This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.mft File: 20914720382A1F52B950212C138E5E1E81BA69B7.mft (raw, json) Hash identifier: 2dd8nWbNiWz5qiTVx+8U48VhRifJym0ywncuDpxOoic= Subject key identifier: 2E:38:D8:20:ED:DD:CA:C5:51:A4:D4:5A:D1:24:CC:E5:46:AB:8C:37 Authority key identifier: 20:91:47:20:38:2A:1F:52:B9:50:21:2C:13:8E:5E:1E:81:BA:69:B7 Certificate issuer: /CN=20914720382A1F52B950212C138E5E1E81BA69B7 Certificate serial: 1443D0E84B2190F467E6338719B604C6DAE70CEF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/20914720382A1F52B950212C138E5E1E81BA69B7.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.mft Manifest number: 34 Signing time: Tue 20 Jan 2026 06:47:52 +0000 Manifest this update: Tue 20 Jan 2026 06:42:52 +0000 Manifest next update: Wed 21 Jan 2026 09:00:52 +0000 Files and hashes: 1: 20914720382A1F52B950212C138E5E1E81BA69B7.crl (hash: 46I5idu+joMU4gTXTR9HoQaDhkEZowXzazbENbG3sCI=) 2: 326131343a373538363a363130323a3a2f34382d3438203d3e20323034323131.roa (hash: 7D9SE9hA3IauYZMWcroODdOii1KjgZ4/x1FBa76tU3Q=) 3: 326131343a373538363a363130303a3a2f34382d3438203d3e20323034323131.roa (hash: hfCW4qJm06QDdE+1PQmTBkAa6OyHhAnzRXdcN0xPhW4=) 4: 4B7AFD45B30392C9F4665CE2A7692D56E755DCEA.cer (hash: znj2KhD7dc90RL/SNmhicRPp3l/LZp/snY3wx3mPdJM=) 5: 326131343a373538363a363130303a3a2f34302d3430203d3e20323034323131.roa (hash: 19M0+L8lsNIFDtff0HfVclIoXr1C9PUiZKAd5BnzLVk=) 6: 326131343a373538363a363130313a3a2f34382d3438203d3e20323034323131.roa (hash: DvKmhwWtZsD6TNvQ0eoVfIFrblMkYKUJ35ZR+X3ClBk=) 7: 326131343a373538363a363130343a3a2f34382d3438203d3e20323034323131.roa (hash: Mx3SvpD488YSM7QhBcQhFXDhTEiCBu3kBzOrFFQvDHI=) 8: 326131343a373538363a363130333a3a2f34382d3438203d3e20323034323131.roa (hash: EI2JmFR4s32Lz8tNongWwvU2DoYm1aiqo+qr8ZW+vPo=) 9: 140CF895225100CF571959173341D92070FF6E7C.cer (hash: +gzaj8eEKWdYwLDpey4WTnj+Qv54R/A4poIj/Ug/o3g=) 10: 326131343a373538363a363130353a3a2f34382d3438203d3e20323034323131.roa (hash: dJUl+RAxxY+nIO2HtMh4e2KW3S6TxZr3e2E6ku/vRA8=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.crl rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/20914720382A1F52B950212C138E5E1E81BA69B7.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 09:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:43:d0:e8:4b:21:90:f4:67:e6:33:87:19:b6:04:c6:da:e7:0c:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20914720382A1F52B950212C138E5E1E81BA69B7 Validity Not Before: Jan 20 06:42:52 2026 GMT Not After : Jan 21 09:00:52 2026 GMT Subject: CN=2E38D820EDDDCAC551A4D45AD124CCE546AB8C37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:bf:8f:02:79:fe:26:49:35:c8:0a:a3:b4:c8: 23:34:55:b3:e6:30:f5:01:09:50:de:7e:1c:8c:62: 7a:88:2c:3d:2e:d5:9f:d2:c6:ce:39:98:84:0b:c8: 63:91:4a:63:94:97:1a:47:f7:b4:1e:83:ce:09:4f: d1:b6:85:eb:e7:10:c5:e7:08:e2:fb:fc:36:9d:2e: d0:28:fb:5c:6e:f2:f1:9a:97:76:4e:a8:d5:90:9b: e6:e0:3b:83:81:f7:0b:33:e7:5f:33:27:33:ef:ce: 59:1a:7f:29:56:47:e1:04:bd:d1:f7:0c:ec:fe:87: 07:28:db:40:b2:15:00:36:ba:74:c7:5d:54:db:09: a1:d1:0c:0c:38:73:ef:74:0d:76:21:b7:d7:a3:85: 97:1c:7a:f9:88:b8:6a:31:0d:61:ea:1e:a5:8d:3c: 2f:41:f6:9b:2f:c1:86:d7:11:0b:03:e8:58:86:6b: