This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/2/D2FF07932C3F4C1B3465FF4F0D96484733E02EAD.mft File: D2FF07932C3F4C1B3465FF4F0D96484733E02EAD.mft (raw, json) Hash identifier: oYGCUO101erQs4SGHSUmAdgEr7iSoN/kjzYnkgi+MIA= Subject key identifier: 71:45:07:03:97:E3:D0:48:C0:82:95:7C:84:8A:44:85:C1:80:A5:F3 Authority key identifier: D2:FF:07:93:2C:3F:4C:1B:34:65:FF:4F:0D:96:48:47:33:E0:2E:AD Certificate issuer: /CN=d2ff07932c3f4c1b3465ff4f0d96484733e02ead Certificate serial: 3DE616AE3FB026BCCB0583586A8116C937C80FB0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0v8Hkyw_TBs0Zf9PDZZIRzPgLq0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/2/D2FF07932C3F4C1B3465FF4F0D96484733E02EAD.mft Manifest number: 052E Signing time: Fri 30 Jan 2026 16:16:44 +0000 Manifest this update: Fri 30 Jan 2026 16:11:44 +0000 Manifest next update: Sat 31 Jan 2026 16:57:44 +0000 Files and hashes: 1: AS51019.asa (hash: Oaa1EvfqOHf6DhtSUIsxpjt+74z+nkVUgLI9NR9q+Vg=) 2: D2FF07932C3F4C1B3465FF4F0D96484733E02EAD.crl (hash: 7jTcxjRnUvnjZgKUbHP6qnTNcR16bKmw2lX5vvqEnfk=) 3: 323030313a3637383a313161303a3a2f34382d3438203d3e203531303139.roa (hash: WTZJrpZtSK56gi8FgUd2AbaB/s6bTUvq5ttS3fRGoxU=) 4: 323030313a3637633a6264633a3a2f34382d3438203d3e203531303139.roa (hash: WwIB1vpX/Ksy3lM5t4KklPIgz20phM5/z2U20FASusY=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/2/D2FF07932C3F4C1B3465FF4F0D96484733E02EAD.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/2/D2FF07932C3F4C1B3465FF4F0D96484733E02EAD.mft rsync://rpki.ripe.net/repository/DEFAULT/0v8Hkyw_TBs0Zf9PDZZIRzPgLq0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 31 Jan 2026 16:57:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:e6:16:ae:3f:b0:26:bc:cb:05:83:58:6a:81:16:c9:37:c8:0f:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d2ff07932c3f4c1b3465ff4f0d96484733e02ead Validity Not Before: Jan 30 16:11:44 2026 GMT Not After : Jan 31 16:57:44 2026 GMT Subject: CN=7145070397E3D048C082957C848A4485C180A5F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:35:4d:96:bd:11:39:78:90:fc:22:e5:39:58: ef:e4:85:d2:17:cd:58:7c:c7:8c:c3:44:b0:3f:5b: 27:60:e5:29:b7:19:21:aa:f1:ea:88:28:e2:41:4a: e6:16:4f:e0:9c:8d:5f:86:92:19:d9:ea:56:39:ec: bd:e0:d1:df:28:b2:e9:aa:35:a4:77:04:8f:0f:a6: 1d:29:58:92:4c:24:7b:26:1f:64:42:bf:89:dd:1b: ef:ea:66:1b:1c:41:50:1c:d4:4e:1c:b9:54:a4:68: d5:ec:8d:15:a7:b1:1e:22:b6:19:56:f6:3f:e7:c0: f3:c7:43:28:d1:31:37:4d:ee:2f:f9:12:d0:8d:5e: 71:bd:cc:f9:d1:bb:e6:65:b6:fb:56:9c:2b:46:4a: a8:b0:d8:cb:a9:68:b5:2b:30:a6:77:cb:87:cc:85: a7:8a:bc:2f:72:2e:20:2a:f5:1c:c1:96:e5:d8:35: 90:be:3a:45:00:83:7f:8a:28:29:e4:c0:fd:69:f1: e2:9c:be:b5:27:7b:a2:ed:a7:b3:79:9b:ec:60:46: df:f3:0c:ba:19:84:65:5c:5c:50:7b:fb:07:ee:f0: a1:e4:b3:47:90:3c:62:67:ed:a8:11:cc:41:d0:cd: 34:e5:14:b4:07:3b:c9:dd:93:54:2a:8c:bb:93:8b: 6c:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:45:07:03:97:E3:D0:48:C0:82:95:7C:84:8A:44:85:C1:80:A5:F3 X509v3 Authority Key Identifier: keyid:D2:FF:07:93:2C:3F:4C:1B:34:65:FF:4F:0D:96:48:47:33:E0:2E:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/2/D2FF07932C3F4C1B3465FF4F0D96484733E02EAD.