This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.mft File: 24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.mft (raw, json) Hash identifier: PF5lI4Kdxov/b70LNsY3uUxp0biKNaInL6e4Ob176eU= Subject key identifier: B0:3C:4D:F0:82:EB:C8:88:A1:36:E0:82:4A:17:ED:EA:09:08:CD:88 Authority key identifier: 24:E5:37:88:BD:4E:FA:23:B1:A8:20:7B:7E:74:A8:E1:CC:67:7B:00 Certificate issuer: /CN=24e53788bd4efa23b1a8207b7e74a8e1cc677b00 Certificate serial: 3E62F71F1813B08C393778F9ABFBDB9C0D20EBEB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JOU3iL1O-iOxqCB7fnSo4cxnewA.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.mft Manifest number: 050F Signing time: Fri 19 Dec 2025 11:57:33 +0000 Manifest this update: Fri 19 Dec 2025 11:52:33 +0000 Manifest next update: Sat 20 Dec 2025 13:31:33 +0000 Files and hashes: 1: 34362e3138332e33312e302f32342d3234203d3e20313734.roa (hash: 3Z7e+5TwzBef1b9VYHjpmL+5jzamN8gXYO/wLKWP7lA=) 2: 34362e3138332e32342e302f32342d3234203d3e20313432313436.roa (hash: U6sIE1tc5XNg8Vw7jnbxLLCNANnB9wH3voxb1FhuZwc=) 3: 24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.crl (hash: USYbXvyW5ix9AogXcR99DRjJ0KA/syra4Eg19LHOG9I=) 4: 34362e3138332e32362e302f32342d3234203d3e2039303039.roa (hash: ckwThy9Ftd6Jb/nTbj53dd12b3F3RSR9Etp8JSW5svM=) 5: 34362e3138332e32392e302f32342d3234203d3e2039333034.roa (hash: 4l3m4JRRITIOBfhSXA3v4T1Tc1t3gHbU2TsBgQabcVg=) 6: 34362e3138332e32352e302f32342d3234203d3e20323132323338.roa (hash: lxi2m0tJ4IwcIv1Qu/mxuwgzf8BGdtHdxfKNM9mKZEQ=) 7: 34362e3138332e33302e302f32342d3234203d3e203631333137.roa (hash: pxnqedD3kuwz1m+9x0q4e9R46P3xXGAP6tM7JZr4zqQ=) 8: 34362e3138332e32352e302f32342d3234203d3e203633303233.roa (hash: 4jq0qwMJqWtfRUuzz3vPyKHtua4FM5/8Y3cvVGfTKBM=) 9: 34362e3138332e32382e302f32342d3234203d3e203631333137.roa (hash: EQc8ZSWRYu3w3yABE1KT+uLZnchUtUDhUBMKc9gsz8U=) 10: 34362e3138332e32372e302f32342d3234203d3e20323132323338.roa (hash: MBTQi0HOcbTwY/4fQl+vTOHLOQ2FmR/EhBIZ6Dj3u14=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.crl rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.mft rsync://rpki.ripe.net/repository/DEFAULT/JOU3iL1O-iOxqCB7fnSo4cxnewA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 13:31:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:62:f7:1f:18:13:b0:8c:39:37:78:f9:ab:fb:db:9c:0d:20:eb:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24e53788bd4efa23b1a8207b7e74a8e1cc677b00 Validity Not Before: Dec 19 11:52:33 2025 GMT Not After : Dec 20 13:31:33 2025 GMT Subject: CN=B03C4DF082EBC888A136E0824A17EDEA0908CD88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:be:86:59:11:b6:a3:05:55:bf:f6:56:47:5b: 3b:52:0e:4d:a2:aa:58:9f:fd:e4:69:5e:a5:9d:d0: 90:a4:d2:c8:65:06:e2:cb:c4:16:a8:89:ad:23:d3: 13:b0:03:2f:fb:2c:68:b5:2e:e5:35:14:65:ac:eb: c5:b9:6c:ed:cf:b7:01:3e:d4:9c:0c:b0:ad:79:25: 19:cd:23:7d:10:7c:07:62:71:bb:30:15:4c:30:7a: 42:ee:18:da:db:59:cd:a4:c6:3e:78:b6:11:33:ae: e7:d4:79:a9:c2:a2:1e:c9:f8:10:82:bd:06:4e:ed: b5:db:db:36:29:31:2c:e6:c3:96:b1:26:94:ef:55: 61:d9:6f:96:09:ea:c0:16:39:39:a6:90:80:3f:a6: 68:93:cc:ec:1d:f0:24:0c:fd:fc:cf:2b:8e:4e:4f: 