This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/1/52285B8754F215EBEAB614DEB86E66DA3B37320C.mft File: 52285B8754F215EBEAB614DEB86E66DA3B37320C.mft (raw, json) Hash identifier: lpouABgC+s7loMPVnAkkKmSlo6ujjQBFFm/ZpvSGdV0= Subject key identifier: 06:5D:DC:F9:77:2F:85:6B:B0:CF:52:E8:AC:48:4D:8F:A4:72:D7:47 Authority key identifier: 52:28:5B:87:54:F2:15:EB:EA:B6:14:DE:B8:6E:66:DA:3B:37:32:0C Certificate issuer: /CN=52285B8754F215EBEAB614DEB86E66DA3B37320C Certificate serial: 264B1F1B8212BA39A0890093A7B24DF53DD6ECD6 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/52285B8754F215EBEAB614DEB86E66DA3B37320C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/1/52285B8754F215EBEAB614DEB86E66DA3B37320C.mft Manifest number: 0278 Signing time: Tue 20 Jan 2026 15:58:14 +0000 Manifest this update: Tue 20 Jan 2026 15:53:14 +0000 Manifest next update: Wed 21 Jan 2026 17:43:14 +0000 Files and hashes: 1: 326131343a373538313a6130303a3a2f34302d3430203d3e20323135303834.roa (hash: 6SMGzy0qxU/C5+Cz9d8WI56z67FiL2uOHLuZUmmEFig=) 2: 326131343a373538313a623030303a3a2f33362d3336203d3e20323135303834.roa (hash: 8Iv1HdyRUhjcvQFIVfomOSyv77EzHn71qEiaLSvjvAE=) 3: 326131343a373538313a6632303a3a2f34342d3434203d3e20323135303834.roa (hash: ikRuOA2n8u4zq4qR5S8PkgRSZxYIGPGee0tyFklQIEM=) 4: 52285B8754F215EBEAB614DEB86E66DA3B37320C.crl (hash: CicRVRt3IlvFohnlLXJvh8NVmPlDgMg+wkHS5QSfols=) 5: 326131343a373538313a6632303a3a2f34382d3438203d3e20313533313736.roa (hash: Q+SHdUagvI6KZ73P7qEzwFM/MmpC3zK1RzbKHzMJDSM=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/1/52285B8754F215EBEAB614DEB86E66DA3B37320C.crl rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/1/52285B8754F215EBEAB614DEB86E66DA3B37320C.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/52285B8754F215EBEAB614DEB86E66DA3B37320C.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 15:30:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:4b:1f:1b:82:12:ba:39:a0:89:00:93:a7:b2:4d:f5:3d:d6:ec:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52285B8754F215EBEAB614DEB86E66DA3B37320C Validity Not Before: Jan 20 15:53:14 2026 GMT Not After : Jan 21 17:43:14 2026 GMT Subject: CN=065DDCF9772F856BB0CF52E8AC484D8FA472D747 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:e3:45:a0:06:51:d6:d6:19:53:17:03:56:28: 4d:56:0a:7b:f6:fc:6d:a6:67:44:33:bc:c5:6b:6a: a2:62:51:ad:a6:d2:c9:32:d1:2f:06:92:4d:c1:ea: 35:c5:53:f9:14:48:1e:a5:0d:30:1b:82:1f:31:7c: 61:61:8d:10:3c:9c:d9:bf:cb:cd:29:8c:44:8f:10: f7:e4:db:bf:dd:fc:dc:d3:11:22:07:da:fd:c0:ba: 7d:f9:92:f0:26:97:db:99:f0:84:97:62:1b:ee:ff: ba:f8:d6:70:50:de:97:78:96:eb:f5:80:89:0d:7c: 28:9a:2e:05:37:8e:f7:1b:a7:4e:6c:fe:69:f6:b7: 37:16:a1:3b:74:87:97:8a:78:42:2d:85:01:9f:b6: 36:cf:fe:c7:9b:7b:ef:5b:24:05:64:23:57:1d:66: 0a:c8:85:82:34:a8:63:16:72:8e:16:73:df:99:71: 08:4d:90:ad:df:5b:2a:9a:1a:97:75:26:62:18:80: 3b:15:2e:a4:8d:ca:a6:65:d1:44:d8:31:33:67:3e: 1f:96:84:37:9f:ca:09:5f:37:d2:43:d9:68:0e:e7: 34:79:17:a3:33:e9:15:4e:cf:77:30:1c:ca:9f:96: 87:44:d6:3f:de:9a:79:9c:ad:eb:8f:5b:45:58:80: 