This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.mft File: F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.mft (raw, json) Hash identifier: kndfX7Sxz+J6tnsYvw7eNymhpRS3181jnE3VtWVJiX4= Subject key identifier: 2F:C5:9D:BA:46:CA:E8:55:48:A9:BE:06:75:F2:1E:4F:88:C1:DA:CD Authority key identifier: F2:9F:BA:B4:DB:86:7F:6B:D9:A7:EF:F6:AA:55:D9:8C:16:2E:1A:AD Certificate issuer: /CN=f29fbab4db867f6bd9a7eff6aa55d98c162e1aad Certificate serial: 3E25AD136567A1BEF819DE1C6A9DB062E5E62FDB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8p-6tNuGf2vZp-_2qlXZjBYuGq0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.mft Manifest number: 060D Signing time: Mon 26 Jan 2026 22:11:40 +0000 Manifest this update: Mon 26 Jan 2026 22:06:40 +0000 Manifest next update: Wed 28 Jan 2026 00:28:40 +0000 Files and hashes: 1: 34362e3235302e3234302e302f32302d3234203d3e20313431393935.roa (hash: 5zFYerIngzLwSwbeiiGPHVQadLBE1/J7oEEXeFR/OFM=) 2: 326130303a386530303a313a3a2f34382d3438203d3e203230373132.roa (hash: 2qiBxfK+UGsXjYXrt6Cm3jSdVu6qoZhGBCRhmjYUhjg=) 3: F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.crl (hash: CnI3qY5bXd64c64OZSIdNznP1W9q43Yfi1LJx6DO17k=) 4: 34362e3235302e3232342e302f32302d3234203d3e20313431393935.roa (hash: ht90MUomGkgWhJETWF0rvugOS8SI8qvW9OndsUlGu80=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.crl rsync://rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.mft rsync://rpki.ripe.net/repository/DEFAULT/8p-6tNuGf2vZp-_2qlXZjBYuGq0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:28:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:25:ad:13:65:67:a1:be:f8:19:de:1c:6a:9d:b0:62:e5:e6:2f:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f29fbab4db867f6bd9a7eff6aa55d98c162e1aad Validity Not Before: Jan 26 22:06:40 2026 GMT Not After : Jan 28 00:28:40 2026 GMT Subject: CN=2FC59DBA46CAE85548A9BE0675F21E4F88C1DACD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:6c:b7:07:a0:66:57:c0:e7:8b:07:f2:42:76: 7e:88:0e:eb:66:fb:e8:0e:dc:9c:e3:c6:4c:6c:2c: 2d:c3:a9:0f:8e:02:67:b0:a7:f0:c8:f8:5e:45:c2: 70:b3:20:df:ac:31:d8:8f:b7:10:2f:86:7d:d9:08: 45:a5:9c:10:3f:a8:de:3b:3d:be:67:79:7f:8d:03: e9:57:31:f4:88:22:a8:1f:93:90:f7:28:32:e4:a6: c8:ac:05:0a:fb:66:5f:16:1d:83:35:f9:de:bf:85: 51:b9:98:62:45:4b:0b:f9:22:9d:49:46:7b:45:7c: 81:b8:a9:7f:ff:b3:48:af:40:c3:b2:ab:51:60:56: 11:4a:ee:27:d9:cb:bc:bd:7b:98:96:a2:ec:1e:43: 47:f8:15:ab:d7:f9:a4:11:9b:4e:65:b0:d0:b3:d8: 4a:b7:aa:dc:9b:bf:ce:6f:31:fd:bb:a7:99:35:5a: 14:9b:8e:12:7c:dd:8e:46:d9:db:df:ab:f6:a0:55: 93:1c:69:e3:db:3e:21:dc:fd:95:0b:76:80:c2:d7: 40:0b:d9:f6:fd:05:bb:d3:56:e3:b2:b5:a3:00:ab: 47:48:bd:f2:df:68:0e:c9:16:c3:13:47:63:b6:4c: cf:72:48:30:ef:21:d6:c6:d5:b0:5b:09:a3:a1:68: ff:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:C5:9D:BA:46:CA:E8:55:48:A9:BE:06:75:F2:1E:4F:88:C1:DA:CD