This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/1/A4A082EAE8EF48C7B407C40E742479EADD862089.mft File: A4A082EAE8EF48C7B407C40E742479EADD862089.mft (raw, json) Hash identifier: tmXrdrJuHw+W4Lye545I3hgXQYZ4HmrkhqEYjmDKfuw= Subject key identifier: A7:77:8A:91:E6:F2:72:AE:87:DB:68:29:A6:82:C6:4F:74:6E:4A:73 Authority key identifier: A4:A0:82:EA:E8:EF:48:C7:B4:07:C4:0E:74:24:79:EA:DD:86:20:89 Certificate issuer: /CN=A4A082EAE8EF48C7B407C40E742479EADD862089 Certificate serial: 7687C1CA76AD94D963CA7EF0C2BE94A1503125D5 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/A4A082EAE8EF48C7B407C40E742479EADD862089.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/1/A4A082EAE8EF48C7B407C40E742479EADD862089.mft Manifest number: 01AC Signing time: Sat 20 Dec 2025 06:31:22 +0000 Manifest this update: Sat 20 Dec 2025 06:26:22 +0000 Manifest next update: Sun 21 Dec 2025 07:24:22 +0000 Files and hashes: 1: 326130663a383563313a3339303a3a2f34382d3438203d3e20323135343730.roa (hash: mky/ldC1XpVEwoLHqIyOpw4wZEQNfx0y97P4Ne2BiJs=) 2: 326130663a383563313a6234643a3a2f34382d3438203d3e20323133343238.roa (hash: MorJ8/zqWP+ENMZ78Dfg8lahRlU/VfcwHwmQyMuE7hc=) 3: A4A082EAE8EF48C7B407C40E742479EADD862089.crl (hash: KAzVrYcXG+2lvjxfJC0DxQ/u12S30J6R+uOsulQRCnw=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/1/A4A082EAE8EF48C7B407C40E742479EADD862089.crl rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/1/A4A082EAE8EF48C7B407C40E742479EADD862089.mft rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/A4A082EAE8EF48C7B407C40E742479EADD862089.cer rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 07:24:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:87:c1:ca:76:ad:94:d9:63:ca:7e:f0:c2:be:94:a1:50:31:25:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A4A082EAE8EF48C7B407C40E742479EADD862089 Validity Not Before: Dec 20 06:26:22 2025 GMT Not After : Dec 21 07:24:22 2025 GMT Subject: CN=A7778A91E6F272AE87DB6829A682C64F746E4A73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:78:a1:da:ad:ab:15:98:a3:ce:f6:4d:78:4e: 75:43:22:3f:15:a5:e8:3b:c4:ed:bd:03:d6:e2:f2: 04:aa:9b:bb:41:b4:80:40:0b:a0:a4:53:3e:d2:d4: 47:19:3c:f2:a6:25:44:5b:46:fe:4f:1a:35:0e:31: dc:2e:c6:db:9d:52:ed:be:8f:be:39:19:9a:54:b8: 80:ba:08:6d:9c:d2:9f:99:a6:bb:62:50:c6:46:e6: e4:af:8f:43:e9:6f:32:6e:d3:2d:b0:1e:5c:8d:df: 6b:3c:f6:61:42:66:4f:90:a9:9e:ab:7c:67:da:66: 34:e8:f0:ae:82:28:10:c9:e8:e3:81:9d:ec:84:9d: 4c:b8:45:2c:b7:59:e6:8f:35:94:d8:16:6e:9c:fa: c0:5e:a6:27:5f:e0:ba:51:27:ce:c4:f1:60:05:78: 1a:ed:c4:4f:8c:4f:98:91:1f:24:83:5c:43:1c:4d: 57:04:0e:1a:ff:24:7d:1c:82:05:f8:2a:1d:be:df: 14:81:7a:60:01:8a:de:a2:e4:73:f6:8f:3e:a3:44: 58:79:72:a0:e2:62:86:b6:78:34:12:11:8d:f7:bc: 3b:4f:b6:81:3d:7a:f9:30:02:8d:4d:de:65:4c:eb: 33:15:a4:c7:6c:20:10:54:94:0c:d4:97:7f:b6:8e: c8:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:77:8A:91:E6:F2:72:AE:87:DB:68:29:A6:82:C6:4F:74:6E:4A:73 X509v3 Authority Key Identifier: keyid:A4:A0:82:EA:E8:EF:48:C7:B4:07:C4:0E:74:24:79:EA:DD:86:20:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/1/A4A082EAE8EF48C7B407C40E742479EADD862089.