This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.mft File: B149F23A3E99C4760297DD7104B400C835D86D19.mft (raw, json) Hash identifier: AySV5dXMTQz3CVEn4OZc6HoLsL9gIsfNI0UNi1QUR78= Subject key identifier: CC:41:3C:DA:BD:44:DB:C2:59:4B:A5:E8:D5:51:1B:00:44:FD:71:5B Authority key identifier: B1:49:F2:3A:3E:99:C4:76:02:97:DD:71:04:B4:00:C8:35:D8:6D:19 Certificate issuer: /CN=B149F23A3E99C4760297DD7104B400C835D86D19 Certificate serial: 66F3FAAC2A0CFA08A81058228056BD84CCC82C6A Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B149F23A3E99C4760297DD7104B400C835D86D19.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.mft Manifest number: D5 Signing time: Thu 22 Jan 2026 01:38:12 +0000 Manifest this update: Thu 22 Jan 2026 01:33:12 +0000 Manifest next update: Fri 23 Jan 2026 03:08:12 +0000 Files and hashes: 1: B149F23A3E99C4760297DD7104B400C835D86D19.crl (hash: ExfsVUum6HFFbFDuaOIpCVRSrp5dh+0Yp4dpXvXeWWw=) 2: ECC2D1AF90663968C0983906E34503A5F531FBA9.cer (hash: 7yhtiP6LYY9iuIZqKiSw4vGWqamY84tAaUqjWikPsq8=) 3: 326131343a373538333a663436303a3a2f34342d3438203d3e20323134373230.roa (hash: 4YEjtMXLVEjj9+5CMQ85BeokEYmpgzJkQtl+GYY10z4=) 4: 326131343a373538333a663436303a3a2f34342d3438203d3e20323034353339.roa (hash: eK2I8NNfEPTCbHsIoeKMUzU2EbiQp+1aLucAqTV09UA=) 5: E2D8063C20C5FF1C1C1ACC3AD4E9D0C0C8648229.cer (hash: ttIHeVow2IErbUXmp4n67KjX2H68UmfVMTfPkOmulDw=) 6: 326131343a373538333a663436303a3a2f34342d3438203d3e20323131353735.roa (hash: LMFmuLJ4IgxIQCv2slhgNeKFDMCx6rSWhmkOn3RblbI=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.crl rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B149F23A3E99C4760297DD7104B400C835D86D19.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 23 Jan 2026 03:08:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:f3:fa:ac:2a:0c:fa:08:a8:10:58:22:80:56:bd:84:cc:c8:2c:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B149F23A3E99C4760297DD7104B400C835D86D19 Validity Not Before: Jan 22 01:33:12 2026 GMT Not After : Jan 23 03:08:12 2026 GMT Subject: CN=CC413CDABD44DBC2594BA5E8D5511B0044FD715B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:0f:6e:6a:d8:45:97:84:72:ed:91:bd:79:8f: f8:42:cf:f1:a6:94:47:1f:c2:ed:99:c4:dd:dd:ec: f2:16:9e:87:45:02:d1:f8:fa:59:ee:03:12:83:65: d6:8c:49:74:e8:a6:23:2b:26:09:2a:f3:a4:86:c4: 73:f6:8c:f2:68:2f:6a:a7:53:6a:2b:9c:83:51:09: 8a:1b:91:65:83:5c:31:b9:d9:90:20:96:a2:1f:ae: 55:f3:83:c1:bf:6e:30:6f:f7:63:6c:bb:da:8b:6f: 7b:10:41:88:3c:0d:95:43:f6:12:7d:f7:b7:2f:32: 3d:4e:6d:10:ac:9f:5a:9e:41:45:53:d8:b0:5c:f2: a7:9a:7a:2a:90:58:50:06:2f:6f:06:96:4c:41:dc: d5:1b:a3:f4:12:8c:b4:24:e5:b4:f0:cd:b7:e7:65: 60:b6:e1:6f:c8:e5:e0:51:c8:aa:7f:a6:83:46:7a: f9:be:7e:e7:70:33:77:e7:27:16:67:fa:18:b2:43: 3e:0b:6c:cd:20:f3:8e:55:f3:45:03:57:20:19:e3: cc:a2:1b:0d:b7:0a:9f:5d:b5:73:83:8a:ca:dc:94: 42:59:0c:f1:ce:6d:1b:8e:ed:cc:bf:13:87:8a:79: 13:49:27:d9:c8:06:d0:6c:26:7f:2a:25:18:cc:69: 22:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:41:3C:DA:BD:44:DB:C2:59:4B:A5:E8:D5:51:1B:00:44:FD:71:5B X509v3 Authority Key Identifier: keyid:B1:49:F2:3A:3E:99:C4:76:02:97:DD:71:04:B4:00:C8:35:D8:6D:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B149F23A3E99C4760297DD7104B400C835D86D19.