This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft File: 3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft (raw, json) Hash identifier: xgbUPzGQ+zhVC09F3HQYEwGi8+nClLcruIVQUDoroQg= Subject key identifier: D1:40:FF:7D:E8:9C:84:A6:14:7A:C3:C9:FD:D2:01:30:66:19:24:68 Authority key identifier: 3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9 Certificate issuer: /CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9 Certificate serial: 75B4C71FC906AC662BFA3F9F427C858027F63654 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft Manifest number: 0648 Signing time: Mon 26 Jan 2026 21:36:37 +0000 Manifest this update: Mon 26 Jan 2026 21:31:37 +0000 Manifest next update: Wed 28 Jan 2026 00:06:37 +0000 Files and hashes: 1: 3138352e3232392e3230322e302f32342d3234203d3e20323130303330.roa (hash: LqK97diQcFrb4344S9ThgI9qIfk24xWO2D6Fzod4ApM=) 2: 3138352e3231332e3234312e302f32342d3234203d3e203631323732.roa (hash: ZRXMJB81EQGqLoTW9rCPLjbdmz5JtoX/ioguz/yH9B4=) 3: 3138352e3231332e3234332e302f32342d3234203d3e20323034393238.roa (hash: /82U/4ZCS1l7tEmRqZdiqoHQfHkAV0iGqgAdCf0IY6Q=) 4: 3138352e3232392e3230312e302f32342d3234203d3e20323030303137.roa (hash: ezbmX/yRe+yRvkLs/8FFZoupwCiBI67aZ+0JqkrMl4Q=) 5: 3138352e3234342e39342e302f32342d3234203d3e20333937343233.roa (hash: oZOogcZA7gOpZC0s0tbGMXCZZe5qdoNGw7VhUnq2iag=) 6: 326130363a356563303a3a2f34382d3438203d3e20323034363933.roa (hash: 1uKLPQUne0QcXblB3NW5HCIymd03TIpdjdnWqSBKxm8=) 7: 3138352e3232392e3230332e302f32342d3234203d3e20323034333939.roa (hash: o2s9iRRo/HWpVNV66/X3K8Nx40dZXcSQ+ar/RSKpLZ4=) 8: 3138352e3234342e39352e302f32342d3234203d3e203230343733.roa (hash: wcPx+O7KmTHA1Z17UF9VIIdo6IS06Ij+d7NLeipHdoU=) 9: 3138352e3133302e36312e302f32342d3234203d3e20323732363936.roa (hash: nzc+7vTx0fxusJ8QBUU0nZ0s/13eeYO5i8RfnoHHUhc=) 10: 3138352e3133302e36302e302f32342d3234203d3e203131383738.roa (hash: IVpkKpecJIjzuckRW19RYnHFzcqeOz1CHzHhlqd09/8=) 11: 3138352e3231332e3234302e302f32342d3234203d3e20323135373033.roa (hash: 5U9kh/Q1+pD8ktgLTSH2rTlmtF2qNT/hbi1XnCHITmo=) 12: 3138352e3131312e3138382e302f32342d3234203d3e203632353633.roa (hash: X7Tn/GpCSEBlmrST5TEKgAjVIubIFvn/OXAnR/EzN3o=) 13: 39312e3133322e3232372e302f32342d3234203d3e20323132333335.roa (hash: 4nM6t6s+oklrwoQsrohzelZ9jLVJM3XAMUC6E2raQWI=) 14: 3138352e3232392e3230302e302f32342d3234203d3e20313335343032.roa (hash: +dPRMdq4kTZhc1HP4XUoHFPE1GHvKzT91NAn4oQHjN8=) 