This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.mft File: 1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.mft (raw, json) Hash identifier: JMKRudsjzvenmskL+iReJ1KRjJpQ7zVA99GXePxkKO4= Subject key identifier: 42:71:8C:37:62:C1:27:39:F1:27:02:69:87:1D:8B:F2:54:52:A9:A8 Authority key identifier: 1D:BD:1D:47:FD:8E:45:74:C8:42:17:43:C9:CC:5F:0E:F8:3E:0E:71 Certificate issuer: /CN=1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71 Certificate serial: 15C0989C28E71FE45C36670DE6CFE632660A04D4 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.mft Manifest number: 037A Signing time: Wed 21 Jan 2026 13:58:01 +0000 Manifest this update: Wed 21 Jan 2026 13:53:01 +0000 Manifest next update: Thu 22 Jan 2026 15:47:01 +0000 Files and hashes: 1: 1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.crl (hash: G6O0f9Fs1CWLi8Q/x98v/vh4zUFau4Tkjq54dMPFyIM=) 2: 326131343a316563373a663030663a3a2f34382d3438203d3e20323038343533.roa (hash: ZBQrTYQq6EzEXXQqVVLmnECxmx5vDStz1fI8gjrWa9o=) 3: 326131343a316563373a663030643a3a2f34382d3438203d3e20323136313133.roa (hash: RA+L2a9rUnQEkE0h3dE9SdgUVHKokLJZl3eEmnwupDU=) 4: 326131343a316563373a663030303a3a2f34302d3430203d3e20323038343533.roa (hash: kUd+OV7q9DAowS2L3/fdq/oS4HUMTFtScny+gWU7CG0=) 5: 326131343a316563373a663030653a3a2f34382d3438203d3e203336383332.roa (hash: NchO6Xk6Xarz93hp9H8fOtN5l3Sk4YKm9dDl0QiIwEY=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.crl rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.mft rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.cer rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:c0:98:9c:28:e7:1f:e4:5c:36:67:0d:e6:cf:e6:32:66:0a:04:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71 Validity Not Before: Jan 21 13:53:01 2026 GMT Not After : Jan 22 15:47:01 2026 GMT Subject: CN=42718C3762C12739F1270269871D8BF25452A9A8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:5f:10:9b:28:ca:12:9c:26:5a:4b:1d:0b:89: 3a:2b:0a:c5:8f:71:81:c0:0c:9e:a7:d6:e9:e8:4b: cb:9c:13:ce:97:4f:fa:09:f6:9a:19:3d:99:15:49: a0:23:b6:16:b5:c1:26:20:47:72:67:57:c1:69:c3: 6f:a4:f2:7e:a7:1b:c0:3d:54:af:fd:b5:39:41:1d: f0:39:23:88:10:e1:c3:b8:18:82:9e:4a:64:c0:27: 05:58:1f:6d:a5:ec:6d:15:8c:50:7d:5d:25:b7:2a: b9:2e:16:06:3c:b8:43:54:24:9d:3b:c1:36:83:20: 8c:ac:b2:97:c7:7a:c5:45:d9:14:0d:b5:2d:3c:0c: 7a:e7:79:69:1e:14:4b:ec:30:45:a7:41:df:74:92: e4:e9:63:54:c3:f2:b9:1d:6c:4c:7c:41:78:19:a5: a1:9e:1e:05:24:e4:e8:e1:89:95:be:fe:dd:ee:07: b9:28:f6:c5:b6:66:70:3f:50:b2:ca:a2:73:d2:a4: da:8c:9c:05:a7:fb:4a:17:74:2a:c1:9b:48:0a:35: e2:6e:86:5d:5e:b9:51:bd:af:c2:96:9e:3a:d9:40: 54:5a:d5:98:28:40:08:b7:26:98:12:50:fc:02:e6: 0f:dd:c5:fa:4a:4e:da:ed:fb:64:d9:9e:2b:8e:a5: ea:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:71:8C:37:62:C1:27:39:F1:27:02:69:87:1D:8B:F2:54:52:A9:A8 