This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9dccb4b0-e30e-426c-84dc-464fd1899116/1/AC7F9BC30C04B3A236BDF8A430869ECA1A28B324.mft File: AC7F9BC30C04B3A236BDF8A430869ECA1A28B324.mft (raw, json) Hash identifier: Jf3GdA0VWry5NnhkoPhUS/kyElzv+02sfY1AfI/UAn8= Subject key identifier: 48:CF:0D:3F:80:8A:94:D8:63:87:D0:38:73:72:BB:FA:83:42:24:F6 Authority key identifier: AC:7F:9B:C3:0C:04:B3:A2:36:BD:F8:A4:30:86:9E:CA:1A:28:B3:24 Certificate issuer: /CN=AC7F9BC30C04B3A236BDF8A430869ECA1A28B324 Certificate serial: 517FE2C527C8EE96332CC58264C48041588D3A0A Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AC7F9BC30C04B3A236BDF8A430869ECA1A28B324.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9dccb4b0-e30e-426c-84dc-464fd1899116/1/AC7F9BC30C04B3A236BDF8A430869ECA1A28B324.mft Manifest number: 4C Signing time: Fri 09 Jan 2026 15:02:09 +0000 Manifest this update: Fri 09 Jan 2026 14:57:09 +0000 Manifest next update: Sat 10 Jan 2026 18:24:09 +0000 Files and hashes: 1: AC7F9BC30C04B3A236BDF8A430869ECA1A28B324.crl (hash: FkYfk4HwMV2q4FvYuuOo9x8YrvZbTorE2SlSJJCr6lY=) 2: 3230362e35332e302e302f32342d3234203d3e20323038393135.roa (hash: WAuGwGix52TOMRQkik+jyE1rcWEn8673KCYGvlhnhXY=) 3: 326130643a643930353a3a2f33322d3332203d3e20323038393135.roa (hash: 2xUP0qecdhpogJJIXpKqaPO0rpU4gp47dCbQRpKimlY=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9dccb4b0-e30e-426c-84dc-464fd1899116/1/AC7F9BC30C04B3A236BDF8A430869ECA1A28B324.crl rsync://rsync.paas.rpki.ripe.net/repository/9dccb4b0-e30e-426c-84dc-464fd1899116/1/AC7F9BC30C04B3A236BDF8A430869ECA1A28B324.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AC7F9BC30C04B3A236BDF8A430869ECA1A28B324.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 18:24:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:7f:e2:c5:27:c8:ee:96:33:2c:c5:82:64:c4:80:41:58:8d:3a:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AC7F9BC30C04B3A236BDF8A430869ECA1A28B324 Validity Not Before: Jan 9 14:57:09 2026 GMT Not After : Jan 10 18:24:09 2026 GMT Subject: CN=48CF0D3F808A94D86387D0387372BBFA834224F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:60:16:5d:68:1f:4b:84:5c:e4:ec:e0:e0:1c: 5c:a9:3d:4d:78:86:40:ed:d3:86:b4:95:1b:22:e8: 00:82:fb:9b:93:7a:08:72:ef:e3:6e:5e:02:51:78: 5d:ae:9b:3a:74:e1:d1:66:97:1a:52:a1:f2:f7:64: 80:7c:09:39:15:8e:b5:1e:30:60:53:82:24:65:8e: 09:00:25:da:b8:25:5e:ac:f0:fe:70:39:b9:21:24: 32:6d:17:1c:3d:ea:4b:50:85:e0:b8:d9:76:96:16: ba:9d:68:58:0b:ae:4b:1a:90:48:50:21:50:f1:b6: 76:bb:c2:4a:18:14:1b:4d:21:97:a7:3f:b9:1f:f5: ad:6d:05:d0:02:be:5b:34:b0:05:cd:3b:81:f8:fd: c2:96:0e:96:14:7e:1f:a9:1a:fa:d6:fe:f0:e2:1b: 25:90:40:70:e2:30:1b:7c:1c:0a:50:7c:b9:fe:23: 57:34:49:6e:ee:ee:16:01:58:7e:36:d8:fe:7f:7d: 54:52:b8:e5:a9:7d:17:e9:97:e3:83:fd:9f:a8:b6: 10:53:fb:9f:96:c2:12:5e:bb:0e:0c:16:f3:94:11: 6b:28:59:20:2a:2d:9c:66:da:a8:a1:97:e8:29:47: 8b:dc:5f:1d:a5:6c:63:58:3d:3e:4a:d2:22:b9:b5: 4c:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:CF:0D:3F:80:8A:94:D8:63:87:D0:38:73:72:BB:FA:83:42:24:F6 X509v3 Authority Key Identifier: keyid:AC:7F:9B:C3:0C:04:B3:A2:36:BD:F8:A4:30:86:9E:CA:1A:28:B3:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9dccb4b0-e30e-426c-84dc-464fd1899116/1/AC7F9BC30C04B3A236BDF8A430869ECA1A28B324.