This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.mft File: 24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.mft (raw, json) Hash identifier: suPz9dXEA19hySP0+yyETeQXQU37mfuO/38vi9nHiZw= Subject key identifier: 30:B9:EC:92:FD:61:36:3C:CA:EC:63:9D:7C:58:A1:AA:04:20:EC:BF Authority key identifier: 24:E5:37:88:BD:4E:FA:23:B1:A8:20:7B:7E:74:A8:E1:CC:67:7B:00 Certificate issuer: /CN=24e53788bd4efa23b1a8207b7e74a8e1cc677b00 Certificate serial: 604773277111188B0271E04205301144DCD2FBE1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JOU3iL1O-iOxqCB7fnSo4cxnewA.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.mft Manifest number: 0510 Signing time: Sat 20 Dec 2025 05:32:34 +0000 Manifest this update: Sat 20 Dec 2025 05:27:34 +0000 Manifest next update: Sun 21 Dec 2025 07:32:34 +0000 Files and hashes: 1: 24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.crl (hash: 6CpMb9cM5v4bzWRlRLFCzwIAVKkbgXcoYRAB9fcx488=) 2: 34362e3138332e33312e302f32342d3234203d3e20313734.roa (hash: 3Z7e+5TwzBef1b9VYHjpmL+5jzamN8gXYO/wLKWP7lA=) 3: 34362e3138332e32342e302f32342d3234203d3e20313432313436.roa (hash: U6sIE1tc5XNg8Vw7jnbxLLCNANnB9wH3voxb1FhuZwc=) 4: 34362e3138332e32392e302f32342d3234203d3e2039333034.roa (hash: 4l3m4JRRITIOBfhSXA3v4T1Tc1t3gHbU2TsBgQabcVg=) 5: 34362e3138332e32382e302f32342d3234203d3e203631333137.roa (hash: EQc8ZSWRYu3w3yABE1KT+uLZnchUtUDhUBMKc9gsz8U=) 6: 34362e3138332e32352e302f32342d3234203d3e20323132323338.roa (hash: lxi2m0tJ4IwcIv1Qu/mxuwgzf8BGdtHdxfKNM9mKZEQ=) 7: 34362e3138332e32352e302f32342d3234203d3e203633303233.roa (hash: 4jq0qwMJqWtfRUuzz3vPyKHtua4FM5/8Y3cvVGfTKBM=) 8: 34362e3138332e32362e302f32342d3234203d3e2039303039.roa (hash: ckwThy9Ftd6Jb/nTbj53dd12b3F3RSR9Etp8JSW5svM=) 9: 34362e3138332e32372e302f32342d3234203d3e20323132323338.roa (hash: MBTQi0HOcbTwY/4fQl+vTOHLOQ2FmR/EhBIZ6Dj3u14=) 10: 34362e3138332e33302e302f32342d3234203d3e203631333137.roa (hash: pxnqedD3kuwz1m+9x0q4e9R46P3xXGAP6tM7JZr4zqQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.crl rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.mft rsync://rpki.ripe.net/repository/DEFAULT/JOU3iL1O-iOxqCB7fnSo4cxnewA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:47:73:27:71:11:18:8b:02:71:e0:42:05:30:11:44:dc:d2:fb:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24e53788bd4efa23b1a8207b7e74a8e1cc677b00 Validity Not Before: Dec 20 05:27:34 2025 GMT Not After : Dec 21 07:32:34 2025 GMT Subject: CN=30B9EC92FD61363CCAEC639D7C58A1AA0420ECBF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:92:9e:73:5a:bf:0d:a3:02:07:5e:bd:20:69: 3c:58:ec:41:b8:15:f3:d0:1d:48:b2:6c:d3:15:b4: 5f:ec:70:e8:01:ff:b1:d3:7c:95:9f:9b:b9:91:a4: 54:b0:5e:f0:21:20:08:33:1a:fe:30:4b:0e:09:19: dc:ac:a3:7e:64:e2:1e:d5:eb:c2:4a:76:e3:dc:de: 0a:32:a4:a4:70:d9:42:6e:dd:69:ea:89:de:0d:32: a8:49:a6:e8:57:26:ce:69:97:a0:90:ae:6f:91:6c: ee:cb:bc:15:08:f1:b6:2a:99:8b:33:41:45:8d:3c: 94:03:c0:fd:dd:6f:fc:98:8b:48:00:bf:f1:02:0e: 25:bd:68:43:22:62:5f:1f:31:55:ba:77:5f:27:71: 02:38:5e:f1:10:fd:ca:06:73:4d:3e:0d:6f:c6:bf: f4:0c:cb:8a:7f:4e:03:b3:a6:ff:6d:07:1b:62:e0: 