This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.mft File: B172548FA3C460E26CB519EE524361BCA6C7132E.mft (raw, json) Hash identifier: BlusS83GeG5OVeYjoD32saR9JfMAgaGoj18ukPikOwc= Subject key identifier: 18:B8:68:71:AE:71:09:E4:79:7A:2D:57:FD:62:34:FA:20:C7:86:1D Authority key identifier: B1:72:54:8F:A3:C4:60:E2:6C:B5:19:EE:52:43:61:BC:A6:C7:13:2E Certificate issuer: /CN=b172548fa3c460e26cb519ee524361bca6c7132e Certificate serial: 1D9BD93C90615CDCCC2C3388F4AB418C8A4D7C64 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.mft Manifest number: 0476 Signing time: Tue 27 Jan 2026 01:06:42 +0000 Manifest this update: Tue 27 Jan 2026 01:01:42 +0000 Manifest next update: Wed 28 Jan 2026 04:46:42 +0000 Files and hashes: 1: 39332e39352e3131392e302f32342d3234203d3e20323135343337.roa (hash: fzZO0LU0Zg6LT5tIVAqNcA3S+CyddC4kIOBWwsfw5Ho=) 2: 39332e39352e3131332e302f32342d3234203d3e203136323736.roa (hash: cS6LWz+NEHJoa0EQVb5z92UR8C9jaztUFOxHHwpRPsY=) 3: 39332e39352e3131372e302f32342d3234203d3e203231383539.roa (hash: Un+iljfa6BQzZnEghHopYhiwkN2j6KkmFMitjF4eFLQ=) 4: B172548FA3C460E26CB519EE524361BCA6C7132E.crl (hash: W7E1baEKiiNt5+z+9z2xB9LghtCVpiHHcMpF0ekolbg=) 5: 39332e39352e3131352e302f32342d3234203d3e20313335333932.roa (hash: fGOsLQpuq7w+Mlth5Jlzw6zSul9g+K81meekR3kD4oA=) 6: 39332e39352e3131352e302f32342d3234203d3e20313938353834.roa (hash: FutqYRyHBMmN+0PD6TfHd0Z48pzfzxz1hCrgLY7AwAA=) 7: 39332e39352e3131362e302f32342d3234203d3e203630373831.roa (hash: wiR4lXrHDBacVR9rhY/OZ5EVnNOlMyR8f6ZVRqs7p88=) 8: 39332e39352e3131382e302f32342d3234203d3e20313336353537.roa (hash: RxEOrEQDuw8FdSr63g/e7GeuRwx0a/xo6StPeRUp3pQ=) 9: 39332e39352e3131322e302f32342d3234203d3e20333937393233.roa (hash: xW60VF00UJ78V2ZgHJcPViZgzWFpqx2V/5GdcswFg/k=) 10: 39332e39352e3131342e302f32342d3234203d3e20383334.roa (hash: 9slNHWe/rU70bOx5vd9mZUqmB1nBl1QE+Gk0eZLBnt8=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.crl rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.mft rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:9b:d9:3c:90:61:5c:dc:cc:2c:33:88:f4:ab:41:8c:8a:4d:7c:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b172548fa3c460e26cb519ee524361bca6c7132e Validity Not Before: Jan 27 01:01:42 2026 GMT Not After : Jan 28 04:46:42 2026 GMT Subject: CN=18B86871AE7109E4797A2D57FD6234FA20C7861D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:e9:68:99:c2:39:68:c6:22:10:1e:be:33:31: 11:78:25:2a:e0:ff:34:59:7f:f9:0a:28:b7:c8:1f: ea:50:f9:76:85:52:e2:a7:fc:0d:41:56:af:fb:d9: 32:bb:79:29:71:79:51:85:72:8d:a8:07:ea:20:d8: de:6d:d3:98:72:86:e8:c7:4c:b6:90:22:1b:ca:f8: 21:28:b7:a5:df:32:92:99:97:e4:02:8a:00:ee:90: 42:6b:f0:a2:0e:a4:bb:e6:7e:13:19:f4:37:21:7f: 96:9f:eb:b1:60:2a:a4:8e:ae:17:aa:91:02:0a:d8: 7d:96:11:7b:91:70:f5:c0:da:74:96:f0:d1:99:16: 34:fe:20:e7:2a:e9:03:fd:78:b0:02:5e:f8:e0:e3: 79:32:bf:82:21:b5:ff:db:fd:24:c7:ac:5a:fb:29: 6f:f2:9c:f2:16:76:01:f7:42:0d:e9:bd:c0:f2:5a: 05:0b:1a:0e:45:58:f3:1d:89:8c:c0:19:de:d1:96: 