This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/0BC6D225F0CE3E607712A9A98C4561912F3432B6.mft File: 0BC6D225F0CE3E607712A9A98C4561912F3432B6.mft (raw, json) Hash identifier: BA9UUKiNY+EabcgAcXkBxnbm88om+UPXscLXMfB846w= Subject key identifier: 5D:1B:33:7B:9D:D4:D4:E2:D5:AC:8F:78:BA:16:98:9C:7D:68:9B:74 Authority key identifier: 0B:C6:D2:25:F0:CE:3E:60:77:12:A9:A9:8C:45:61:91:2F:34:32:B6 Certificate issuer: /CN=0BC6D225F0CE3E607712A9A98C4561912F3432B6 Certificate serial: 79BA1B5E197ECC32BA043DBFAD9DFDBC0028A37C Authority info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/0BC6D225F0CE3E607712A9A98C4561912F3432B6.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/0BC6D225F0CE3E607712A9A98C4561912F3432B6.mft Manifest number: DC Signing time: Tue 20 Jan 2026 14:49:27 +0000 Manifest this update: Tue 20 Jan 2026 14:44:27 +0000 Manifest next update: Wed 21 Jan 2026 15:28:27 +0000 Files and hashes: 1: 0BC6D225F0CE3E607712A9A98C4561912F3432B6.crl (hash: NOBim7kiMDUSqlkVVkxOXFNPxAAMjx6YzYAS6SYbURk=) 2: 326130623a346530373a316330303a3a2f34382d3438203d3e20313531373034.roa (hash: GbSyn/a7s2Tct/cl+IXObaOaKJfLlKE/P5lfI5qam+k=) 3: 326130623a346530373a316330323a3a2f34382d3438203d3e20323133383632.roa (hash: /X68JagauxWyaFcSb3BbJbw5DWqXyP6Pe5X7avcQNQs=) 4: 326130623a346530373a316330313a3a2f34382d3438203d3e20313531373034.roa (hash: VQpA5o0Pq6sWKS236BEYQWIKLgBdNGi2BEIwMERcePY=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/0BC6D225F0CE3E607712A9A98C4561912F3432B6.crl rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/0BC6D225F0CE3E607712A9A98C4561912F3432B6.mft rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/0BC6D225F0CE3E607712A9A98C4561912F3432B6.cer rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 15:28:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:ba:1b:5e:19:7e:cc:32:ba:04:3d:bf:ad:9d:fd:bc:00:28:a3:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0BC6D225F0CE3E607712A9A98C4561912F3432B6 Validity Not Before: Jan 20 14:44:27 2026 GMT Not After : Jan 21 15:28:27 2026 GMT Subject: CN=5D1B337B9DD4D4E2D5AC8F78BA16989C7D689B74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:16:15:db:b6:d1:ca:ba:54:ce:1d:32:8d:45: 6f:3f:ec:4d:99:14:c6:b6:34:a8:72:f1:ac:9e:1e: 44:24:82:f4:53:47:f9:73:36:47:8b:79:7f:21:98: b1:18:f7:65:8d:ac:8b:f7:df:a2:e4:3e:bb:2a:3d: ee:5b:80:08:3a:da:c1:30:50:7c:8b:65:09:19:ce: 7b:4c:b2:2c:bb:b9:e1:38:34:c1:72:ef:6f:e7:c9: cc:55:39:9c:5d:65:77:cf:87:70:43:1e:19:3a:e5: bf:c0:57:48:48:ee:5d:30:4a:72:1a:86:3e:68:04: b0:8b:b0:bc:a9:93:23:5a:80:c2:c6:aa:57:e5:3a: 0b:68:39:2a:f9:fe:88:f5:7c:4e:03:0e:7f:d6:04: 02:97:b6:be:dc:97:ab:8f:77:1a:ac:a3:d2:f0:11: 01:14:05:25:ca:0a:96:50:1f:73:fe:b6:25:b3:2f: 2c:4e:15:85:25:ba:12:7c:7c:bb:9e:ee:03:02:c4: c4:fd:f9:dd:a0:20:07:28:6f:c1:b4:02:75:51:5b: 13:db:38:1a:09:1a:73:db:40:5b:00:52:87:20:8e: 4e:25:ae:1a:57:d4:98:c4:d5:ef:9a:51:cd:35:0f: 38:c2:d1:0b:4d:ea:a6:c8:3c:84:1b:2a:04:9d:ce: 1f:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:1B:33:7B:9D:D4:D4:E2:D5:AC:8F:78:BA:16:98:9C:7D:68:9B:74 X509v3 Authority Key Identifier: keyid:0B:C6:D2:25:F0:CE:3E:60:77:12:A9:A9:8C:45:61:91:2F:34:32:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/0BC6D225F0CE3E607712A9A98C4561912F3432B6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/0BC6D225F0CE3E607712A9A98C4561912F3432B6.