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:d3:74:8c:2c:ca:3d:78:50:ff:96:5c:0f:e6:af:bd:46:58: 8a:7b:0a:87:3a:2c:e9:3c:6b:ab:8e:aa:ef:5f:74:fc:5a:aa: 35:85:07:98:b1:48:91:bc:05:aa:b1:2c:2d:3b:e1:3e:95:b0: 1c:49:22:c9:15:24:b9:39:40:97:4b:d2:d9:83:95:6d:21:0b: 5a:42:cc:49:9b:a3:55:7d:80:be:57:6b:95:e8:11:e2:61:1f: 1b:2e:1a:92:cf:42:3c:41:48:53:16:aa:4e:a1:cd:59:b3:c0: 12:fa:29:45:0c:b7:0b:72:ff:cd:b4:75:71:ab:40:91:bd:55: 22:21:6f:14:d0:c8:6c:96:6b:61:ba:31:0c:df:91:cc:6f:06: 68:d8:8e:92:a0:f8:be:46:30:1f:45:0b:a8:6c:e6:99:23:ba: 27:28:91:e7:5c:c7:a4:1e:ae:b9:62:6a:cf:a5:34:9e:04:76: 31:98:35:9d:19:11:80:77:55:f8:94:1d:ca:f9:b5:c1:e7:21: 0a:2e:40:51:7d:ef:48:ab:f2:99:84:0c:f1:21:61:72:31:ab: 23:0a:3e:3f:dc:00:3b:06:7f:1c:96:87:94:a7:cc:8b:d6:7b: e8:ee:df:63:05:1d:57:24:d2:71:42:eb:43:2b:3c:ce:9c:4d: 69:98:f3:a4 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUZvP6rCoM+gioEFgigFa9hMzILGowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjE0OUYyM0EzRTk5QzQ3NjAyOTdERDcxMDRCNDAwQzgz NUQ4NkQxOTAeFw0yNjAxMjIwMTMzMTJaFw0yNjAxMjMwMzA4MTJaMDMxMTAvBgNV BAMTKENDNDEzQ0RBQkQ0NERCQzI1OTRCQTVFOEQ1NTExQjAwNDRGRDcxNUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyD25q2EWXhHLtkb15j/hCz/Gm lEcfwu2ZxN3d7PIWnodFAtH4+lnuAxKDZdaMSXTopiMrJgkq86SGxHP2jPJoL2qn U2ornINRCYobkWWDXDG52ZAglqIfrlXzg8G/bjBv92Nsu9qLb3sQQYg8DZVD9hJ9 97cvMj1ObRCsn1qeQUVT2LBc8qeaeiqQWFAGL28GlkxB3NUbo/QSjLQk5bTwzbfn ZWC24W/I5eBRyKp/poNGevm+fudwM3fnJxZn+hiyQz4LbM0g845V80UDVyAZ48yi Gw23Cp9dtXODisrclEJZDPHObRuO7cy/E4eKeRNJJ9nIBtBsJn8qJRjMaSJ1AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUzEE82r1E28JZS6Xo1VEbAET9cVswHwYDVR0j BBgwFoAUsUnyOj6ZxHYCl91xBLQAyDXYbRkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOTgxZjk3ODItODk4ZS00YjgzLTk1ZTYtNGZmNGFiNzVj OWRjLzIvQjE0OUYyM0EzRTk5QzQ3NjAyOTdERDcxMDRCNDAwQzgzNUQ4NkQxOS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9CMTQ5RjIzQTNFOTlDNDc2MDI5N0RENzEw NEI0MDBDODM1RDg2RDE5LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 Lzk4MWY5NzgyLTg5OGUtNGI4My05NWU2LTRmZjRhYjc1YzlkYy8yL0IxNDlGMjNB M0U5OUM0NzYwMjk3REQ3MTA0QjQwMEM4MzVEODZEMTkubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAm03SM LMo9eFD/llwP5q+9RliKewqHOizpPGurjqrvX3T8Wqo1hQeYsUiRvAWqsSwtO+E+ lbAcSSLJFSS5OUCXS9LZg5VtIQtaQsxJm6NVfYC+V2uV6BHiYR8bLhqSz0I8QUhT FqpOoc1Zs8AS+ilFDLcLcv/NtHVxq0CRvVUiIW8U0MhslmthujEM35HMbwZo2I6S oPi+RjAfRQuobOaZI7onKJHnXMekHq65YmrPpTSeBHYxmDWdGRGAd1X4lB3K+bXB 5yEKLkBRfe9Iq/KZhAzxIWFyMasjCj4/3AA7Bn8cloeUp8yL1nvo7t9jBR1XJNJx QutDKzzOnE1pmPOk -----END CERTIFICATE-----Generated at Thu Jan 22 16:26:33 2026 by rpki-client