This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/5/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.mft File: 5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.mft (raw, json) Hash identifier: ZpRKfwYieimRPlRWy75a7/4vpNxcL/HqEBxF0NrFzgo= Subject key identifier: 81:83:D8:08:8E:A5:EB:BB:B3:D6:25:C8:61:AD:AC:6E:10:B6:39:59 Authority key identifier: 5A:3F:78:19:35:3C:E0:FD:13:B8:FF:CD:CB:88:37:ED:0B:F5:91:5F Certificate issuer: /CN=5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F Certificate serial: 2118CAE23CB06267699C0A218A0558744707B74B Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/5/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.mft Manifest number: 010C Signing time: Sun 18 Jan 2026 08:12:37 +0000 Manifest this update: Sun 18 Jan 2026 08:07:37 +0000 Manifest next update: Mon 19 Jan 2026 11:36:37 +0000 Files and hashes: 1: 326130363a396634313a3130303a3a2f34302d3430203d3e20323134373233.roa (hash: sTs8O8KBp3/QEgTlhnDJhb+nhykdynr848iPv4Z/TIo=) 2: 5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.crl (hash: TCkiKg+MzEbxd05cNmWZuiC6W8qU8grlD5FBbHJEmqU=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/5/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.crl rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/5/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.mft rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.cer rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.crl rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/06DB699D191D4B0289910C88E99CF94A671142F5.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:18:ca:e2:3c:b0:62:67:69:9c:0a:21:8a:05:58:74:47:07:b7:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F Validity Not Before: Jan 18 08:07:37 2026 GMT Not After : Jan 19 11:36:37 2026 GMT Subject: CN=8183D8088EA5EBBBB3D625C861ADAC6E10B63959 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:85:5d:80:13:82:4d:3c:c4:b1:0a:a0:a4:5a: 6f:4c:7e:4b:5a:22:4d:b8:d0:72:50:80:94:13:2b: c1:bd:aa:ea:48:0e:3c:1d:22:b2:cd:49:54:1a:eb: ea:ff:67:22:c8:6b:84:c8:28:c4:03:6b:3d:70:d8: 08:1c:13:2a:1e:eb:f4:86:9c:4e:b8:01:70:97:4a: 2d:4c:c2:b9:ed:d4:8f:cf:27:66:af:d5:b1:4d:c7: 05:88:6e:85:73:71:20:91:3b:9d:75:92:ce:4f:86: e9:a5:6f:e2:c2:6a:e5:25:ac:14:2c:fb:80:9b:8b: 04:cd:c4:42:92:21:fe:47:ac:e2:0e:2d:f1:7f:48: fe:4b:90:9b:85:9f:ae:40:c9:41:7b:f6:31:6f:52: 10:51:02:f0:f8:58:70:82:fe:de:07:4c:21:72:c7: 83:f3:65:d5:c5:dc:29:df:fb:8a:a2:74:db:54:27: c7:4b:8b:28:d1:00:f6:bc:93:45:8d:79:a3:db:99: eb:b8:05:29:74:42:58:db:11:67:d1:aa:e7:07:6b: 15:cd:bf:b1:1b:7a:07:49:ac:d0:db:31:71:3b:7d: fd:a7:f1:21:b9:7d:8d:5b:4d:85:52:19:2b:33:d1: ae:af:b1:a8:f5:f6:05:6e:f0:5f:fe:c0:bc:a7:32: 62:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:83:D8:08:8E:A5:EB:BB:B3:D6:25:C8:61:AD:AC:6E:10:B6:39:59 X509v3 Authority