This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/45e648c3-1481-478f-83e2-b25127fa95cd/0/1F84A2481D280DE0A103598276DB0C954193C755.mft File: 1F84A2481D280DE0A103598276DB0C954193C755.mft (raw, json) Hash identifier: KqKErcB500eDWw++dF7EdysJ5Xse0yd0LvvITHyY48k= Subject key identifier: 6F:E1:7B:A5:AD:BE:7E:19:D3:BC:8C:E3:81:29:5D:B5:1F:9B:1E:D3 Authority key identifier: 1F:84:A2:48:1D:28:0D:E0:A1:03:59:82:76:DB:0C:95:41:93:C7:55 Certificate issuer: /CN=1f84a2481d280de0a103598276db0c954193c755 Certificate serial: 3C9E21BCA73CAA580251327D908DBD5EC11B5896 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H4SiSB0oDeChA1mCdtsMlUGTx1U.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/45e648c3-1481-478f-83e2-b25127fa95cd/0/1F84A2481D280DE0A103598276DB0C954193C755.mft Manifest number: 04 Signing time: Thu 29 Jan 2026 07:32:01 +0000 Manifest this update: Thu 29 Jan 2026 07:27:01 +0000 Manifest next update: Fri 30 Jan 2026 08:43:01 +0000 Files and hashes: 1: 3139332e32342e312e302f32342d3234203d3e203539343332.roa (hash: 5O2cZzEMXMmWIBCkLJWzm0ZnbQ+vyLUif7fdjE9+q+o=) 2: 3139332e32342e302e302f32342d3234203d3e203530333835.roa (hash: ZF+yUQjQ8mafUSh2s0Gf6Vv2FDEQSv7tGMKU59lfZ0Y=) 3: 1F84A2481D280DE0A103598276DB0C954193C755.crl (hash: uZH3Iwzm8OO1fJoyeNBYg8e6VoQ0ebfYBsKANm2REk8=) 4: 3139332e32342e342e302f32342d3234203d3e203539343332.roa (hash: 2szFDzNMiU++d5K+UAqAdfyAdV0l7//47s1tM+CWoPQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/45e648c3-1481-478f-83e2-b25127fa95cd/0/1F84A2481D280DE0A103598276DB0C954193C755.crl rsync://rsync.paas.rpki.ripe.net/repository/45e648c3-1481-478f-83e2-b25127fa95cd/0/1F84A2481D280DE0A103598276DB0C954193C755.mft rsync://rpki.ripe.net/repository/DEFAULT/H4SiSB0oDeChA1mCdtsMlUGTx1U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 30 Jan 2026 08:43:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:9e:21:bc:a7:3c:aa:58:02:51:32:7d:90:8d:bd:5e:c1:1b:58:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f84a2481d280de0a103598276db0c954193c755 Validity Not Before: Jan 29 07:27:01 2026 GMT Not After : Jan 30 08:43:01 2026 GMT Subject: CN=6FE17BA5ADBE7E19D3BC8CE381295DB51F9B1ED3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:32:96:bd:72:85:54:32:16:fc:22:24:21:12: da:9a:9f:04:2f:e2:57:36:16:c2:f8:40:fd:8e:3f: ba:e7:72:ec:b3:82:df:b3:04:0e:5c:29:b0:05:34: 26:39:39:e6:e7:3a:a2:ed:a8:4c:5b:79:df:f0:1e: d5:3e:99:2f:08:43:4b:35:fc:29:9d:e8:ce:23:f5: b1:64:3f:53:72:3f:4f:57:70:c8:80:86:bb:1f:3a: f2:23:c8:11:d3:88:9a:61:be:a0:45:c7:9c:11:15: e1:ad:67:6a:31:80:dc:bb:49:5f:52:e9:c6:4e:e5: 5c:87:ea:7a:fa:cc:af:3c:2d:3d:a1:d6:38:95:f8: c4:79:51:09:fc:30:11:e5:9c:7a:a8:cc:81:ec:e6: cc:3e:b4:09:a4:23:03:69:7f:18:21:69:ab:9e:5d: 38:cd:0f:d1:8e:7b:ec:b9:e5:82:f6:0d:aa:25:9a: 4c:7b:27:c5:dd:a6:d4:4b:4b:a8:6f:7e:eb:6b:c1: 1e:1a:1d:db:81:5e:93:25:84:10:76:06:db:c3:b9: 19:f0:58:71:ca:86:15:e1:d2:a8:c2:ae:34:a0:1f: 2a:d2:7f:11:84:60:67:49:61:24:79:09:c8:b5:37: 0b:0a:80:05:31:2c:75:2a:86:01:bd:0f:80:04:ac: 12:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:E1:7B:A5:AD:BE:7E:19:D3:BC:8C:E3:81:29:5D:B5:1F:9B:1E:D3 X509v3 Authority Key Identifier: keyid:1F:84:A2:48:1D:28:0D:E0:A1:03:59:82:76:DB:0C:95:41:93:C7:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/45e648c3-1481-478f-83e2-b25127fa95cd/0/1F84A2481D280DE0A103598276DB0C954193C755.