This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/1/3537F961668E4765578095AB33A4351BB72C9A63.mft File: 3537F961668E4765578095AB33A4351BB72C9A63.mft (raw, json) Hash identifier: rzibhz+VmOFaTnazzhAPpwxWUHI2NOSH8/+yidKWoR4= Subject key identifier: 8A:80:1E:80:6F:B2:E7:EE:C1:1A:46:04:A6:DA:51:39:7E:22:68:4B Authority key identifier: 35:37:F9:61:66:8E:47:65:57:80:95:AB:33:A4:35:1B:B7:2C:9A:63 Certificate issuer: /CN=3537F961668E4765578095AB33A4351BB72C9A63 Certificate serial: 5B3E81DAB4D9128FC6E7199C3FEC67FEF1764607 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/3537F961668E4765578095AB33A4351BB72C9A63.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/1/3537F961668E4765578095AB33A4351BB72C9A63.mft Manifest number: 18 Signing time: Thu 08 Jan 2026 21:48:04 +0000 Manifest this update: Thu 08 Jan 2026 21:43:04 +0000 Manifest next update: Sat 10 Jan 2026 21:48:04 +0000 Files and hashes: 1: 326130363a313238323a31303a3a2f34342d313238203d3e20323035383438.roa (hash: 0PI46warPOAGZrQe90bl3lA4fAE4MCISdbWQKd8cmUk=) 2: 38392e3138372e36382e302f32342d3332203d3e20323035383438.roa (hash: BDGbr95VQ36FR9Tfnaz/+ZZ7HPpklQMInwdbSElUj64=) 3: 32372e302e3233342e302f32342d3332203d3e20323035383438.roa (hash: ypMnhHsuYXQJ1uLaU18OSLrBvWg449VDZ1ZcIgNWVGg=) 4: 326130363a313238323a3a2f34342d313238203d3e20323035383438.roa (hash: e6xgcJdZcTjLmV7L7mIIS0ZbS4iA5+TX8cpRfsgZaUk=) 5: 326130363a313238323a32303a3a2f34342d313238203d3e20323035383438.roa (hash: VD8/e5WUGI5SMs1h4LuaM43eCjUy2NSH/je82Dvnymo=) 6: 32372e302e3233352e302f32342d3332203d3e20323035383438.roa (hash: tHR53zr4UgIS56fxg0rrIzo3BRWKByol9KLXj3FQw2s=) 7: 326130363a313238323a33303a3a2f34342d313238203d3e20323035383438.roa (hash: 292hBxtVOQ3Gd5+8ak4aSN6nAB9tGh6AJvrUIN5uGbs=) 8: 38392e3138372e36392e302f32342d3332203d3e20323035383438.roa (hash: kzFIPBC46TZNAynPGWUoS4YA8aSHjAgWh6LKaHRaEWE=) 9: 326130363a313238323a34303a3a2f34342d313238203d3e20323035383438.roa (hash: JwzUDkANLXs6XgTehrq1Pd6d6jeZ2m35Wq5ZDkXHhLE=) 10: 3537F961668E4765578095AB33A4351BB72C9A63.crl (hash: VVDbJDfzxJCcQfDuzkWTlC/Q0afJvzQWHYukzdtgMEg=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/1/3537F961668E4765578095AB33A4351BB72C9A63.crl rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/1/3537F961668E4765578095AB33A4351BB72C9A63.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/3537F961668E4765578095AB33A4351BB72C9A63.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 21:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:3e:81:da:b4:d9:12:8f:c6:e7:19:9c:3f:ec:67:fe:f1:76:46:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3537F961668E4765578095AB33A4351BB72C9A63 Validity Not Before: Jan 8 21:43:04 2026 GMT Not After : Jan 10 21:48:04 2026 GMT Subject: CN=8A801E806FB2E7EEC11A4604A6DA51397E22684B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:43:0d:21:81:b4:64:ee:c4:52:f2:55:8c:ba: 21:7f:61:5b:c3:59:a5:b1:43:8e:da:0a:9b:58:ff: 13:68:5b:30:5d:79:52:ad:e4:29:ee:d2:8f:72:68: f1:43:e4:7a:d4:67:db:2c:85:0f:85:7c:49:1f:52: 1c:e4:f6:41:88:72:14:ed:04:6f:c2:8a:c4:f3:d1: 87:b9:2a:50:d7:dc:c7:49:11:b8:c6:56:a7:47:cb: 0d:81:48:f1:39:24:c9:14:84:93:9c:db:62:e3:51: 88:b6:d8:6b:79:d2:6d:c3:a1:a8:2b:e1:fb:7c:1f: f0:10:ce:6c:01:69:7d:7a:ff:08:6e:10:18:e7:65: b5:59:26:98:ff:4f:ae:2e:b4:98:da:bd:6d:77:cd: aa:5f:38:24:d9:c8:4a:45:8b:32:0c:c2:6d:a2:34: 