This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/4c9acece-d05b-4f73-9c6e-d8785d1789c3/1/E9D2F7329F5BA42EE0D898228DEE58B64CA813FE.mft File: E9D2F7329F5BA42EE0D898228DEE58B64CA813FE.mft (raw, json) Hash identifier: DoPs14/OlN/JWOiVzSZtRwzQIJqYBpROco8M7DFNeQY= Subject key identifier: BD:BE:FB:6B:8B:48:F4:B8:78:F6:00:7F:9D:03:29:08:EC:C4:DE:55 Authority key identifier: E9:D2:F7:32:9F:5B:A4:2E:E0:D8:98:22:8D:EE:58:B6:4C:A8:13:FE Certificate issuer: /CN=E9D2F7329F5BA42EE0D898228DEE58B64CA813FE Certificate serial: 66B6D3FF619D08FF66D40A6CEC45923B3FE9E96D Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/E9D2F7329F5BA42EE0D898228DEE58B64CA813FE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/4c9acece-d05b-4f73-9c6e-d8785d1789c3/1/E9D2F7329F5BA42EE0D898228DEE58B64CA813FE.mft Manifest number: 66 Signing time: Tue 20 Jan 2026 11:31:36 +0000 Manifest this update: Tue 20 Jan 2026 11:26:36 +0000 Manifest next update: Wed 21 Jan 2026 15:25:36 +0000 Files and hashes: 1: 326131343a373538313a6230303a3a2f34302d3438203d3e20323134353735.roa (hash: YwVA55nGhmg50Nrcm1+tsq8Rc4xtCFLwJqkp0AhkdXQ=) 2: E9D2F7329F5BA42EE0D898228DEE58B64CA813FE.crl (hash: 3IkBVTgDhnSaOaimJQGGj+OiTXTKyY9OumXf974dCfM=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/4c9acece-d05b-4f73-9c6e-d8785d1789c3/1/E9D2F7329F5BA42EE0D898228DEE58B64CA813FE.crl rsync://rsync.paas.rpki.ripe.net/repository/4c9acece-d05b-4f73-9c6e-d8785d1789c3/1/E9D2F7329F5BA42EE0D898228DEE58B64CA813FE.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/E9D2F7329F5BA42EE0D898228DEE58B64CA813FE.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 15:25:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:b6:d3:ff:61:9d:08:ff:66:d4:0a:6c:ec:45:92:3b:3f:e9:e9:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E9D2F7329F5BA42EE0D898228DEE58B64CA813FE Validity Not Before: Jan 20 11:26:36 2026 GMT Not After : Jan 21 15:25:36 2026 GMT Subject: CN=BDBEFB6B8B48F4B878F6007F9D032908ECC4DE55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:68:8e:ed:0f:bb:3c:ed:bc:10:79:4b:65:73: b1:ce:4c:c1:a7:77:8e:f2:24:c5:ca:83:4d:ae:68: 16:dc:ba:5c:65:74:7a:f1:5f:46:46:9f:bc:6a:c8: d0:a2:f3:f2:c1:15:e2:c2:c8:4a:41:16:21:b4:9e: 93:eb:d7:ca:c6:86:ee:90:61:95:87:23:3d:88:cb: d5:17:89:b2:a3:5e:61:d4:f8:be:9b:68:60:41:0e: 2a:a9:1c:66:80:86:ef:53:aa:3e:bf:c4:97:ff:e4: 78:0d:44:9a:91:ca:1f:11:f9:cf:c2:b8:2a:b7:82: 9b:22:b1:96:a0:81:39:fe:8b:96:2c:84:cb:53:14: 43:4d:d9:30:b7:52:4e:8f:45:d0:39:29:d8:9b:dd: e7:9f:c5:69:50:70:b3:2a:7c:f3:3c:7b:9a:29:bc: da:b0:cf:b9:4f:86:5f:8c:28:91:30:e9:2c:d7:8a: 93:35:d6:37:da:51:4a:e3:5f:69:a7:13:ee:1e:71: b8:5a:53:f3:72:63:be:08:a5:65:a2:a4:33:3b:9f: d9:27:34:01:08:b7:57:9b:98:92:72:c3:75:ee:b4: 6c:c4:16:07:ce:ef:7d:7b:d3:26:89:4c:1e:80:fe: 3c:99:6b:09:05:61:9d:85:30:c6:f5:08:aa:77:85: 89:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:BE:FB:6B:8B:48:F4:B8:78:F6:00:7F:9D:03:29:08:EC:C4:DE:55 X509v3 Authority Key Identifier: keyid:E9:D2:F7:32:9F:5B:A4:2E:E0:D8:98:22:8D:EE:58:B6:4C:A8:13:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/4c9acece-d05b-4f73-9c6e-d8785d1789c3/1/E9D2F7329F5BA42EE0D898228DEE58B64CA813FE.