This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/1/E4B988E0C5F16CD5A58B879A31737B4F2F086B95.mft File: E4B988E0C5F16CD5A58B879A31737B4F2F086B95.mft (raw, json) Hash identifier: 1MuRvVWmp6BJQXC6ljVOd7cq4qtArsnjHa+mqljtztY= Subject key identifier: EE:C1:54:F8:21:3A:73:E6:63:05:6B:AC:A1:64:0C:A3:65:1A:A2:0E Authority key identifier: E4:B9:88:E0:C5:F1:6C:D5:A5:8B:87:9A:31:73:7B:4F:2F:08:6B:95 Certificate issuer: /CN=e4b988e0c5f16cd5a58b879a31737b4f2f086b95 Certificate serial: 2D313607FBC38780EFA8F3DD7D7773AD5C8D1BC0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5LmI4MXxbNWli4eaMXN7Ty8Ia5U.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/1/E4B988E0C5F16CD5A58B879A31737B4F2F086B95.mft Manifest number: 2C Signing time: Tue 20 Jan 2026 12:48:01 +0000 Manifest this update: Tue 20 Jan 2026 12:43:01 +0000 Manifest next update: Wed 21 Jan 2026 13:35:01 +0000 Files and hashes: 1: AS214976.asa (hash: XN+JEwS2k6nWcFv3Bew15aYffBvDZBqKCiTOLYl5/Is=) 2: E4B988E0C5F16CD5A58B879A31737B4F2F086B95.crl (hash: fZ1+4osIZjyuHirAZaWgjJzL70mnGYVJAkD+43ktr9Q=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/1/E4B988E0C5F16CD5A58B879A31737B4F2F086B95.crl rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/1/E4B988E0C5F16CD5A58B879A31737B4F2F086B95.mft rsync://rpki.ripe.net/repository/DEFAULT/5LmI4MXxbNWli4eaMXN7Ty8Ia5U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 13:35:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:31:36:07:fb:c3:87:80:ef:a8:f3:dd:7d:77:73:ad:5c:8d:1b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4b988e0c5f16cd5a58b879a31737b4f2f086b95 Validity Not Before: Jan 20 12:43:01 2026 GMT Not After : Jan 21 13:35:01 2026 GMT Subject: CN=EEC154F8213A73E663056BACA1640CA3651AA20E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:72:98:76:3c:eb:9f:c7:a0:4e:1d:f6:92:6a: 8d:9d:4c:f7:e2:aa:a5:dd:55:bd:ba:0d:e5:5d:88: 7f:e4:31:14:9c:05:bd:4f:66:4f:45:98:08:f9:ef: 0e:f4:1e:69:a4:88:a6:3c:00:32:a7:6b:6d:af:b4: d6:d5:37:f4:4a:40:ff:0b:80:a7:5e:95:3f:3d:ff: e2:d4:af:59:0e:e0:8c:f6:45:da:9a:5f:22:f0:54: f8:51:84:c0:94:5e:bd:28:6a:d2:49:44:fd:0e:aa: 90:de:67:06:7f:03:d6:89:69:42:17:fe:15:a0:d1: 35:58:ab:0c:fb:b3:c0:45:b1:f2:b8:6d:13:4c:45: f5:4a:9c:ae:23:60:8c:33:64:bb:72:61:2c:ab:dd: 41:1a:a7:fc:c2:6b:d4:38:65:44:15:66:4f:3e:88: 0b:ad:e4:b3:83:8d:c8:aa:4f:81:26:4b:6d:37:df: c2:53:81:47:3b:12:77:3a:89:37:b5:de:9b:a7:84: d0:80:c7:4c:38:f3:cd:99:10:d6:9e:1b:58:fc:db: 79:9a:79:72:ac:72:66:6a:a2:56:d4:70:9e:d0:db: b8:ed:d7:e4:d6:45:ec:72:80:69:66:30:3c:e9:76: 72:77:84:0f:7a:63:87:dd:bb:56:ea:d5:50:16:fa: 9d:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:C1:54:F8:21:3A:73:E6:63:05:6B:AC:A1:64:0C:A3:65:1A:A2:0E X509v3 Authority Key Identifier: keyid:E4:B9:88:E0:C5:F1:6C:D5:A5:8B:87:9A:31:73:7B:4F:2F:08:6B:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/1/E4B988E0C5F16CD5A58B879A31737B4F2F086B95.