15: 3138352e3133302e36322e302f32342d3234203d3e20323036313530.roa (hash: 0Uta0mciJtwdV1pzRO+5GA2qv0qJ2rULFPtgrlRyMi0=) 16: 39312e3133322e3232372e302f32342d3234203d3e20323132333834.roa (hash: eh1Z74wbnDki2jWa8j9mKK2ooveQFWs0ccPHyRr5G7Y=) 17: 3138352e3234342e39352e302f32342d3234203d3e203136353039.roa (hash: tBBH3ivLD6QCOuz/zDI7JAWzO8l/tRZui9Xrn0qJpA4=) 18: 3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl (hash: fQYsOrrqVJAli/IXdYzjSU+0LFR/2Mn1a4fn5oPUILc=) 19: 3138352e3231332e3234322e302f32342d3234203d3e203232343237.roa (hash: rxGzTHw2ETBLYdKcURKX80/JYXYHlHWFPETTk7njjlE=) 20: 3138352e3231332e3234332e302f32342d3234203d3e203330343536.roa (hash: aTFuiZRKSKlOcP1bFw/QEJGr9kwsAqFvqfR62oNQfMc=) 21: 3138352e3133302e36332e302f32342d3234203d3e203332313831.roa (hash: krs6rxjGgkgxIC0XFsSJIDbJbJTaOxRVYKdhwP98j0o=) 22: 3138352e3234342e39352e302f32342d3234203d3e203134363138.roa (hash: BX+afd5v4CnQw1Csb+gERO9bOUf9cjiesQkq05EVznU=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:b4:c7:1f:c9:06:ac:66:2b:fa:3f:9f:42:7c:85:80:27:f6:36:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9 Validity Not Before: Jan 26 21:31:37 2026 GMT Not After : Jan 28 00:06:37 2026 GMT Subject: CN=D140FF7DE89C84A6147AC3C9FDD2013066192468 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:8b:87:b5:cc:5a:e6:0e:a5:df:c4:57:ed:9c: a9:ae:5d:f8:85:2c:45:95:9c:5e:0e:d5:55:12:94: 99:2e:34:5a:b7:0e:72:f7:9c:45:03:1d:0e:e0:7e: bf:35:91:70:ab:ad:61:56:e2:a5:97:f0:35:03:2c: 62:84:c8:db:ba:9f:0d:f0:31:77:76:c6:e9:4a:17: 2c:5d:fc:60:b5:59:62:08:5a:b7:3f:ac:c7:29:25: eb:d7:c6:0e:eb:c7:39:70:ef:e8:e8:fb:0a:7d:a7: 8a:87:c5:53:4e:01:41:39:e6:35:3e:16:30:b7:d6: 74:35:0d:2d:d4:4b:a3:7d:50:5b:e8:9a:aa:e6:61: 8f:73:ff:6d:ca:3d:73:c1:b3:f7:e9:44:36:af:d1: f4:c5:f1:4d:77:e4:c6:ad:eb:5c:e2:4a:b4:d2:af: c4:9a:73:77:f4:61:68:47:32:c4:7d:a9:b0:1d:48: 57:d2:0a:4d:15:d3:8f:89:2b:89:9b:f5:f2:24:1b: bc:28:4e:af:65:94:e2:35:a7:78:d3:e8:9c:bf:9a: 04:69:37:c4:17:9e:e8:9b:56:65:e2:b1:d5:7a:49: 31:ae:97:34:eb:a0:bc:45:4d:78:7c:ca:38:52:12: 3e:c8:d7:3f:e1:77:59:05:96:ce:e8:ed:ee:30:c6: c2:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:40:FF:7D:E8:9C:84:A6:14:7A:C3:C9:FD:D2:01:30:66:19:24:68 X509v3 Authority Key Identifier: keyid:3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:c4:91:9e:24:7b:7a:90:70:d0:5c:ca:fb:69:19:d1:e2:de: f7:77:78:0b:ff:cd:fe:ed:f3:75:51:ed:1d:72:97:99:6d:98: