This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.mft File: F768FF6E681858C0EC19F3A93FA1792CD16CEED3.mft (raw, json) Hash identifier: 6p/31zUFeHpFOqLno6Euxrl70zJudtPMN1AB5ONp9cU= Subject key identifier: 45:33:2B:47:09:7F:7C:BB:63:90:BB:56:CF:F6:08:1D:74:AA:57:CB Authority key identifier: F7:68:FF:6E:68:18:58:C0:EC:19:F3:A9:3F:A1:79:2C:D1:6C:EE:D3 Certificate issuer: /CN=f768ff6e681858c0ec19f3a93fa1792cd16ceed3 Certificate serial: 787F7FCB41C8061BC744FE1027301995C7F11338 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.mft Manifest number: 01ED Signing time: Fri 19 Dec 2025 19:42:33 +0000 Manifest this update: Fri 19 Dec 2025 19:37:33 +0000 Manifest next update: Sat 20 Dec 2025 19:49:33 +0000 Files and hashes: 1: 3130392e3233342e3231332e302f32342d3234203d3e203434323133.roa (hash: pWCIuSrDYwp+tan25QY6TeO9jMNRWP/W0zj94P0620Y=) 2: 3137382e3133322e3139342e302f32342d3234203d3e2033333230.roa (hash: fQsEWjsrThcFlJLP0H4ir/IvOeNDAQWZ1RZpyw7wV08=) 3: 352e3232362e3138382e302f32342d3234203d3e20313532313739.roa (hash: nFzeEleWTSIYtIbjgNdPg9c+CwbgHF8u+W2VGtxEBpQ=) 4: 3137382e3133322e3139382e302f32342d3234203d3e20323635393139.roa (hash: uhM+/0v8HioS/qE+KkDqR673YS11oQr5aznZkyp/yx4=) 5: 3130392e3233342e3230392e302f32342d3234203d3e203235313630.roa (hash: 4qmNKGx6VCIK53hbSqHwJPgKKMACqFJu608tkfoDU90=) 6: 3137382e3133322e3139332e302f32342d3234203d3e2033333230.roa (hash: oI+z5B0JaicbPoA0ktNCShJBGRgRTGuhGcC7A8+Ru9U=) 7: 3137382e3133322e3139352e302f32342d3234203d3e20313335333931.roa (hash: RVvsf+GbQ+gvRF/WRSFeBmTdyh0atmXnd8DAVmdlYaw=) 8: 3137382e3133322e3139322e302f32342d3234203d3e203134363138.roa (hash: UgtgsSF4DmUx+FqAs5WV6TWI9fyKhqfkEeJgaHpzYEc=) 9: 352e3232362e3138372e302f32342d3234203d3e203331383938.roa (hash: kBpq1LEvwgTf4WM51jxpYydvFyszuazgeravGzXETJo=) 10: 352e3232362e3138362e302f32342d3234203d3e203633303233.roa (hash: kysMqqfL+cxQFiZ9hx+MYhVVLOWVsGxNP3RzuLn0/y4=) 11: 3130392e3233342e3230382e302f32342d3234203d3e203331383938.roa (hash: b3VPqm78d32upkRS45HOejDpaZzakM7RvUm8zYxxirQ=) 12: 352e3232362e3138342e302f32342d3234203d3e20313534303439.roa (hash: H9hlRxAktpjIeT3DJhaD4nFRiEtoUGveoYH/KllFDKE=) 13: 3137382e3133322e3139362e302f32342d3234203d3e20333933393432.roa (hash: D28ld5kVJceea0qzm5GNZqptmPyuFgFAFujny6boKiE=) 14: 3130392e3233342e3231302e302f32342d3234203d3e203432383331.roa (hash: XdAkV6zbkuI1AZDLksTC73fyYmD1RaBTy+I3AGFuaxA=) 15: 3130392e3233342e3231312e302f32342d3234203d3e203133333335.roa (hash: Ej1HuQzuhYe60A2HNErPZLUdfpH5EaYPpZ+PpBEwVxY=) 16: 352e3232362e3138392e302f32342d3234203d3e2039333034.roa (hash: KMYDoKnPWH3TUSOlAA/wzDsC66Y3O5PlUt+i9WMB8YA=) 17: 352e3232362e3138352e302f32342d3234203d3e2034363337.roa (hash: xGDSj9rMMdhGkci1rj9QS/c2p6IRznTgPF56svMZjZY=) 