6d:18:7b:b9:d5:7d:e2:ed:d8:49:ad:5c:1d:dc:19: a7:40:7a:42:b7:de:0b:bd:b5:11:d9:b1:18:10:c5: 3b:6e:1b:46:c0:43:be:d9:ff:8b:89:cf:77:48:df: 0f:04:1a:31:c8:5e:b3:10:5b:fb:95:45:85:7e:13: 19:59:ff:7c:c0:e2:f3:84:47:74:6d:e6:e9:6e:a6: 1a:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:B9:EC:92:FD:61:36:3C:CA:EC:63:9D:7C:58:A1:AA:04:20:EC:BF X509v3 Authority Key Identifier: keyid:24:E5:37:88:BD:4E:FA:23:B1:A8:20:7B:7E:74:A8:E1:CC:67:7B:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JOU3iL1O-iOxqCB7fnSo4cxnewA.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:69:47:7a:22:f5:30:ba:62:19:6c:97:7d:4b:a1:9e:7f:f8: 68:4b:89:86:a4:c6:0a:5d:37:9f:b8:c2:29:35:cc:db:37:57: 5b:21:1e:3b:e2:bf:9f:dc:a1:5b:f6:5c:96:9c:81:41:27:fb: 5a:ff:37:af:d8:78:5d:5e:48:8b:98:9c:a3:28:2e:05:d4:d2: 0e:88:25:c4:1d:4d:1d:f7:14:b4:5f:8b:68:b3:f2:8b:e9:8e: 79:2e:6c:45:f8:f9:b5:1b:89:2b:0a:bb:f6:81:4f:25:6e:62: fa:d8:9c:45:d2:31:76:ae:b4:90:12:70:46:83:1a:cc:51:4d: 00:de:aa:59:42:c3:ca:04:f8:c9:94:75:d6:08:ca:60:ed:69: d7:57:29:db:66:09:f0:bf:bb:15:1e:43:12:6e:e9:aa:d5:3e: db:80:17:1c:bf:d5:c0:09:72:51:7f:91:7d:ef:1c:a8:35:03: 77:3f:3c:e8:07:19:2d:be:bf:2c:5f:8d:75:22:56:e5:03:00: a5:76:6f:c7:57:c9:b6:f8:d0:57:61:f4:f0:79:55:6a:20:1a: bc:7b:32:1b:76:ef:b9:8f:8c:3e:c5:52:b9:ee:9f:19:54:2b: 53:da:e4:c8:a0:32:c6:2a:2e:22:2c:82:8f:42:71:57:c8:fa: de:40:18:49 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUYEdzJ3ERGIsCceBCBTARRNzS++EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjRlNTM3ODhiZDRlZmEyM2IxYTgyMDdiN2U3NGE4ZTFj YzY3N2IwMDAeFw0yNTEyMjAwNTI3MzRaFw0yNTEyMjEwNzMyMzRaMDMxMTAvBgNV BAMTKDMwQjlFQzkyRkQ2MTM2M0NDQUVDNjM5RDdDNThBMUFBMDQyMEVDQkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfkp5zWr8NowIHXr0gaTxY7EG4 FfPQHUiybNMVtF/scOgB/7HTfJWfm7mRpFSwXvAhIAgzGv4wSw4JGdyso35k4h7V 68JKduPc3goypKRw2UJu3Wnqid4NMqhJpuhXJs5pl6CQrm+RbO7LvBUI8bYqmYsz QUWNPJQDwP3db/yYi0gAv/ECDiW9aEMiYl8fMVW6d18ncQI4XvEQ/coGc00+DW/G v/QMy4p/TgOzpv9tBxti4G0Ye7nVfeLt2EmtXB3cGadAekK33gu9tRHZsRgQxTtu G0bAQ77Z/4uJz3dI3w8EGjHIXrMQW/uVRYV+ExlZ/3zA4vOER3Rt5ulupho1AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUMLnskv1hNjzK7GOdfFihqgQg7L8wHwYDVR0j BBgwFoAUJOU3iL1O+iOxqCB7fnSo4cxnewAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTZhY2I5YTAtNmQxZS00YWU0LTkxNzctZDkzOGU5ODA0 Mzk1LzAvMjRFNTM3ODhCRDRFRkEyM0IxQTgyMDdCN0U3NEE4RTFDQzY3N0IwMC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0pPVTNpTDFPLWlPeHFDQjdmblNvNGN4 bmV3QS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xNmFjYjlhMC02 ZDFlLTRhZTQtOTE3Ny1kOTM4ZTk4MDQzOTUvMC8yNEU1Mzc4OEJENEVGQTIzQjFB ODIwN0I3RTc0QThFMUNDNjc3QjAwLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABmlHeiL1MLpiGWyXfUuh nn/4aEuJhqTGCl03n7jCKTXM2zdXWyEeO+K/n9yhW/ZclpyBQSf7Wv83r9h4XV5I i5icoyguBdTSDoglxB1NHfcUtF+LaLPyi+mOeS5sRfj5tRuJKwq79oFPJW5i+tic RdIxdq60kBJwRoMazFFNAN6qWULDygT4yZR11gjKYO1p11cp22YJ8L+7FR5DEm7p qtU+24AXHL/VwAlyUX+Rfe8cqDUDdz886AcZLb6/LF+NdSJW5QMApXZvx1fJtvjQ V2H08HlVaiAavHsyG3bvuY+MPsVSue6fGVQrU9rkyKAyxiouIiyCj0JxV8j63kAY SQ== -----END CERTIFICATE-----Generated at Sat Dec 20 08:04:26 2025 by rpki-client