This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft File: 42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft (raw, json) Hash identifier: 73Nm7AdoSQoSHwCQwOHJfC/mvwHbr5tDftCPrHGnxoU= Subject key identifier: 19:3B:E8:33:CB:8E:DD:E5:7E:E6:E6:3F:F7:4F:7E:B5:5E:9D:F4:73 Authority key identifier: 42:E5:08:FB:A8:96:0F:48:07:1B:11:9A:CC:BF:57:BD:BF:3A:80:57 Certificate issuer: /CN=42e508fba8960f48071b119accbf57bdbf3a8057 Certificate serial: 360FBAD2828A3DFC8003AE06112E86A8C4D5D330 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft Manifest number: 0289 Signing time: Wed 21 Jan 2026 01:39:31 +0000 Manifest this update: Wed 21 Jan 2026 01:34:31 +0000 Manifest next update: Thu 22 Jan 2026 04:03:31 +0000 Files and hashes: 1: 42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl (hash: UsFOQLYAig0shYVGQWTHrScppp9FahsuODzmFFkjpbs=) 2: 326130623a346530343a646561643a3a2f34382d3438203d3e203331383938.roa (hash: V5g1oVVpactG3mKu8PF61hy91x6gtyEU1mTZQLj69yk=) 3: 36322e3138322e3139322e302f32312d3234203d3e203432353332.roa (hash: 3uX+IJtCK1auUN/owB303ntI6bBy0+b5ouSYztCnTmQ=) 4: 326130623a346530343a3a2f34382d3438203d3e203236393534.roa (hash: kjCVplBQIQWTrk/MT/vsXbIMmP0BY/AuB2NZAKC1i00=) 5: 3139352e39352e3134392e302f32342d3234203d3e203236393534.roa (hash: 4RKcXrOywUF2n3zLGUholuQfQjsDw3jfgXGtm0jfONU=) 6: 326130623a346530343a626565663a3a2f34382d3438203d3e203236393534.roa (hash: dXSnrOSsmksjfaruQTR4onccvLxLXawLPmHLDP+0pZ0=) 7: 5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer (hash: xVnvGBOQAGx7ddcmxacteZKEbUgAqtkW3B5rWiVC4Gw=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:0f:ba:d2:82:8a:3d:fc:80:03:ae:06:11:2e:86:a8:c4:d5:d3:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42e508fba8960f48071b119accbf57bdbf3a8057 Validity Not Before: Jan 21 01:34:31 2026 GMT Not After : Jan 22 04:03:31 2026 GMT Subject: CN=193BE833CB8EDDE57EE6E63FF74F7EB55E9DF473 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:7f:45:4b:b4:ae:71:f7:94:e0:75:0f:3a:4e: 88:31:57:95:8e:c1:ba:c5:19:1b:39:04:2a:c7:7a: bc:b7:8e:9d:d1:de:80:e4:bd:a0:05:65:8f:8c:e1: 90:8c:25:a3:d1:c6:8b:8e:ed:67:52:0b:84:94:8e: fd:8d:af:1b:1f:35:4e:e1:37:c8:d7:36:8c:f2:4f: 27:c5:74:7a:48:8e:72:9b:4d:0f:a4:23:c3:0e:fc: 41:ba:9c:c5:6d:94:54:3c:99:cf:bc:0d:fe:73:e0: e7:dd:0d:0b:b6:2a:98:b7:f8:ec:4f:0e:18:fd:55: 98:62:7b:67:e9:ea:3f:1f:de:b9:3c:f0:b2:34:0e: de:20:6d:99:32:b1:cd:4b:1f:66:c9:b3:6c:a4:37: b0:ab:f2:8e:7e:bc:4b:15:fd:b9:19:38:98:46:16: 3c:15:1b:ec:18:bb:38:cb:11:f7:1d:6e:56:aa:f8: 58:bc:b7:0b:e3:a8:36:e8:60:d8:73:70:68:7a:61: bc:b8:8f:9f:50:87:63:a4:47:35:6d:45:ec:af:63: a4:a8:58:d1:6a:da:47:58:0d:1f:29:c2:de:2f:fe: 29:8e:27:b4:02:0c:65:1e:fb:12:81:81:6c:e3:55: 7a:9c:d9:25:d0:9c:c3:b1:83:e9:1f:a6:0f:fc:82: 