This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/2/86DD27EAC36DD2299C2889AA376F963DAE72F42B.mft File: 86DD27EAC36DD2299C2889AA376F963DAE72F42B.mft (raw, json) Hash identifier: gDErmJyPlh77riZOEFkl5KOKqGoccEwjNLSvjnSFmfU= Subject key identifier: 7A:CB:50:1E:5D:B0:9D:96:58:86:5A:75:B7:B0:32:A7:86:15:02:6B Authority key identifier: 86:DD:27:EA:C3:6D:D2:29:9C:28:89:AA:37:6F:96:3D:AE:72:F4:2B Certificate issuer: /CN=86dd27eac36dd2299c2889aa376f963dae72f42b Certificate serial: 659B2A74A1D4D438BB98D7E726469E6EFE3FC897 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ht0n6sNt0imcKImqN2-WPa5y9Cs.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/2/86DD27EAC36DD2299C2889AA376F963DAE72F42B.mft Manifest number: 2D Signing time: Sun 01 Feb 2026 22:06:07 +0000 Manifest this update: Sun 01 Feb 2026 22:01:07 +0000 Manifest next update: Tue 03 Feb 2026 00:57:07 +0000 Files and hashes: 1: 86DD27EAC36DD2299C2889AA376F963DAE72F42B.crl (hash: SCL/tchv/wvwNJmETJi/UqvROALzp1HipqpVSSJOV6s=) 2: AS204518.asa (hash: +a70Dretrb4KJ4yzwih5lF1Jn0AeV/QnsDhvKdho2Ts=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/2/86DD27EAC36DD2299C2889AA376F963DAE72F42B.crl rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/2/86DD27EAC36DD2299C2889AA376F963DAE72F42B.mft rsync://rpki.ripe.net/repository/DEFAULT/ht0n6sNt0imcKImqN2-WPa5y9Cs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:9b:2a:74:a1:d4:d4:38:bb:98:d7:e7:26:46:9e:6e:fe:3f:c8:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86dd27eac36dd2299c2889aa376f963dae72f42b Validity Not Before: Feb 1 22:01:07 2026 GMT Not After : Feb 3 00:57:07 2026 GMT Subject: CN=7ACB501E5DB09D9658865A75B7B032A78615026B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:57:2c:7c:65:18:14:ae:5c:40:08:05:54:f5: 2f:19:2e:5f:20:75:aa:40:15:41:28:8d:42:36:37: 8c:fd:93:91:80:8e:95:a8:f8:3f:8f:31:94:77:74: 9f:3b:61:9d:91:57:20:7d:28:ee:46:95:9e:d7:2a: 2f:20:0f:91:25:f9:b6:e9:0b:d6:7e:c3:11:98:7e: ba:26:fe:25:26:5d:ba:ce:ba:26:46:fa:9e:8c:f6: f7:02:3b:c2:f2:f1:fb:e4:cd:ff:29:0c:1d:e2:52: 34:f8:55:52:ca:3e:a4:2f:b0:c3:27:67:4d:bc:c8: c7:21:41:6e:db:4b:de:b1:b0:5c:7a:9b:17:2e:d3: 43:d9:a7:18:a6:ee:04:42:80:f2:b5:8c:be:b7:86: fd:90:a0:3c:7a:ea:66:bf:77:b8:9c:a3:01:67:6d: c1:ff:f9:fe:95:ad:dc:07:de:d2:40:b3:21:5e:da: 83:56:63:69:6b:d4:65:87:7d:92:8b:fc:e9:3f:bc: 96:aa:c8:93:ec:bb:b4:da:cb:d6:82:1a:db:d8:32: 49:a0:87:bf:2d:02:4c:5d:32:3a:88:8a:83:e3:d0: ff:a5:73:0a:39:a9:44:8a:f3:00:21:2d:de:e4:d0: 29:3c:de:8d:a1:e5:54:30:52:88:9b:53:88:7c:db: 20:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:CB:50:1E:5D:B0:9D:96:58:86:5A:75:B7:B0:32:A7:86:15:02:6B X509v3 Authority Key Identifier: keyid:86:DD:27:EA:C3:6D:D2:29:9C:28:89:AA:37:6F:96:3D:AE:72:F4:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/2/86DD27EAC36DD2299C2889AA376F963DAE72F42B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ht0n6sNt0imcKImqN2-WPa5y9Cs.