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AC7F9BC30C04B3A236BDF8A430869ECA1A28B324.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9dccb4b0-e30e-426c-84dc-464fd1899116/1/AC7F9BC30C04B3A236BDF8A430869ECA1A28B324.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:b9:af:cc:0f:d7:1a:8d:c1:65:28:c0:68:ed:b1:64:7d:cb: 66:18:44:45:76:a8:fe:eb:61:f9:02:96:7f:d6:97:f9:5b:42: 8f:15:3f:10:9e:b7:9e:31:a3:d8:d5:a0:22:61:2d:5d:de:f9: 47:38:b4:ac:09:c2:de:bf:78:01:b0:71:5a:66:1e:0e:c5:a4: b8:e3:4b:77:95:4a:2a:e2:ec:d3:3d:07:89:57:7a:6e:dd:69: 88:c0:4f:c8:f3:1d:2f:33:4e:e5:35:22:1d:02:22:fb:e3:83: b0:c6:70:15:3f:de:d0:52:bb:ca:ac:80:11:14:28:7a:6e:7f: b1:ac:25:10:6b:d4:66:48:52:83:e8:ac:ff:94:dd:b6:7e:ba: 1f:17:6a:d1:d4:f2:2e:0d:ac:75:e0:06:8a:22:30:e6:a8:4a: 53:b2:3e:ed:52:4f:1e:4f:2e:b3:83:7e:23:c2:17:ca:d8:72: 67:e0:8b:67:a7:8e:54:31:5b:aa:19:67:63:33:0a:d1:41:d6: 80:86:13:d3:e0:05:ae:7b:f1:16:de:b3:5b:61:04:57:04:1d: 08:a9:cf:88:39:90:66:f4:cb:db:f8:88:85:c3:53:ae:38:7a: df:ea:d2:44:08:60:24:22:b1:bd:af:c7:74:d7:c0:43:f4:f4: 53:a7:04:bb -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUUX/ixSfI7pYzLMWCZMSAQViNOgowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUM3RjlCQzMwQzA0QjNBMjM2QkRGOEE0MzA4NjlFQ0Ex QTI4QjMyNDAeFw0yNjAxMDkxNDU3MDlaFw0yNjAxMTAxODI0MDlaMDMxMTAvBgNV BAMTKDQ4Q0YwRDNGODA4QTk0RDg2Mzg3RDAzODczNzJCQkZBODM0MjI0RjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgYBZdaB9LhFzk7ODgHFypPU14 hkDt04a0lRsi6ACC+5uTeghy7+NuXgJReF2umzp04dFmlxpSofL3ZIB8CTkVjrUe MGBTgiRljgkAJdq4JV6s8P5wObkhJDJtFxw96ktQheC42XaWFrqdaFgLrksakEhQ IVDxtna7wkoYFBtNIZenP7kf9a1tBdACvls0sAXNO4H4/cKWDpYUfh+pGvrW/vDi GyWQQHDiMBt8HApQfLn+I1c0SW7u7hYBWH422P5/fVRSuOWpfRfpl+OD/Z+othBT +5+WwhJeuw4MFvOUEWsoWSAqLZxm2qihl+gpR4vcXx2lbGNYPT5K0iK5tUyJAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUSM8NP4CKlNhjh9A4c3K7+oNCJPYwHwYDVR0j BBgwFoAUrH+bwwwEs6I2vfikMIaeyhoosyQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRjY2I0YjAtZTMwZS00MjZjLTg0ZGMtNDY0ZmQxODk5 MTE2LzEvQUM3RjlCQzMwQzA0QjNBMjM2QkRGOEE0MzA4NjlFQ0ExQTI4QjMyNC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvQUM3RjlCQzMwQzA0QjNBMjM2QkRGOEE0MzA4NjlFQ0ExQTI4 QjMyNC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGNjYjRiMC1l MzBlLTQyNmMtODRkYy00NjRmZDE4OTkxMTYvMS9BQzdGOUJDMzBDMDRCM0EyMzZC REY4QTQzMDg2OUVDQTFBMjhCMzI0Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZLmvzA/XGo3BZSjAaO2x ZH3LZhhERXao/uth+QKWf9aX+VtCjxU/EJ63njGj2NWgImEtXd75Rzi0rAnC3r94 AbBxWmYeDsWkuONLd5VKKuLs0z0HiVd6bt1piMBPyPMdLzNO5TUiHQIi++ODsMZw FT/e0FK7yqyAERQoem5/sawlEGvUZkhSg+is/5Tdtn66Hxdq0dTyLg2sdeAGiiIw 5qhKU7I+7VJPHk8us4N+I8IXythyZ+CLZ6eOVDFbqhlnYzMK0UHWgIYT0+AFrnvx Ft6zW2EEVwQdCKnPiDmQZvTL2/iIhcNTrjh63+rSRAhgJCKxva/HdNfAQ/T0U6cE uw== -----END CERTIFICATE-----Generated at Sat Jan 10 06:02:41 2026 by rpki-client