X509v3 Authority Key Identifier: keyid:1D:BD:1D:47:FD:8E:45:74:C8:42:17:43:C9:CC:5F:0E:F8:3E:0E:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:5d:33:9b:9a:87:9b:c4:51:35:67:36:de:e8:67:dd:f5:7f: b2:2a:cb:1a:97:2d:c3:15:50:38:15:ef:43:8b:a0:bd:19:45: 18:3c:dd:4e:dd:aa:b5:ca:f6:be:8e:08:25:92:3d:34:d1:69: b4:72:1a:12:12:b6:51:84:2c:76:e0:4c:1e:15:21:93:24:3a: 38:c8:4a:0b:74:e2:76:fe:92:55:32:83:27:78:d4:a7:13:e2: c0:48:93:47:f2:d4:56:2f:b5:a2:a0:b7:15:44:a7:9b:13:85: 72:73:ba:da:04:6e:5d:48:aa:cc:66:85:c1:9a:33:e7:eb:07: fb:6b:18:ce:f0:5c:94:e5:b9:bc:d6:44:3a:a3:16:dd:82:c6: 00:eb:c1:4d:c3:86:fe:c5:12:2b:3a:8f:cd:04:1d:39:0a:eb: 4b:4b:10:ae:14:f8:42:11:22:80:f9:05:f1:cc:86:0c:49:1c: 37:59:b1:29:ae:c1:54:f4:14:9d:97:9a:af:03:29:1c:bb:8c: b3:1e:04:24:00:0e:af:98:9d:e8:7d:10:3f:83:c7:64:42:bf: 7c:76:a5:87:14:ea:c4:53:2f:ff:d6:9c:7f:4c:1d:81:b0:c6: 22:43:91:2b:ba:f4:f2:9c:ed:60:a7:59:80:d7:74:d8:20:22: 2e:7c:e3:fc -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUFcCYnCjnH+RcNmcN5s/mMmYKBNQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMURCRDFENDdGRDhFNDU3NEM4NDIxNzQzQzlDQzVGMEVG ODNFMEU3MTAeFw0yNjAxMjExMzUzMDFaFw0yNjAxMjIxNTQ3MDFaMDMxMTAvBgNV BAMTKDQyNzE4QzM3NjJDMTI3MzlGMTI3MDI2OTg3MUQ4QkYyNTQ1MkE5QTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtXxCbKMoSnCZaSx0LiTorCsWP cYHADJ6n1unoS8ucE86XT/oJ9poZPZkVSaAjtha1wSYgR3JnV8Fpw2+k8n6nG8A9 VK/9tTlBHfA5I4gQ4cO4GIKeSmTAJwVYH22l7G0VjFB9XSW3KrkuFgY8uENUJJ07 wTaDIIysspfHesVF2RQNtS08DHrneWkeFEvsMEWnQd90kuTpY1TD8rkdbEx8QXgZ paGeHgUk5OjhiZW+/t3uB7ko9sW2ZnA/ULLKonPSpNqMnAWn+0oXdCrBm0gKNeJu hl1euVG9r8KWnjrZQFRa1ZgoQAi3JpgSUPwC5g/dxfpKTtrt+2TZniuOpepfAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUQnGMN2LBJznxJwJphx2L8lRSqagwHwYDVR0j BBgwFoAUHb0dR/2ORXTIQhdDycxfDvg+DnEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE0NzZkNjItOWNmYS00ODcxLWEyZDktZmFkZjU3ODFj MTFiLzIvMURCRDFENDdGRDhFNDU3NEM4NDIxNzQzQzlDQzVGMEVGODNFMEU3MS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xYTNiYjkzZi05OGE0LTRj N2UtYTBlMS04MDU3YTRmMDg2YzkvMC8xREJEMUQ0N0ZEOEU0NTc0Qzg0MjE3NDND OUNDNUYwRUY4M0UwRTcxLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzcxNDc2ZDYyLTljZmEtNDg3MS1hMmQ5LWZhZGY1NzgxYzExYi8yLzFEQkQxRDQ3 RkQ4RTQ1NzRDODQyMTc0M0M5Q0M1RjBFRjgzRTBFNzEubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBhXTOb moebxFE1Zzbe6Gfd9X+yKssaly3DFVA4Fe9Di6C9GUUYPN1O3aq1yva+jgglkj00 0Wm0choSErZRhCx24EweFSGTJDo4yEoLdOJ2/pJVMoMneNSnE+LASJNH8tRWL7Wi oLcVRKebE4Vyc7raBG5dSKrMZoXBmjPn6wf7axjO8FyU5bm81kQ6oxbdgsYA68FN w4b+xRIrOo/NBB05CutLSxCuFPhCESKA+QXxzIYMSRw3WbEprsFU9BSdl5qvAykc u4yzHgQkAA6vmJ3ofRA/g8dkQr98dqWHFOrEUy//1px/TB2BsMYiQ5EruvTynO1g p1mA13TYICIufOP8 -----END CERTIFICATE-----Generated at Wed Jan 21 15:41:41 2026 by rpki-client