84:42:82:c8:07:80:16:fd:2f:43:c5:3e:c1:13:79: 3b:f0:b7:7e:b2:fb:54:7c:f3:90:51:42:f4:42:fe: 70:81:d8:31:25:2e:4b:fa:63:b3:29:c9:51:0d:d1: 8b:28:30:65:7f:9f:cd:08:08:c6:32:c0:e4:f7:eb: 11:4a:ca:94:ee:9c:26:85:ae:88:b3:2c:17:98:eb: 28:55:5b:95:43:44:17:d9:26:43:3d:00:d6:a8:0f: a0:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:80:1E:80:6F:B2:E7:EE:C1:1A:46:04:A6:DA:51:39:7E:22:68:4B X509v3 Authority Key Identifier: keyid:35:37:F9:61:66:8E:47:65:57:80:95:AB:33:A4:35:1B:B7:2C:9A:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/1/3537F961668E4765578095AB33A4351BB72C9A63.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/3537F961668E4765578095AB33A4351BB72C9A63.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/1/3537F961668E4765578095AB33A4351BB72C9A63.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:96:0e:bb:e8:fe:fc:0c:ea:c9:61:49:86:08:91:2e:ce:59: 30:20:8e:50:29:e4:0e:29:3e:59:2d:29:33:b5:ba:26:ad:e7: c1:76:f7:83:38:c9:ba:85:f9:85:b7:47:ad:e0:f4:b2:95:a0: 0e:47:e6:de:44:f0:3d:40:a3:db:e3:3a:d7:ce:50:05:c5:80: 52:28:e2:f9:10:44:42:f5:c7:80:f7:c6:01:b3:58:0c:d7:a3: d3:5d:df:5e:00:d9:f6:7a:52:80:df:4f:40:72:86:ff:3a:f6: a1:44:32:23:70:90:99:11:fc:7d:8d:82:33:05:f9:08:a3:95: 8e:8f:3b:32:35:e6:2c:2c:c0:38:5e:8f:a1:2e:56:31:7a:b2: 5e:37:58:e8:2e:d1:3c:b1:5e:84:24:8e:f9:36:ed:a7:0a:45: 52:3f:c0:9a:18:71:7e:b5:9c:03:37:9a:8a:63:e9:0c:a9:cc: 81:e4:fa:0f:51:b5:cb:17:52:1c:bf:e8:19:d5:ea:f1:3b:27: 53:61:e3:f1:a9:8d:66:3f:c4:d5:28:43:ba:9a:fe:3d:e1:8d: 21:4a:7b:a5:f6:0b:73:5d:bd:f5:b4:a5:34:eb:fd:d8:10:10: 58:96:ee:dc:c8:2d:20:b2:08:30:78:e7:54:a3:26:78:71:d2: ee:6c:d9:4a -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUWz6B2rTZEo/G5xmcP+xn/vF2RgcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzUzN0Y5NjE2NjhFNDc2NTU3ODA5NUFCMzNBNDM1MUJC NzJDOUE2MzAeFw0yNjAxMDgyMTQzMDRaFw0yNjAxMTAyMTQ4MDRaMDMxMTAvBgNV BAMTKDhBODAxRTgwNkZCMkU3RUVDMTFBNDYwNEE2REE1MTM5N0UyMjY4NEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrQw0hgbRk7sRS8lWMuiF/YVvD WaWxQ47aCptY/xNoWzBdeVKt5Cnu0o9yaPFD5HrUZ9sshQ+FfEkfUhzk9kGIchTt BG/CisTz0Ye5KlDX3MdJEbjGVqdHyw2BSPE5JMkUhJOc22LjUYi22Gt50m3Doagr 4ft8H/AQzmwBaX16/whuEBjnZbVZJpj/T64utJjavW13zapfOCTZyEpFizIMwm2i NIRCgsgHgBb9L0PFPsETeTvwt36y+1R885BRQvRC/nCB2DElLkv6Y7MpyVEN0Yso MGV/n80ICMYywOT36xFKypTunCaFroizLBeY6yhVW5VDRBfZJkM9ANaoD6CPAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUioAegG+y5+7BGkYEptpROX4iaEswHwYDVR0j BBgwFoAUNTf5YWaOR2VXgJWrM6Q1G7csmmMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTU5ZThjMmYtZTU5MC00YTRmLTg0NjMtODMxN2MyYTFj MDQ4LzEvMzUzN0Y5NjE2NjhFNDc2NTU3ODA5NUFCMzNBNDM1MUJCNzJDOUE2My5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvMzUzN0Y5NjE2NjhFNDc2NTU3ODA5NUFCMzNBNDM1MUJCNzJD OUE2My5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hNTllOGMyZi1l NTkwLTRhNGYtODQ2My04MzE3YzJhMWMwNDgvMS8zNTM3Rjk2MTY2OEU0NzY1NTc4 MDk1QUIzM0E0MzUxQkI3MkM5QTYzLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANJYOu+j+/AzqyWFJhgiR Ls5ZMCCOUCnkDik+WS0pM7W6Jq3nwXb3gzjJuoX5hbdHreD0spWgDkfm3kTwPUCj 2+M6185QBcWAUiji+RBEQvXHgPfGAbNYDNej013fXgDZ9npSgN9PQHKG/zr2oUQy I3CQmRH8fY2CMwX5CKOVjo87MjXmLCzAOF6PoS5WMXqyXjdY6C7RPLFehCSO+Tbt pwpFUj/AmhhxfrWcAzeaimPpDKnMgeT6D1G1yxdSHL/oGdXq8TsnU2Hj8amNZj/E 1ShDupr+PeGNIUp7pfYLc1299bSlNOv92BAQWJbu3MgtILIIMHjnVKMmeHHS7mzZ Sg== -----END CERTIFICATE-----Generated at Sat Jan 10 06:01:17 2026 by rpki-client