X509v3 Authority Key Identifier: keyid:F2:9F:BA:B4:DB:86:7F:6B:D9:A7:EF:F6:AA:55:D9:8C:16:2E:1A:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8p-6tNuGf2vZp-_2qlXZjBYuGq0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:9d:84:b2:22:35:d3:8d:be:11:07:7d:35:f9:a0:13:39:fa: e9:ec:59:79:39:84:4b:c5:58:72:fe:ff:36:08:60:9a:5b:6a: 51:a7:f6:b5:e1:6a:21:d6:8a:38:de:da:7b:f5:a6:f5:80:f9: 66:be:3d:75:b1:62:0c:77:9f:2d:71:e4:18:4c:f5:c3:d2:13: dc:22:69:1f:f6:ba:95:3d:ba:d0:15:c5:e8:d1:e2:75:1f:b4: e4:63:6b:14:a8:74:de:72:97:8b:7e:e4:72:e0:53:15:eb:35: e2:e2:4d:41:e1:71:13:e8:d0:63:dc:ea:47:cc:60:a7:f0:99: 98:0e:93:ed:24:87:18:95:da:6a:a5:f3:a5:fc:ee:11:35:cb: e2:02:be:42:be:fa:3f:5a:c9:3a:5a:3f:1e:ca:a9:42:e1:b6: 5b:85:49:35:3e:75:ad:b8:ed:02:62:bd:e6:60:29:68:56:6b: 64:f4:b0:06:d8:9a:88:2c:7a:ea:94:92:f9:84:b0:b1:a6:5e: 72:29:92:69:3d:65:ce:0f:76:37:3d:d9:db:b8:20:4f:61:97: 32:30:06:73:d0:59:64:f0:bc:28:58:c8:e6:53:db:5e:e2:66: 5a:cc:80:f6:75:a6:b3:d6:4f:92:d4:8a:fd:03:cc:bf:07:e6: 7d:2f:3e:e3 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUPiWtE2Vnob74Gd4cap2wYuXmL9swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZjI5ZmJhYjRkYjg2N2Y2YmQ5YTdlZmY2YWE1NWQ5OGMx NjJlMWFhZDAeFw0yNjAxMjYyMjA2NDBaFw0yNjAxMjgwMDI4NDBaMDMxMTAvBgNV BAMTKDJGQzU5REJBNDZDQUU4NTU0OEE5QkUwNjc1RjIxRTRGODhDMURBQ0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJbLcHoGZXwOeLB/JCdn6IDutm ++gO3JzjxkxsLC3DqQ+OAmewp/DI+F5FwnCzIN+sMdiPtxAvhn3ZCEWlnBA/qN47 Pb5neX+NA+lXMfSIIqgfk5D3KDLkpsisBQr7Zl8WHYM1+d6/hVG5mGJFSwv5Ip1J RntFfIG4qX//s0ivQMOyq1FgVhFK7ifZy7y9e5iWouweQ0f4FavX+aQRm05lsNCz 2Eq3qtybv85vMf27p5k1WhSbjhJ83Y5G2dvfq/agVZMcaePbPiHc/ZULdoDC10AL 2fb9BbvTVuOytaMAq0dIvfLfaA7JFsMTR2O2TM9ySDDvIdbG1bBbCaOhaP+PAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUL8WdukbK6FVIqb4GdfIeT4jB2s0wHwYDVR0j BBgwFoAU8p+6tNuGf2vZp+/2qlXZjBYuGq0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYmY1MmQ4MTQtM2QyZi00ZGY0LTgxNDAtZGZiNTMwZjc0 OTEyLzAvRjI5RkJBQjREQjg2N0Y2QkQ5QTdFRkY2QUE1NUQ5OEMxNjJFMUFBRC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhwLTZ0TnVHZjJ2WnAtXzJxbFhaakJZ dUdxMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iZjUyZDgxNC0z ZDJmLTRkZjQtODE0MC1kZmI1MzBmNzQ5MTIvMC9GMjlGQkFCNERCODY3RjZCRDlB N0VGRjZBQTU1RDk4QzE2MkUxQUFELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT52EsiI1042+EQd9Nfmg Ezn66exZeTmES8VYcv7/NghgmltqUaf2teFqIdaKON7ae/Wm9YD5Zr49dbFiDHef LXHkGEz1w9IT3CJpH/a6lT260BXF6NHidR+05GNrFKh03nKXi37kcuBTFes14uJN QeFxE+jQY9zqR8xgp/CZmA6T7SSHGJXaaqXzpfzuETXL4gK+Qr76P1rJOlo/Hsqp QuG2W4VJNT51rbjtAmK95mApaFZrZPSwBtiaiCx66pSS+YSwsaZecimSaT1lzg92 Nz3Z27ggT2GXMjAGc9BZZPC8KFjI5lPbXuJmWsyA9nWms9ZPktSK/QPMvwfmfS8+ 4w== -----END CERTIFICATE-----Generated at Tue Jan 27 17:26:25 2026 by rpki-client