This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/0/DDDA7C4C6A985C465E66BFDE4C3E11BD0CFE08FF.mft File: DDDA7C4C6A985C465E66BFDE4C3E11BD0CFE08FF.mft (raw, json) Hash identifier: 1ADyUC8aeVZf6n8S6Y2DdnnZtJJmbskhg6sFfKvHz78= Subject key identifier: 3A:23:CD:20:B4:7A:10:E5:71:03:64:06:D3:D9:5B:7C:34:46:51:7D Authority key identifier: DD:DA:7C:4C:6A:98:5C:46:5E:66:BF:DE:4C:3E:11:BD:0C:FE:08:FF Certificate issuer: /CN=ddda7c4c6a985c465e66bfde4c3e11bd0cfe08ff Certificate serial: 25284FB54D89A30B04D1D51405F5052F2D135ECC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3dp8TGqYXEZeZr_eTD4RvQz-CP8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/0/DDDA7C4C6A985C465E66BFDE4C3E11BD0CFE08FF.mft Manifest number: 26 Signing time: Wed 28 Jan 2026 09:53:04 +0000 Manifest this update: Wed 28 Jan 2026 09:48:04 +0000 Manifest next update: Fri 30 Jan 2026 09:53:04 +0000 Files and hashes: 1: AS205848.asa (hash: t73DOa6O2jmmW8CQgSEGd5OgdBrOTa4VVNoIf7BcHI0=) 2: DDDA7C4C6A985C465E66BFDE4C3E11BD0CFE08FF.crl (hash: REc9grr1uoeO4A07/p69YyyQ0mYwJfKFYlIZyiDvmNs=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/0/DDDA7C4C6A985C465E66BFDE4C3E11BD0CFE08FF.crl rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/0/DDDA7C4C6A985C465E66BFDE4C3E11BD0CFE08FF.mft rsync://rpki.ripe.net/repository/DEFAULT/3dp8TGqYXEZeZr_eTD4RvQz-CP8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 30 Jan 2026 03:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:28:4f:b5:4d:89:a3:0b:04:d1:d5:14:05:f5:05:2f:2d:13:5e:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ddda7c4c6a985c465e66bfde4c3e11bd0cfe08ff Validity Not Before: Jan 28 09:48:04 2026 GMT Not After : Jan 30 09:53:04 2026 GMT Subject: CN=3A23CD20B47A10E571036406D3D95B7C3446517D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:35:2d:b9:8f:66:48:d9:0d:dd:a1:f7:ba:b1: 17:8f:d5:ee:47:c1:2e:a3:21:d1:37:13:ea:b2:73: 27:2c:bc:f0:c0:ba:8f:7f:4b:5f:65:99:5c:1f:58: a6:a8:6b:79:25:11:66:bb:7e:2d:b9:e0:24:82:d4: e3:17:09:89:a0:39:62:b8:10:c0:bf:c0:79:90:ab: 48:66:f9:3e:25:b6:65:14:46:ca:02:ef:34:cd:a2: 61:98:d0:09:1b:b4:74:e2:d2:6e:33:5d:04:fd:95: d7:d8:7c:fd:99:3b:c8:d3:96:17:6c:84:62:5f:bd: 54:f0:0d:e6:ad:bb:f4:5c:25:89:8f:ed:70:ef:49: 68:90:76:99:95:2a:5e:02:5e:ee:5b:b8:47:56:25: db:30:04:03:d1:ab:55:99:89:8f:72:e2:b8:18:49: 8a:31:35:52:07:ff:2d:af:22:b7:78:83:26:cc:a6: 45:19:5f:15:8d:08:ff:77:79:e4:b6:2c:cd:0a:3c: 22:36:47:67:5e:cf:90:eb:e2:77:96:5d:43:b4:1e: a3:b0:dd:77:79:29:2a:5b:e9:19:14:c8:97:e4:a2: df:5b:8d:58:ea:0a:b1:57:12:37:5d:59:24:27:1c: 3c:b0:e7:f7:59:65:c7:10:12:ee:5c:76:3d:6c:de: 2c:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:23:CD:20:B4:7A:10:E5:71:03:64:06:D3:D9:5B:7C:34:46:51:7D X509v3 Authority Key Identifier: keyid:DD:DA:7C:4C:6A:98:5C:46:5E:66:BF:DE:4C:3E:11:BD:0C:FE:08:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/0/DDDA7C4C6A985C465E66BFDE4C3E11BD0CFE08FF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3dp8TGqYXEZeZr_eTD4RvQz-CP8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/0/DDDA7C4C6A985C465E66BFDE4C3E11BD0CFE08FF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:11:f4:d1:f1:1f:f1:64:c7:81:4e:db:dc:25:23:d1:cf:47: 29:f9:9d:70:bf:69:1c:ff:bd:69:ab:b0:b5:8d:30:0a:c2:85: 89:25:af:59:80:65:2d:55:d5:bf:84:4e:d5:42:07:aa:94:80: 6d:5c:bd:19:e3:4d:1f:35:3b:a8:a9:02:64:a3:4f:8a:5b:bd: 43:61:02:90:d1:ff:c4:b4:59:30:1d:92:51:1f:01:a7:e2:b0: 01:9c:6d:57:06:72:4d:d0:7b:aa:6b:b8:39:0f:3f:f4:27:de: ea:10:30:6a:ea:f8:ad:d6:5a:e2:4b:85:5e:ff:19:10:bf:f6: 91:9d:9e:86:92:70:81:aa:2c:bb:ea:2f:e6:af:2a:cf:dd:3b: a8:31:8c:76:94:45:65:4d:8f:f1:0d:61:f1:45:27:75:a4:4c: 94:f5:95:51:6c:56:c6:37:47:a3:dc:5e:a9:7c:f7:dc:f9:bd: 20:4c:e7:f4:8c:3a:69:cb:18:0f:b2:49:83:41:15:5b:37:7c: c7:7b:38:c6:54:f5:3d:19:72:0e:2e:e2:8d:0e:8c:9a:70:6a: c4:c1:a6:08:ff:c7:b3:67:3e:ae:41:85:b6:c0:76:04:6a:01: 35:ed:d5:3e:23:db:29:00:55:a6:51:9c:80:2d:11:02:06:6c: ab:ef:76:e7 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUJShPtU2JowsE0dUUBfUFLy0TXswwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZGRkYTdjNGM2YTk4NWM0NjVlNjZiZmRlNGMzZTExYmQw Y2ZlMDhmZjAeFw0yNjAxMjgwOTQ4MDRaFw0yNjAxMzAwOTUzMDRaMDMxMTAvBgNV BAMTKDNBMjNDRDIwQjQ3QTEwRTU3MTAzNjQwNkQzRDk1QjdDMzQ0NjUxN0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhNS25j2ZI2Q3dofe6sReP1e5H wS6jIdE3E+qycycsvPDAuo9/S19lmVwfWKaoa3klEWa7fi254CSC1OMXCYmgOWK4 EMC/wHmQq0hm+T4ltmUURsoC7zTNomGY0AkbtHTi0m4zXQT9ldfYfP2ZO8jTlhds hGJfvVTwDeatu/RcJYmP7XDvSWiQdpmVKl4CXu5buEdWJdswBAPRq1WZiY9y4rgY SYoxNVIH/y2vIrd4gybMpkUZXxWNCP93eeS2LM0KPCI2R2dez5Dr4neWXUO0HqOw 3Xd5KSpb6RkUyJfkot9bjVjqCrFXEjddWSQnHDyw5/dZZccQEu5cdj1s3iwBAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUOiPNILR6EOVxA2QG09lbfDRGUX0wHwYDVR0j BBgwFoAU3dp8TGqYXEZeZr/eTD4RvQz+CP8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTU5ZThjMmYtZTU5MC00YTRmLTg0NjMtODMxN2MyYTFj MDQ4LzAvREREQTdDNEM2QTk4NUM0NjVFNjZCRkRFNEMzRTExQkQwQ0ZFMDhGRi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNkcDhUR3FZWEVaZVpyX2VURDRSdlF6 LUNQOC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hNTllOGMyZi1l NTkwLTRhNGYtODQ2My04MzE3YzJhMWMwNDgvMC9ERERBN0M0QzZBOTg1QzQ2NUU2 NkJGREU0QzNFMTFCRDBDRkUwOEZGLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmhH00fEf8WTHgU7b3CUj 0c9HKfmdcL9pHP+9aauwtY0wCsKFiSWvWYBlLVXVv4RO1UIHqpSAbVy9GeNNHzU7 qKkCZKNPilu9Q2ECkNH/xLRZMB2SUR8Bp+KwAZxtVwZyTdB7qmu4OQ8/9Cfe6hAw aur4rdZa4kuFXv8ZEL/2kZ2ehpJwgaosu+ov5q8qz907qDGMdpRFZU2P8Q1h8UUn daRMlPWVUWxWxjdHo9xeqXz33Pm9IEzn9Iw6acsYD7JJg0EVWzd8x3s4xlT1PRly Di7ijQ6MmnBqxMGmCP/Hs2c+rkGFtsB2BGoBNe3VPiPbKQBVplGcgC0RAgZsq+92 5w== -----END CERTIFICATE-----Generated at Thu Jan 29 08:38:26 2026 by rpki-client