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/2/86DD27EAC36DD2299C2889AA376F963DAE72F42B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:17:89:d9:2c:b0:67:40:4b:24:8f:e7:8d:a6:c5:d3:70:48: c7:24:3d:37:61:be:55:4c:f0:d9:60:a4:c5:c5:90:07:b3:c6: ac:44:b1:e7:45:a6:2b:30:17:52:1f:e4:0f:ec:2b:fc:48:b3: 68:1e:af:fe:04:cc:d3:a3:fe:25:c2:61:9d:a2:c8:9e:a0:5f: 39:3a:c0:76:06:c2:d3:72:7d:42:6f:43:1f:43:51:38:08:25: 2c:8c:a0:13:55:af:3a:46:b1:df:45:e2:2a:f0:b8:de:c8:50: b3:4c:85:6f:a4:94:82:c0:bd:50:11:86:7a:2a:d2:9c:10:8d: 3c:1d:c0:dc:1b:63:d8:e3:37:37:0f:11:f8:11:ba:01:7b:fe: 39:9c:eb:18:73:31:2b:1c:98:bf:e3:be:d8:38:34:0e:93:72: 30:95:60:9d:96:4d:7e:08:03:87:c3:57:9a:bc:4c:a2:91:7b: e9:7c:0a:6d:90:0d:f1:1e:32:c9:60:cb:93:13:2c:c7:e0:ad: 0e:9a:e2:ec:ab:23:68:43:5b:ec:1f:84:14:0b:e7:21:30:cc: c3:f2:f4:a5:f0:9c:12:d8:6a:12:fb:3d:e7:84:a2:28:74:90: ef:96:ca:4f:56:f6:9b:f2:27:c8:30:80:5d:c9:5e:54:ab:7f: 74:7d:6f:69 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUZZsqdKHU1Di7mNfnJkaebv4/yJcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODZkZDI3ZWFjMzZkZDIyOTljMjg4OWFhMzc2Zjk2M2Rh ZTcyZjQyYjAeFw0yNjAyMDEyMjAxMDdaFw0yNjAyMDMwMDU3MDdaMDMxMTAvBgNV BAMTKDdBQ0I1MDFFNURCMDlEOTY1ODg2NUE3NUI3QjAzMkE3ODYxNTAyNkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/Vyx8ZRgUrlxACAVU9S8ZLl8g dapAFUEojUI2N4z9k5GAjpWo+D+PMZR3dJ87YZ2RVyB9KO5GlZ7XKi8gD5El+bbp C9Z+wxGYfrom/iUmXbrOuiZG+p6M9vcCO8Ly8fvkzf8pDB3iUjT4VVLKPqQvsMMn Z028yMchQW7bS96xsFx6mxcu00PZpxim7gRCgPK1jL63hv2QoDx66ma/d7icowFn bcH/+f6VrdwH3tJAsyFe2oNWY2lr1GWHfZKL/Ok/vJaqyJPsu7Tay9aCGtvYMkmg h78tAkxdMjqIioPj0P+lcwo5qUSK8wAhLd7k0Ck83o2h5VQwUoibU4h82yBNAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUestQHl2wnZZYhlp1t7Ayp4YVAmswHwYDVR0j BBgwFoAUht0n6sNt0imcKImqN2+WPa5y9CswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOGFmYjVmZTItM2MyYS00OTM5LTk1ZTktMDA3N2I4MGI0 ZjBlLzIvODZERDI3RUFDMzZERDIyOTlDMjg4OUFBMzc2Rjk2M0RBRTcyRjQyQi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2h0MG42c050MGltY0tJbXFOMi1XUGE1 eTlDcy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84YWZiNWZlMi0z YzJhLTQ5MzktOTVlOS0wMDc3YjgwYjRmMGUvMi84NkREMjdFQUMzNkREMjI5OUMy ODg5QUEzNzZGOTYzREFFNzJGNDJCLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaxeJ2SywZ0BLJI/njabF 03BIxyQ9N2G+VUzw2WCkxcWQB7PGrESx50WmKzAXUh/kD+wr/EizaB6v/gTM06P+ JcJhnaLInqBfOTrAdgbC03J9Qm9DH0NROAglLIygE1WvOkax30XiKvC43shQs0yF b6SUgsC9UBGGeirSnBCNPB3A3Btj2OM3Nw8R+BG6AXv+OZzrGHMxKxyYv+O+2Dg0 DpNyMJVgnZZNfggDh8NXmrxMopF76XwKbZAN8R4yyWDLkxMsx+CtDpri7KsjaENb 7B+EFAvnITDMw/L0pfCcEthqEvs954SiKHSQ75bKT1b2m/InyDCAXcleVKt/dH1v aQ== -----END CERTIFICATE-----Generated at Mon Feb 2 08:06:46 2026 by rpki-client