This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/3/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.mft File: 0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.mft (raw, json) Hash identifier: HGcRfCK6iE9VbOQb4ZEJIJDcaZjju5oJg8ogum86jkg= Subject key identifier: F5:69:D1:4F:E8:8E:F4:28:47:BA:F3:0D:1E:3D:C6:81:DD:20:DF:B2 Authority key identifier: 0A:FD:B7:22:2B:9E:BA:33:A6:5E:29:BB:E3:F2:9D:7C:5F:4B:09:B9 Certificate issuer: /CN=0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9 Certificate serial: 2EB707790EFDBC0858551119843DADCB4C41521B Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/3/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.mft Manifest number: 011A Signing time: Sun 01 Feb 2026 15:23:01 +0000 Manifest this update: Sun 01 Feb 2026 15:18:01 +0000 Manifest next update: Mon 02 Feb 2026 19:14:01 +0000 Files and hashes: 1: 326130373a353463313a663030303a3a2f33362d3438203d3e20323038343533.roa (hash: PoxwFIHy8kdey2mlHnL1hmx4hhF1/GhCPxY1mv6kDWE=) 2: 0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.crl (hash: Os+sFzSi0Fj1q6OD9X2ZUaoZWyhSqSl+i5+wCc+9bKU=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/3/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.crl rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/3/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.mft rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.cer rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 19:14:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:b7:07:79:0e:fd:bc:08:58:55:11:19:84:3d:ad:cb:4c:41:52:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9 Validity Not Before: Feb 1 15:18:01 2026 GMT Not After : Feb 2 19:14:01 2026 GMT Subject: CN=F569D14FE88EF42847BAF30D1E3DC681DD20DFB2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:1c:f3:5e:78:8e:99:cb:a6:06:e6:c4:ce:b0: 8e:91:95:d9:3f:78:e7:1b:b3:0e:3f:3d:9b:6e:15: 92:04:59:67:20:3c:30:ed:e2:82:06:74:bb:fc:df: 0a:00:18:04:95:c1:27:65:00:e8:da:76:a5:06:9f: 77:a3:f1:16:df:12:50:58:ff:3a:ef:70:e9:0e:86: c7:68:82:66:e2:a9:f6:88:a7:2f:02:9d:b8:c3:da: 0d:58:a6:5b:6b:fa:0b:ea:26:fa:72:2e:db:ff:be: 66:5f:a9:e2:b7:7a:0a:11:2d:2e:07:f8:13:e4:2e: 92:7b:c4:5b:0f:fc:b6:b3:f4:cb:a2:4a:a6:40:1f: 25:0f:b3:16:57:de:18:16:d3:5b:8f:78:a7:bf:21: af:ee:88:16:9c:f3:28:96:b0:5f:a0:b0:e7:77:15: 6b:3a:b2:19:21:ad:88:f8:c0:4f:c6:7a:af:f2:01: e8:52:ce:70:6d:7e:c7:3f:d1:fc:6d:38:41:f8:9b: e4:0e:95:25:64:27:00:ea:d3:d5:a5:e4:23:0a:ea: 2e:aa:8f:f6:33:cb:b6:cc:28:88:1d:15:b2:51:37: 2f:98:79:18:de:74:3c:f6:c0:59:73:d8:dc:64:35: 65:f1:e3:c8:a0:ee:67:e1:4d:e8:61:4d:19:29:92: 3e:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:69:D1:4F:E8:8E:F4:28:47:BA:F3:0D:1E:3D:C6:81:DD:20:DF:B2 X509v3 Authority Key Identifier: