This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.mft File: ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.mft (raw, json) Hash identifier: 580gzPo2hdo4Ic3rYVFXSiZ9E/aB3+OuLJyXHDZ8CAo= Subject key identifier: B7:1A:CE:B0:4F:FB:B4:7C:E6:96:FF:A7:7E:31:11:E7:BF:3D:5B:8C Authority key identifier: ED:8F:9A:7C:71:D9:40:07:39:BB:8F:C9:71:6E:43:42:FF:6D:64:5B Certificate issuer: /CN=ed8f9a7c71d9400739bb8fc9716e4342ff6d645b Certificate serial: 6EF9DE771A9DF92900152C76C30E6EAACFCFB9CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Y-afHHZQAc5u4_JcW5DQv9tZFs.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.mft Manifest number: 4C Signing time: Thu 08 Jan 2026 09:15:53 +0000 Manifest this update: Thu 08 Jan 2026 09:10:53 +0000 Manifest next update: Fri 09 Jan 2026 10:40:53 +0000 Files and hashes: 1: 34352e3134392e3136342e302f32342d3234203d3e203235333639.roa (hash: a0LqwFPI6pwa1fZnOKWJVr+UvNzZLlo/pfpnRlcnUlw=) 2: 3139342e35302e302e302f32342d3234203d3e203438333134.roa (hash: BtX3QzIneVP4peKGNcyeJeMDG5hgOoQ4i/5PEk0YGmY=) 3: 34352e3134392e3136362e302f32342d3234203d3e20323132333834.roa (hash: oGRqBKIGwkwo89Qzo8J8QE2XhyVF3R37X5VJTJkYTLY=) 4: 34352e3134392e36322e302f32342d3234203d3e203633313939.roa (hash: vZtUK+cyWn9HqZW47BPiCvcZESw+S9eULE1Gd8jVpHQ=) 5: 34352e3134392e36312e302f32342d3234203d3e20313335333931.roa (hash: CjBHEb6e8KCFokD4ry4Ct4NNWk9/i3N//pYJT3Rzvpg=) 6: 34352e3134392e3136372e302f32342d3234203d3e20323132363639.roa (hash: G5FQ1l+cRk3n7sDIEiJiOqD91u3IjodfdNcjTCN0Zms=) 7: 34352e3134392e36302e302f32342d3234203d3e203235313938.roa (hash: BMVUQxVH4pq3R9s8f6YkxUT4rJ9AD3/MSsJhChcEejg=) 8: 34352e3134332e3136332e302f32342d3234203d3e203139343337.roa (hash: M8Y5TaWjTiVOLanqncdwCCTpjaAInXMAJmIU/gVIuL8=) 9: 3139342e35302e312e302f32342d3234203d3e203634323637.roa (hash: Y111o5heSVgTuvX1afqOIbWwexv6C9e08p+YRNlvpVI=) 10: 34352e3134332e3136322e302f32342d3234203d3e203233343730.roa (hash: OcZ6EMgc6x8+IMfJh9quglLv9DVchqMI90FMfGysZqA=) 11: 3139342e35302e312e302f32342d3234203d3e203534323532.roa (hash: ruvdsYTXtE0Ab54FYmgOEkBccmfDScUwXgNFAX7lgcQ=) 12: 34352e3134392e36322e302f32342d3234203d3e203235313938.roa (hash: atvOKN/I6kZ9ZCn2ROjeKb1sdRXFzq1nj70sdrwEypw=) 13: 34352e3134392e3136352e302f32342d3234203d3e20323039303433.roa (hash: xof4y/WucaiGMtyPzgbTPsOcPFlb9obn6jFW42zp3IM=) 14: 3139342e35302e312e302f32342d3234203d3e20333937363330.roa (hash: TeUJtf1ikY7LLYRPrAz/E+BsfW9QE1+7cNe6Ilv12VI=) 15: 3139342e3234372e34352e302f32342d3234203d3e20313337353137.roa (hash: 