This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.mft File: DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.mft (raw, json) Hash identifier: lut0bIgxabiCW/BrS9A6zczthBFZzfu7t/1omQLxkFU= Subject key identifier: 3C:E5:B0:DC:AD:B4:F0:33:EE:71:E9:44:E5:54:FD:65:3C:2A:61:47 Authority key identifier: DD:C2:5A:D2:F1:A4:89:24:77:13:EE:39:B1:C0:3E:A2:FD:DA:41:18 Certificate issuer: /CN=DDC25AD2F1A489247713EE39B1C03EA2FDDA4118 Certificate serial: 30807D4805840C39846974BCC4B9E1B9B1CD0F6D Authority info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.mft Manifest number: 01FB Signing time: Mon 02 Feb 2026 03:59:32 +0000 Manifest this update: Mon 02 Feb 2026 03:54:32 +0000 Manifest next update: Tue 03 Feb 2026 18:54:32 +0000 Files and hashes: 1: DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.crl (hash: NH4lezW/Z96U67wcha+0lmnZFwS1qXX27AnHZWDP/W0=) 2: 326130623a346530373a363030303a3a2f34302d3438203d3e20323134373031.roa (hash: mhaYla+UsHdOX7ijGa8kmFH/Ey3jwcszbuWBzNvxxRw=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.crl rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.mft rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.cer rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 22:26:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:80:7d:48:05:84:0c:39:84:69:74:bc:c4:b9:e1:b9:b1:cd:0f:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DDC25AD2F1A489247713EE39B1C03EA2FDDA4118 Validity Not Before: Feb 2 03:54:32 2026 GMT Not After : Feb 3 18:54:32 2026 GMT Subject: CN=3CE5B0DCADB4F033EE71E944E554FD653C2A6147 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:c8:c3:c1:ae:e7:b1:ff:9c:a9:a4:1d:df:b1: 0c:5a:69:c2:79:49:a6:63:a4:95:65:84:21:0b:d1: dd:55:c1:f4:b6:23:b1:96:09:ef:48:18:d4:ed:1c: 26:16:20:24:13:c9:ef:ec:7e:06:dd:04:52:3f:5b: c4:78:e8:a9:0c:e6:48:89:b8:83:d6:59:58:0e:ac: 0f:a8:ef:05:0c:e8:19:51:9c:7e:b6:9f:80:55:08: 3f:ae:6e:b8:fb:f9:72:47:9c:0d:8e:0e:26:aa:12: 86:94:95:7d:83:9b:4b:f2:28:7f:d6:c3:0a:3f:12: 47:01:08:07:2d:43:89:0f:ea:27:f3:ed:b4:21:5b: 82:10:7a:63:44:6c:8f:e8:bd:59:94:36:1a:a7:b2: 35:78:eb:1b:8a:c8:00:cc:65:49:21:6b:39:9b:6f: 5d:c9:5d:2c:74:b2:73:d1:f8:48:77:83:3b:71:ed: 3e:64:a0:fa:ce:f4:01:f0:ca:d0:63:4a:e4:33:d4: 05:13:36:2c:ce:3e:28:40:04:01:a8:99:a1:df:49: 26:ac:83:01:50:57:fb:0a:93:94:57:c5:10:e9:cf: 96:62:d5:52:47:b9:bf:27:58:fd:36:5c:d2:c6:f8: 74:b6:80:ba:54:28:92:6e:16:2e:6c:93:9b:1d:c9: ed:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:E5:B0:DC:AD:B4:F0:33:EE:71:E9:44:E5:54:FD:65:3C:2A:61:47 X509v3 Authority Key Identifier: