This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.mft File: BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.mft (raw, json) Hash identifier: EwXVsCfpkHR/+hTym3ia3AtxVFEfqdjf9/aYg+m1f/w= Subject key identifier: F9:00:11:44:45:70:1E:64:0B:3B:5F:08:8C:B2:7B:14:C2:48:85:85 Authority key identifier: BE:0B:B7:88:69:CD:B2:AD:0C:97:1A:6A:85:8A:30:21:3E:AE:C4:7D Certificate issuer: /CN=be0bb78869cdb2ad0c971a6a858a30213eaec47d Certificate serial: 27CD950E8936F9864B08C8E6D0B6C58C5E831AAE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vgu3iGnNsq0MlxpqhYowIT6uxH0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.mft Manifest number: 01D6 Signing time: Mon 26 Jan 2026 19:51:29 +0000 Manifest this update: Mon 26 Jan 2026 19:46:29 +0000 Manifest next update: Tue 27 Jan 2026 20:31:29 +0000 Files and hashes: 1: 3137382e3234382e37322e302f32342d3234203d3e20313531383732.roa (hash: wHwcwoFIrN2jLP/C8OzdoSzmdobOAFysYNlbWgxelzw=) 2: 3137382e3234382e37382e302f32342d3234203d3e20323132333834.roa (hash: 55oHxRvhLlFnFgVNA6T2hJ74AYC9yyl40HSKUWc/res=) 3: 3137382e3234382e37372e302f32342d3234203d3e20323133373833.roa (hash: QA/AmBx/vt6J6eDW0Y/+kHvJueiOPr7O1NVAvBIe9GY=) 4: BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.crl (hash: vKyW5v3J9IX7rP3gSztDlQOhXsWL/u3LMWryOMmuy5s=) 5: 3139332e3136392e37382e302f32332d3234203d3e203438343335.roa (hash: 7BonRadnccE5oClU90cDWqb2zFnrszRs5TdXh7lrUTg=) 6: 3139332e3136392e37382e302f32332d3234203d3e203530343334.roa (hash: Ozt3uRUP9szxnq6Y/BlUHZo63N6fYBwOlNZT3blQYnY=) 7: 3137382e3234382e37392e302f32342d3234203d3e20313335333932.roa (hash: YE6bAehCH8ruShBFJdgU4NCX9qGkifZ5lR9x24K4y2c=) 8: 3137382e3234382e37342e302f32342d3234203d3e20323039313831.roa (hash: JOjM4S47fNK82HVGI3kzft2889UH/2/CmD3owvdrCqM=) 9: 3139352e34322e3131322e302f32342d3234203d3e203438343335.roa (hash: tbJb4NeQxaqdUwJnx0mi5eYh93xW1wx/PyQm3nNKQlk=) 10: 3139332e3136392e37382e302f32332d3233203d3e203438343335.roa (hash: CCPO6h/MpNSX08leEvwwJIjESWw2OEutpIc59PlyY9E=) 11: 3137382e3234382e37352e302f32342d3234203d3e20313939303538.roa (hash: 32SDZVJ37JJ5kdrs24paGjp5boRcUJ2fYJyMfyL4cw4=) 12: 3139352e34322e3131322e302f32332d3233203d3e203438343335.roa (hash: SO5iYpxppDi067L1otYSj19apV4zwNvimr95590708A=) 13: 3137382e3234382e37362e302f32342d3234203d3e203432383331.roa (hash: FQiM0Ff1DCSzma5DiHQMrsfmN7QznFFoSzW1a5q9Q2M=) 14: 3137382e3234382e37332e302f32342d3234203d3e20313431393638.roa (hash: zMoHCJaZZ5vI4uszw9fV0p+6ygU9pfTnJ4jfa1DsJEg=) 15: 3139352e34322e3131332e302f32342d3234203d3e203438343335.roa (hash: pchbJm+Br/uCuzzDsgfU4W3Dq3tZwJWDYbuhydm/Eyc=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.crl rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.mft rsync://rpki.ripe.net/repository/DEFAULT/vgu3iGnNsq0MlxpqhYowIT6uxH0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:31:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:cd:95:0e:89:36:f9:86:4b:08:c8:e6:d0:b6:c5:8c:5e:83:1a:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be0bb78869cdb2ad0c971a6a858a30213eaec47d Validity Not Before: Jan 26 19:46:29 2026 GMT Not After : Jan 27 20:31:29 2026 GMT Subject: CN=F900114445701E640B3B5F088CB27B14C2488585 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:ec:e2:07:88:6a:24:ae:21:68:7c:ea:61:62: 1c:90:47:24:09:1f:e6:37:52:b4:ae:f9:cd:c3:1d: e5:53:1e:87:1d:d1:be:2c:44:89:13:60:a4:4a:b8: 99:56:5d:ab:79:e1:26:f6:30:0e:c4:c7:6f:9a:79: 10:67:d2:70:9e:bf:01:87:a8:82:7d:18:82:fe:51: 