This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/1/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.mft File: 13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.mft (raw, json) Hash identifier: zj0b0eZxjWBBB80A8rcwGUuC7l1MYds2OjBr42guo5o= Subject key identifier: B8:13:B7:F5:CF:C0:24:E6:74:DC:0B:FE:CC:DC:55:E5:C3:9E:39:D4 Authority key identifier: 13:E1:A9:98:F7:7D:7C:1F:F2:95:5C:0B:68:8F:EB:FE:0F:81:96:EB Certificate issuer: /CN=13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB Certificate serial: 0AC431924D43A986514F5E80462A28E93ACC8C7E Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/1/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.mft Manifest number: 019C Signing time: Tue 30 Dec 2025 23:52:09 +0000 Manifest this update: Tue 30 Dec 2025 23:47:09 +0000 Manifest next update: Thu 01 Jan 2026 01:44:09 +0000 Files and hashes: 1: 326131343a373538303a6430303a3a2f34302d3438203d3e20313939333130.roa (hash: jIRO9mS3d6dPjcdQf+OkOGr/dNujGogdrEuPEpLgZJI=) 2: 13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.crl (hash: m6G002Xw2UiQqQvll15FCyobhVtldf80i2iGO90vb+g=) 3: 326131343a373538303a6466303a3a2f34382d3438203d3e20323133373239.roa (hash: u/JR7/M6BcKICssdDR7j/sPwWvJTPX2G+FFLBgXrUyU=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/1/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.crl rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/1/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:c4:31:92:4d:43:a9:86:51:4f:5e:80:46:2a:28:e9:3a:cc:8c:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB Validity Not Before: Dec 30 23:47:09 2025 GMT Not After : Jan 1 01:44:09 2026 GMT Subject: CN=B813B7F5CFC024E674DC0BFECCDC55E5C39E39D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:a9:2e:e6:d4:73:57:8d:d8:14:e6:b8:0a:10: 17:39:13:0a:a7:bc:d6:de:b9:de:89:56:d3:3d:33: 16:f7:16:05:38:8e:3a:7e:10:ec:e2:ba:14:65:0e: bc:6c:b2:0e:4f:4c:cb:6f:b6:e0:d3:f6:b5:03:05: cd:a6:9b:d2:ce:5a:76:63:9b:eb:25:40:f0:4c:a5: 2d:cf:0f:92:c3:34:1f:c8:c4:e4:11:30:9c:59:29: e1:ff:da:51:99:15:ff:48:85:67:10:b5:1d:8b:a6: 03:56:44:98:32:30:65:4f:e6:9c:b9:69:e9:9a:85: 0a:c2:74:a1:74:9d:aa:e9:c5:97:bb:8d:d4:85:c1: 7f:cf:40:13:f5:c9:a4:38:51:76:6a:d8:a3:0d:2d: bd:84:e7:f5:29:e8:3f:39:2a:67:50:08:2f:a2:87: d8:18:e4:b6:93:bc:7d:4f:85:b0:d9:f6:96:39:c8: 8f:de:89:dc:81:8b:39:88:27:97:86:7d:f9:4a:28: f1:6d:50:ed:05:60:2a:9e:5b:d5:e5:5a:99:46:28: d2:01:78:ec:64:77:69:13:c2:27:08:cb:9b:73:6b: 68:70:3d:58:a4:d2:af:94:da:76:8c:2e:66:4a:08: 11:d1:67:37:48:5d:d3:03:00:b4:af:5c:2d:c4:8a: b8:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:13:B7:F5:CF:C0:24:E6:74:DC:0B:FE:CC:DC:55:E5:C3:9E:39:D4 X509v3 Authority Key Identifier: