This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.mft File: 4C189E42F35C944D463D9EA6501F093EB62BA785.mft (raw, json) Hash identifier: Du1l4iyBbrYlJ3Bo3PTOe4yvErqKcy7SoJZI3f13rvI= Subject key identifier: 07:3F:8E:EF:0A:3B:1B:CD:2F:6F:A3:DB:9B:EB:11:61:97:3A:D7:DC Authority key identifier: 4C:18:9E:42:F3:5C:94:4D:46:3D:9E:A6:50:1F:09:3E:B6:2B:A7:85 Certificate issuer: /CN=4c189e42f35c944d463d9ea6501f093eb62ba785 Certificate serial: 5F63685E97E02F01760DA091F868059E972E27F5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.mft Manifest number: 041F Signing time: Mon 26 Jan 2026 13:16:24 +0000 Manifest this update: Mon 26 Jan 2026 13:11:24 +0000 Manifest next update: Tue 27 Jan 2026 15:54:24 +0000 Files and hashes: 1: 3138352e31332e3232352e302f32342d3234203d3e20323132323338.roa (hash: aEdAeNisTHp0DrhGmu6wes4iqejlgHHMcCeDYK0A3FQ=) 2: 3135392e3235332e302e302f32342d3234203d3e20323036323831.roa (hash: WedmFf2QIQuuVKf/1QK4DuIi+i1j87BtcRZVJGzgY68=) 3: 3138352e31332e3232342e302f32342d3234203d3e20313335333931.roa (hash: Y4VGjNKxdM1kt8f9/kG9Dub6HzXbG7OXpVqySki/RW4=) 4: 3135392e3235332e372e302f32342d3234203d3e20323134313433.roa (hash: 8/3XzRXXjmYpSthB/PqRmvioB+R4a98BuFhtWRNYmtk=) 5: 4C189E42F35C944D463D9EA6501F093EB62BA785.crl (hash: nqD8RGY6H45gc+dvmAYaagr7V0Y69uHSsO5IVsEtsbs=) 6: 3135392e3235332e362e302f32342d3234203d3e20323134313433.roa (hash: ium02BtB+GfbIHn2YGUt7i7of/NJnXnez2EEtYL+duE=) 7: 3135392e3235332e332e302f32342d3234203d3e203533333536.roa (hash: uV5gP669aq0NtuCXuZBm6wWsNYwP/024H/522nPjCx8=) 8: 3138352e31332e3232362e302f32342d3234203d3e20313532313739.roa (hash: kbUfx2g7/W6xr6BcRBqigrahrWSKqlZaZ80tT5+SQUk=) 9: 3135392e3235332e342e302f32342d3234203d3e20323134313433.roa (hash: JO9eMRAwPS+hZf1UF8eYFlm1nYrsRkC7Oj1Lhed/bAU=) 10: 3138352e31332e3232372e302f32342d3234203d3e2039333034.roa (hash: K2jdp87W7OWk11i68RJYc6WUM+0fdCVTP9+PN22bU6U=) 11: 3135392e3235332e352e302f32342d3234203d3e203533333536.roa (hash: 9QDAlicDZU2dKA/slyHao02LhaPY7/2iCnESN6BbiqA=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.crl rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.mft rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:54:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:63:68:5e:97:e0:2f:01:76:0d:a0:91:f8:68:05:9e:97:2e:27:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c189e42f35c944d463d9ea6501f093eb62ba785 Validity Not Before: Jan 26 13:11:24 2026 GMT Not After : Jan 27 15:54:24 2026 GMT Subject: CN=073F8EEF0A3B1BCD2F6FA3DB9BEB1161973AD7DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:86:e5:51:b4:11:41:d4:97:1c:2b:1e:af:fa: b8:79:63:d7:8b:54:b3:35:99:79:18:98:67:8c:92: fe:00:34:e8:bc:da:05:b1:15:21:18:ce:d0:38:6b: d9:76:67:c8:31:b1:60:c2:68:b4:61:17:c3:14:43: c4:8a:21:67:89:22:d2:a6:f1:bb:ca:90:d5:10:f5: da:1e:c0:ff:8d:53:7e:ff:2d:23:df:e5:80:de:d1: 69:6f:81:7a:37:c2:b5:c7:90:e9:3c:5b:5d:4f:e5: cc:c4:67:8e:30:90:dd:e0:84:9a:e7:ec:74:0b:a3: f4:10:ae:79:37:dd:05:a8:61:7c:75:2d:2b:2f:05: f3:18:44:f2:d0:59:90:5a:71:02:b6:7e:25:75:5f: 48:3f:62:39:8a:0d:b2:23:57:ec:44:c6:4c:ec:08: b0:a4:40:c0:28:dc:58:c7:80:a6:8f:1e:d8:cf:2d: 0e:1a:8a:ef:82:63:d8:8d:ea:5a:3c:17:58:09:4f: 3b:67:5a:5f:1e:97:17:e7:76:90:c7:cf:7f:84:14: ce:4d:5c:2d:ca:cf:12:e4:81:d7:f6:f4:98:e2:53: bb:70:86:c9:b4:99:0d:af:a7:83:a6:59:ee:d6:3f: 4a:45:8c:77:1a:bf:79:78:36:36:88:08:b4:1f:11: 0c:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:3F:8E:EF:0A:3B:1B:CD:2F:6F:A3:DB:9B:EB:11:61:97:3A:D7:DC X509v3 Authority Key Identifier: keyid:4C:18:9E:42:F3:5C:94:4D:46:3D:9E:A6:50:1F:09:3E:B6:2B:A7:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:46:d3:1b:03:3f:94:84:7d:08:3b:da:9c:39:84:c6:60:11: f3:42:0a:c7:3a:b3:45:84:bd:54:c6:61:f6:0b:da:29:72:39: 1e:37:f6:ef:06:a1:88:60:62:06:f4:36:61:5d:23:9d:54:3e: f9:ca:ea:52:80:7b:37:30:49:5b:8d:7a:7b:60:0d:72:85:a2: 83:96:73:6a:d0:da:25:d4:66:85:c5:77:45:19:ac:dd:87:dd: 9f:5c:93:47:be:cb:b2:80:cd:17:db:99:de:8f:c1:95:ea:2a: 6d:36:f7:45:33:32:92:c7:62:1f:c2:8d:3c:60:a9:13:1e:15: 01:fa:11:75:99:0c:54:12:03:db:d5:95:34:16:6f:c9:04:d3: d1:73:ee:d7:92:82:fe:a9:df:c0:da:f4:c8:f8:4a:79:2f:c1: fe:24:80:54:bc:86:59:c0:85:f9:37:7f:32:44:5b:43:6c:73: f8:68:bb:e6:12:fe:3b:64:ae:18:d2:27:d5:53:7b:ca:86:b6: 61:ac:ff:b7:ae:95:71:4d:e9:72:c6:34:4a:f3:c6:cf:26:7f: c6:0b:e2:57:8f:35:57:b5:8b:2c:e7:8f:1c:81:e3:b7:4f:68: 69:24:87:77:42:b5:22:46:5e:17:c8:76:11:da:da:29:26:f3: 2e:25:5c:5b -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUX2NoXpfgLwF2DaCR+GgFnpcuJ/UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGMxODllNDJmMzVjOTQ0ZDQ2M2Q5ZWE2NTAxZjA5M2Vi NjJiYTc4NTAeFw0yNjAxMjYxMzExMjRaFw0yNjAxMjcxNTU0MjRaMDMxMTAvBgNV BAMTKDA3M0Y4RUVGMEEzQjFCQ0QyRjZGQTNEQjlCRUIxMTYxOTczQUQ3REMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEhuVRtBFB1JccKx6v+rh5Y9eL VLM1mXkYmGeMkv4ANOi82gWxFSEYztA4a9l2Z8gxsWDCaLRhF8MUQ8SKIWeJItKm 8bvKkNUQ9doewP+NU37/LSPf5YDe0WlvgXo3wrXHkOk8W11P5czEZ44wkN3ghJrn 7HQLo/QQrnk33QWoYXx1LSsvBfMYRPLQWZBacQK2fiV1X0g/YjmKDbIjV+xExkzs CLCkQMAo3FjHgKaPHtjPLQ4aiu+CY9iN6lo8F1gJTztnWl8elxfndpDHz3+EFM5N XC3KzxLkgdf29JjiU7twhsm0mQ2vp4OmWe7WP0pFjHcav3l4NjaICLQfEQylAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUBz+O7wo7G80vb6Pbm+sRYZc619wwHwYDVR0j BBgwFoAUTBieQvNclE1GPZ6mUB8JPrYrp4UwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2U1MTBlMTctMzFmYS00MTRiLTk4OWUtMDI2ZGJiNmZk ZjUxLzAvNEMxODlFNDJGMzVDOTQ0RDQ2M0Q5RUE2NTAxRjA5M0VCNjJCQTc4NS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1RCaWVRdk5jbEUxR1BaNm1VQjhKUHJZ cnA0VS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9jZTUxMGUxNy0z MWZhLTQxNGItOTg5ZS0wMjZkYmI2ZmRmNTEvMC80QzE4OUU0MkYzNUM5NDRENDYz RDlFQTY1MDFGMDkzRUI2MkJBNzg1Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG0bTGwM/lIR9CDvanDmE xmAR80IKxzqzRYS9VMZh9gvaKXI5Hjf27wahiGBiBvQ2YV0jnVQ++crqUoB7NzBJ W416e2ANcoWig5ZzatDaJdRmhcV3RRms3Yfdn1yTR77LsoDNF9uZ3o/BleoqbTb3 RTMyksdiH8KNPGCpEx4VAfoRdZkMVBID29WVNBZvyQTT0XPu15KC/qnfwNr0yPhK eS/B/iSAVLyGWcCF+Td/MkRbQ2xz+Gi75hL+O2SuGNIn1VN7yoa2Yaz/t66VcU3p csY0SvPGzyZ/xgviV481V7WLLOePHIHjt09oaSSHd0K1IkZeF8h2EdraKSbzLiVc Ww== -----END CERTIFICATE-----Generated at Tue Jan 27 04:46:29 2026 by rpki-client