This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9bb77c8a-2d69-4325-b4fa-603388c96bb3/1/AD51B4FA37D423844399722D5240A94674496236.mft File: AD51B4FA37D423844399722D5240A94674496236.mft (raw, json) Hash identifier: NWaytB1C11pkre2rYXOKz1PlcKNn9sHKrsxSCcD/rC4= Subject key identifier: D2:5D:16:B6:64:A6:A6:F1:F4:B3:0F:FD:3D:1F:60:29:02:C9:42:F7 Authority key identifier: AD:51:B4:FA:37:D4:23:84:43:99:72:2D:52:40:A9:46:74:49:62:36 Certificate issuer: /CN=AD51B4FA37D423844399722D5240A94674496236 Certificate serial: 77686D6963A35770720D3B1C5E7B278DA6F72601 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AD51B4FA37D423844399722D5240A94674496236.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9bb77c8a-2d69-4325-b4fa-603388c96bb3/1/AD51B4FA37D423844399722D5240A94674496236.mft Manifest number: 4A Signing time: Tue 20 Jan 2026 20:43:44 +0000 Manifest this update: Tue 20 Jan 2026 20:38:44 +0000 Manifest next update: Wed 21 Jan 2026 22:23:44 +0000 Files and hashes: 1: 326131343a373538333a333030303a3a2f33362d3438203d3e20323034353335.roa (hash: wa3x+YdBz4iMqCjU1AX+bNH8GFDW/LR3zugaLxxd1vE=) 2: AD51B4FA37D423844399722D5240A94674496236.crl (hash: yLcBnTa1CwIIYJ8mfVJNVcowuaEyzPaqnlUUJgPRrMk=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9bb77c8a-2d69-4325-b4fa-603388c96bb3/1/AD51B4FA37D423844399722D5240A94674496236.crl rsync://rsync.paas.rpki.ripe.net/repository/9bb77c8a-2d69-4325-b4fa-603388c96bb3/1/AD51B4FA37D423844399722D5240A94674496236.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AD51B4FA37D423844399722D5240A94674496236.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 15:30:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:68:6d:69:63:a3:57:70:72:0d:3b:1c:5e:7b:27:8d:a6:f7:26:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AD51B4FA37D423844399722D5240A94674496236 Validity Not Before: Jan 20 20:38:44 2026 GMT Not After : Jan 21 22:23:44 2026 GMT Subject: CN=D25D16B664A6A6F1F4B30FFD3D1F602902C942F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:f7:d6:7a:aa:f0:47:96:4d:3e:1c:be:e0:f4: bf:14:df:71:1a:e1:c4:b0:e8:38:14:18:a1:4d:43: e1:50:f3:52:e2:30:ad:e1:fa:18:06:db:8a:ba:ff: a0:a2:b8:d7:dd:fa:69:2b:ae:26:ba:d0:30:93:99: da:8a:e1:bc:6f:40:fa:1a:fc:35:6e:f8:5d:0a:9d: 26:07:4d:2b:e2:f2:31:1e:72:94:b5:58:c1:4e:d6: 9b:5e:44:a6:4e:70:ca:a1:db:e3:56:f0:26:5a:a6: 23:fc:fb:31:86:7f:67:d6:0f:6e:ba:8b:7d:21:43: e8:3a:d6:4d:13:80:55:28:39:02:3c:71:5a:4d:99: a4:55:f6:05:e4:88:a3:98:5d:95:66:8c:85:6e:90: b2:a1:81:21:82:8d:f9:aa:f4:90:c6:a1:98:fb:5a: f0:97:19:d6:e2:dd:04:be:a7:0d:99:ee:e0:22:76: 59:15:7f:f9:32:b4:bd:2f:c9:47:03:05:dd:6d:c0: 3e:c4:af:0c:c3:c3:92:df:d8:71:26:3b:ce:da:1a: 77:f7:a6:a6:0d:7a:2b:4a:b8:b2:36:f0:a8:32:cc: 19:e2:cf:d1:60:ed:3c:36:f9:4d:0b:c6:d4:96:eb: 32:60:5e:16:c2:dc:55:78:03:a2:8e:f1:46:30:1f: f6:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:5D:16:B6:64:A6:A6:F1:F4:B3:0F:FD:3D:1F:60:29:02:C9:42:F7 X509v3 Authority Key Identifier: keyid:AD:51:B4:FA:37:D4:23:84:43:99:72:2D:52:40:A9:46:74:49:62:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9bb77c8a-2d69-4325-b4fa-603388c96bb3/1/AD51B4FA37D423844399722D5240A94674496236.