This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.mft File: 8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.mft (raw, json) Hash identifier: 9wfxTFahw1FaRrLBM0n9WKXN/+J1EvqXHt83wlz1m4o= Subject key identifier: 77:43:19:84:A6:2D:B2:86:F9:26:35:59:48:CF:4B:EC:C4:B0:94:38 Authority key identifier: 8B:AD:30:7C:D4:DF:11:01:4E:40:ED:DF:FF:D6:0F:9A:09:E6:E9:5C Certificate issuer: /CN=8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C Certificate serial: 5F249311638A1575DB7A643C58B4151FB6974F1D Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.mft Manifest number: 02A1 Signing time: Wed 28 Jan 2026 21:57:05 +0000 Manifest this update: Wed 28 Jan 2026 21:52:05 +0000 Manifest next update: Thu 29 Jan 2026 23:52:05 +0000 Files and hashes: 1: 8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.crl (hash: rLK3aKGt08BmRreZWKZraYOKabhgJ6z9mtFeXnu15+Y=) 2: 326131333a393634343a343030303a3a2f34302d3430203d3e20323034323931.roa (hash: 1o4m8PJbpPTt/WwCt8wMPBTEbmCl+8vcVtrKZbTYjFM=) 3: 326131333a393634343a343061653a3a2f34382d3438203d3e20323034323931.roa (hash: /APvQtIczoMdPeFgS8yLWOSzDbhA86h5Cc1N87vUKRI=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.crl rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.mft rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.cer rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.crl rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.mft rsync://rpki.ripe.net/repository/DEFAULT/8dBXL-cpkb0yhUuscWZ269rSKs4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 29 Jan 2026 19:09:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:24:93:11:63:8a:15:75:db:7a:64:3c:58:b4:15:1f:b6:97:4f:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C Validity Not Before: Jan 28 21:52:05 2026 GMT Not After : Jan 29 23:52:05 2026 GMT Subject: CN=77431984A62DB286F926355948CF4BECC4B09438 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:60:a0:c8:22:e7:83:8d:14:df:d6:bb:d0:46: 86:62:a8:a8:8c:6a:4d:b2:d4:04:5d:d0:48:cd:a7: a9:3a:98:63:da:52:aa:e8:d4:7d:7f:42:59:30:1f: 15:f5:42:08:b4:22:ec:f5:72:77:12:24:a3:d2:cc: ff:34:aa:98:52:a6:01:a1:78:e5:b7:94:87:f8:48: 28:9a:92:ba:8e:bd:d6:9b:54:79:cc:48:49:3e:f2: 88:b5:02:7a:ae:ac:03:cc:c1:76:f8:53:fe:f6:01: 19:94:04:82:af:2b:fe:fc:4a:b4:5f:b5:cf:c0:61: 5b:e3:96:1b:c1:2a:f8:d0:ba:7f:95:40:8c:c6:8f: 61:7a:7a:9c:a8:a8:fd:dc:8d:c8:db:83:c2:65:fd: 5b:56:90:25:65:e1:cf:a9:bf:dc:3f:20:2e:ac:fc: b6:bc:c8:2c:68:f1:ba:56:e9:39:ea:14:fc:19:aa: b0:0b:8d:fb:22:a5:ca:6b:a9:f7:fc:40:5a:4f:e6: 58:6e:e2:24:39:58:2d:fa:15:02:48:e3:f6:bf:b1: 75:b8:fa:0e:ad:76:45:49:41:fc:90:5e:1b:63:42: af:48:93:94:63:66:5b:19:05:32:34:20:db:e3:dc: 54:b8:44:32:dc:28:b9:10:cb:f7:8f:f7:b6:fc:6d: 14:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:43:19:84:A6:2D:B2:86:F9:26:35:59:48:CF:4B:EC:C4:B0:94:38 