18: 3130392e3233342e3231352e302f32342d3234203d3e20393733.roa (hash: 7XlPdZ+5k5dznfPMoT3Ni5uRfyL41Likgo5fplEaDTA=) 19: F768FF6E681858C0EC19F3A93FA1792CD16CEED3.crl (hash: OhbhEqqP43IzhlKfplNdDa+4921w4pY/LhlA4OS1Tko=) 20: 3137382e3133322e3139382e302f32342d3234203d3e203133333335.roa (hash: 6TrR9eiRNzBfJRrubefTFudn86wqW7t6u+0cIxHNR5g=) 21: 3137382e3133322e3139382e302f32342d3234203d3e20323133393230.roa (hash: 5LOGXsAFfY8MpN+3dgrjf5uTyIh00nk/J0/MSXxVmy4=) 22: 3130392e3233342e3231342e302f32342d3234203d3e203433363431.roa (hash: 6BGcWOFPHM6AYGamfRs+s+1VsWvQIYZ1oxiJHAvfJjg=) 23: 352e3232362e3139312e302f32342d3234203d3e20323135323338.roa (hash: UAeHXbW3QhFNKys+iIRYQQp2rK+CbLJVmAbT44zmQ1k=) 24: 3137382e3133322e3139372e302f32342d3234203d3e2033333230.roa (hash: MuzLKtyseOT68ju0FOjjeN3pxilqG43fi3IvFyF1hyA=) 25: 3130392e3233342e3230392e302f32342d3234203d3e20333935373933.roa (hash: o3GE/oY8MCJAGEjtcPLWPVhOZbFRZAMmde/X42j4j+s=) 26: 3130392e3233342e3231322e302f32342d3234203d3e20313937353337.roa (hash: Lxa7aR1NsNsgX0Y0Me+SOrl9Sd6ODfPmrUUHY7uRFAg=) 27: 3137382e3133322e3139392e302f32342d3234203d3e203631333137.roa (hash: g03b1IthT7R6emRcKoovUUAfL6xJm+JexZ6oxCLs8E4=) 28: 3137382e3133322e3139322e302f32342d3234203d3e203136353039.roa (hash: 0XlqzvD5WZeVhzrMIb+ArV6j60KVoqxW88qIB/mg2yk=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.crl rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.mft rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 17:13:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:7f:7f:cb:41:c8:06:1b:c7:44:fe:10:27:30:19:95:c7:f1:13:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f768ff6e681858c0ec19f3a93fa1792cd16ceed3 Validity Not Before: Dec 19 19:37:33 2025 GMT Not After : Dec 20 19:49:33 2025 GMT Subject: CN=45332B47097F7CBB6390BB56CFF6081D74AA57CB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:3c:5f:d1:86:28:af:1e:46:ab:4a:d7:1d:e8: c2:84:b1:dc:44:be:90:c6:9c:02:c3:29:53:38:f9: af:fb:a9:57:5a:16:70:0e:fb:a1:85:58:51:54:7c: af:a0:d4:8b:6b:2e:c0:b6:d2:96:2b:d2:05:30:db: ae:99:7a:98:8b:ac:f3:be:b8:c2:35:53:ed:b4:08: 3e:07:c5:e5:91:7c:f8:a4:01:23:1c:67:f0:ed:19: af:2d:39:84:b5:25:8b:49:1a:27:88:f3:b0:4b:15: 5e:c6:58:16:ac:f9:12:28:87:32:f2:fc:23:09:11: e6:67:7e:2c:9f:07:c2:22:b0:cb:08:bd:e7:43:98: 33:07:3a:61:eb:30:0c:d9:7e:2f:3f:80:35:00:10: 9c:95:e2:47:0a:c7:aa:71:25:29:62:82:2f:a3:64: 3e:48:8b:a6:a1:c8:90:b0:7b:6b:01:b2:f7:7d:f1: 71:b6:a3:c1:85:bf:d7:5a:87:47:b6:6e:72:ff:24: 94:1a:97:8d:f6:64:e6:04:3c:15:76:ba:6f:fa:f6: 3e:6b:91:c3:c7:c4:2b:a3:48:77:10:d5:25:27:d6: 0f:a7:e7:a5:0c:24:02:15:5b:6d:65:c3:57:38:47: 3f:7b:57:70:73:39:11:f2:2c:5a:54:14:e0:83:44: 92:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:33:2B:47:09:7F:7C:BB:63:90:BB:56:CF:F6:08:1D:74:AA:57:CB