This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b90e6860-3721-48c4-a3fe-11b1f2c0df5f/1/497EA28AB98266097873E53DF89DA97C44267B14.mft File: 497EA28AB98266097873E53DF89DA97C44267B14.mft (raw, json) Hash identifier: mLhKPPA941mFZZJ9YtQFroZQ+xDE3xjMHspbg5HWkEM= Subject key identifier: 9B:12:83:19:B9:90:F2:B8:88:DB:FD:8F:92:3A:DA:67:49:4E:38:17 Authority key identifier: 49:7E:A2:8A:B9:82:66:09:78:73:E5:3D:F8:9D:A9:7C:44:26:7B:14 Certificate issuer: /CN=497EA28AB98266097873E53DF89DA97C44267B14 Certificate serial: 7FF10983145B18B6FBCDF29A006E5B220C0C35C5 Authority info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/497EA28AB98266097873E53DF89DA97C44267B14.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b90e6860-3721-48c4-a3fe-11b1f2c0df5f/1/497EA28AB98266097873E53DF89DA97C44267B14.mft Manifest number: 3B Signing time: Thu 08 Jan 2026 17:40:34 +0000 Manifest this update: Thu 08 Jan 2026 17:35:34 +0000 Manifest next update: Fri 09 Jan 2026 19:26:34 +0000 Files and hashes: 1: 326130623a346530373a6138313a3a2f34382d3438203d3e20323036363034.roa (hash: S61Lzy+ER9+PYL/15hZfM6Wz3/4ZpjIU1q+7uDcU8nU=) 2: 497EA28AB98266097873E53DF89DA97C44267B14.crl (hash: nHl1Vu7Z+jRGGeZ8jKfMWk8JPgd8WY6xr/En7RExo0U=) 3: 326130623a346530373a6165303a3a2f34342d3438203d3e20323037353637.roa (hash: 8EOjojOJFeyPSugKSirM3Pua5hnoqE/TLlkiB1/CgoM=) 4: 326130623a346530373a6130303a3a2f34302d3438203d3e20323036363034.roa (hash: Z0wiDwjOy/qJoPdM0vEBmhECeV0C4KD9VuGJR2rdeyQ=) Validation: Failed, CRL has expired Certificate: Data: Version: 3 (0x2) Serial Number: 7f:f1:09:83:14:5b:18:b6:fb:cd:f2:9a:00:6e:5b:22:0c:0c:35:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=497EA28AB98266097873E53DF89DA97C44267B14 Validity Not Before: Jan 8 17:35:34 2026 GMT Not After : Jan 9 19:26:34 2026 GMT Subject: CN=9B128319B990F2B888DBFD8F923ADA67494E3817 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:06:01:47:a6:6e:65:74:d3:6e:ef:8b:fd:91: da:11:44:a0:ba:91:33:68:09:5c:9b:c1:5f:4f:ae: 44:f5:3a:21:4c:fa:03:79:60:3e:7a:dc:c1:1d:19: 43:c2:5f:ab:f4:f5:65:38:6a:a3:3d:27:df:89:6c: 03:b0:43:93:cd:d0:15:9b:85:44:09:1f:55:3c:f9: 6c:07:c9:1d:69:e3:8f:db:72:8a:d9:cb:3d:cb:dd: 66:0e:f7:29:bf:26:f2:e5:fe:94:94:65:0f:d9:13: 43:9d:72:64:34:16:51:12:d5:fb:95:b0:f1:b8:03: 96:c8:6c:ae:fa:6d:5d:8c:4f:c7:18:0b:af:f6:d7: 18:9d:42:e6:9b:2a:c4:2e:12:36:2d:4a:02:55:38: 6d:21:26:d4:b6:18:a5:ce:f3:e4:4f:44:86:0d:32: 5f:f1:c9:08:45:cf:f6:5a:5e:d0:75:d7:22:a6:69: 52:b4:ff:01:6a:98:76:ca:69:bd:64:47:46:13:f8: eb:f4:e8:bb:d3:d4:e6:8e:04:66:40:e2:29:7c:c7: 0a:87:11:62:ba:4c:14:d0:e4:1b:48:fc:63:8b:fd: 7c:7a:64:cc:a6:d7:3d:8e:4c:8b:77:b3:f7:45:d2: 4c:bf:83:0e:dc:69:66:44:65:6a:08:fd:a7:27:a5: 6d:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:12:83:19:B9:90:F2:B8:88:DB:FD:8F:92:3A:DA:67:49:4E:38:17 X509v3 Authority Key Identifier: keyid:49:7E:A2:8A:B9:82:66:09:78:73:E5:3D:F8:9D:A9:7C:44:26:7B:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b90e6860-3721-48c4-a3fe-11b1f2c0df5f/1/497EA28AB98266097873E53DF89DA97C44267B14.