAyMjVaMDMxMTAvBgNV BAMTKDYwQzdDNjc2MzgwMjdDNDM1MjExQkZCOEQ4RDY1Mjk4M0RGNDA2MTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxS35fEodOhyeqVovMDcBZQ8lH WLhuvriZCdJjwWN8qBpKmYGBh7S/8VxlYnsERBvfkLuUyWj06eqGe1YDyNmFczsa V8ARewYWIlJQIGB3z9C6rM3IuFC3np1y70g9HgLBKOUdzSmP1XvBF6ToDXNdJT+D mBkdv8jli00lmLtTgjJo4eZj2vs0ixPOFYqhednW347KesQX16wbaNqlJlJjM8rl U2MJ9vYn0/bxLqmm6ZGuLBxJVS4Lq9vsXmRW+wayAiIRPKjf0xa/NwFMJAqpTMdA /5imPDJY5py9Y/iXxXpz1x6xOamECytuYg6xUNwTMoHPyUN+XTJRDOgvciOjAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUYMfGdjgCfENSEb+42NZSmD30BhgwHwYDVR0j BBgwFoAUKpF3isznYzMIFGjZeE3hMsKYWXYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNDBjYmE2MWQtNDA1Ni00NmE5LTkzOTItYTYxZGZjNTAw ZGM5LzEvMkE5MTc3OEFDQ0U3NjMzMzA4MTQ2OEQ5Nzg0REUxMzJDMjk4NTk3Ni5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84YWZiNWZlMi0zYzJhLTQ5 MzktOTVlOS0wMDc3YjgwYjRmMGUvMC8yQTkxNzc4QUNDRTc2MzMzMDgxNDY4RDk3 ODRERTEzMkMyOTg1OTc2LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzQwY2JhNjFkLTQwNTYtNDZhOS05MzkyLWE2MWRmYzUwMGRjOS8xLzJBOTE3NzhB Q0NFNzYzMzMwODE0NjhEOTc4NERFMTMyQzI5ODU5NzYubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCeXFMl 7qyDekHtV7oSkaInocpe0rtH8jg/SnUvJhEFj2MU7zS+xLOLJYRiWdde54A7APW8 u/82Gkme+I5r3QxVmbZQ85DNCtoH3OPY1eJnhMxVxcgmvRbZo6+L3lHt9uUCFpIg VO5GaOBbgYZ9J0eHyBSg8C82cbUGuJItmYshTpRdC9s+de0J78NWTVK9R7vOwODP z9eA951Z3B3/rdDYek8fhDR0POufsCgYgAlZ8ihfZkpjPa/u5vgvEM7GKfR8xZLJ bu/Z+JMGtc76j8hixehOO3i3syCC+blwSNNk/mFieqO+vbZw9XRB62Jms+tzyRdz c3/teriC7vpCR9nD -----END CERTIFICATE-----Generated at Mon Feb 2 09:40:12 2026 by rpki-client