keyid:DD:C2:5A:D2:F1:A4:89:24:77:13:EE:39:B1:C0:3E:A2:FD:DA:41:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:80:9b:8b:bc:53:4f:55:3f:12:6d:df:99:5a:b6:b7:33:23: 37:af:16:39:a3:a6:5f:d0:24:ca:f9:5c:1a:9f:96:d7:41:f6: 43:75:72:2a:41:bc:13:d4:b2:ae:9a:ce:dc:05:75:fd:e8:33: 55:12:67:1a:fa:a6:d5:aa:2b:05:c7:d1:57:9b:f6:e6:85:4d: db:16:5e:74:ec:3a:51:02:62:06:1b:d5:05:b9:47:7d:cc:71: b3:25:e9:f4:71:84:48:14:d0:67:47:4a:8a:b5:d9:2e:5f:3c: 80:11:b4:48:05:75:0b:ab:ea:44:89:e9:24:44:4b:94:68:7a: 62:5d:1d:c0:cb:19:14:0e:64:c3:bb:fd:47:44:80:2b:e9:d3: ca:c5:b5:e2:46:a5:6f:dc:51:7e:3b:ac:1a:69:7d:4d:76:94: 3a:ea:fb:de:9c:45:a8:53:ff:20:1a:35:eb:b0:1a:92:fc:f4: 3c:bd:a0:c2:67:7d:36:2a:5b:ff:30:b7:be:02:5d:f5:df:4c: eb:ab:17:8b:2a:2b:3d:fe:43:86:67:ae:a6:9e:91:f8:e3:b1: b6:03:b9:a8:3b:1c:11:d2:bc:ce:3e:5f:3d:11:44:85:04:34: 78:ed:d4:7d:a8:ed:fc:8d:a2:da:e4:6f:5e:c4:62:36:34:27: 23:9e:17:78 -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUMIB9SAWEDDmEaXS8xLnhubHND20wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRERDMjVBRDJGMUE0ODkyNDc3MTNFRTM5QjFDMDNFQTJG RERBNDExODAeFw0yNjAyMDIwMzU0MzJaFw0yNjAyMDMxODU0MzJaMDMxMTAvBgNV BAMTKDNDRTVCMERDQURCNEYwMzNFRTcxRTk0NEU1NTRGRDY1M0MyQTYxNDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCEyMPBruex/5yppB3fsQxaacJ5 SaZjpJVlhCEL0d1VwfS2I7GWCe9IGNTtHCYWICQTye/sfgbdBFI/W8R46KkM5kiJ uIPWWVgOrA+o7wUM6BlRnH62n4BVCD+ubrj7+XJHnA2ODiaqEoaUlX2Dm0vyKH/W wwo/EkcBCActQ4kP6ifz7bQhW4IQemNEbI/ovVmUNhqnsjV46xuKyADMZUkhazmb b13JXSx0snPR+Eh3gztx7T5koPrO9AHwytBjSuQz1AUTNizOPihABAGomaHfSSas gwFQV/sKk5RXxRDpz5Zi1VJHub8nWP02XNLG+HS2gLpUKJJuFi5sk5sdye0ZAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUPOWw3K208DPucelE5VT9ZTwqYUcwHwYDVR0j BBgwFoAU3cJa0vGkiSR3E+45scA+ov3aQRgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYmVhZDJkY2YtZWFkNS00OTU0LWFkODQtNjU4MGNkMmE5 YzUwLzMvRERDMjVBRDJGMUE0ODkyNDc3MTNFRTM5QjFDMDNFQTJGRERBNDExOC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQz MDUzZjgyMGY1LzEvRERDMjVBRDJGMUE0ODkyNDc3MTNFRTM5QjFDMDNFQTJGRERB NDExOC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iZWFkMmRjZi1l YWQ1LTQ5NTQtYWQ4NC02NTgwY2QyYTljNTAvMy9EREMyNUFEMkYxQTQ4OTI0Nzcx M0VFMzlCMUMwM0VBMkZEREE0MTE4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFICbi7xTT1U/Em3fmVq2 tzMjN68WOaOmX9AkyvlcGp+W10H2Q3VyKkG8E9SyrprO3AV1/egzVRJnGvqm1aor BcfRV5v25oVN2xZedOw6UQJiBhvVBblHfcxxsyXp9HGESBTQZ0dKirXZLl88gBG0 SAV1C6vqRInpJERLlGh6Yl0dwMsZFA5kw7v9R0SAK+nTysW14kalb9xRfjusGml9 TXaUOur73pxFqFP/IBo167Aakvz0PL2gwmd9Nipb/zC3vgJd9d9M66sXiyorPf5D hmeupp6R+OOxtgO5qDscEdK8zj5fPRFEhQQ0eO3Ufajt/I2i2uRvXsRiNjQnI54X eA== -----END CERTIFICATE-----Generated at Mon Feb 2 10:01:24 2026 by rpki-client