06:ed:40:d2:a0:85:cf:f1:01:14:f0:9f:35:46:db: f5:e2:a5:b0:bc:3d:ba:7e:dd:a9:1a:81:2d:42:e1: b2:70:91:31:ae:d4:bf:9c:6e:80:69:0d:7c:fa:f2: 0f:73:6a:7a:5a:66:1e:59:77:86:74:1c:f4:59:be: 6c:c3:82:fe:d0:5e:3a:6e:42:27:8d:84:f4:b1:2a: af:29:ea:d7:02:0c:a3:7c:50:e5:d5:70:a3:3c:c8: 4b:39:1a:15:cd:e3:00:1b:d7:d9:d7:ac:0e:c2:5c: b6:66:e9:d9:b0:57:d0:29:ae:81:bb:72:61:6b:a3: eb:6a:d5:8a:90:2c:f2:1e:d4:be:b2:80:fa:f1:ca: f6:c0:df:1a:b3:68:7c:66:fe:3d:e9:a6:8a:3d:1b: 49:21:f5:36:ca:fc:79:80:83:6d:78:9f:85:88:4f: 51:8c:28:d7:ba:6b:81:10:01:0d:6b:6b:9b:a5:a9: 83:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:00:11:44:45:70:1E:64:0B:3B:5F:08:8C:B2:7B:14:C2:48:85:85 X509v3 Authority Key Identifier: keyid:BE:0B:B7:88:69:CD:B2:AD:0C:97:1A:6A:85:8A:30:21:3E:AE:C4:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vgu3iGnNsq0MlxpqhYowIT6uxH0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:d9:d7:dc:4e:95:a3:ea:32:84:f2:94:53:b6:76:17:c3:3f: c8:53:34:e2:68:37:66:97:19:f9:81:dd:eb:74:0f:94:45:6b: 18:88:45:ec:59:ea:c8:8c:7b:69:9f:55:5e:00:4a:d8:2a:6d: 42:c4:09:e8:50:a2:c1:5a:6a:e1:47:c7:ee:6a:3d:7e:64:9b: d1:eb:a7:06:e8:ba:bf:43:9e:46:8b:45:96:e3:6f:05:67:ee: 9c:1c:fa:1b:a2:7d:2f:eb:6e:b1:eb:27:f8:68:fd:ab:46:0b: e6:83:9f:9e:8d:12:cb:81:7e:e5:3c:5a:00:61:d2:87:99:64: be:05:e3:2d:a3:50:d1:c0:ad:27:6f:7a:40:a0:16:44:e3:82: d6:b0:4a:86:51:f5:c9:05:d4:08:86:5e:c5:c7:0c:7f:9a:fc: 6e:03:ec:da:e6:06:37:6b:48:73:9f:a3:64:a6:ca:70:ac:cf: 72:a7:82:d6:3a:69:a1:ce:6d:0e:92:42:c8:64:96:ec:61:d5: 6d:01:a7:3a:4e:0b:e1:19:b1:dd:01:81:0b:01:7b:28:96:f1: e2:0a:20:07:c0:13:3e:86:a5:e6:d8:34:2d:41:ba:17:20:8a: bc:4f:a4:c8:c0:1d:f1:65:e7:fe:a5:13:36:2c:33:5b:6a:bb: a4:50:6d:bb -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUJ82VDok2+YZLCMjm0LbFjF6DGq4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYmUwYmI3ODg2OWNkYjJhZDBjOTcxYTZhODU4YTMwMjEz ZWFlYzQ3ZDAeFw0yNjAxMjYxOTQ2MjlaFw0yNjAxMjcyMDMxMjlaMDMxMTAvBgNV BAMTKEY5MDAxMTQ0NDU3MDFFNjQwQjNCNUYwODhDQjI3QjE0QzI0ODg1ODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDh7OIHiGokriFofOphYhyQRyQJ H+Y3UrSu+c3DHeVTHocd0b4sRIkTYKRKuJlWXat54Sb2MA7Ex2+aeRBn0nCevwGH qIJ9GIL+UQbtQNKghc/xARTwnzVG2/XipbC8Pbp+3akagS1C4bJwkTGu1L+cboBp DXz68g9zanpaZh5Zd4Z0HPRZvmzDgv7QXjpuQieNhPSxKq8p6tcCDKN8UOXVcKM8 yEs5GhXN4wAb19nXrA7CXLZm6dmwV9AproG7cmFro+tq1YqQLPIe1L6ygPrxyvbA 3xqzaHxm/j3ppoo9G0kh9TbK/HmAg214n4WIT1GMKNe6a4EQAQ1ra5ulqYOHAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU+QARREVwHmQLO18IjLJ7FMJIhYUwHwYDVR0j BBgwFoAUvgu3iGnNsq0MlxpqhYowIT6uxH0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWMxNDMzODctZjAxMy00OTIyLTgzOGUtZTE4ODY0YmUx ZTRhLzAvQkUwQkI3ODg2OUNEQjJBRDBDOTcxQTZBODU4QTMwMjEzRUFFQzQ3RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3ZndTNpR25Oc3EwTWx4cHFoWW93SVQ2 dXhIMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYzE0MzM4Ny1m MDEzLTQ5MjItODM4ZS1lMTg4NjRiZTFlNGEvMC9CRTBCQjc4ODY5Q0RCMkFEMEM5 NzFBNkE4NThBMzAyMTNFQUVDNDdELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa9nX3E6Vo+oyhPKUU7Z2 F8M/yFM04mg3ZpcZ+YHd63QPlEVrGIhF7FnqyIx7aZ9VXgBK2CptQsQJ6FCiwVpq 4UfH7mo9fmSb0eunBui6v0OeRotFluNvBWfunBz6G6J9L+tusesn+Gj9q0YL5oOf no0Sy4F+5TxaAGHSh5lkvgXjLaNQ0cCtJ296QKAWROOC1rBKhlH1yQXUCIZexccM f5r8bgPs2uYGN2tIc5+jZKbKcKzPcqeC1jppoc5tDpJCyGSW7GHVbQGnOk4L4Rmx 3QGBCwF7KJbx4gogB8ATPoal5tg0LUG6FyCKvE+kyMAd8WXn/qUTNiwzW2q7pFBt uw== -----END CERTIFICATE-----Generated at Tue Jan 27 07:17:21 2026 by rpki-client