keyid:0A:FD:B7:22:2B:9E:BA:33:A6:5E:29:BB:E3:F2:9D:7C:5F:4B:09:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/3/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/3/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:64:65:15:ca:51:c8:af:02:f5:67:bc:d9:ba:05:3d:9f:c1: 85:1f:53:d4:7b:f6:f2:86:6d:cb:81:14:75:b2:a1:27:4c:23: 3c:49:8c:2a:56:8e:fb:d3:22:e8:f0:d0:e1:fa:ad:74:79:48: 21:32:ec:bb:eb:03:94:fc:c3:69:fd:7f:19:b9:fa:b0:e1:6a: f7:b8:a0:74:3a:44:38:d8:cc:5e:bc:3e:9f:d8:56:c5:b9:ce: 6e:a4:25:5b:f3:ec:21:fa:b2:dc:78:c0:91:2b:c4:59:1c:69: 43:90:64:54:2f:2d:17:fd:b1:44:3c:54:ec:f3:3b:1d:6a:c1: 73:f8:04:a7:a9:7c:a6:9b:2c:47:e7:ed:be:5d:02:f8:7f:fe: 66:d7:a9:db:ef:e4:dc:38:fc:b7:9c:7a:64:8a:55:e4:25:67: 8b:95:04:9f:77:b9:ac:be:46:c6:2b:ff:89:e6:a2:60:85:a8: c0:d9:42:fb:88:a6:43:c7:e4:93:f5:ab:e6:7b:00:9a:6d:38: 67:8d:23:14:c1:d8:94:c4:11:54:21:a7:9e:ea:1e:23:b1:1a: 17:ee:23:8e:15:bf:d6:2b:41:c9:47:3c:fd:7f:c5:e2:6b:f2: 31:67:de:95:3a:60:be:b4:73:53:f9:91:9d:eb:88:eb:ce:1b: a0:70:f1:4a -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIULrcHeQ79vAhYVREZhD2ty0xBUhswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEFGREI3MjIyQjlFQkEzM0E2NUUyOUJCRTNGMjlEN0M1 RjRCMDlCOTAeFw0yNjAyMDExNTE4MDFaFw0yNjAyMDIxOTE0MDFaMDMxMTAvBgNV BAMTKEY1NjlEMTRGRTg4RUY0Mjg0N0JBRjMwRDFFM0RDNjgxREQyMERGQjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDHPNeeI6Zy6YG5sTOsI6Rldk/ eOcbsw4/PZtuFZIEWWcgPDDt4oIGdLv83woAGASVwSdlAOjadqUGn3ej8RbfElBY /zrvcOkOhsdogmbiqfaIpy8CnbjD2g1Ypltr+gvqJvpyLtv/vmZfqeK3egoRLS4H +BPkLpJ7xFsP/Laz9MuiSqZAHyUPsxZX3hgW01uPeKe/Ia/uiBac8yiWsF+gsOd3 FWs6shkhrYj4wE/Geq/yAehSznBtfsc/0fxtOEH4m+QOlSVkJwDq09Wl5CMK6i6q j/Yzy7bMKIgdFbJRNy+YeRjedDz2wFlz2NxkNWXx48ig7mfhTehhTRkpkj6TAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU9WnRT+iO9ChHuvMNHj3Ggd0g37IwHwYDVR0j BBgwFoAUCv23IiueujOmXim74/KdfF9LCbkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE0NzZkNjItOWNmYS00ODcxLWEyZDktZmFkZjU3ODFj MTFiLzMvMEFGREI3MjIyQjlFQkEzM0E2NUUyOUJCRTNGMjlEN0M1RjRCMDlCOS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYTAwNGJhMS00MTliLTRk YjUtYmJkMy01Y2NhNjMzY2FlM2YvNC8wQUZEQjcyMjJCOUVCQTMzQTY1RTI5QkJF M0YyOUQ3QzVGNEIwOUI5LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzcxNDc2ZDYyLTljZmEtNDg3MS1hMmQ5LWZhZGY1NzgxYzExYi8zLzBBRkRCNzIy MkI5RUJBMzNBNjVFMjlCQkUzRjI5RDdDNUY0QjA5QjkubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCGZGUV ylHIrwL1Z7zZugU9n8GFH1PUe/byhm3LgRR1sqEnTCM8SYwqVo770yLo8NDh+q10 eUghMuy76wOU/MNp/X8Zufqw4Wr3uKB0OkQ42MxevD6f2FbFuc5upCVb8+wh+rLc eMCRK8RZHGlDkGRULy0X/bFEPFTs8zsdasFz+ASnqXymmyxH5+2+XQL4f/5m16nb 7+TcOPy3nHpkilXkJWeLlQSfd7msvkbGK/+J5qJghajA2UL7iKZDx+ST9avmewCa bThnjSMUwdiUxBFUIaee6h4jsRoX7iOOFb/WK0HJRzz9f8Xia/IxZ96VOmC+tHNT +ZGd64jrzhugcPFK -----END CERTIFICATE-----Generated at Mon Feb 2 09:42:11 2026 by rpki-client