X509v3 Authority Key Identifier: keyid:8B:AD:30:7C:D4:DF:11:01:4E:40:ED:DF:FF:D6:0F:9A:09:E6:E9:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:49:ad:1b:e7:fe:e4:ae:60:16:77:eb:93:d5:26:da:1c:d5: b8:10:8b:23:8a:0f:9e:12:19:4d:67:0d:1d:ef:45:97:83:be: 93:19:dd:1f:0d:d5:5d:82:28:0e:e4:f5:81:50:49:e0:d8:16: 12:0e:af:94:53:e3:cb:88:2b:90:07:cb:72:b8:f3:21:21:85: 47:1c:c3:c5:8d:6b:6e:2c:68:a6:c2:78:48:cc:27:69:b9:05: 43:83:62:53:89:4d:5e:55:9c:36:f5:cb:53:18:4c:57:a0:80: f3:de:96:e9:51:0c:fa:e9:6d:96:65:6d:01:89:c0:e7:4c:b6: 45:12:c9:5d:b7:41:2c:8e:f3:42:2d:23:57:64:87:d8:5a:d1: 17:90:1c:91:ba:13:dc:bb:e3:c6:47:de:27:24:7c:28:46:db: 89:8f:e7:e2:38:2f:bf:28:d9:85:6b:0a:f8:f4:c8:d5:8c:3d: 7b:a6:01:bd:d4:7b:c3:6d:43:06:0e:b5:50:fd:98:e6:c3:d3: 77:cd:77:ac:3c:e5:10:cd:bf:c8:9e:68:d3:bd:02:dc:2d:43: b8:72:c3:36:12:96:f7:29:d9:a3:1a:73:a4:9b:8f:51:d9:53: cc:dd:32:41:fc:f5:21:a2:03:be:c2:d1:51:39:30:3e:fa:4e: b1:07:4f:4b -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUXySTEWOKFXXbemQ8WLQVH7aXTx0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEJBRDMwN0NENERGMTEwMTRFNDBFRERGRkZENjBGOUEw OUU2RTk1QzAeFw0yNjAxMjgyMTUyMDVaFw0yNjAxMjkyMzUyMDVaMDMxMTAvBgNV BAMTKDc3NDMxOTg0QTYyREIyODZGOTI2MzU1OTQ4Q0Y0QkVDQzRCMDk0MzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZYKDIIueDjRTf1rvQRoZiqKiM ak2y1ARd0EjNp6k6mGPaUqro1H1/QlkwHxX1Qgi0Iuz1cncSJKPSzP80qphSpgGh eOW3lIf4SCiakrqOvdabVHnMSEk+8oi1AnqurAPMwXb4U/72ARmUBIKvK/78SrRf tc/AYVvjlhvBKvjQun+VQIzGj2F6epyoqP3cjcjbg8Jl/VtWkCVl4c+pv9w/IC6s /La8yCxo8bpW6TnqFPwZqrALjfsipcprqff8QFpP5lhu4iQ5WC36FQJI4/a/sXW4 +g6tdkVJQfyQXhtjQq9Ik5RjZlsZBTI0INvj3FS4RDLcKLkQy/eP97b8bRQRAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUd0MZhKYtsob5JjVZSM9L7MSwlDgwHwYDVR0j BBgwFoAUi60wfNTfEQFOQO3f/9YPmgnm6VwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjVlYWU3NDUtOGFjOS00ZTcxLWJjOTQtZmNiMjYxNzAz Zjk2LzEvOEJBRDMwN0NENERGMTEwMTRFNDBFRERGRkZENjBGOUEwOUU2RTk1Qy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lMzBkZTg0Yi00MDBhLTRm ZDEtYWI4YS1lNzYxNmUyNDViNDkvMC84QkFEMzA3Q0Q0REYxMTAxNEU0MEVEREZG RkQ2MEY5QTA5RTZFOTVDLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzY1ZWFlNzQ1LThhYzktNGU3MS1iYzk0LWZjYjI2MTcwM2Y5Ni8xLzhCQUQzMDdD RDRERjExMDE0RTQwRURERkZGRDYwRjlBMDlFNkU5NUMubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBySa0b 5/7krmAWd+uT1SbaHNW4EIsjig+eEhlNZw0d70WXg76TGd0fDdVdgigO5PWBUEng 2BYSDq+UU+PLiCuQB8tyuPMhIYVHHMPFjWtuLGimwnhIzCdpuQVDg2JTiU1eVZw2 9ctTGExXoIDz3pbpUQz66W2WZW0BicDnTLZFEsldt0EsjvNCLSNXZIfYWtEXkByR uhPcu+PGR94nJHwoRtuJj+fiOC+/KNmFawr49MjVjD17pgG91HvDbUMGDrVQ/Zjm w9N3zXesPOUQzb/InmjTvQLcLUO4csM2Epb3KdmjGnOkm49R2VPM3TJB/PUhogO+ wtFROTA++k6xB09L -----END CERTIFICATE-----Generated at Thu Jan 29 08:39:51 2026 by rpki-client