7b:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:5D:DC:F9:77:2F:85:6B:B0:CF:52:E8:AC:48:4D:8F:A4:72:D7:47 X509v3 Authority Key Identifier: keyid:52:28:5B:87:54:F2:15:EB:EA:B6:14:DE:B8:6E:66:DA:3B:37:32:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/1/52285B8754F215EBEAB614DEB86E66DA3B37320C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/52285B8754F215EBEAB614DEB86E66DA3B37320C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/1/52285B8754F215EBEAB614DEB86E66DA3B37320C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:f2:bd:6d:40:c5:e5:0d:2c:2b:ee:c7:4b:52:90:95:bb:1d: 5a:1c:7e:44:c0:c7:04:58:2a:6e:6f:5b:36:24:04:ee:33:6a: e5:78:ff:d5:5e:39:0d:47:13:e4:e5:ce:d3:d9:b1:38:db:2d: 42:e7:ff:42:51:cd:ac:1b:00:2e:ea:ef:12:d5:9b:2e:91:80: 55:78:ad:20:fe:a6:62:3c:c6:e7:26:f4:20:77:72:c7:73:ca: 9d:8f:57:ba:38:5f:48:2a:9d:40:11:3a:78:e4:85:24:9e:11: 15:9c:19:41:a7:81:f8:7e:c8:76:c9:78:ea:6d:8b:04:13:85: 91:b2:62:e9:ff:03:ca:5f:28:39:86:3a:f6:e0:8f:76:8a:74: 7b:ca:ef:a4:08:18:3e:55:77:eb:ea:0a:32:3a:48:cd:f7:20: 16:2d:38:dd:fa:9f:65:0b:04:0e:b4:99:9b:6e:6e:80:21:0b: 29:b1:50:19:d4:b5:1a:85:99:8c:5a:13:38:f3:c7:b2:8b:ff: 0f:0b:9d:6a:fd:71:75:cd:7b:36:74:d3:70:63:67:a7:65:7e: a9:9f:4a:4d:98:1f:59:c1:80:79:cd:e5:8d:9d:e9:02:21:56: ea:a0:8c:5e:7f:57:59:64:57:4b:eb:3e:e3:b6:6b:d7:2c:b8: d5:f2:a8:2d -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUJksfG4ISujmgiQCTp7JN9T3W7NYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTIyODVCODc1NEYyMTVFQkVBQjYxNERFQjg2RTY2REEz QjM3MzIwQzAeFw0yNjAxMjAxNTUzMTRaFw0yNjAxMjExNzQzMTRaMDMxMTAvBgNV BAMTKDA2NUREQ0Y5NzcyRjg1NkJCMENGNTJFOEFDNDg0RDhGQTQ3MkQ3NDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq40WgBlHW1hlTFwNWKE1WCnv2 /G2mZ0QzvMVraqJiUa2m0sky0S8Gkk3B6jXFU/kUSB6lDTAbgh8xfGFhjRA8nNm/ y80pjESPEPfk27/d/NzTESIH2v3Aun35kvAml9uZ8ISXYhvu/7r41nBQ3pd4luv1 gIkNfCiaLgU3jvcbp05s/mn2tzcWoTt0h5eKeEIthQGftjbP/sebe+9bJAVkI1cd ZgrIhYI0qGMWco4Wc9+ZcQhNkK3fWyqaGpd1JmIYgDsVLqSNyqZl0UTYMTNnPh+W hDefyglfN9JD2WgO5zR5F6Mz6RVOz3cwHMqflodE1j/emnmcreuPW0VYgHsRAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUBl3c+XcvhWuwz1LorEhNj6Ry10cwHwYDVR0j BBgwFoAUUihbh1TyFevqthTeuG5m2js3MgwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOGQ1Y2QxNGUtNWY2My00ZjFjLTk0ZTMtMjcwNTBjMjY2 NDgwLzEvNTIyODVCODc1NEYyMTVFQkVBQjYxNERFQjg2RTY2REEzQjM3MzIwQy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC81MjI4NUI4NzU0RjIxNUVCRUFCNjE0REVC ODZFNjZEQTNCMzczMjBDLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzhkNWNkMTRlLTVmNjMtNGYxYy05NGUzLTI3MDUwYzI2NjQ4MC8xLzUyMjg1Qjg3 NTRGMjE1RUJFQUI2MTRERUI4NkU2NkRBM0IzNzMyMEMubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAJ8r1t QMXlDSwr7sdLUpCVux1aHH5EwMcEWCpub1s2JATuM2rleP/VXjkNRxPk5c7T2bE4 2y1C5/9CUc2sGwAu6u8S1ZsukYBVeK0g/qZiPMbnJvQgd3LHc8qdj1e6OF9IKp1A ETp45IUknhEVnBlBp4H4fsh2yXjqbYsEE4WRsmLp/wPKXyg5hjr24I92inR7yu+k CBg+VXfr6goyOkjN9yAWLTjd+p9lCwQOtJmbbm6AIQspsVAZ1LUahZmMWhM488ey i/8PC51q/XF1zXs2dNNwY2enZX6pn0pNmB9ZwYB5zeWNnekCIVbqoIxef1dZZFdL 6z7jtmvXLLjV8qgt -----END CERTIFICATE-----Generated at Tue Jan 20 23:52:50 2026 by rpki-client