This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.mft File: 0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.mft (raw, json) Hash identifier: uoxRwCxvJrp9bhV1xuIZ6GmQ5rG4n5tZOQNLdQ6tiWw= Subject key identifier: 2A:3F:FA:21:70:F6:8A:37:D5:62:2C:9C:EE:70:8B:B4:6F:EF:09:FB Authority key identifier: 0A:8B:61:A8:44:D6:C2:C7:AF:38:ED:CB:D1:65:D0:EF:FB:82:3E:45 Certificate issuer: /CN=0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45 Certificate serial: 5126219CEA46C2525CBB82903BCA2E17848090F4 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.mft Manifest number: 02BB Signing time: Sat 10 Jan 2026 11:15:37 +0000 Manifest this update: Sat 10 Jan 2026 11:10:37 +0000 Manifest next update: Sun 11 Jan 2026 14:16:37 +0000 Files and hashes: 1: 326131343a373538313a6430303a3a2f34342d3438203d3e203331383938.roa (hash: OYFGGb9dMqAtV18cBeD3NbZ0TuwCvJXmn37LZwaW7zg=) 2: 0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.crl (hash: Ww2tKqBoOQQGtDbxI1bNNYHtxUmpobSfghFqzGONbhk=) 3: 326131343a373538343a373030303a3a2f33362d3434203d3e20323136343532.roa (hash: bjWKUcdJK3JxiL+GqIgQQNiLJnq1CfKPBgs/UuOHrJA=) 4: 326131343a373538313a6430303a3a2f34302d3438203d3e20323136343532.roa (hash: jAqeRW+G0tj75/HjlTu9upVrXQ/2AvwaP0ubMorKA1Q=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.crl rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 14:16:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:26:21:9c:ea:46:c2:52:5c:bb:82:90:3b:ca:2e:17:84:80:90:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45 Validity Not Before: Jan 10 11:10:37 2026 GMT Not After : Jan 11 14:16:37 2026 GMT Subject: CN=2A3FFA2170F68A37D5622C9CEE708BB46FEF09FB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:e1:87:de:71:ca:50:ab:38:89:b0:e0:35:eb: 93:31:fd:8a:ee:8d:00:b1:a6:cb:26:69:21:e9:fb: 28:0a:b5:02:23:09:b9:b0:9e:7b:3e:c5:a7:ce:53: 4f:08:74:97:c3:6b:52:d2:9a:b0:19:54:5f:c9:3a: 37:eb:de:22:6c:61:0d:67:91:e7:08:6e:cc:b0:44: 08:83:25:ed:91:45:b5:9c:fe:a5:a0:7e:27:1b:07: 75:29:ce:78:b8:e3:74:3e:17:f8:94:4f:7a:42:1d: ae:13:29:5f:54:5f:7c:28:90:e2:a6:f6:dc:67:94: 46:59:56:51:28:cf:1d:bf:41:ae:ea:02:21:e9:d1: 52:db:63:ba:55:85:db:9d:49:6d:1f:fb:f7:4e:91: 1d:d1:93:f1:09:d7:01:37:53:87:d0:b5:5a:3e:d6: fb:38:93:98:84:8a:37:79:55:b1:7a:91:ef:ce:9a: fb:54:b3:49:1b:59:72:86:f4:87:e5:05:0e:de:85: 5d:6f:1e:fe:f2:dd:aa:96:31:e1:45:4a:c1:9b:a4: df:ef:9a:77:e9:58:73:0d:e2:e9:78:05:8f:cb:22: ea:c7:69:b3:42:01:bc:47:a6:83:de:3d:9a:81:0b: 14:0c:76:ff:78:a7:99:c8:a9:0c:b9:b0:c2:54:d1: bb:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:3F:FA:21:70:F6:8A:37:D5:62:2C:9C:EE:70:8B:B4:6F:EF:09:FB X509v3 Authority Key Identifier: keyid:0A:8B:61:A8:44:D6:C2:C7:AF:38:ED:CB:D1:65:D0:EF:FB:82:3E:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:61:07:56:e3:30:d7:8b:5f:cc:0c:b0:41:00:91:1c:ac:2b: 62:7b:c1:59:da:07:c5:5b:81:0a:e3:b4:bc:e5:90:ae:de:e8: 4d:a6:e1:d3:f6:e2:3d:b6:f3:1f:70:9d:92:f9:1b:a3:b4:57: 4b:78:01:2b:cd:0a:0b:42:14:81:ae:a0:e5:8d:8e:46:71:cf: 2d:e5:a5:07:0a:b3:eb:b6:b5:83:f1:86:19:b3:f1:5f:e5:ee: d7:41:60:37:b0:d1:91:3a:dd:b4:51:2d:1c:9f:8d:05:4b:c0: 98:14:a1:57:d5:a9:14:6c:dc:61:bc:d6:ed:81:7c:98:90:26: b1:38:03:2e:31:e0:9d:31:db:2b:78:41:f3:ad:92:ab:1e:a1: 8e:46:5b:60:f8:75:3a:e3:3f:e6:c8:5d:1e:7d:d7:63:bb:92: 3f:64:9e:d7:31:47:b8:41:3e:33:ca:62:0c:ab:97:c4:ed:e8: 94:90:f4:cd:30:cb:10:87:f7:df:98:e8:53:2e:11:43:ac:b7: cc:a3:0b:a3:96:10:a1:92:a4:ec:ee:86:ba:79:a9:86:ee:36: 5c:42:98:86:9e:d1:2b:45:63:0d:02:ad:44:e4:d9:e7:85:b6: 03:2e:fe:cf:7d:cf:bd:a3:08:eb:5d:5d:46:d6:38:c3:f4:d6: f9:86:5a:71 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUUSYhnOpGwlJcu4KQO8ouF4SAkPQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEE4QjYxQTg0NEQ2QzJDN0FGMzhFRENCRDE2NUQwRUZG QjgyM0U0NTAeFw0yNjAxMTAxMTEwMzdaFw0yNjAxMTExNDE2MzdaMDMxMTAvBgNV BAMTKDJBM0ZGQTIxNzBGNjhBMzdENTYyMkM5Q0VFNzA4QkI0NkZFRjA5RkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCO4YfeccpQqziJsOA165Mx/Yru jQCxpssmaSHp+ygKtQIjCbmwnns+xafOU08IdJfDa1LSmrAZVF/JOjfr3iJsYQ1n kecIbsywRAiDJe2RRbWc/qWgficbB3Upzni443Q+F/iUT3pCHa4TKV9UX3wokOKm 9txnlEZZVlEozx2/Qa7qAiHp0VLbY7pVhdudSW0f+/dOkR3Rk/EJ1wE3U4fQtVo+ 1vs4k5iEijd5VbF6ke/OmvtUs0kbWXKG9IflBQ7ehV1vHv7y3aqWMeFFSsGbpN/v mnfpWHMN4ul4BY/LIurHabNCAbxHpoPePZqBCxQMdv94p5nIqQy5sMJU0btbAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUKj/6IXD2ijfVYiyc7nCLtG/vCfswHwYDVR0j BBgwFoAUCothqETWwsevOO3L0WXQ7/uCPkUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzJjNDA1ZjEtYzMyZC00N2NlLTg5NDMtMDc1MmVkMTNk OGVmLzEvMEE4QjYxQTg0NEQ2QzJDN0FGMzhFRENCRDE2NUQwRUZGQjgyM0U0NS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8wQThCNjFBODQ0RDZDMkM3QUYzOEVEQ0JE MTY1RDBFRkZCODIzRTQ1LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzcyYzQwNWYxLWMzMmQtNDdjZS04OTQzLTA3NTJlZDEzZDhlZi8xLzBBOEI2MUE4 NDRENkMyQzdBRjM4RURDQkQxNjVEMEVGRkI4MjNFNDUubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAfYQdW 4zDXi1/MDLBBAJEcrCtie8FZ2gfFW4EK47S85ZCu3uhNpuHT9uI9tvMfcJ2S+Ruj tFdLeAErzQoLQhSBrqDljY5Gcc8t5aUHCrPrtrWD8YYZs/Ff5e7XQWA3sNGROt20 US0cn40FS8CYFKFX1akUbNxhvNbtgXyYkCaxOAMuMeCdMdsreEHzrZKrHqGORltg +HU64z/myF0efddju5I/ZJ7XMUe4QT4zymIMq5fE7eiUkPTNMMsQh/ffmOhTLhFD rLfMowujlhChkqTs7oa6eamG7jZcQpiGntErRWMNAq1E5NnnhbYDLv7Pfc+9owjr XV1G1jjD9Nb5hlpx -----END CERTIFICATE-----Generated at Sun Jan 11 07:35:22 2026 by rpki-client