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/497EA28AB98266097873E53DF89DA97C44267B14.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b90e6860-3721-48c4-a3fe-11b1f2c0df5f/1/497EA28AB98266097873E53DF89DA97C44267B14.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:f9:7b:e0:3b:2c:ef:ea:e8:4a:44:d5:5e:79:89:bb:42:9f: 6c:9e:ab:65:1c:2f:e5:ed:b6:e8:4f:f5:41:c7:83:cb:cf:85: c1:59:b7:10:90:1a:dc:43:0f:db:af:40:e9:37:c8:25:34:0e: 5b:44:ae:8d:ab:10:ec:23:dd:ae:14:76:81:d3:db:11:59:9f: d9:28:30:b1:f5:62:f6:39:1a:a8:c5:31:97:43:ac:b0:dc:d8: c4:58:f0:5d:5b:6c:2f:2d:6f:fa:b0:95:3f:23:71:fc:29:20: 4e:e4:ad:8d:b5:dd:d3:fd:07:e0:c3:e8:4f:55:b1:37:e3:ed: 11:62:c1:e8:ab:a6:8e:2f:2b:a2:1c:e4:b5:a3:4e:6d:0f:41: e6:d8:e4:8a:91:bf:39:b0:62:33:9a:81:49:c3:e7:f8:85:68: f1:44:bd:a3:36:8d:28:a7:af:63:d1:91:51:67:8c:ea:1f:45: 7a:5c:76:11:31:45:f1:c3:2e:c9:60:47:04:fc:9d:34:7e:9f: e0:ae:f6:e8:c6:e5:e4:c4:bd:f6:f4:05:2a:c8:36:b6:aa:1d: 87:9f:df:3a:2d:b1:22:23:67:38:d0:05:d0:11:15:f8:a4:59: 45:98:81:d0:ce:af:ca:b2:72:6a:ca:16:c4:2d:3b:47:ad:5a: ba:9d:f9:67 -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUf/EJgxRbGLb7zfKaAG5bIgwMNcUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDk3RUEyOEFCOTgyNjYwOTc4NzNFNTNERjg5REE5N0M0 NDI2N0IxNDAeFw0yNjAxMDgxNzM1MzRaFw0yNjAxMDkxOTI2MzRaMDMxMTAvBgNV BAMTKDlCMTI4MzE5Qjk5MEYyQjg4OERCRkQ4RjkyM0FEQTY3NDk0RTM4MTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNBgFHpm5ldNNu74v9kdoRRKC6 kTNoCVybwV9PrkT1OiFM+gN5YD563MEdGUPCX6v09WU4aqM9J9+JbAOwQ5PN0BWb hUQJH1U8+WwHyR1p44/bcorZyz3L3WYO9ym/JvLl/pSUZQ/ZE0OdcmQ0FlES1fuV sPG4A5bIbK76bV2MT8cYC6/21xidQuabKsQuEjYtSgJVOG0hJtS2GKXO8+RPRIYN Ml/xyQhFz/ZaXtB11yKmaVK0/wFqmHbKab1kR0YT+Ov06LvT1OaOBGZA4il8xwqH EWK6TBTQ5BtI/GOL/Xx6ZMym1z2OTIt3s/dF0ky/gw7caWZEZWoI/acnpW0FAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUmxKDGbmQ8riI2/2PkjraZ0lOOBcwHwYDVR0j BBgwFoAUSX6iirmCZgl4c+U9+J2pfEQmexQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYjkwZTY4NjAtMzcyMS00OGM0LWEzZmUtMTFiMWYyYzBk ZjVmLzEvNDk3RUEyOEFCOTgyNjYwOTc4NzNFNTNERjg5REE5N0M0NDI2N0IxNC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQz MDUzZjgyMGY1LzEvNDk3RUEyOEFCOTgyNjYwOTc4NzNFNTNERjg5REE5N0M0NDI2 N0IxNC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iOTBlNjg2MC0z NzIxLTQ4YzQtYTNmZS0xMWIxZjJjMGRmNWYvMS80OTdFQTI4QUI5ODI2NjA5Nzg3 M0U1M0RGODlEQTk3QzQ0MjY3QjE0Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATvl74Dss7+roSkTVXnmJ u0KfbJ6rZRwv5e226E/1QceDy8+FwVm3EJAa3EMP269A6TfIJTQOW0SujasQ7CPd rhR2gdPbEVmf2SgwsfVi9jkaqMUxl0OssNzYxFjwXVtsLy1v+rCVPyNx/CkgTuSt jbXd0/0H4MPoT1WxN+PtEWLB6Kumji8rohzktaNObQ9B5tjkipG/ObBiM5qBScPn +IVo8US9ozaNKKevY9GRUWeM6h9Felx2ETFF8cMuyWBHBPydNH6f4K726Mbl5MS9 9vQFKsg2tqodh5/fOi2xIiNnONAF0BEV+KRZRZiB0M6vyrJyasoWxC07R61aup35 Zw== -----END CERTIFICATE-----Generated at Wed Jan 21 06:52:06 2026 by rpki-client