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0v8Hkyw_TBs0Zf9PDZZIRzPgLq0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/2/D2FF07932C3F4C1B3465FF4F0D96484733E02EAD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:a4:7f:b0:c3:4c:dc:a0:64:8a:b0:ff:41:92:19:29:98:22: ae:f3:3d:c2:c8:59:1b:dd:25:9d:9a:ec:c1:b5:33:51:50:46: d0:57:62:cb:a7:2c:fa:a0:c4:5c:7f:85:a0:d3:c2:1f:e3:e7: 68:d9:3a:ba:ac:1b:c6:2b:f2:38:35:93:a3:36:71:97:e4:59: 4c:08:92:b1:7a:49:83:c4:3b:8d:c8:c7:9e:ef:76:f2:18:59: 97:32:92:5c:81:cd:f1:1f:25:42:d0:21:9e:b1:63:65:f9:d1: 33:22:06:13:f1:bf:ff:24:99:9d:c9:f4:32:69:88:ce:87:28: b4:2d:c7:c1:59:cc:bf:47:8b:eb:dc:3a:f1:06:ad:6f:98:5f: 18:99:97:77:c6:0e:48:26:db:9a:b1:37:a1:d9:c0:2e:e3:5c: 6b:4f:ed:1f:56:71:1a:b6:c6:35:00:b7:aa:1a:70:cc:04:09: 71:83:98:94:6b:ce:6c:f1:ca:c0:42:62:d9:b1:bd:63:d8:11: c6:50:e8:b5:d3:56:4d:1a:e9:05:37:a4:30:f8:e9:30:02:d1: 5e:00:85:23:7a:04:f5:17:71:23:94:8f:3b:e9:39:c7:16:13: b6:19:6d:05:7c:4b:13:27:b8:62:61:fd:79:de:72:ba:89:49: 9c:e3:c8:24 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUPeYWrj+wJrzLBYNYaoEWyTfID7AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZDJmZjA3OTMyYzNmNGMxYjM0NjVmZjRmMGQ5NjQ4NDcz M2UwMmVhZDAeFw0yNjAxMzAxNjExNDRaFw0yNjAxMzExNjU3NDRaMDMxMTAvBgNV BAMTKDcxNDUwNzAzOTdFM0QwNDhDMDgyOTU3Qzg0OEE0NDg1QzE4MEE1RjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClNU2WvRE5eJD8IuU5WO/khdIX zVh8x4zDRLA/Wydg5Sm3GSGq8eqIKOJBSuYWT+CcjV+GkhnZ6lY57L3g0d8osumq NaR3BI8Pph0pWJJMJHsmH2RCv4ndG+/qZhscQVAc1E4cuVSkaNXsjRWnsR4ithlW 9j/nwPPHQyjRMTdN7i/5EtCNXnG9zPnRu+ZltvtWnCtGSqiw2MupaLUrMKZ3y4fM haeKvC9yLiAq9RzBluXYNZC+OkUAg3+KKCnkwP1p8eKcvrUne6Ltp7N5m+xgRt/z DLoZhGVcXFB7+wfu8KHks0eQPGJn7agRzEHQzTTlFLQHO8ndk1QqjLuTi2zBAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUcUUHA5fj0EjAgpV8hIpEhcGApfMwHwYDVR0j BBgwFoAU0v8Hkyw/TBs0Zf9PDZZIRzPgLq0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2Nh ZTNmLzIvRDJGRjA3OTMyQzNGNEMxQjM0NjVGRjRGMEQ5NjQ4NDczM0UwMkVBRC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzB2OEhreXdfVEJzMFpmOVBEWlpJUnpQ Z0xxMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYTAwNGJhMS00 MTliLTRkYjUtYmJkMy01Y2NhNjMzY2FlM2YvMi9EMkZGMDc5MzJDM0Y0QzFCMzQ2 NUZGNEYwRDk2NDg0NzMzRTAyRUFELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPqR/sMNM3KBkirD/QZIZ KZgirvM9wshZG90lnZrswbUzUVBG0Fdiy6cs+qDEXH+FoNPCH+PnaNk6uqwbxivy ODWTozZxl+RZTAiSsXpJg8Q7jcjHnu928hhZlzKSXIHN8R8lQtAhnrFjZfnRMyIG E/G//ySZncn0MmmIzocotC3HwVnMv0eL69w68Qatb5hfGJmXd8YOSCbbmrE3odnA LuNca0/tH1ZxGrbGNQC3qhpwzAQJcYOYlGvObPHKwEJi2bG9Y9gRxlDotdNWTRrp BTekMPjpMALRXgCFI3oE9RdxI5SPO+k5xxYTthltBXxLEye4YmH9ed5yuolJnOPI JA== -----END CERTIFICATE-----Generated at Sat Jan 31 06:42:08 2026 by rpki-client