This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.mft File: 5ECB4CADBBADD500F49CA697D566A2761E017608.mft (raw, json) Hash identifier: 5HgjQnwms9D/L6U58Jo0To5kT17R1dMx8jJ6Xq7Py9A= Subject key identifier: F1:1C:CA:D1:31:65:7E:5F:B5:29:F8:1F:7A:B2:FF:6A:AF:F0:47:4B Authority key identifier: 5E:CB:4C:AD:BB:AD:D5:00:F4:9C:A6:97:D5:66:A2:76:1E:01:76:08 Certificate issuer: /CN=5ecb4cadbbadd500f49ca697d566a2761e017608 Certificate serial: 01190356B14F82646BD372AB45875581F724C931 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XstMrbut1QD0nKaX1Waidh4Bdgg.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.mft Manifest number: 024F Signing time: Wed 21 Jan 2026 01:26:05 +0000 Manifest this update: Wed 21 Jan 2026 01:21:05 +0000 Manifest next update: Thu 22 Jan 2026 05:22:05 +0000 Files and hashes: 1: 38362e35342e3137322e302f32342d3234203d3e20323134343332.roa (hash: +6HuSGy13PoSBfdgi660PmTLE8Z52TLvw+ru7fcB7AI=) 2: 3231332e3235342e3137302e302f32342d3234203d3e20323134393431.roa (hash: WuIyFXGDgkt2cltxoxT/RYao20HHu+r0Sn5rfpjFnHA=) 3: 3134312e3139332e3232382e302f32342d3234203d3e20323134323038.roa (hash: p1kuPenqcy6Et0XPjwxcCLB+vpEy3ekHhe4EodnqolI=) 4: 3231332e3235342e3137302e302f32342d3234203d3e203438363738.roa (hash: ttSPLNkVmnmfbB1Jg0U4OFMRv4cZWxzTg6oBluFltrk=) 5: 5ECB4CADBBADD500F49CA697D566A2761E017608.crl (hash: VSAl4VSnoOp4oZZ2JoBmGtz6jaJAMQf+4erc/wSOqjw=) 6: 38302e37352e3232312e302f32342d3234203d3e203438393235.roa (hash: Q4yUdFFGtrq1xUVDtHn0DoNWjht0ICRHxiUX7p+xRAQ=) 7: 3137302e36322e3139302e302f32342d3234203d3e203438393235.roa (hash: 8/++60jg7XtzmZ45FRECeqxUVy5048XlFvcQJYMNUjo=) 8: 3231332e3235342e3137302e302f32342d3234203d3e20323038343833.roa (hash: gjwDheXZBS8eOtwo7Ja5xPFcujfV7TC07EH1z972oQ4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.crl rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.mft rsync://rpki.ripe.net/repository/DEFAULT/XstMrbut1QD0nKaX1Waidh4Bdgg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 05:22:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:19:03:56:b1:4f:82:64:6b:d3:72:ab:45:87:55:81:f7:24:c9:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ecb4cadbbadd500f49ca697d566a2761e017608 Validity Not Before: Jan 21 01:21:05 2026 GMT Not After : Jan 22 05:22:05 2026 GMT Subject: CN=F11CCAD131657E5FB529F81F7AB2FF6AAFF0474B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:08:24:bc:0a:45:d4:96:37:80:d7:6b:af:2e: cb:bc:72:40:bb:e7:14:55:79:c9:43:0c:0f:a6:f7: 72:5a:cb:cc:bd:99:27:d9:1d:28:f3:66:72:41:c5: 5c:9d:b7:cd:16:93:bd:c9:a0:37:14:aa:7c:2f:bd: c9:2d:3c:08:19:b7:93:64:bb:cc:a4:f1:4d:96:5b: d0:8d:f1:78:83:cc:b5:bf:d0:bc:fc:e9:5a:39:24: b1:d9:b1:cb:69:08:d5:ef:06:96:a3:42:09:f4:f6: c7:fe:e9:2f:35:a1:87:ca:07:1d:c5:13:12:da:c3: 2c:5c:e1:71:db:9d:b4:a0:26:98:6d:2c:6e:77:ab: 45:83:a1:f0:39:27:20:b4:fd:66:8a:d9:02:7c:02: 4d:f1:4d:24:95:39:f1:cd:14:6f:06:1f:fc:f6:a9: 0f:30:3a:1e:69:f2:57:51:28:a1:26:39:66:8f:79: 70:74:db:74:8f:79:03:9e:64:91:e2:be:4e:69:d5: ae:4a:ca:be:f5:6f:a1:b6:79:cb:67:b6:01:6e:e9: ba:11:dc:85:4c:7f:2c:0c:1f:23:3e:30:b8:59:dd: 3a:f2:fc:0f:19:a6:3a:e9:a9:ce:9d:f1:ad:d9:34: 06:e1:b3:31:a3:f7:01:2f:8e:84:50:a4:27:f9:25: 6b:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:1C:CA:D1:31:65:7E:5F:B5:29:F8:1F:7A:B2:FF:6A:AF:F0:47:4B X509v3 Authority Key Identifier: keyid:5E:CB:4C:AD:BB:AD:D5:00:F4:9C:A6:97:D5:66:A2:76:1E:01:76:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XstMrbut1QD0nKaX1Waidh4Bdgg.