This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/87ae25f3-706b-47ed-bb74-46684ae0ef2b/0/B3D0280F500695A43204251C9830454CA8A2E7AC.mft File: B3D0280F500695A43204251C9830454CA8A2E7AC.mft (raw, json) Hash identifier: rTrXDNBOlUZrvvNbU/tyiT5vZUidz9EBgWPMFfU5BT0= Subject key identifier: 9A:D6:E2:E6:71:CF:31:22:4D:74:CB:1B:F7:5E:8D:09:58:ED:AA:58 Authority key identifier: B3:D0:28:0F:50:06:95:A4:32:04:25:1C:98:30:45:4C:A8:A2:E7:AC Certificate issuer: /CN=b3d0280f500695a43204251c9830454ca8a2e7ac Certificate serial: 630E42034147779AFB2E8CCFC7B782C5E58BA4CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s9AoD1AGlaQyBCUcmDBFTKii56w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/87ae25f3-706b-47ed-bb74-46684ae0ef2b/0/B3D0280F500695A43204251C9830454CA8A2E7AC.mft Manifest number: 033D Signing time: Mon 19 Jan 2026 15:04:04 +0000 Manifest this update: Mon 19 Jan 2026 14:59:04 +0000 Manifest next update: Tue 20 Jan 2026 15:13:04 +0000 Files and hashes: 1: 3138352e3138362e32352e302f32342d3234203d3e203135343430.roa (hash: zbKaWYwmjPPC167P5YL6I94JcPZEWN0HKnmqpfcR9u4=) 2: 3138352e3138362e32362e302f32342d3234203d3e20323135373033.roa (hash: 64uxD3jQtXWcavfYFljDhJHJgbOPhGll/0DiDk/jIuA=) 3: 3138352e3138362e32352e302f32342d3234203d3e20323133373732.roa (hash: KbS5MjAty6bkNu2TCkQpJN6TOq9xU7ustWBHWVtQeSQ=) 4: B3D0280F500695A43204251C9830454CA8A2E7AC.crl (hash: f8UKkPFX13iSVAWsnugZhmK8/IkgQrTU7bARQ4d0yY0=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/87ae25f3-706b-47ed-bb74-46684ae0ef2b/0/B3D0280F500695A43204251C9830454CA8A2E7AC.crl rsync://rsync.paas.rpki.ripe.net/repository/87ae25f3-706b-47ed-bb74-46684ae0ef2b/0/B3D0280F500695A43204251C9830454CA8A2E7AC.mft rsync://rpki.ripe.net/repository/DEFAULT/s9AoD1AGlaQyBCUcmDBFTKii56w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 15:13:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:0e:42:03:41:47:77:9a:fb:2e:8c:cf:c7:b7:82:c5:e5:8b:a4:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b3d0280f500695a43204251c9830454ca8a2e7ac Validity Not Before: Jan 19 14:59:04 2026 GMT Not After : Jan 20 15:13:04 2026 GMT Subject: CN=9AD6E2E671CF31224D74CB1BF75E8D0958EDAA58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:31:77:d5:e9:4e:83:fc:f9:61:4d:1d:48:19: 12:e9:a1:75:dd:7a:45:26:0d:cb:6b:16:7f:11:ad: b0:6f:f3:e7:2e:1e:13:73:95:5c:70:60:92:19:8c: 95:e4:39:cc:a1:c7:d8:47:99:fa:d6:43:46:87:75: 4f:1c:03:bc:ba:a3:38:28:c9:fd:6b:ae:52:f4:19: bc:ba:f8:67:7a:bf:01:cf:f2:d7:27:4e:ce:19:5c: 31:51:81:bb:38:61:ee:81:68:33:ac:0f:6f:7c:5e: 24:ba:91:7c:da:19:57:03:ba:4c:6a:9a:6d:92:4a: b8:16:cb:71:2b:06:dc:0a:57:fc:8f:6b:81:60:69: d5:e5:0f:72:12:d8:dd:e6:7a:a0:9e:3b:9e:58:90: 50:ae:e5:bb:e4:fb:55:31:91:ad:5d:9e:ba:ac:e0: 31:ff:38:63:4d:ba:12:b3:57:8e:f3:2c:15:7e:b5: cc:14:fb:3b:e0:04:53:2c:88:8b:35:47:d2:cc:56: 20:8f:cc:57:ea:8c:c8:e5:16:83:92:81:9b:52:aa: 6e:d5:7b:e6:c7:2e:45:f0:a1:fd:de:35:0b:1b:47: ea:6c:e5:55:e9:08:b1:1e:b5:46:99:90:da:c5:65: b4:ca:e9:b5:3c:dd:38:4f:9b:12:c6:87:db:b1:80: 41:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:D6:E2:E6:71:CF:31:22:4D:74:CB:1B:F7:5E:8D:09:58:ED:AA:58 