This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09456214-8d25-4b5e-9e04-35c0a7a26470/0/FB2E043F755DA1329FB66347D17DC2B79A73C3FA.mft File: FB2E043F755DA1329FB66347D17DC2B79A73C3FA.mft (raw, json) Hash identifier: glI8+a9Zl+gDkO5rfUgzAnt8yEQ9qT0ncGMoIpcDknY= Subject key identifier: 96:FA:0E:D6:7A:E5:DD:50:97:BD:9D:2A:48:0D:F1:99:D4:A9:71:A6 Authority key identifier: FB:2E:04:3F:75:5D:A1:32:9F:B6:63:47:D1:7D:C2:B7:9A:73:C3:FA Certificate issuer: /CN=FB2E043F755DA1329FB66347D17DC2B79A73C3FA Certificate serial: 62EF0A25F28232D3ACBB502A8B0BAFFDFB02E73B Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/FB2E043F755DA1329FB66347D17DC2B79A73C3FA.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09456214-8d25-4b5e-9e04-35c0a7a26470/0/FB2E043F755DA1329FB66347D17DC2B79A73C3FA.mft Manifest number: B1 Signing time: Sat 20 Dec 2025 02:06:29 +0000 Manifest this update: Sat 20 Dec 2025 02:01:29 +0000 Manifest next update: Sun 21 Dec 2025 05:15:29 +0000 Files and hashes: 1: FB2E043F755DA1329FB66347D17DC2B79A73C3FA.crl (hash: vZ5wPHgFoJmzCdM6nlNYKIRuEvILfdUb1jkBkZzKDsM=) 2: 326131343a373538343a653339303a3a2f34342d3434203d3e20333937303332.roa (hash: lLg4au3IVvnSiHqBxXRTNckohkijbwJ1gyWVOIjX72Q=) 3: 326131343a373538343a653361303a3a2f34342d3434203d3e20333937303332.roa (hash: JCyGJNLuGhm2G7yv8F0G1yT21Qa/DAGdxn1vxIgtXH8=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09456214-8d25-4b5e-9e04-35c0a7a26470/0/FB2E043F755DA1329FB66347D17DC2B79A73C3FA.crl rsync://rsync.paas.rpki.ripe.net/repository/09456214-8d25-4b5e-9e04-35c0a7a26470/0/FB2E043F755DA1329FB66347D17DC2B79A73C3FA.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/FB2E043F755DA1329FB66347D17DC2B79A73C3FA.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:ef:0a:25:f2:82:32:d3:ac:bb:50:2a:8b:0b:af:fd:fb:02:e7:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB2E043F755DA1329FB66347D17DC2B79A73C3FA Validity Not Before: Dec 20 02:01:29 2025 GMT Not After : Dec 21 05:15:29 2025 GMT Subject: CN=96FA0ED67AE5DD5097BD9D2A480DF199D4A971A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:1d:f7:08:ac:11:0e:cd:a8:eb:a7:90:c1:d8: ab:9d:86:fa:39:d3:58:f7:92:ec:49:52:6c:a2:89: 7d:0c:f4:e8:a0:bb:32:49:03:01:4a:36:22:a4:1d: fd:1b:14:be:82:0c:9d:4f:97:fc:59:69:9e:da:e5: a1:b5:aa:d4:f0:fa:a6:98:73:fa:5e:51:bb:4e:31: 93:7e:d1:90:76:51:6b:6c:b5:53:57:7e:ba:85:6a: c2:78:7c:1d:af:01:88:6b:57:9a:9e:15:77:75:14: 8a:81:8c:7d:12:f5:37:02:e4:52:db:80:68:44:80: fb:f9:bf:29:bb:8c:dd:1c:bd:c8:0a:de:52:e8:2c: 76:73:ad:a8:76:9b:83:29:33:46:fe:d1:9e:35:ab: a2:21:93:fe:c3:c0:1c:3e:6a:9d:52:70:5b:12:2f: fe:39:d3:d9:e2:fd:81:be:4e:a0:c1:fb:38:65:50: 14:8f:40:8c:b4:b4:9f:89:2a:76:f1:bc:0f:44:4e: 6f:da:bc:14:76:f9:01:37:96:c1:72:31:e7:d9:6f: db:45:68:22:9c:e6:e5:2e:33:fc:28:3a:1b:95:c6: af:05:4d:66:1f:57:75:d5:c8:18:9a:8c:8b:f1:b4: bc:4b:9c:c1:47:fc:2b:61:2b:ab:ff:df:de:21:ac: 85:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:FA:0E:D6:7A:E5:DD:50:97:BD:9D:2A:48:0D:F1:99:D4:A9:71:A6 X509v3 Authority Key Identifier: keyid:FB:2E:04:3F:75:5D:A1:32:9F:B6:63:47:D1:7D:C2:B7:9A:73:C3:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/09456214-8d25-4b5e-9e04-35c0a7a26470/0/FB2E043F755DA1329FB66347D17DC2B79A73C3FA.