d0:d9:17:c9:cd:0b:7e:41:c4:79:2f:c1:bb:e8:b2:a9:cc:0d: 84:64:2a:2e:e0:f5:c8:f6:5d:0c:98:97:66:10:09:3c:7e:94: 5a:0a:0b:7d:4b:d1:9c:4d:0e:ed:84:54:ae:93:05:1d:f3:09: 0f:3e:02:20:a2:ac:f1:13:8f:2b:99:d8:ec:cf:cd:7f:0b:31: e2:60:76:11:51:48:18:c3:46:05:82:15:0e:44:49:67:59:51: c8:f4:13:f5:ab:5f:d0:e2:52:2f:66:68:34:91:ce:ca:f5:1c: 81:82:bb:7a:7e:82:32:4f:ed:8f:17:33:a5:7a:56:e0:29:60: 9b:31:4d:49:93:ca:a2:07:7e:89:21:ed:2c:54:e2:22:d0:a4: 20:77:a7:16:32:ff:f8:9d:4e:79:9c:2b:e8:35:2b:bf:66:99: 53:db:1b:f8:67:ff:a9:f6:40:bd:47:ba:57:c3:51:f8:96:1d: 32:2c:42:e2:1c:c3:ba:cc:65:a3:f4:da:9e:59:9f:1b:e9:47: 3a:2b:61:03:bb:d0:d4:a0:6e:dd:ed:25:f6:c0:74:21:90:63: 25:f0:0c:66 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUdbTHH8kGrGYr+j+fQnyFgCf2NlQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM2U4NzBiOWE3MDAzYzRmZDljNTFiZDM1NGE5ZGVmYTNm Yjc3YjRhOTAeFw0yNjAxMjYyMTMxMzdaFw0yNjAxMjgwMDA2MzdaMDMxMTAvBgNV BAMTKEQxNDBGRjdERTg5Qzg0QTYxNDdBQzNDOUZERDIwMTMwNjYxOTI0NjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6i4e1zFrmDqXfxFftnKmuXfiF LEWVnF4O1VUSlJkuNFq3DnL3nEUDHQ7gfr81kXCrrWFW4qWX8DUDLGKEyNu6nw3w MXd2xulKFyxd/GC1WWIIWrc/rMcpJevXxg7rxzlw7+jo+wp9p4qHxVNOAUE55jU+ FjC31nQ1DS3US6N9UFvomqrmYY9z/23KPXPBs/fpRDav0fTF8U135Mat61ziSrTS r8Sac3f0YWhHMsR9qbAdSFfSCk0V04+JK4mb9fIkG7woTq9llOI1p3jT6Jy/mgRp N8QXnuibVmXisdV6STGulzTroLxFTXh8yjhSEj7I1z/hd1kFls7o7e4wxsLDAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU0UD/feichKYUesPJ/dIBMGYZJGgwHwYDVR0j BBgwFoAUPocLmnADxP2cUb01Sp3vo/t3tKkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzVkMThlODItNGQ2OC00NWE2LWE1ZGYtY2FjMTE1YWQy Mjc5LzAvM0U4NzBCOUE3MDAzQzRGRDlDNTFCRDM1NEE5REVGQTNGQjc3QjRBOS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1BvY0xtbkFEeFAyY1ViMDFTcDN2b190 M3RLay5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9jNWQxOGU4Mi00 ZDY4LTQ1YTYtYTVkZi1jYWMxMTVhZDIyNzkvMC8zRTg3MEI5QTcwMDNDNEZEOUM1 MUJEMzU0QTlERUZBM0ZCNzdCNEE5Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASsSRniR7epBw0FzK+2kZ 0eLe93d4C//N/u3zdVHtHXKXmW2Y0NkXyc0LfkHEeS/Bu+iyqcwNhGQqLuD1yPZd DJiXZhAJPH6UWgoLfUvRnE0O7YRUrpMFHfMJDz4CIKKs8ROPK5nY7M/Nfwsx4mB2 EVFIGMNGBYIVDkRJZ1lRyPQT9atf0OJSL2ZoNJHOyvUcgYK7en6CMk/tjxczpXpW 4ClgmzFNSZPKogd+iSHtLFTiItCkIHenFjL/+J1OeZwr6DUrv2aZU9sb+Gf/qfZA vUe6V8NR+JYdMixC4hzDusxlo/TanlmfG+lHOithA7vQ1KBu3e0l9sB0IZBjJfAM Zg== -----END CERTIFICATE-----Generated at Tue Jan 27 05:47:00 2026 by rpki-client