cb:70:86:e0:52:48:d6:17:d4:3e:fb:ed:c9:2e:81: 9e:75:bb:30:38:dd:b2:cb:14:53:12:42:e2:46:85: 9c:f7:74:c4:1e:85:42:ef:eb:20:6e:e0:77:25:08: dc:20:f2:a8:de:2d:fc:45:7c:4b:e5:20:72:40:79: cd:c8:73:9d:3b:f1:11:e9:75:30:73:e6:1c:01:47: 69:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:38:D8:20:ED:DD:CA:C5:51:A4:D4:5A:D1:24:CC:E5:46:AB:8C:37 X509v3 Authority Key Identifier: keyid:20:91:47:20:38:2A:1F:52:B9:50:21:2C:13:8E:5E:1E:81:BA:69:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/20914720382A1F52B950212C138E5E1E81BA69B7.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:17:f2:81:3d:3a:90:c1:8d:31:00:29:13:42:e1:40:93:95: a8:af:6b:cb:4e:c4:2a:b4:40:30:d0:99:8a:34:71:9a:29:5d: c5:1c:17:3b:ea:84:ad:25:ea:9f:99:7a:05:e8:50:6c:29:87: ce:50:51:2f:e5:58:bd:03:33:d5:3e:69:30:5a:d4:d4:b8:7d: 31:40:ad:91:05:5e:42:04:a5:a0:d1:16:fe:df:43:c4:ee:d2: b7:23:a2:ed:5f:6c:ea:af:86:41:1f:34:a6:aa:75:94:9a:87: f9:5d:c1:1c:d0:bd:dc:1d:25:7c:b2:35:fb:75:35:d8:a0:3b: fb:e9:03:f2:5f:01:e2:71:33:1a:28:1d:f5:0c:61:85:8c:a7: 7a:db:68:37:1f:a5:3f:8c:0b:88:5d:df:ca:7a:9d:d5:38:31: ee:3c:50:c9:5e:a4:da:8d:5b:21:18:74:22:38:c2:12:7c:be: 4d:16:eb:67:60:9b:b9:33:79:de:09:d1:65:20:d1:76:e6:11: 1f:ff:e5:14:17:58:74:c4:ba:28:35:09:32:65:6d:6f:fd:41: 37:81:a0:6a:85:64:3e:9d:4c:ae:fd:07:4c:74:41:b4:d0:27: 47:a5:d8:17:f1:94:15:a2:29:63:70:16:ae:55:64:93:3a:e5: 08:d8:d6:81 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUFEPQ6EshkPRn5jOHGbYExtrnDO8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjA5MTQ3MjAzODJBMUY1MkI5NTAyMTJDMTM4RTVFMUU4 MUJBNjlCNzAeFw0yNjAxMjAwNjQyNTJaFw0yNjAxMjEwOTAwNTJaMDMxMTAvBgNV BAMTKDJFMzhEODIwRURERENBQzU1MUE0RDQ1QUQxMjRDQ0U1NDZBQjhDMzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSv48Cef4mSTXICqO0yCM0VbPm MPUBCVDefhyMYnqILD0u1Z/Sxs45mIQLyGORSmOUlxpH97Qeg84JT9G2hevnEMXn COL7/DadLtAo+1xu8vGal3ZOqNWQm+bgO4OB9wsz518zJzPvzlkafylWR+EEvdH3 DOz+hwco20CyFQA2unTHXVTbCaHRDAw4c+90DXYht9ejhZccevmIuGoxDWHqHqWN PC9B9psvwYbXEQsD6FiGa8twhuBSSNYX1D777ckugZ51uzA43bLLFFMSQuJGhZz3 dMQehULv6yBu4HclCNwg8qjeLfxFfEvlIHJAec3Ic5078RHpdTBz5hwBR2nfAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQULjjYIO3dysVRpNRa0STM5UarjDcwHwYDVR0j BBgwFoAUIJFHIDgqH1K5UCEsE45eHoG6abcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZjUzMmI5ZWItMmZhZS00OGE4LTk3OTMtMzNlZWMwNjdj ZTM5LzMvMjA5MTQ3MjAzODJBMUY1MkI5NTAyMTJDMTM4RTVFMUU4MUJBNjlCNy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8yMDkxNDcyMDM4MkExRjUyQjk1MDIxMkMx MzhFNUUxRTgxQkE2OUI3LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2Y1MzJiOWViLTJmYWUtNDhhOC05NzkzLTMzZWVjMDY3Y2UzOS8zLzIwOTE0NzIw MzgyQTFGNTJCOTUwMjEyQzEzOEU1RTFFODFCQTY5QjcubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBsF/KB PTqQwY0xACkTQuFAk5Wor2vLTsQqtEAw0JmKNHGaKV3FHBc76oStJeqfmXoF6FBs KYfOUFEv5Vi9AzPVPmkwWtTUuH0xQK2RBV5CBKWg0Rb+30PE7tK3I6LtX2zqr4ZB HzSmqnWUmof5XcEc0L3cHSV8sjX7dTXYoDv76QPyXwHicTMaKB31DGGFjKd622g3 H6U/jAuIXd/Kep3VODHuPFDJXqTajVshGHQiOMISfL5NFutnYJu5M3neCdFlINF2 5hEf/+UUF1h0xLooNQkyZW1v/UE3gaBqhWQ+nUyu/QdMdEG00CdHpdgX8ZQVoilj cBauVWSTOuUI2NaB -----END CERTIFICATE-----Generated at Tue Jan 20 23:49:51 2026 by rpki-client