This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft File: 88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft (raw, json) Hash identifier: AdiJpYqruW7ZdJvJDqGn6sa0o+UZ9rJKYOO0NdT5rH8= Subject key identifier: F0:42:50:84:FE:D9:00:0C:59:E0:BA:3D:0D:AF:74:5B:39:48:2D:95 Authority key identifier: 88:CD:D9:C1:93:DA:91:85:A4:AC:15:B2:AD:E8:75:FE:97:B6:F4:91 Certificate issuer: /CN=88cdd9c193da9185a4ac15b2ade875fe97b6f491 Certificate serial: 32A2D5D7707F237125C43D6E4BBA96326B5A6FDF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iM3ZwZPakYWkrBWyreh1_pe29JE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft Manifest number: 02C1 Signing time: Mon 26 Jan 2026 03:16:40 +0000 Manifest this update: Mon 26 Jan 2026 03:11:40 +0000 Manifest next update: Tue 27 Jan 2026 04:31:40 +0000 Files and hashes: 1: 3138352e3234322e3138332e302f32342d3234203d3e203431373230.roa (hash: V4bF3gDy6FE6zlNg9r0xUvpdAXLZEuLnN1FQtQz0KTM=) 2: 3139352e3138322e3231312e302f32342d3234203d3e203431373230.roa (hash: fKLQTu0IVvtIU1j1ED5jisbzx/ixZ3gIYrA73t09dNU=) 3: 326130643a623238373a646164303a3a2f34342d3434203d3e20323038343337.roa (hash: Lh+NThTArglnDdFNJgAbksxydedvZ3VhoYilxW6dgHQ=) 4: 326130643a623238303a383130303a3a2f34382d3438203d3e203431373230.roa (hash: ItyIHbG/IJlKjOf6vhLnjpZ9k/lt97Z65upW37DdGzA=) 5: 3138352e3234322e3138312e302f32342d3234203d3e203431373230.roa (hash: BJe1bO6YYCEXeriSlULaZwS25Q4hRdnweRF5hyXEuDY=) 6: 326130643a623238373a656230303a3a2f34302d3430203d3e20323133373039.roa (hash: Nk6ANHp8DkJz6kDCL9bvYoWgqeyO4UOw/aVOiTsobgk=) 7: 326130643a623238373a656334323a3a2f34382d3438203d3e20323134393235.roa (hash: JAmgJM2VGcbQzWkOuFvV1aRU7IhMtvcEw/0vm9hTp3I=) 8: 326130643a623238373a656334313a3a2f34382d3438203d3e20323132353136.roa (hash: S10o6lJcne+SfvZMZmd0ndSNpfqn8OsjAJw8rNDdBSw=) 9: 326130643a623238373a653966663a3a2f34382d3438203d3e20323038373533.roa (hash: kmFg1Ubyi8msuCXkZq9wTUwo9VmgSHMiCqLO0oSubS4=) 10: AS41720.asa (hash: 4An44TkWkAj35xBt6Xef84p/tUjH5ZEGoqkH2/CZIMo=) 11: 88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.crl (hash: 3CosdH10JadYt6VcnhSD6WcUpKAjA3JAFmh1lhL6D4k=) 12: 3138352e3234322e3138322e302f32342d3234203d3e203431373230.roa (hash: gAYzs7DeTkU9g1RDUiQKlOcpyqQALQV1LLqH3P6H/bU=) 13: 3138352e3234322e3138302e302f32342d3234203d3e203431373230.roa (hash: m2CiuFBjrlRavusUidV8mkbKXKHzyUUUhDYGNFwtBAs=) 14: 326130643a623238373a656330303a3a2f34302d3430203d3e20323038333238.roa (hash: eT5l/HEUwKyeWtm/1X7rr0MrwygNo9k95lPs1zLe884=) 15: 326130643a623238373a656130303a3a2f34302d3430203d3e20323032373034.roa (hash: JNRd26hu5UclLm2ralvA5Swgz/zS0HyqV27DJFHZj6c=) 16: 326130643a623238373a646130303a3a2f34382d3438203d3e20323135313436.roa (hash: BOfTSY7wWayFslIYZyC++f09YnW0ZvOoQVsy6AzQanA=) 17: 326130643a623238373a653930303a3a2f34302d3430203d3e203437313532.roa (hash: Qmo3MoWwkKBWouocBexituyWf2OsxX6PDMEUO8aReSw=) 18: 326130643a623238373a646430303a3a2f34302d3430203d3e20323136333039.roa (hash: mpzPSr1CBW6Ka5Te0DE52rLBHWk7ArDQlInbkbsiPzA=) 19: 326130643a623238373a656530303a3a2f34302d3430203d3e20323038333238.roa (hash: Q6Io7mv8dNkJZap1oGvqDaJWxZcBIoRNlU5W1SfkDVo=) 20: 326130643a623238373a646130313a3a2f34382d3438203d3e20323132353339.roa (hash: PivPGN9xNNuplOmy9E3nfw1TUinsGI+X07yLclSfZdw=) 21: 326130643a623238303a3a2f32392d3239203d3e203431373230.roa (hash: UtcmwgPmmxIsh/ra+btug0leCQZCVTQekME41LiPWtU=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.crl rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft rsync://rpki.ripe.net/repository/DEFAULT/iM3ZwZPakYWkrBWyreh1_pe29JE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:a2:d5:d7:70:7f:23:71:25:c4:3d:6e:4b:ba:96:32:6b:5a:6f:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88cdd9c193da9185a4ac15b2ade875fe97b6f491 Validity Not Before: Jan 26 03:11:40 2026 GMT Not After : Jan 27 04:31:40 2026 GMT Subject: CN=F0425084FED9000C59E0BA3D0DAF745B39482D95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:41:5e:1e:3d:83:df:06:35:68:2b:fd:80:59: 03:7a:1f:5c:a9:f8:bf:72:f2:f6:47:aa:45:80:51: 39:37:ad:6f:d6:49:9f:6b:7d:35:68:1d:f6:d3:06: 4c:5d:5d:ac:a3:4a:ea:ee:99:8c:6f:98:e3:c0:df: 13:90:59:e0:42:08:ba:41:2c:53:45:99:30:79:f8: b4:3a:33:d0:b8:eb:0c:8c:00:65:6c:66:56:5f:fe: 15:e8:79:b8:44:29:01:45:cf:3b:5a:ee:3c:2f:e8: c1:33:86:3f:8f:c2:ac:2c:d1:6d:54:46:f9:4a:1d: 11:d1:66:fb:df:0f:52:e6:01:05:ca:65:c8:dc:7d: 0b:c6:9b:2b:b9:1a:cb:9c:be:8c:48:32:5c:db:91: 12:f4:b0:be:93:7c:8d:7d:d6:d3:44:f3:0d:cd:07: db:02:93:be:8b:8f:79:84:39:de:47:c7:11:55:93: e9:eb:93:38:79:28:3b:be:79:10:20:a6:0a:ba:15: d8:fa:be:24:a8:c4:d5:8b:27:db:98:f2:f4:c4:51: b3:2d:80:30:34:34:f4:65:5b:2d:57:27:ef:6c:26: d5:d2:46:46:2a:0c:a2:a3:97:a1:72:c8:61:5b:62: e9:4b:ef:cb:a7:30:07:79:56:5d:28:74:77:3a:2d: a1:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:42:50:84:FE:D9:00:0C:59:E0:BA:3D:0D:AF:74:5B:39:48:2D:95 X509v3 Authority Key Identifier: keyid:88:CD:D9:C1:93:DA:91:85:A4:AC:15:B2:AD:E8:75:FE:97:B6:F4:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iM3ZwZPakYWkrBWyreh1_pe29JE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:a3:9d:3c:28:70:b4:d4:cb:2b:77:fa:17:10:e4:13:0c:45: 