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/FB2E043F755DA1329FB66347D17DC2B79A73C3FA.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09456214-8d25-4b5e-9e04-35c0a7a26470/0/FB2E043F755DA1329FB66347D17DC2B79A73C3FA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:06:2f:a9:4e:8b:36:52:e7:5f:7b:ec:f4:ea:57:57:65:54: e3:8e:39:d8:b2:6a:c1:63:c7:3a:bc:1f:85:a5:68:a2:fa:38: 46:58:d8:27:d5:61:81:d1:63:b3:05:06:4e:fb:e9:54:14:e2: 42:ae:c7:52:f8:90:37:e1:2f:dd:ce:af:74:28:4d:50:b5:85: ed:20:39:6f:a9:15:ea:54:f0:db:d8:f0:24:34:16:d5:ef:f0: 22:00:39:dc:15:42:99:a4:61:04:b7:f8:4f:0b:1d:59:2a:0e: 52:a3:0e:8b:fd:79:bf:9f:5c:dd:53:df:a6:0f:76:e4:1e:91: 7b:7a:54:54:01:30:ed:36:2b:e8:c1:09:d8:07:f2:21:d3:3e: f4:55:30:8f:6a:41:d2:c3:2a:4a:9b:2e:00:fc:c7:b4:58:20: 87:e9:fe:0e:06:ff:89:21:c7:c4:e6:d2:08:59:cd:3d:61:56: 52:01:a5:96:77:d8:81:75:08:1d:ab:d1:0c:aa:0e:ec:19:ae: 1e:b5:bf:32:d6:2c:45:3a:88:9a:1c:16:c0:64:b3:52:75:5f: 19:3b:7e:c9:bd:32:12:d1:48:f4:67:11:5c:f4:32:8c:47:66: 96:0e:0d:e2:89:56:7c:e4:4c:1a:84:2a:65:e1:89:86:61:ae: 53:6c:3a:31 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUYu8KJfKCMtOsu1Aqiwuv/fsC5zswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkIyRTA0M0Y3NTVEQTEzMjlGQjY2MzQ3RDE3REMyQjc5 QTczQzNGQTAeFw0yNTEyMjAwMjAxMjlaFw0yNTEyMjEwNTE1MjlaMDMxMTAvBgNV BAMTKDk2RkEwRUQ2N0FFNURENTA5N0JEOUQyQTQ4MERGMTk5RDRBOTcxQTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKHfcIrBEOzajrp5DB2Kudhvo5 01j3kuxJUmyiiX0M9OiguzJJAwFKNiKkHf0bFL6CDJ1Pl/xZaZ7a5aG1qtTw+qaY c/peUbtOMZN+0ZB2UWtstVNXfrqFasJ4fB2vAYhrV5qeFXd1FIqBjH0S9TcC5FLb gGhEgPv5vym7jN0cvcgK3lLoLHZzrah2m4MpM0b+0Z41q6Ihk/7DwBw+ap1ScFsS L/4509ni/YG+TqDB+zhlUBSPQIy0tJ+JKnbxvA9ETm/avBR2+QE3lsFyMefZb9tF aCKc5uUuM/woOhuVxq8FTWYfV3XVyBiajIvxtLxLnMFH/CthK6v/394hrIVRAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUlvoO1nrl3VCXvZ0qSA3xmdSpcaYwHwYDVR0j BBgwFoAU+y4EP3VdoTKftmNH0X3Ct5pzw/owDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDk0NTYyMTQtOGQyNS00YjVlLTllMDQtMzVjMGE3YTI2 NDcwLzAvRkIyRTA0M0Y3NTVEQTEzMjlGQjY2MzQ3RDE3REMyQjc5QTczQzNGQS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9GQjJFMDQzRjc1NURBMTMyOUZCNjYzNDdE MTdEQzJCNzlBNzNDM0ZBLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzA5NDU2MjE0LThkMjUtNGI1ZS05ZTA0LTM1YzBhN2EyNjQ3MC8wL0ZCMkUwNDNG NzU1REExMzI5RkI2NjM0N0QxN0RDMkI3OUE3M0MzRkEubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB/Bi+p Tos2Uudfe+z06ldXZVTjjjnYsmrBY8c6vB+FpWii+jhGWNgn1WGB0WOzBQZO++lU FOJCrsdS+JA34S/dzq90KE1QtYXtIDlvqRXqVPDb2PAkNBbV7/AiADncFUKZpGEE t/hPCx1ZKg5Sow6L/Xm/n1zdU9+mD3bkHpF7elRUATDtNivowQnYB/Ih0z70VTCP akHSwypKmy4A/Me0WCCH6f4OBv+JIcfE5tIIWc09YVZSAaWWd9iBdQgdq9EMqg7s Ga4etb8y1ixFOoiaHBbAZLNSdV8ZO37JvTIS0Uj0ZxFc9DKMR2aWDg3iiVZ85Ewa hCpl4YmGYa5TbDox -----END CERTIFICATE-----Generated at Sat Dec 20 10:07:23 2025 by rpki-client