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:2b:a6:91:5a:45:a0:1a:99:33:4a:cf:28:0f:76:75:6c:c4: 89:44:80:d0:cf:e0:a1:5d:97:fe:3e:d3:1a:eb:fe:73:37:f1: f9:14:f5:df:5b:4e:2b:e4:6d:ac:c3:08:bf:1b:b1:ce:d7:8a: 83:7e:d4:09:0b:2c:3c:21:43:f5:17:58:0b:a4:2a:fe:a4:26: 75:e3:52:62:89:d7:c6:83:15:eb:53:fa:c5:76:5e:58:00:2e: 5c:02:72:9f:e1:93:ab:db:25:b0:75:ec:46:64:94:aa:8a:1d: 01:28:1a:33:1f:9e:17:b9:0c:7c:6c:40:6d:9f:06:94:d1:20: 7b:1d:5a:21:72:95:3b:eb:2f:5b:9a:aa:03:dc:46:ef:a7:1f: bf:19:17:66:ef:71:db:d5:8b:88:fc:21:a0:d2:fb:3c:cd:67: e3:d0:f4:78:7b:2a:29:29:62:bb:08:2c:b8:e5:1b:ad:11:6a: fc:63:ff:13:46:8b:4f:af:92:76:e0:fc:75:91:3f:9a:68:c4: aa:06:04:c0:0f:48:bd:47:97:48:19:8f:3f:af:6b:d4:08:be: 01:51:fd:b0:5c:a3:a8:6a:74:ce:95:1e:3b:96:c4:f0:dc:05: dc:b3:f7:88:d0:56:87:43:4e:28:fa:a5:ac:d2:86:d6:91:32: a7:c7:97:89 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUARkDVrFPgmRr03KrRYdVgfckyTEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNWVjYjRjYWRiYmFkZDUwMGY0OWNhNjk3ZDU2NmEyNzYx ZTAxNzYwODAeFw0yNjAxMjEwMTIxMDVaFw0yNjAxMjIwNTIyMDVaMDMxMTAvBgNV BAMTKEYxMUNDQUQxMzE2NTdFNUZCNTI5RjgxRjdBQjJGRjZBQUZGMDQ3NEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqCCS8CkXUljeA12uvLsu8ckC7 5xRVeclDDA+m93Jay8y9mSfZHSjzZnJBxVydt80Wk73JoDcUqnwvvcktPAgZt5Nk u8yk8U2WW9CN8XiDzLW/0Lz86Vo5JLHZsctpCNXvBpajQgn09sf+6S81oYfKBx3F ExLawyxc4XHbnbSgJphtLG53q0WDofA5JyC0/WaK2QJ8Ak3xTSSVOfHNFG8GH/z2 qQ8wOh5p8ldRKKEmOWaPeXB023SPeQOeZJHivk5p1a5Kyr71b6G2ectntgFu6boR 3IVMfywMHyM+MLhZ3Try/A8Zpjrpqc6d8a3ZNAbhszGj9wEvjoRQpCf5JWuhAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU8RzK0TFlfl+1KfgferL/aq/wR0swHwYDVR0j BBgwFoAUXstMrbut1QD0nKaX1Waidh4BdggwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWMwZTEzZDgtYmZlMC00MjM1LWFmYjQtZDUzZWRmYmFj ZGQyLzAvNUVDQjRDQURCQkFERDUwMEY0OUNBNjk3RDU2NkEyNzYxRTAxNzYwOC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1hzdE1yYnV0MVFEMG5LYVgxV2FpZGg0 QmRnZy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYzBlMTNkOC1i ZmUwLTQyMzUtYWZiNC1kNTNlZGZiYWNkZDIvMC81RUNCNENBREJCQURENTAwRjQ5 Q0E2OTdENTY2QTI3NjFFMDE3NjA4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWSumkVpFoBqZM0rPKA92 dWzEiUSA0M/goV2X/j7TGuv+czfx+RT131tOK+RtrMMIvxuxzteKg37UCQssPCFD 9RdYC6Qq/qQmdeNSYonXxoMV61P6xXZeWAAuXAJyn+GTq9slsHXsRmSUqoodASga Mx+eF7kMfGxAbZ8GlNEgex1aIXKVO+svW5qqA9xG76cfvxkXZu9x29WLiPwhoNL7 PM1n49D0eHsqKSliuwgsuOUbrRFq/GP/E0aLT6+SduD8dZE/mmjEqgYEwA9IvUeX SBmPP69r1Ai+AVH9sFyjqGp0zpUeO5bE8NwF3LP3iNBWh0NOKPqlrNKG1pEyp8eX iQ== -----END CERTIFICATE-----Generated at Wed Jan 21 15:09:10 2026 by rpki-client