Key Identifier: keyid:5A:3F:78:19:35:3C:E0:FD:13:B8:FF:CD:CB:88:37:ED:0B:F5:91:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/5/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/5/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:69:0d:8b:b3:60:9f:14:89:a9:77:de:16:b6:d5:78:fd:d2: e5:06:9c:2e:12:86:1e:39:0e:92:0c:15:49:0c:30:b2:e3:32: 9b:e3:68:60:7d:a3:19:cd:d3:38:66:d4:d6:44:0b:29:fe:ec: 17:e9:4b:25:ba:bf:5a:69:94:a2:c7:29:96:2e:a2:b5:b1:88: 06:eb:07:31:97:c4:ca:b0:5b:3e:ae:02:5f:98:a9:1c:59:b4: 70:9a:51:33:20:a4:c6:16:57:cf:56:bd:8c:5f:a3:a2:7d:70: e5:6a:de:73:85:91:47:e1:31:50:79:59:e3:d1:af:51:1b:55: 27:a9:9b:fe:7c:83:56:f2:bc:d1:17:43:06:c9:2a:a6:90:6b: 1c:63:3d:b2:23:12:00:55:0b:2b:7e:bc:7d:be:5b:f2:75:a0: 1d:9f:b0:db:51:f0:fa:64:14:80:f5:9d:ae:93:91:a8:0b:da: 0d:d3:2a:e0:28:9c:07:86:f8:13:6b:bf:f6:7f:f4:f1:67:1c: c6:3c:dd:cc:72:00:29:e3:aa:99:a1:82:ff:64:d6:6a:ae:1e: ad:9c:ec:bd:bb:8a:3d:1b:fc:82:ab:db:c7:fd:c9:c5:97:eb: 2b:fb:e4:b7:70:54:3d:08:95:93:29:5f:24:7d:7e:95:c7:1f: 65:e0:d8:f7 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUIRjK4jywYmdpnAohigVYdEcHt0swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUEzRjc4MTkzNTNDRTBGRDEzQjhGRkNEQ0I4ODM3RUQw QkY1OTE1RjAeFw0yNjAxMTgwODA3MzdaFw0yNjAxMTkxMTM2MzdaMDMxMTAvBgNV BAMTKDgxODNEODA4OEVBNUVCQkJCM0Q2MjVDODYxQURBQzZFMTBCNjM5NTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYhV2AE4JNPMSxCqCkWm9Mfkta Ik240HJQgJQTK8G9qupIDjwdIrLNSVQa6+r/ZyLIa4TIKMQDaz1w2AgcEyoe6/SG nE64AXCXSi1Mwrnt1I/PJ2av1bFNxwWIboVzcSCRO511ks5Phumlb+LCauUlrBQs +4CbiwTNxEKSIf5HrOIOLfF/SP5LkJuFn65AyUF79jFvUhBRAvD4WHCC/t4HTCFy x4PzZdXF3Cnf+4qidNtUJ8dLiyjRAPa8k0WNeaPbmeu4BSl0QljbEWfRqucHaxXN v7EbegdJrNDbMXE7ff2n8SG5fY1bTYVSGSsz0a6vsaj19gVu8F/+wLynMmI/AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUgYPYCI6l67uz1iXIYa2sbhC2OVkwHwYDVR0j BBgwFoAUWj94GTU84P0TuP/Ny4g37Qv1kV8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDdlNDU5MmUtMjNjMC00Y2NjLTk0ZGEtNmM5NTgwN2Y4 M2U3LzUvNUEzRjc4MTkzNTNDRTBGRDEzQjhGRkNEQ0I4ODM3RUQwQkY1OTE1Ri5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zMDExOTQ0ZC03ZWIzLTRm NjMtYTE1OS1jZmYwMmMwMjZhYmYvMi81QTNGNzgxOTM1M0NFMEZEMTNCOEZGQ0RD Qjg4MzdFRDBCRjU5MTVGLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2Q3ZTQ1OTJlLTIzYzAtNGNjYy05NGRhLTZjOTU4MDdmODNlNy81LzVBM0Y3ODE5 MzUzQ0UwRkQxM0I4RkZDRENCODgzN0VEMEJGNTkxNUYubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAWaQ2L s2CfFImpd94WttV4/dLlBpwuEoYeOQ6SDBVJDDCy4zKb42hgfaMZzdM4ZtTWRAsp /uwX6Uslur9aaZSixymWLqK1sYgG6wcxl8TKsFs+rgJfmKkcWbRwmlEzIKTGFlfP Vr2MX6OifXDlat5zhZFH4TFQeVnj0a9RG1UnqZv+fINW8rzRF0MGySqmkGscYz2y IxIAVQsrfrx9vlvydaAdn7DbUfD6ZBSA9Z2uk5GoC9oN0yrgKJwHhvgTa7/2f/Tx ZxzGPN3McgAp46qZoYL/ZNZqrh6tnOy9u4o9G/yCq9vH/cnFl+sr++S3cFQ9CJWT KV8kfX6Vxx9l4Nj3 -----END CERTIFICATE-----Generated at Sun Jan 18 15:16:13 2026 by rpki-client