02:29:d2:13:dd:a9:c6:83:6f:b1:4d:97:a3:6c:03: 11:de:da:5c:fa:62:01:33:31:ee:a3:10:45:50:d3: 08:38:b0:de:1f:51:02:22:03:c7:74:98:f6:65:3f: 6d:b1:db:01:e2:1b:58:99:81:e5:2e:03:b8:d8:3f: 05:33:7c:f7:50:1e:fe:5a:82:06:9a:62:b2:96:6d: 2d:a8:52:bf:73:73:8e:72:25:6f:51:cc:63:16:1f: 06:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:3C:4D:F0:82:EB:C8:88:A1:36:E0:82:4A:17:ED:EA:09:08:CD:88 X509v3 Authority Key Identifier: keyid:24:E5:37:88:BD:4E:FA:23:B1:A8:20:7B:7E:74:A8:E1:CC:67:7B:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JOU3iL1O-iOxqCB7fnSo4cxnewA.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:42:18:0d:7c:56:d4:ae:46:53:58:03:cb:41:15:04:a0:96: 0f:2e:c2:ff:13:25:11:76:20:bc:8d:80:fa:ce:2f:9b:82:ed: 4e:2f:1b:23:18:7b:d1:de:65:80:94:a1:1e:83:e8:69:f2:9d: ce:f6:4e:29:6b:91:5b:9e:b2:83:5b:94:5f:13:9b:e2:e3:d4: 30:2d:0d:1b:7e:82:f7:0c:f6:88:00:ac:7d:d4:12:05:29:37: 90:2f:3d:25:09:54:71:27:72:b9:57:88:b0:71:9f:0f:57:38: 06:be:94:92:8f:4d:e3:94:20:77:79:9e:d4:74:94:15:0b:3c: 7b:b0:59:3e:26:d3:7d:3b:f3:a9:a6:b5:73:b8:65:6e:48:32: ac:5f:19:5e:27:1e:ca:ba:15:0b:6c:89:16:4d:af:a8:72:77: 73:0a:f8:08:c4:11:d2:6a:b5:4b:1b:ae:8a:65:b8:8f:6c:92: ac:8b:30:58:4a:6a:f6:2a:86:e6:92:65:0b:6f:5c:c6:69:44: 7d:e6:c1:b6:a4:86:6c:b7:ab:34:58:f5:1e:8b:99:47:4b:5b: 77:ea:0d:d6:58:a5:ef:24:50:d5:62:46:af:53:18:90:f9:1f: 31:f4:00:16:92:35:48:a8:63:2d:25:73:db:c1:84:d1:37:fa: cc:85:9a:1d -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUPmL3HxgTsIw5N3j5q/vbnA0g6+swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjRlNTM3ODhiZDRlZmEyM2IxYTgyMDdiN2U3NGE4ZTFj YzY3N2IwMDAeFw0yNTEyMTkxMTUyMzNaFw0yNTEyMjAxMzMxMzNaMDMxMTAvBgNV BAMTKEIwM0M0REYwODJFQkM4ODhBMTM2RTA4MjRBMTdFREVBMDkwOENEODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgvoZZEbajBVW/9lZHWztSDk2i qlif/eRpXqWd0JCk0shlBuLLxBaoia0j0xOwAy/7LGi1LuU1FGWs68W5bO3PtwE+ 1JwMsK15JRnNI30QfAdicbswFUwwekLuGNrbWc2kxj54thEzrufUeanCoh7J+BCC vQZO7bXb2zYpMSzmw5axJpTvVWHZb5YJ6sAWOTmmkIA/pmiTzOwd8CQM/fzPK45O TwIp0hPdqcaDb7FNl6NsAxHe2lz6YgEzMe6jEEVQ0wg4sN4fUQIiA8d0mPZlP22x 2wHiG1iZgeUuA7jYPwUzfPdQHv5aggaaYrKWbS2oUr9zc45yJW9RzGMWHwbrAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUsDxN8ILryIihNuCCShft6gkIzYgwHwYDVR0j BBgwFoAUJOU3iL1O+iOxqCB7fnSo4cxnewAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTZhY2I5YTAtNmQxZS00YWU0LTkxNzctZDkzOGU5ODA0 Mzk1LzAvMjRFNTM3ODhCRDRFRkEyM0IxQTgyMDdCN0U3NEE4RTFDQzY3N0IwMC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0pPVTNpTDFPLWlPeHFDQjdmblNvNGN4 bmV3QS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xNmFjYjlhMC02 ZDFlLTRhZTQtOTE3Ny1kOTM4ZTk4MDQzOTUvMC8yNEU1Mzc4OEJENEVGQTIzQjFB ODIwN0I3RTc0QThFMUNDNjc3QjAwLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADkIYDXxW1K5GU1gDy0EV BKCWDy7C/xMlEXYgvI2A+s4vm4LtTi8bIxh70d5lgJShHoPoafKdzvZOKWuRW56y g1uUXxOb4uPUMC0NG36C9wz2iACsfdQSBSk3kC89JQlUcSdyuVeIsHGfD1c4Br6U ko9N45Qgd3me1HSUFQs8e7BZPibTfTvzqaa1c7hlbkgyrF8ZXiceyroVC2yJFk2v qHJ3cwr4CMQR0mq1SxuuimW4j2ySrIswWEpq9iqG5pJlC29cxmlEfebBtqSGbLer NFj1HouZR0tbd+oN1lil7yRQ1WJGr1MYkPkfMfQAFpI1SKhjLSVz28GE0Tf6zIWa HQ== -----END CERTIFICATE-----Generated at Sat Dec 20 06:41:28 2025 by rpki-client