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H4SiSB0oDeChA1mCdtsMlUGTx1U.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/45e648c3-1481-478f-83e2-b25127fa95cd/0/1F84A2481D280DE0A103598276DB0C954193C755.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:43:b3:ab:41:48:b3:cf:b3:b7:23:ef:0b:ab:93:66:5e:bd: 80:81:f2:bf:56:ad:75:cd:d5:dc:67:5c:2c:84:25:1e:0d:c1: a7:65:fd:c3:90:2c:32:44:d6:3f:4c:13:8c:5c:34:91:00:51: 1a:66:67:82:ba:ce:67:ab:77:49:aa:b0:2b:18:51:eb:22:4c: 58:b8:df:60:55:78:04:fb:4e:d6:8f:a4:c8:eb:37:0f:57:78: 4a:2a:39:75:22:e6:96:e4:3b:98:c2:27:80:25:38:c9:b9:91: 93:64:35:8c:22:d9:9b:31:b0:3c:cb:1e:aa:e1:73:c6:0e:4f: 5b:19:fd:eb:63:93:90:c2:ef:ff:7f:95:41:ce:f1:1e:d7:9f: 2b:4d:1d:43:49:3f:2c:c5:ed:7f:25:ff:87:fd:99:4c:4a:bc: ac:5c:70:07:87:12:37:f2:83:c4:4d:e9:f1:12:d7:00:98:69: c9:e3:f6:ca:b7:35:43:af:15:c0:81:6b:b3:94:c2:01:6b:3f: 98:49:ea:58:8b:42:49:26:7d:dc:a3:65:4f:d9:6b:eb:3c:39: 60:a4:4d:a4:e7:9b:fb:21:51:1b:38:1f:5e:25:73:0c:8d:00: 15:05:af:2c:c2:e0:a4:e7:39:8f:cd:29:30:8c:3a:b1:49:21: 8a:60:ce:d1 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUPJ4hvKc8qlgCUTJ9kI29XsEbWJYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMWY4NGEyNDgxZDI4MGRlMGExMDM1OTgyNzZkYjBjOTU0 MTkzYzc1NTAeFw0yNjAxMjkwNzI3MDFaFw0yNjAxMzAwODQzMDFaMDMxMTAvBgNV BAMTKDZGRTE3QkE1QURCRTdFMTlEM0JDOENFMzgxMjk1REI1MUY5QjFFRDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPMpa9coVUMhb8IiQhEtqanwQv 4lc2FsL4QP2OP7rncuyzgt+zBA5cKbAFNCY5OebnOqLtqExbed/wHtU+mS8IQ0s1 /Cmd6M4j9bFkP1NyP09XcMiAhrsfOvIjyBHTiJphvqBFx5wRFeGtZ2oxgNy7SV9S 6cZO5VyH6nr6zK88LT2h1jiV+MR5UQn8MBHlnHqozIHs5sw+tAmkIwNpfxghaaue XTjND9GOe+y55YL2Daolmkx7J8XdptRLS6hvfutrwR4aHduBXpMlhBB2BtvDuRnw WHHKhhXh0qjCrjSgHyrSfxGEYGdJYSR5Cci1NwsKgAUxLHUqhgG9D4AErBLZAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUb+F7pa2+fhnTvIzjgSldtR+bHtMwHwYDVR0j BBgwFoAUH4SiSB0oDeChA1mCdtsMlUGTx1UwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNDVlNjQ4YzMtMTQ4MS00NzhmLTgzZTItYjI1MTI3ZmE5 NWNkLzAvMUY4NEEyNDgxRDI4MERFMEExMDM1OTgyNzZEQjBDOTU0MTkzQzc1NS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0g0U2lTQjBvRGVDaEExbUNkdHNNbFVH VHgxVS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS80NWU2NDhjMy0x NDgxLTQ3OGYtODNlMi1iMjUxMjdmYTk1Y2QvMC8xRjg0QTI0ODFEMjgwREUwQTEw MzU5ODI3NkRCMEM5NTQxOTNDNzU1Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoEOzq0FIs8+ztyPvC6uT Zl69gIHyv1atdc3V3GdcLIQlHg3Bp2X9w5AsMkTWP0wTjFw0kQBRGmZngrrOZ6t3 SaqwKxhR6yJMWLjfYFV4BPtO1o+kyOs3D1d4Sio5dSLmluQ7mMIngCU4ybmRk2Q1 jCLZmzGwPMsequFzxg5PWxn962OTkMLv/3+VQc7xHtefK00dQ0k/LMXtfyX/h/2Z TEq8rFxwB4cSN/KDxE3p8RLXAJhpyeP2yrc1Q68VwIFrs5TCAWs/mEnqWItCSSZ9 3KNlT9lr6zw5YKRNpOeb+yFRGzgfXiVzDI0AFQWvLMLgpOc5j80pMIw6sUkhimDO 0Q== -----END CERTIFICATE-----Generated at Fri Jan 30 01:40:32 2026 by rpki-client