X509v3 Authority Key Identifier: keyid:B3:D0:28:0F:50:06:95:A4:32:04:25:1C:98:30:45:4C:A8:A2:E7:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/87ae25f3-706b-47ed-bb74-46684ae0ef2b/0/B3D0280F500695A43204251C9830454CA8A2E7AC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9AoD1AGlaQyBCUcmDBFTKii56w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/87ae25f3-706b-47ed-bb74-46684ae0ef2b/0/B3D0280F500695A43204251C9830454CA8A2E7AC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:54:8f:b7:23:d1:68:59:2f:35:1a:60:2e:aa:1e:60:59:c4: 92:8a:11:af:93:37:c8:8e:e8:b7:cd:e8:ec:8d:36:ac:ab:aa: eb:7f:5a:de:0d:ef:e6:2f:df:26:34:c0:81:08:7c:46:45:06: ff:ae:ad:7c:5f:a3:e4:e1:0e:d2:4c:ee:48:7d:97:88:b8:66: 96:63:13:80:8b:71:ac:37:2c:a3:3b:1f:c4:bb:45:77:cf:84: 6b:10:25:b5:14:a2:7c:53:fd:4c:b0:e4:da:16:18:3c:4a:07: 70:0b:52:ed:a7:5f:25:a2:5f:d9:a3:c3:a9:52:f1:1e:90:92: e4:9b:20:6f:10:f0:92:be:c9:aa:68:22:04:85:8d:84:46:70: 72:6c:17:5b:89:02:00:5b:f4:3c:5c:80:9f:1b:5b:76:84:72: 97:f3:12:d2:63:ef:2e:d9:ac:28:63:90:e8:28:2a:84:83:d2: 80:4c:64:72:01:5e:3c:49:80:99:e7:2c:6a:0e:a9:2f:7d:27: 13:93:87:c6:6c:89:91:20:58:d1:6e:ee:05:b1:e7:b0:f5:4a: 05:b3:8c:7d:e5:9b:49:00:10:2f:28:f7:92:ed:a5:8d:43:68: a3:9d:1a:85:c4:d6:74:bb:24:3c:22:da:bb:9e:93:1f:dc:83: b7:4d:1b:0e -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUYw5CA0FHd5r7LozPx7eCxeWLpM4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYjNkMDI4MGY1MDA2OTVhNDMyMDQyNTFjOTgzMDQ1NGNh OGEyZTdhYzAeFw0yNjAxMTkxNDU5MDRaFw0yNjAxMjAxNTEzMDRaMDMxMTAvBgNV BAMTKDlBRDZFMkU2NzFDRjMxMjI0RDc0Q0IxQkY3NUU4RDA5NThFREFBNTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDMXfV6U6D/PlhTR1IGRLpoXXd ekUmDctrFn8RrbBv8+cuHhNzlVxwYJIZjJXkOcyhx9hHmfrWQ0aHdU8cA7y6ozgo yf1rrlL0Gby6+Gd6vwHP8tcnTs4ZXDFRgbs4Ye6BaDOsD298XiS6kXzaGVcDukxq mm2SSrgWy3ErBtwKV/yPa4FgadXlD3IS2N3meqCeO55YkFCu5bvk+1Uxka1dnrqs 4DH/OGNNuhKzV47zLBV+tcwU+zvgBFMsiIs1R9LMViCPzFfqjMjlFoOSgZtSqm7V e+bHLkXwof3eNQsbR+ps5VXpCLEetUaZkNrFZbTK6bU83ThPmxLGh9uxgEH5AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUmtbi5nHPMSJNdMsb916NCVjtqlgwHwYDVR0j BBgwFoAUs9AoD1AGlaQyBCUcmDBFTKii56wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODdhZTI1ZjMtNzA2Yi00N2VkLWJiNzQtNDY2ODRhZTBl ZjJiLzAvQjNEMDI4MEY1MDA2OTVBNDMyMDQyNTFDOTgzMDQ1NENBOEEyRTdBQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3M5QW9EMUFHbGFReUJDVWNtREJGVEtp aTU2dy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84N2FlMjVmMy03 MDZiLTQ3ZWQtYmI3NC00NjY4NGFlMGVmMmIvMC9CM0QwMjgwRjUwMDY5NUE0MzIw NDI1MUM5ODMwNDU0Q0E4QTJFN0FDLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAElSPtyPRaFkvNRpgLqoe YFnEkooRr5M3yI7ot83o7I02rKuq639a3g3v5i/fJjTAgQh8RkUG/66tfF+j5OEO 0kzuSH2XiLhmlmMTgItxrDcsozsfxLtFd8+EaxAltRSifFP9TLDk2hYYPEoHcAtS 7adfJaJf2aPDqVLxHpCS5JsgbxDwkr7JqmgiBIWNhEZwcmwXW4kCAFv0PFyAnxtb doRyl/MS0mPvLtmsKGOQ6CgqhIPSgExkcgFePEmAmecsag6pL30nE5OHxmyJkSBY 0W7uBbHnsPVKBbOMfeWbSQAQLyj3ku2ljUNoo50ahcTWdLskPCLau56TH9yDt00b Dg== -----END CERTIFICATE-----Generated at Tue Jan 20 07:36:18 2026 by rpki-client