X509v3 Authority Key Identifier: keyid:F7:68:FF:6E:68:18:58:C0:EC:19:F3:A9:3F:A1:79:2C:D1:6C:EE:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:5d:0d:15:d1:1a:74:57:16:51:3f:42:7a:12:a7:66:f8:04: 06:d0:93:1c:c1:f2:9a:18:a5:ec:bd:57:a8:6e:6d:ad:e4:47: e1:d7:75:61:b4:ba:53:54:87:31:d7:19:b1:9f:67:e6:89:63: d6:a9:1c:99:a6:ef:40:2f:33:cb:f6:cd:20:07:4c:71:78:9c: 6f:4b:93:fc:11:64:1d:d5:b8:d9:06:ad:59:db:34:a9:b9:2d: ff:39:ba:a6:b1:31:19:ac:53:61:e4:14:d4:7b:bd:07:8a:c1: dc:ed:32:d8:ec:d9:cd:b1:a8:c7:dc:1f:03:de:63:7b:23:7c: 1e:3d:00:05:5a:b4:38:0a:1b:c9:58:a1:13:b0:ef:f7:15:bd: 4d:85:c0:6c:ba:42:20:56:6d:0c:09:5a:ec:5e:ef:2a:2c:b5: 6e:53:9f:58:8c:c9:0a:5c:87:65:36:cb:0a:f4:4d:75:1a:38: 58:74:ff:e0:e3:b3:c0:ba:8c:45:25:9d:57:fb:f7:64:6b:69: 0d:35:3c:72:d5:b5:f0:d1:25:2c:7e:46:bd:8e:9c:bb:ef:0e: 65:99:19:bd:2c:48:cb:c4:26:cf:ce:af:8d:2e:9e:6c:4d:eb: 70:c5:98:af:32:db:08:4a:f6:99:67:08:b5:00:d1:2a:e4:93: 96:fc:ab:a8 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUeH9/y0HIBhvHRP4QJzAZlcfxEzgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZjc2OGZmNmU2ODE4NThjMGVjMTlmM2E5M2ZhMTc5MmNk MTZjZWVkMzAeFw0yNTEyMTkxOTM3MzNaFw0yNTEyMjAxOTQ5MzNaMDMxMTAvBgNV BAMTKDQ1MzMyQjQ3MDk3RjdDQkI2MzkwQkI1NkNGRjYwODFENzRBQTU3Q0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClPF/RhiivHkarStcd6MKEsdxE vpDGnALDKVM4+a/7qVdaFnAO+6GFWFFUfK+g1ItrLsC20pYr0gUw266ZepiLrPO+ uMI1U+20CD4HxeWRfPikASMcZ/DtGa8tOYS1JYtJGieI87BLFV7GWBas+RIohzLy /CMJEeZnfiyfB8IisMsIvedDmDMHOmHrMAzZfi8/gDUAEJyV4kcKx6pxJSligi+j ZD5Ii6ahyJCwe2sBsvd98XG2o8GFv9dah0e2bnL/JJQal432ZOYEPBV2um/69j5r kcPHxCujSHcQ1SUn1g+n56UMJAIVW21lw1c4Rz97V3BzORHyLFpUFOCDRJILAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQURTMrRwl/fLtjkLtWz/YIHXSqV8swHwYDVR0j BBgwFoAU92j/bmgYWMDsGfOpP6F5LNFs7tMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMGNjMDg3MzctOTI2Ny00MDJhLTk5ZDQtN2FhYWZlYTQ0 NGVkLzAvRjc2OEZGNkU2ODE4NThDMEVDMTlGM0E5M0ZBMTc5MkNEMTZDRUVEMy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzkyal9ibWdZV01Ec0dmT3BQNkY1TE5G czd0TS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8wY2MwODczNy05 MjY3LTQwMmEtOTlkNC03YWFhZmVhNDQ0ZWQvMC9GNzY4RkY2RTY4MTg1OEMwRUMx OUYzQTkzRkExNzkyQ0QxNkNFRUQzLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALl0NFdEadFcWUT9CehKn ZvgEBtCTHMHymhil7L1XqG5treRH4dd1YbS6U1SHMdcZsZ9n5olj1qkcmabvQC8z y/bNIAdMcXicb0uT/BFkHdW42QatWds0qbkt/zm6prExGaxTYeQU1Hu9B4rB3O0y 2OzZzbGox9wfA95jeyN8Hj0ABVq0OAobyVihE7Dv9xW9TYXAbLpCIFZtDAla7F7v Kiy1blOfWIzJClyHZTbLCvRNdRo4WHT/4OOzwLqMRSWdV/v3ZGtpDTU8ctW18NEl LH5GvY6cu+8OZZkZvSxIy8Qmz86vjS6ebE3rcMWYrzLbCEr2mWcItQDRKuSTlvyr qA== -----END CERTIFICATE-----Generated at Sat Dec 20 03:29:31 2025 by rpki-client