04:c7:ca:ea:60:79:b1:c2:90:dd:b9:32:fd:b7:86:8b:9f:20: d1:9d:45:24:58:51:e0:fd:39:9a:17:33:ce:b0:ac:ce:d0:d7: 5a:b5:91:81:96:7b:c0:ba:ad:e1:b3:c4:ae:ce:4a:ba:0f:c2: 8c:d3:20:55:3f:34:5b:7b:eb:67:dc:1b:7c:99:b1:53:65:97: 3e:9a:95:83:cf:6d:75:30:52:02:50:1c:b7:7a:d3:10:f5:7b: 3b:60:ef:4a:e3:83:f7:cb:e6:ec:60:be:e4:62:0e:0e:47:59: 5d:25:b2:2f:ef:e6:88:90:f8:18:28:68:a4:12:88:b0:c5:1c: c8:86:7c:b4:7c:d7:44:6b:88:d3:f5:d4:79:b4:c9:2b:54:8c: df:6b:ad:6d:64:14:ed:5b:7e:77:c1:6a:80:00:65:13:aa:a0: a1:92:c5:70:81:21:ef:bd:33:17:d2:f1:1b:d2:f4:39:77:7b: 38:20:51:20:b7:c5:e2:c1:0b:cc:b1:1f:08:7b:1f:f0:82:f8: 08:d9:b6:23:39:23:98:f5:eb:ff:59:73:ac:2b:b1:fc:57:36: ce:81:9a:55:02:2a:1c:97:b9:ec:91:bf:99:88:b4:73:df:63: 74:03:8d:7c -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUMqLV13B/I3ElxD1uS7qWMmtab98wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODhjZGQ5YzE5M2RhOTE4NWE0YWMxNWIyYWRlODc1ZmU5 N2I2ZjQ5MTAeFw0yNjAxMjYwMzExNDBaFw0yNjAxMjcwNDMxNDBaMDMxMTAvBgNV BAMTKEYwNDI1MDg0RkVEOTAwMEM1OUUwQkEzRDBEQUY3NDVCMzk0ODJEOTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBQV4ePYPfBjVoK/2AWQN6H1yp +L9y8vZHqkWAUTk3rW/WSZ9rfTVoHfbTBkxdXayjSurumYxvmOPA3xOQWeBCCLpB LFNFmTB5+LQ6M9C46wyMAGVsZlZf/hXoebhEKQFFzzta7jwv6MEzhj+Pwqws0W1U RvlKHRHRZvvfD1LmAQXKZcjcfQvGmyu5GsucvoxIMlzbkRL0sL6TfI191tNE8w3N B9sCk76Lj3mEOd5HxxFVk+nrkzh5KDu+eRAgpgq6Fdj6viSoxNWLJ9uY8vTEUbMt gDA0NPRlWy1XJ+9sJtXSRkYqDKKjl6FyyGFbYulL78unMAd5Vl0odHc6LaEXAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU8EJQhP7ZAAxZ4Lo9Da90WzlILZUwHwYDVR0j BBgwFoAUiM3ZwZPakYWkrBWyreh1/pe29JEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZTZhZmYyMzQtNjFjNS00MjkwLThhNmQtNWYyYjkwMjcz MjJmLzAvODhDREQ5QzE5M0RBOTE4NUE0QUMxNUIyQURFODc1RkU5N0I2RjQ5MS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2lNM1p3WlBha1lXa3JCV3lyZWgxX3Bl MjlKRS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lNmFmZjIzNC02 MWM1LTQyOTAtOGE2ZC01ZjJiOTAyNzMyMmYvMC84OENERDlDMTkzREE5MTg1QTRB QzE1QjJBREU4NzVGRTk3QjZGNDkxLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADKOdPChwtNTLK3f6FxDk EwxFBMfK6mB5scKQ3bky/beGi58g0Z1FJFhR4P05mhczzrCsztDXWrWRgZZ7wLqt 4bPErs5Kug/CjNMgVT80W3vrZ9wbfJmxU2WXPpqVg89tdTBSAlAct3rTEPV7O2Dv SuOD98vm7GC+5GIODkdZXSWyL+/miJD4GChopBKIsMUcyIZ8tHzXRGuI0/XUebTJ K1SM32utbWQU7Vt+d8FqgABlE6qgoZLFcIEh770zF9LxG9L0OXd7OCBRILfF4sEL zLEfCHsf8IL4CNm2IzkjmPXr/1lzrCux/Fc2zoGaVQIqHJe57JG/mYi0c99jdAON fA== -----END CERTIFICATE-----Generated at Mon Jan 26 10:56:43 2026 by rpki-client