7Uz0iGXKq5oSbUI44D0T64XUT0jHl47mRLVxjRhD2eU=) 16: 34352e3134332e3136312e302f32342d3234203d3e203631333137.roa (hash: 8ZjMd6obm3N7HBniZT8uftJQwQbBGvAMihymyaoAi+E=) 17: ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.crl (hash: lDoFHakVOWN/hTFx/9jVpec0x/icl4gAel5e8v+ExZw=) 18: 3139342e3234362e33372e302f32342d3234203d3e20313534303439.roa (hash: qsoqYvzpUXEnewa636Uqf3ZdHju9vYqXC78N1RH7Kt0=) 19: 34352e3134332e3136302e302f32342d3234203d3e203232313638.roa (hash: R01FRlBDr9pZoq05BG3LRHuNkIAJs+FNxUn/NkK9at8=) 20: 3139342e35302e342e302f32342d3234203d3e20343030303339.roa (hash: 1KQ8U/cyI6RlRLUmJsQ7MnZR4YGCCRfjVSVg2/aEhuA=) 21: 3139342e3234372e34342e302f32342d3234203d3e20313432313436.roa (hash: TqX0P9wlnvbZoWAo8DlV20oJQITx6kCNiVhWbz6v/l4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.crl rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.mft rsync://rpki.ripe.net/repository/DEFAULT/7Y-afHHZQAc5u4_JcW5DQv9tZFs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 09:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:f9:de:77:1a:9d:f9:29:00:15:2c:76:c3:0e:6e:aa:cf:cf:b9:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed8f9a7c71d9400739bb8fc9716e4342ff6d645b Validity Not Before: Jan 8 09:10:53 2026 GMT Not After : Jan 9 10:40:53 2026 GMT Subject: CN=B71ACEB04FFBB47CE696FFA77E3111E7BF3D5B8C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:23:ad:38:34:c6:46:d0:6f:ec:04:ec:f7:82: bc:2b:32:b2:72:70:0d:04:ef:b5:f8:66:13:d9:95: 74:b4:be:bd:40:e4:b6:c1:81:99:1b:b1:6c:0d:15: 53:c6:52:80:d6:23:c4:26:8c:78:73:42:a9:fa:92: e2:d9:fc:10:01:a6:27:c5:62:05:90:f2:e8:5d:c4: 17:94:bb:3a:0a:85:8e:36:41:b7:f9:bc:ee:84:69: 38:f6:7b:4d:53:ed:dd:51:e8:3e:61:f6:79:41:c0: 91:e0:c4:26:08:65:96:20:d8:72:d2:82:6b:f0:86: 1d:b5:2d:dc:61:5a:4f:7b:01:0b:47:88:75:a2:7d: 48:5c:21:84:94:f8:6e:d3:88:39:c3:ff:74:7c:42: 50:8a:d6:57:01:dd:5c:6f:ed:d6:ea:22:46:d5:72: ea:47:3e:8f:54:d7:53:61:54:1f:16:21:55:4a:0a: 8a:81:95:aa:87:dc:83:be:a5:74:91:64:da:c8:92: dd:f1:c1:7c:84:5a:c4:36:1a:80:61:6b:ed:94:9a: ac:48:33:be:48:3b:54:29:fc:90:e8:12:f5:67:ca: 31:e4:6e:58:0c:bd:29:4d:ce:3b:49:96:9b:a3:22: 89:3b:88:1e:90:51:09:69:4e:3c:93:b2:99:65:35: 64:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:1A:CE:B0:4F:FB:B4:7C:E6:96:FF:A7:7E:31:11:E7:BF:3D:5B:8C X509v3 Authority Key Identifier: keyid:ED:8F:9A:7C:71:D9:40:07:39:BB:8F:C9:71:6E:43:42:FF:6D:64:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Y-afHHZQAc5u4_JcW5DQv9tZFs.