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5LmI4MXxbNWli4eaMXN7Ty8Ia5U.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/1/E4B988E0C5F16CD5A58B879A31737B4F2F086B95.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:c2:d9:fa:01:7b:10:6b:99:61:25:5b:10:d7:de:7b:f5:b3: 07:8d:61:37:c4:ea:98:49:03:ee:64:4e:da:85:aa:83:cf:ca: 19:df:7e:df:e5:8f:7b:cf:d3:39:ec:c7:8d:2c:e7:1d:1f:bd: 5d:72:c5:fa:86:cc:da:83:11:ce:0e:24:e7:8e:3b:ba:d4:5d: 59:db:66:c3:d0:f7:16:0e:2b:87:11:65:5e:4f:26:8e:1b:a4: 92:f2:4d:36:ad:b9:23:c2:95:a7:6a:d7:c4:67:63:46:c0:4f: ca:51:9f:55:de:93:5a:3e:71:90:94:38:d5:e9:d9:66:32:8b: 9b:27:88:6c:2a:c6:6c:53:79:d3:dc:19:45:a1:3d:37:99:21: c4:80:79:a4:d2:ea:39:e7:24:50:65:23:3f:d6:21:9a:27:d0: b5:08:01:03:a9:a9:10:77:60:c6:90:38:16:e5:b7:0f:de:d4: b5:ff:08:c1:46:36:95:21:e2:85:4b:00:27:9c:29:a0:f8:7c: f1:29:fb:27:d6:52:e9:15:c5:53:4b:a1:2e:65:06:eb:eb:1b: 4c:e0:ae:94:a6:cc:f2:8e:81:09:56:ab:30:2b:bf:d3:f5:c9: be:d1:56:8f:35:45:df:aa:49:43:77:8e:97:90:df:12:c8:96: 3e:c3:ff:89 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIULTE2B/vDh4DvqPPdfXdzrVyNG8AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZTRiOTg4ZTBjNWYxNmNkNWE1OGI4NzlhMzE3MzdiNGYy ZjA4NmI5NTAeFw0yNjAxMjAxMjQzMDFaFw0yNjAxMjExMzM1MDFaMDMxMTAvBgNV BAMTKEVFQzE1NEY4MjEzQTczRTY2MzA1NkJBQ0ExNjQwQ0EzNjUxQUEyMEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClcph2POufx6BOHfaSao2dTPfi qqXdVb26DeVdiH/kMRScBb1PZk9FmAj57w70HmmkiKY8ADKna22vtNbVN/RKQP8L gKdelT89/+LUr1kO4Iz2RdqaXyLwVPhRhMCUXr0oatJJRP0OqpDeZwZ/A9aJaUIX /hWg0TVYqwz7s8BFsfK4bRNMRfVKnK4jYIwzZLtyYSyr3UEap/zCa9Q4ZUQVZk8+ iAut5LODjciqT4EmS20338JTgUc7Enc6iTe13punhNCAx0w4882ZENaeG1j823ma eXKscmZqolbUcJ7Q27jt1+TWRexygGlmMDzpdnJ3hA96Y4fdu1bq1VAW+p2FAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU7sFU+CE6c+ZjBWusoWQMo2Uaog4wHwYDVR0j BBgwFoAU5LmI4MXxbNWli4eaMXN7Ty8Ia5UwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNmM0M2QzYTYtN2QxMy00ODk1LTk1OWQtNDE5YjlhNmVi MzRiLzEvRTRCOTg4RTBDNUYxNkNENUE1OEI4NzlBMzE3MzdCNEYyRjA4NkI5NS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVMbUk0TVh4Yk5XbGk0ZWFNWE43VHk4 SWE1VS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YzQzZDNhNi03 ZDEzLTQ4OTUtOTU5ZC00MTliOWE2ZWIzNGIvMS9FNEI5ODhFMEM1RjE2Q0Q1QTU4 Qjg3OUEzMTczN0I0RjJGMDg2Qjk1Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfsLZ+gF7EGuZYSVbENfe e/WzB41hN8TqmEkD7mRO2oWqg8/KGd9+3+WPe8/TOezHjSznHR+9XXLF+obM2oMR zg4k5447utRdWdtmw9D3Fg4rhxFlXk8mjhukkvJNNq25I8KVp2rXxGdjRsBPylGf Vd6TWj5xkJQ41enZZjKLmyeIbCrGbFN509wZRaE9N5khxIB5pNLqOeckUGUjP9Yh mifQtQgBA6mpEHdgxpA4FuW3D97Utf8IwUY2lSHihUsAJ5wpoPh88Sn7J9ZS6RXF U0uhLmUG6+sbTOCulKbM8o6BCVarMCu/0/XJvtFWjzVF36pJQ3eOl5DfEsiWPsP/ iQ== -----END CERTIFICATE-----Generated at Wed Jan 21 02:30:55 2026 by rpki-client