91:cf:c8:bd:5d:66:9e:cf:43:f0:cc:83:69:19:0b: f4:bd:1a:b4:69:ec:49:fe:0e:b3:d7:16:09:a5:2d: e6:2b:0d:1e:bc:8f:2e:89:59:a4:0b:16:60:51:71: 34:cd:38:35:73:ac:9d:ac:74:c9:7c:18:f0:d1:8d: b6:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:B8:68:71:AE:71:09:E4:79:7A:2D:57:FD:62:34:FA:20:C7:86:1D X509v3 Authority Key Identifier: keyid:B1:72:54:8F:A3:C4:60:E2:6C:B5:19:EE:52:43:61:BC:A6:C7:13:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:83:08:6e:f6:54:d1:ee:7b:2b:46:6a:2f:aa:51:8e:5c:41: fd:dd:77:d2:eb:31:3d:03:65:bc:d1:68:57:3b:d6:bf:77:f6: cc:1d:30:d9:49:47:03:2e:3f:0f:67:de:91:37:b8:be:ad:0b: 29:26:98:74:ae:56:d7:ab:39:92:69:ff:e2:89:af:9f:dd:87: c0:a1:83:4c:48:c3:77:41:cf:5e:4e:18:69:21:cc:df:46:dc: 2d:b5:42:4a:eb:ba:21:b5:fd:e0:fa:46:ca:60:e7:da:42:30: 32:c1:54:9c:f5:c3:30:8e:83:ae:90:20:02:23:e2:cb:4e:50: e0:f3:5b:8b:2c:53:e4:b7:96:42:d4:ac:13:02:26:c7:9e:ea: 63:d0:c2:cf:6e:f3:f4:56:08:db:56:3e:68:56:96:90:54:3f: 15:1a:c4:15:42:23:d9:22:41:a3:2e:b8:08:c2:3a:d9:0c:c1: 35:e0:1c:30:c3:52:34:03:c3:44:17:60:1e:79:b3:aa:30:0d: b8:0f:f0:f7:30:ea:27:ac:42:30:5f:43:b0:f9:93:d6:26:97: 6a:99:b2:ca:a9:d6:f0:b5:4a:be:04:f2:a8:e8:09:4e:cb:38: 8d:71:7f:7e:75:ce:1d:5c:85:ad:39:7d:ca:52:62:09:e5:a6: 52:f7:e6:ab -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUHZvZPJBhXNzMLDOI9KtBjIpNfGQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYjE3MjU0OGZhM2M0NjBlMjZjYjUxOWVlNTI0MzYxYmNh NmM3MTMyZTAeFw0yNjAxMjcwMTAxNDJaFw0yNjAxMjgwNDQ2NDJaMDMxMTAvBgNV BAMTKDE4Qjg2ODcxQUU3MTA5RTQ3OTdBMkQ1N0ZENjIzNEZBMjBDNzg2MUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDP6WiZwjloxiIQHr4zMRF4JSrg /zRZf/kKKLfIH+pQ+XaFUuKn/A1BVq/72TK7eSlxeVGFco2oB+og2N5t05hyhujH TLaQIhvK+CEot6XfMpKZl+QCigDukEJr8KIOpLvmfhMZ9Dchf5af67FgKqSOrheq kQIK2H2WEXuRcPXA2nSW8NGZFjT+IOcq6QP9eLACXvjg43kyv4Ihtf/b/STHrFr7 KW/ynPIWdgH3Qg3pvcDyWgULGg5FWPMdiYzAGd7RlpHPyL1dZp7PQ/DMg2kZC/S9 GrRp7En+DrPXFgmlLeYrDR68jy6JWaQLFmBRcTTNODVzrJ2sdMl8GPDRjbY3AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUGLhoca5xCeR5ei1X/WI0+iDHhh0wHwYDVR0j BBgwFoAUsXJUj6PEYOJstRnuUkNhvKbHEy4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOTY1NzNlODgtZGFiYS00YWM3LWEyZWQtMzIxYzgyNzdk MjVlLzAvQjE3MjU0OEZBM0M0NjBFMjZDQjUxOUVFNTI0MzYxQkNBNkM3MTMyRS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3NYSlVqNlBFWU9Kc3RSbnVVa05odkti SEV5NC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85NjU3M2U4OC1k YWJhLTRhYzctYTJlZC0zMjFjODI3N2QyNWUvMC9CMTcyNTQ4RkEzQzQ2MEUyNkNC NTE5RUU1MjQzNjFCQ0E2QzcxMzJFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuYMIbvZU0e57K0ZqL6pR jlxB/d130usxPQNlvNFoVzvWv3f2zB0w2UlHAy4/D2fekTe4vq0LKSaYdK5W16s5 kmn/4omvn92HwKGDTEjDd0HPXk4YaSHM30bcLbVCSuu6IbX94PpGymDn2kIwMsFU nPXDMI6DrpAgAiPiy05Q4PNbiyxT5LeWQtSsEwImx57qY9DCz27z9FYI21Y+aFaW kFQ/FRrEFUIj2SJBoy64CMI62QzBNeAcMMNSNAPDRBdgHnmzqjANuA/w9zDqJ6xC MF9DsPmT1iaXapmyyqnW8LVKvgTyqOgJTss4jXF/fnXOHVyFrTl9ylJiCeWmUvfm qw== -----END CERTIFICATE-----Generated at Tue Jan 27 07:16:51 2026 by rpki-client