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/E9D2F7329F5BA42EE0D898228DEE58B64CA813FE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/4c9acece-d05b-4f73-9c6e-d8785d1789c3/1/E9D2F7329F5BA42EE0D898228DEE58B64CA813FE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:b3:e2:55:78:bb:3d:27:0f:54:a3:4f:37:0e:e1:7a:c6:b2: ea:a8:54:82:7f:8f:1b:d6:c2:7f:42:e0:7d:1e:63:7b:3d:87: a9:95:85:7d:a4:6f:3d:76:17:e6:b7:f7:cf:92:17:c7:cd:ca: 75:8f:60:49:0b:a1:fe:74:fb:a3:1d:f8:1e:c1:52:70:90:1c: bd:28:a4:50:3f:d7:01:5f:57:45:ec:bc:cb:d0:94:dd:eb:3d: 92:4c:ea:b4:73:d2:94:ee:b7:6b:ed:f0:3a:82:31:98:70:10: 1c:20:24:92:62:09:5a:83:03:bc:6e:4f:3c:69:a1:52:0b:9e: de:a1:23:f9:6f:06:df:bf:ac:8d:9e:8b:28:83:b2:5b:42:b4: b6:09:bf:a3:6e:d8:63:af:bb:d0:1a:81:45:0e:83:51:a0:5d: 59:3c:2b:f1:57:3a:05:73:88:01:a0:72:83:f0:34:76:19:ce: 20:3d:55:9c:b4:41:da:af:27:a9:92:2e:a7:0b:f1:8e:b2:63: 76:e0:bb:4a:8e:16:bd:d4:4c:fa:7e:fe:be:e5:05:dd:ae:75: 63:68:23:f6:ba:bd:24:73:29:76:76:30:9a:44:5d:8b:36:33: 51:c8:ad:92:84:18:4d:33:32:ff:20:00:95:e8:9d:02:0b:e7: dd:35:99:b4 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUZrbT/2GdCP9m1Aps7EWSOz/p6W0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTlEMkY3MzI5RjVCQTQyRUUwRDg5ODIyOERFRTU4QjY0 Q0E4MTNGRTAeFw0yNjAxMjAxMTI2MzZaFw0yNjAxMjExNTI1MzZaMDMxMTAvBgNV BAMTKEJEQkVGQjZCOEI0OEY0Qjg3OEY2MDA3RjlEMDMyOTA4RUNDNERFNTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDuaI7tD7s87bwQeUtlc7HOTMGn d47yJMXKg02uaBbculxldHrxX0ZGn7xqyNCi8/LBFeLCyEpBFiG0npPr18rGhu6Q YZWHIz2Iy9UXibKjXmHU+L6baGBBDiqpHGaAhu9Tqj6/xJf/5HgNRJqRyh8R+c/C uCq3gpsisZaggTn+i5YshMtTFENN2TC3Uk6PRdA5Kdib3eefxWlQcLMqfPM8e5op vNqwz7lPhl+MKJEw6SzXipM11jfaUUrjX2mnE+4ecbhaU/NyY74IpWWipDM7n9kn NAEIt1ebmJJyw3XutGzEFgfO73170yaJTB6A/jyZawkFYZ2FMMb1CKp3hYlxAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUvb77a4tI9Lh49gB/nQMpCOzE3lUwHwYDVR0j BBgwFoAU6dL3Mp9bpC7g2Jgije5YtkyoE/4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNGM5YWNlY2UtZDA1Yi00ZjczLTljNmUtZDg3ODVkMTc4 OWMzLzEvRTlEMkY3MzI5RjVCQTQyRUUwRDg5ODIyOERFRTU4QjY0Q0E4MTNGRS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9FOUQyRjczMjlGNUJBNDJFRTBEODk4MjI4 REVFNThCNjRDQTgxM0ZFLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzRjOWFjZWNlLWQwNWItNGY3My05YzZlLWQ4Nzg1ZDE3ODljMy8xL0U5RDJGNzMy OUY1QkE0MkVFMEQ4OTgyMjhERUU1OEI2NENBODEzRkUubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAGs+JV eLs9Jw9Uo083DuF6xrLqqFSCf48b1sJ/QuB9HmN7PYeplYV9pG89dhfmt/fPkhfH zcp1j2BJC6H+dPujHfgewVJwkBy9KKRQP9cBX1dF7LzL0JTd6z2STOq0c9KU7rdr 7fA6gjGYcBAcICSSYglagwO8bk88aaFSC57eoSP5bwbfv6yNnosog7JbQrS2Cb+j bthjr7vQGoFFDoNRoF1ZPCvxVzoFc4gBoHKD8DR2Gc4gPVWctEHaryepki6nC/GO smN24LtKjha91Ez6fv6+5QXdrnVjaCP2ur0kcyl2djCaRF2LNjNRyK2ShBhNMzL/ IACV6J0CC+fdNZm0 -----END CERTIFICATE-----Generated at Tue Jan 20 23:52:51 2026 by rpki-client