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AD51B4FA37D423844399722D5240A94674496236.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9bb77c8a-2d69-4325-b4fa-603388c96bb3/1/AD51B4FA37D423844399722D5240A94674496236.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:60:61:9a:cd:fd:05:a8:1a:50:5e:b1:42:a4:f6:c1:10:f2: c1:e3:12:f2:6f:c2:4a:34:30:d1:72:a2:87:83:c6:00:81:8a: 54:8e:30:23:0d:86:ee:2b:31:66:87:1f:68:ff:7b:60:e0:66: 7d:0b:47:7c:01:14:ea:9e:e0:10:d7:07:f9:ae:29:3e:43:03: 02:06:f3:56:87:89:93:1b:49:31:bd:3d:a9:f8:a2:67:5f:62: c6:35:87:e7:46:d8:3f:c9:e4:31:40:21:ec:96:9d:77:eb:0f: 8a:59:d0:d2:88:a4:da:00:0b:8b:28:4e:c8:2d:47:90:7d:d0: 06:69:ed:21:2f:ce:d9:97:19:d2:78:80:51:15:ef:bc:bc:14: 2a:8c:35:ed:c0:2e:6f:b7:81:21:8f:f4:14:a5:c6:1a:8e:ad: f9:87:7f:50:a7:89:a1:89:26:a3:f5:91:f3:bc:f7:f5:59:12: 12:45:48:fb:dc:fc:27:26:d5:53:13:88:a7:81:25:0e:e6:1f: 6e:dc:00:44:3c:25:b5:26:53:2a:07:d8:95:51:82:da:89:61: f1:4b:62:fa:17:88:4a:d9:84:bd:4b:61:a7:23:5b:3d:d6:43: ed:8f:2e:68:b7:2f:fd:e9:b1:20:de:82:67:38:74:b3:c4:23: 12:6c:02:da -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUd2htaWOjV3ByDTscXnsnjab3JgEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUQ1MUI0RkEzN0Q0MjM4NDQzOTk3MjJENTI0MEE5NDY3 NDQ5NjIzNjAeFw0yNjAxMjAyMDM4NDRaFw0yNjAxMjEyMjIzNDRaMDMxMTAvBgNV BAMTKEQyNUQxNkI2NjRBNkE2RjFGNEIzMEZGRDNEMUY2MDI5MDJDOTQyRjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ99Z6qvBHlk0+HL7g9L8U33Ea 4cSw6DgUGKFNQ+FQ81LiMK3h+hgG24q6/6CiuNfd+mkrria60DCTmdqK4bxvQPoa /DVu+F0KnSYHTSvi8jEecpS1WMFO1pteRKZOcMqh2+NW8CZapiP8+zGGf2fWD266 i30hQ+g61k0TgFUoOQI8cVpNmaRV9gXkiKOYXZVmjIVukLKhgSGCjfmq9JDGoZj7 WvCXGdbi3QS+pw2Z7uAidlkVf/kytL0vyUcDBd1twD7ErwzDw5Lf2HEmO87aGnf3 pqYNeitKuLI28KgyzBniz9Fg7Tw2+U0LxtSW6zJgXhbC3FV4A6KO8UYwH/YzAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU0l0WtmSmpvH0sw/9PR9gKQLJQvcwHwYDVR0j BBgwFoAUrVG0+jfUI4RDmXItUkCpRnRJYjYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWJiNzdjOGEtMmQ2OS00MzI1LWI0ZmEtNjAzMzg4Yzk2 YmIzLzEvQUQ1MUI0RkEzN0Q0MjM4NDQzOTk3MjJENTI0MEE5NDY3NDQ5NjIzNi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9BRDUxQjRGQTM3RDQyMzg0NDM5OTcyMkQ1 MjQwQTk0Njc0NDk2MjM2LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzliYjc3YzhhLTJkNjktNDMyNS1iNGZhLTYwMzM4OGM5NmJiMy8xL0FENTFCNEZB MzdENDIzODQ0Mzk5NzIyRDUyNDBBOTQ2NzQ0OTYyMzYubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBlYGGa zf0FqBpQXrFCpPbBEPLB4xLyb8JKNDDRcqKHg8YAgYpUjjAjDYbuKzFmhx9o/3tg 4GZ9C0d8ARTqnuAQ1wf5rik+QwMCBvNWh4mTG0kxvT2p+KJnX2LGNYfnRtg/yeQx QCHslp136w+KWdDSiKTaAAuLKE7ILUeQfdAGae0hL87ZlxnSeIBRFe+8vBQqjDXt wC5vt4Ehj/QUpcYajq35h39Qp4mhiSaj9ZHzvPf1WRISRUj73PwnJtVTE4ingSUO 5h9u3ABEPCW1JlMqB9iVUYLaiWHxS2L6F4hK2YS9S2GnI1s91kPtjy5oty/96bEg 3oJnOHSzxCMSbALa -----END CERTIFICATE-----Generated at Tue Jan 20 23:52:51 2026 by rpki-client