8b:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:3B:E8:33:CB:8E:DD:E5:7E:E6:E6:3F:F7:4F:7E:B5:5E:9D:F4:73 X509v3 Authority Key Identifier: keyid:42:E5:08:FB:A8:96:0F:48:07:1B:11:9A:CC:BF:57:BD:BF:3A:80:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:e5:a4:7f:21:ed:bb:45:2e:4b:4c:4b:47:26:bb:a8:79:87: 7c:5a:bb:29:ed:b1:61:94:d0:d5:3e:ba:13:5a:68:d3:5a:c8: 32:c8:cb:4b:4c:ff:72:38:e2:d9:49:ff:7b:ff:67:16:72:45: 93:e5:30:59:e4:9c:ad:cd:7c:c4:6b:5f:d2:b8:96:0b:93:d8: c7:aa:fd:80:80:97:9c:dd:be:0d:53:ea:7f:17:19:81:96:f7: 57:f1:df:01:ca:13:b7:1a:4c:56:59:6c:29:54:dd:4c:0b:03: 70:b3:b2:1f:5d:7b:7c:36:32:32:a3:3a:63:46:53:2a:40:65: 73:8b:d0:17:f4:62:9d:ba:b0:93:1b:64:84:49:d7:15:e7:79: 6b:87:81:51:e7:fa:11:e2:8c:ab:9a:0a:4e:44:5c:21:6b:82: 52:11:ea:0a:2b:25:df:d1:87:b0:e4:3f:d7:2d:99:b7:45:b8: c8:19:ed:30:13:98:2c:fa:17:0f:a0:95:74:3b:11:42:6f:a4: 93:1b:4c:82:0f:d0:2e:fc:8b:2e:d9:9e:cd:46:91:6f:ed:ca: 31:13:c7:27:1d:2f:9d:03:9f:1d:50:51:93:c9:57:e8:19:23: 94:e2:b2:3c:1d:93:69:19:4b:5c:42:ed:1e:de:73:ed:c3:ad: ae:d5:dd:7e -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUNg+60oKKPfyAA64GES6GqMTV0zAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDJlNTA4ZmJhODk2MGY0ODA3MWIxMTlhY2NiZjU3YmRi ZjNhODA1NzAeFw0yNjAxMjEwMTM0MzFaFw0yNjAxMjIwNDAzMzFaMDMxMTAvBgNV BAMTKDE5M0JFODMzQ0I4RURERTU3RUU2RTYzRkY3NEY3RUI1NUU5REY0NzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXf0VLtK5x95TgdQ86TogxV5WO wbrFGRs5BCrHery3jp3R3oDkvaAFZY+M4ZCMJaPRxouO7WdSC4SUjv2NrxsfNU7h N8jXNozyTyfFdHpIjnKbTQ+kI8MO/EG6nMVtlFQ8mc+8Df5z4OfdDQu2Kpi3+OxP Dhj9VZhie2fp6j8f3rk88LI0Dt4gbZkysc1LH2bJs2ykN7Cr8o5+vEsV/bkZOJhG FjwVG+wYuzjLEfcdblaq+Fi8twvjqDboYNhzcGh6Yby4j59Qh2OkRzVtReyvY6So WNFq2kdYDR8pwt4v/imOJ7QCDGUe+xKBgWzjVXqc2SXQnMOxg+kfpg/8gosxAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUGTvoM8uO3eV+5uY/909+tV6d9HMwHwYDVR0j BBgwFoAUQuUI+6iWD0gHGxGazL9Xvb86gFcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzNiOGVjMDEtOGJhNS00NzlmLWEyMjktMGFiNzBlNDgx NWJiLzAvNDJFNTA4RkJBODk2MEY0ODA3MUIxMTlBQ0NCRjU3QkRCRjNBODA1Ny5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1F1VUktNmlXRDBnSEd4R2F6TDlYdmI4 NmdGYy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS83M2I4ZWMwMS04 YmE1LTQ3OWYtYTIyOS0wYWI3MGU0ODE1YmIvMC80MkU1MDhGQkE4OTYwRjQ4MDcx QjExOUFDQ0JGNTdCREJGM0E4MDU3Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArOWkfyHtu0UuS0xLRya7 qHmHfFq7Ke2xYZTQ1T66E1po01rIMsjLS0z/cjji2Un/e/9nFnJFk+UwWeScrc18 xGtf0riWC5PYx6r9gICXnN2+DVPqfxcZgZb3V/HfAcoTtxpMVllsKVTdTAsDcLOy H117fDYyMqM6Y0ZTKkBlc4vQF/RinbqwkxtkhEnXFed5a4eBUef6EeKMq5oKTkRc IWuCUhHqCisl39GHsOQ/1y2Zt0W4yBntMBOYLPoXD6CVdDsRQm+kkxtMgg/QLvyL LtmezUaRb+3KMRPHJx0vnQOfHVBRk8lX6BkjlOKyPB2TaRlLXELtHt5z7cOtrtXd fg== -----END CERTIFICATE-----Generated at Wed Jan 21 03:09:49 2026 by rpki-client