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/A4A082EAE8EF48C7B407C40E742479EADD862089.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/1/A4A082EAE8EF48C7B407C40E742479EADD862089.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:78:23:16:7a:f6:ff:35:93:28:ba:cf:93:ab:ee:3c:c9:03: a1:40:48:e6:69:3f:76:0e:c4:3a:b3:8e:b9:ee:3d:04:56:ff: 04:04:a0:83:23:45:56:81:99:a0:c9:f1:5d:bd:4f:ca:6c:2a: 87:bf:a9:81:96:5c:5d:30:a6:12:31:fe:89:4f:7a:46:06:0b: bd:ce:37:e5:f1:3e:96:35:88:bb:08:7d:56:a7:93:6e:42:a8: 20:77:2d:5d:90:09:4e:37:39:1b:30:5f:bc:28:42:62:cb:5c: 04:d2:32:74:ab:7b:52:ac:27:32:ac:1c:76:3c:1e:de:43:56: 83:6f:32:e5:6f:0d:17:d4:24:4d:d3:4a:c7:16:69:fe:7e:67: 79:55:eb:bc:88:4c:e3:27:22:37:35:65:d2:ff:ab:1a:b8:da: 87:7a:55:a3:29:b5:bc:90:7b:72:00:d0:85:24:37:55:cf:e5: 9b:35:94:f1:11:51:e9:4c:52:87:75:23:32:b6:61:8c:96:fc: 41:fd:c0:e2:9b:fe:08:af:cb:5e:ad:06:f3:5d:34:2e:6b:12: c8:70:73:ce:2b:b2:4d:0c:d3:cd:e5:94:e8:78:97:d0:c9:a2: c3:ab:b7:50:d7:21:f7:ec:dd:34:af:c7:b3:6a:65:11:f9:74: 6f:10:85:41 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUdofBynatlNljyn7wwr6UoVAxJdUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTRBMDgyRUFFOEVGNDhDN0I0MDdDNDBFNzQyNDc5RUFE RDg2MjA4OTAeFw0yNTEyMjAwNjI2MjJaFw0yNTEyMjEwNzI0MjJaMDMxMTAvBgNV BAMTKEE3Nzc4QTkxRTZGMjcyQUU4N0RCNjgyOUE2ODJDNjRGNzQ2RTRBNzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9eKHarasVmKPO9k14TnVDIj8V peg7xO29A9bi8gSqm7tBtIBAC6CkUz7S1EcZPPKmJURbRv5PGjUOMdwuxtudUu2+ j745GZpUuIC6CG2c0p+ZprtiUMZG5uSvj0PpbzJu0y2wHlyN32s89mFCZk+QqZ6r fGfaZjTo8K6CKBDJ6OOBneyEnUy4RSy3WeaPNZTYFm6c+sBepidf4LpRJ87E8WAF eBrtxE+MT5iRHySDXEMcTVcEDhr/JH0cggX4Kh2+3xSBemABit6i5HP2jz6jRFh5 cqDiYoa2eDQSEY33vDtPtoE9evkwAo1N3mVM6zMVpMdsIBBUlAzUl3+2jsgJAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUp3eKkebycq6H22gppoLGT3RuSnMwHwYDVR0j BBgwFoAUpKCC6ujvSMe0B8QOdCR56t2GIIkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTlhYTlkYTctZjFlNC00ZDk4LWJmOTUtOWZkZmNmNDQ4 Zjc3LzEvQTRBMDgyRUFFOEVGNDhDN0I0MDdDNDBFNzQyNDc5RUFERDg2MjA4OS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84NGQ1MTgxMC0xOTg3LTQ3 MDEtOGYxZi04NDI1MTExOTY0ZjQvMC9BNEEwODJFQUU4RUY0OEM3QjQwN0M0MEU3 NDI0NzlFQUREODYyMDg5LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzE5YWE5ZGE3LWYxZTQtNGQ5OC1iZjk1LTlmZGZjZjQ0OGY3Ny8xL0E0QTA4MkVB RThFRjQ4QzdCNDA3QzQwRTc0MjQ3OUVBREQ4NjIwODkubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA5eCMW evb/NZMous+Tq+48yQOhQEjmaT92DsQ6s4657j0EVv8EBKCDI0VWgZmgyfFdvU/K bCqHv6mBllxdMKYSMf6JT3pGBgu9zjfl8T6WNYi7CH1Wp5NuQqggdy1dkAlONzkb MF+8KEJiy1wE0jJ0q3tSrCcyrBx2PB7eQ1aDbzLlbw0X1CRN00rHFmn+fmd5Veu8 iEzjJyI3NWXS/6sauNqHelWjKbW8kHtyANCFJDdVz+WbNZTxEVHpTFKHdSMytmGM lvxB/cDim/4Ir8terQbzXTQuaxLIcHPOK7JNDNPN5ZToeJfQyaLDq7dQ1yH37N00 r8ezamUR+XRvEIVB -----END CERTIFICATE-----Generated at Sat Dec 20 12:21:27 2025 by rpki-client