keyid:13:E1:A9:98:F7:7D:7C:1F:F2:95:5C:0B:68:8F:EB:FE:0F:81:96:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/1/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/1/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:87:9e:fa:22:5a:56:4f:73:e2:0d:fc:85:fa:90:0a:37:24: 37:2c:f0:24:5f:5b:9e:47:64:d2:c4:a4:21:f3:b5:d5:ba:c4: e9:70:a8:55:2e:0b:25:65:2b:2a:f0:89:b9:37:25:51:93:81: 47:49:12:86:3d:1b:3d:8b:a4:69:d0:67:08:54:73:d7:e5:8e: 48:19:89:45:bd:0c:98:17:ce:d0:c5:2a:28:4d:41:d4:b8:ae: 57:b2:70:c1:40:95:3b:b4:16:0d:d0:05:ff:40:24:2a:c6:7a: be:e1:6f:cd:a5:d4:1a:fb:e0:41:a8:3c:d8:aa:ef:09:14:34: 26:eb:0d:de:86:df:58:ab:f9:ff:21:e5:e3:fb:ff:6f:68:b1: 46:2c:64:e9:84:c2:78:24:ec:63:9f:49:18:f5:c4:f2:f8:6a: c2:fc:49:84:61:4e:b9:81:73:a5:5e:5f:6a:80:c1:71:3c:01: fa:d6:4b:e1:37:f0:52:5b:93:a4:02:f5:bc:3e:5c:2c:8b:62: e8:0f:91:c9:d4:23:c2:e7:fd:c1:9c:f0:e7:19:4e:8f:a1:bf: 65:ce:34:26:ec:46:66:35:75:a5:da:eb:9e:78:6a:11:03:63: c4:51:dc:79:5b:3e:0b:4c:9f:d2:77:0e:48:89:62:62:ad:4a: 02:a3:0e:8d -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUCsQxkk1DqYZRT16ARioo6TrMjH4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTNFMUE5OThGNzdEN0MxRkYyOTU1QzBCNjg4RkVCRkUw RjgxOTZFQjAeFw0yNTEyMzAyMzQ3MDlaFw0yNjAxMDEwMTQ0MDlaMDMxMTAvBgNV BAMTKEI4MTNCN0Y1Q0ZDMDI0RTY3NERDMEJGRUNDREM1NUU1QzM5RTM5RDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiqS7m1HNXjdgU5rgKEBc5Ewqn vNbeud6JVtM9Mxb3FgU4jjp+EOziuhRlDrxssg5PTMtvtuDT9rUDBc2mm9LOWnZj m+slQPBMpS3PD5LDNB/IxOQRMJxZKeH/2lGZFf9IhWcQtR2LpgNWRJgyMGVP5py5 aemahQrCdKF0narpxZe7jdSFwX/PQBP1yaQ4UXZq2KMNLb2E5/Up6D85KmdQCC+i h9gY5LaTvH1PhbDZ9pY5yI/eidyBizmIJ5eGfflKKPFtUO0FYCqeW9XlWplGKNIB eOxkd2kTwicIy5tza2hwPVik0q+U2naMLmZKCBHRZzdIXdMDALSvXC3EirgZAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUuBO39c/AJOZ03Av+zNxV5cOeOdQwHwYDVR0j BBgwFoAUE+GpmPd9fB/ylVwLaI/r/g+BluswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDE1NzY0N2MtOTFkNi00YTA0LThhOTEtZDE1Mzg1ZDFm YWIyLzEvMTNFMUE5OThGNzdEN0MxRkYyOTU1QzBCNjg4RkVCRkUwRjgxOTZFQi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8xM0UxQTk5OEY3N0Q3QzFGRjI5NTVDMEI2 ODhGRUJGRTBGODE5NkVCLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzAxNTc2NDdjLTkxZDYtNGEwNC04YTkxLWQxNTM4NWQxZmFiMi8xLzEzRTFBOTk4 Rjc3RDdDMUZGMjk1NUMwQjY4OEZFQkZFMEY4MTk2RUIubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAYh576 IlpWT3PiDfyF+pAKNyQ3LPAkX1ueR2TSxKQh87XVusTpcKhVLgslZSsq8Im5NyVR k4FHSRKGPRs9i6Rp0GcIVHPX5Y5IGYlFvQyYF87QxSooTUHUuK5XsnDBQJU7tBYN 0AX/QCQqxnq+4W/NpdQa++BBqDzYqu8JFDQm6w3eht9Yq/n/IeXj+/9vaLFGLGTp hMJ4JOxjn0kY9cTy+GrC/EmEYU65gXOlXl9qgMFxPAH61kvhN/BSW5OkAvW8Plws i2LoD5HJ1CPC5/3BnPDnGU6Pob9lzjQm7EZmNXWl2uueeGoRA2PEUdx5Wz4LTJ/S dw5IiWJirUoCow6N -----END CERTIFICATE-----Generated at Wed Dec 31 07:42:49 2025 by rpki-client