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:37:bb:16:e4:1a:83:39:5f:3d:d9:6d:49:bd:5f:f6:ac:39: 5b:f3:a5:e1:a5:6b:72:46:12:11:0e:f5:33:1d:19:10:bb:1f: 64:4e:b1:30:2f:fa:33:ab:bd:28:b9:a1:dd:d7:6c:ce:2c:ac: 7e:93:ee:ee:38:5e:27:bc:54:8f:d4:a0:8f:ab:50:da:4e:75: a8:76:d1:c8:ca:e0:f5:5b:9a:9b:12:bd:05:5c:33:9c:60:ab: 5d:6f:2b:92:d4:ea:56:7f:54:24:42:33:96:99:37:b4:e3:91: 20:60:08:ed:59:5a:8d:c5:be:01:fa:68:2f:f7:2d:3a:bd:64: 88:95:26:58:96:47:fd:e1:a4:25:ea:34:a9:3d:0c:d9:c5:14: 42:6f:ef:81:8a:e6:4d:3a:63:78:2f:af:52:e8:e0:c5:16:9d: 15:e5:d3:15:61:8a:32:ab:78:bd:bb:e5:1f:ec:52:57:6d:66: 11:11:fe:f7:32:7a:7d:d3:51:8b:eb:c1:f7:e2:ef:a0:05:62: 4c:28:e0:8b:8e:da:29:61:e1:54:7f:bb:9c:4c:39:0d:fa:3e: bd:6c:4f:5b:22:c9:39:fe:be:62:a9:0e:3c:aa:95:95:71:13: da:e1:7b:5b:0b:dd:25:ab:02:91:da:67:9e:b9:8b:c3:94:c1: 5c:47:20:4f -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUbvnedxqd+SkAFSx2ww5uqs/PucswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZWQ4ZjlhN2M3MWQ5NDAwNzM5YmI4ZmM5NzE2ZTQzNDJm ZjZkNjQ1YjAeFw0yNjAxMDgwOTEwNTNaFw0yNjAxMDkxMDQwNTNaMDMxMTAvBgNV BAMTKEI3MUFDRUIwNEZGQkI0N0NFNjk2RkZBNzdFMzExMUU3QkYzRDVCOEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoI604NMZG0G/sBOz3grwrMrJy cA0E77X4ZhPZlXS0vr1A5LbBgZkbsWwNFVPGUoDWI8QmjHhzQqn6kuLZ/BABpifF YgWQ8uhdxBeUuzoKhY42Qbf5vO6EaTj2e01T7d1R6D5h9nlBwJHgxCYIZZYg2HLS gmvwhh21LdxhWk97AQtHiHWifUhcIYSU+G7TiDnD/3R8QlCK1lcB3Vxv7dbqIkbV cupHPo9U11NhVB8WIVVKCoqBlaqH3IO+pXSRZNrIkt3xwXyEWsQ2GoBha+2UmqxI M75IO1Qp/JDoEvVnyjHkblgMvSlNzjtJlpujIok7iB6QUQlpTjyTspllNWT9AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUtxrOsE/7tHzmlv+nfjER5789W4wwHwYDVR0j BBgwFoAU7Y+afHHZQAc5u4/JcW5DQv9tZFswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzAzMDc5ZGUtMzhhNy00NWYzLWFhODItNTQyZWFmMzcz NzYwLzAvRUQ4RjlBN0M3MUQ5NDAwNzM5QkI4RkM5NzE2RTQzNDJGRjZENjQ1Qi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdZLWFmSEhaUUFjNXU0X0pjVzVEUXY5 dFpGcy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS83MDMwNzlkZS0z OGE3LTQ1ZjMtYWE4Mi01NDJlYWYzNzM3NjAvMC9FRDhGOUE3QzcxRDk0MDA3MzlC QjhGQzk3MTZFNDM0MkZGNkQ2NDVCLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqDe7FuQagzlfPdltSb1f 9qw5W/Ol4aVrckYSEQ71Mx0ZELsfZE6xMC/6M6u9KLmh3ddsziysfpPu7jheJ7xU j9Sgj6tQ2k51qHbRyMrg9VuamxK9BVwznGCrXW8rktTqVn9UJEIzlpk3tOORIGAI 7VlajcW+AfpoL/ctOr1kiJUmWJZH/eGkJeo0qT0M2cUUQm/vgYrmTTpjeC+vUujg xRadFeXTFWGKMqt4vbvlH+xSV21mERH+9zJ6fdNRi+vB9+LvoAViTCjgi47aKWHh VH+7nEw5Dfo+vWxPWyLJOf6+YqkOPKqVlXET2uF7WwvdJasCkdpnnrmLw5TBXEcg Tw== -----END CERTIFICATE-----Generated at Thu Jan 8 18:19:36 2026 by rpki-client