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/0BC6D225F0CE3E607712A9A98C4561912F3432B6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:10:35:0a:41:a4:68:ac:c8:e7:ef:88:40:78:78:d3:a3:fa: b7:13:a4:94:42:88:ef:82:c9:31:75:58:2c:69:47:fb:ee:23: 04:86:46:9e:c7:b5:70:03:1f:e6:c3:6c:d7:65:ef:4c:20:ff: f4:23:28:48:23:22:7d:65:35:2c:73:c6:06:8e:69:6b:4d:ac: 68:dd:9d:c4:a5:91:64:a1:24:ad:54:d8:e7:c8:46:6f:95:46: e2:b4:97:7b:94:5e:66:4d:2b:9d:0c:90:18:3b:4c:04:d8:39: d8:0a:75:a4:bf:3d:e5:3f:ac:ed:70:4a:27:78:76:05:99:3b: 38:2c:b5:8b:2a:b0:c6:8f:9f:29:f5:8e:3e:5b:9d:2b:9d:f7: 9d:f8:62:2c:55:4b:e1:56:e1:39:ad:80:9c:bd:43:06:14:1f: 17:f9:ae:43:de:ac:21:83:f2:45:5b:41:f8:f6:de:62:4d:7d: af:04:7b:a9:3d:7e:d6:c5:20:06:85:61:16:5a:32:3c:f9:f4: 2c:09:b9:6b:44:77:e1:d5:2a:60:17:a2:98:d1:e7:ec:2d:56: 10:4f:ab:43:5f:82:d3:2f:09:f7:1d:ca:08:33:0d:86:07:49: 72:6f:19:11:fb:6c:44:eb:5f:8c:d4:11:3e:6a:80:4a:38:b6: 61:a3:b2:4e -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUebobXhl+zDK6BD2/rZ39vAAoo3wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEJDNkQyMjVGMENFM0U2MDc3MTJBOUE5OEM0NTYxOTEy RjM0MzJCNjAeFw0yNjAxMjAxNDQ0MjdaFw0yNjAxMjExNTI4MjdaMDMxMTAvBgNV BAMTKDVEMUIzMzdCOURENEQ0RTJENUFDOEY3OEJBMTY5ODlDN0Q2ODlCNzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcFhXbttHKulTOHTKNRW8/7E2Z FMa2NKhy8ayeHkQkgvRTR/lzNkeLeX8hmLEY92WNrIv336LkPrsqPe5bgAg62sEw UHyLZQkZzntMsiy7ueE4NMFy72/nycxVOZxdZXfPh3BDHhk65b/AV0hI7l0wSnIa hj5oBLCLsLypkyNagMLGqlflOgtoOSr5/oj1fE4DDn/WBAKXtr7cl6uPdxqso9Lw EQEUBSXKCpZQH3P+tiWzLyxOFYUluhJ8fLue7gMCxMT9+d2gIAcob8G0AnVRWxPb OBoJGnPbQFsAUocgjk4lrhpX1JjE1e+aUc01DzjC0QtN6qbIPIQbKgSdzh+xAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUXRsze53U1OLVrI94uhaYnH1om3QwHwYDVR0j BBgwFoAUC8bSJfDOPmB3EqmpjEVhkS80MrYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTMxZTk3MjAtMGI2Mi00M2E4LThlMWYtMjMwNjg0ZWFm OWFmLzMvMEJDNkQyMjVGMENFM0U2MDc3MTJBOUE5OEM0NTYxOTEyRjM0MzJCNi5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQz MDUzZjgyMGY1LzEvMEJDNkQyMjVGMENFM0U2MDc3MTJBOUE5OEM0NTYxOTEyRjM0 MzJCNi5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS81MzFlOTcyMC0w YjYyLTQzYTgtOGUxZi0yMzA2ODRlYWY5YWYvMy8wQkM2RDIyNUYwQ0UzRTYwNzcx MkE5QTk4QzQ1NjE5MTJGMzQzMkI2Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEBA1CkGkaKzI5++IQHh4 06P6txOklEKI74LJMXVYLGlH++4jBIZGnse1cAMf5sNs12XvTCD/9CMoSCMifWU1 LHPGBo5pa02saN2dxKWRZKEkrVTY58hGb5VG4rSXe5ReZk0rnQyQGDtMBNg52Ap1 pL895T+s7XBKJ3h2BZk7OCy1iyqwxo+fKfWOPludK533nfhiLFVL4VbhOa2AnL1D BhQfF/muQ96sIYPyRVtB+PbeYk19rwR7qT1+1sUgBoVhFloyPPn0LAm5a0R34dUq YBeimNHn7C1WEE+rQ1+C0y8J9x3KCDMNhgdJcm8ZEftsROtfjNQRPmqASji2YaOy Tg== -----END CERTIFICATE-----Generated at Wed Jan 21 06:52:18 2026 by rpki-client