This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1b22759c-d097-4faa-9dce-dd46c1d30ec8/1/F968DCAEB06DC8F26E0E5B9735B0022903D73C76.mft File: F968DCAEB06DC8F26E0E5B9735B0022903D73C76.mft (raw, json) Hash identifier: B32pjLl4hxbFpES+tZoaad1bNrZeOh3+4VZEBmd3HfU= Subject key identifier: 09:CC:BC:BC:46:1B:7A:AA:5C:FC:BB:66:48:69:67:62:90:FA:77:B2 Authority key identifier: F9:68:DC:AE:B0:6D:C8:F2:6E:0E:5B:97:35:B0:02:29:03:D7:3C:76 Certificate issuer: /CN=F968DCAEB06DC8F26E0E5B9735B0022903D73C76 Certificate serial: 4DBE354A2D6A1E0507791B02423C2D07076EFFDD Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/F968DCAEB06DC8F26E0E5B9735B0022903D73C76.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1b22759c-d097-4faa-9dce-dd46c1d30ec8/1/F968DCAEB06DC8F26E0E5B9735B0022903D73C76.mft Manifest number: 0B Signing time: Fri 19 Dec 2025 17:15:05 +0000 Manifest this update: Fri 19 Dec 2025 17:10:05 +0000 Manifest next update: Sat 20 Dec 2025 18:16:05 +0000 Files and hashes: 1: 326130663a316363353a6630303a3a2f34302d3438203d3e20323130333532.roa (hash: FgpfzWcse5IBa7QHvf8bpyGXilzaCiMGWtUP4nJenmo=) 2: F968DCAEB06DC8F26E0E5B9735B0022903D73C76.crl (hash: jco4R+IjR52dqhMZlxeLwqigR9ruW9FmofvjrouPSpU=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1b22759c-d097-4faa-9dce-dd46c1d30ec8/1/F968DCAEB06DC8F26E0E5B9735B0022903D73C76.crl rsync://rsync.paas.rpki.ripe.net/repository/1b22759c-d097-4faa-9dce-dd46c1d30ec8/1/F968DCAEB06DC8F26E0E5B9735B0022903D73C76.mft rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/F968DCAEB06DC8F26E0E5B9735B0022903D73C76.cer rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/75A838E02C61800F73D3019DE0A51F567B64BC0E.crl rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/75A838E02C61800F73D3019DE0A51F567B64BC0E.mft rsync://rpki.ripe.net/repository/DEFAULT/dag44CxhgA9z0wGd4KUfVntkvA4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 11:33:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:be:35:4a:2d:6a:1e:05:07:79:1b:02:42:3c:2d:07:07:6e:ff:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F968DCAEB06DC8F26E0E5B9735B0022903D73C76 Validity Not Before: Dec 19 17:10:05 2025 GMT Not After : Dec 20 18:16:05 2025 GMT Subject: CN=09CCBCBC461B7AAA5CFCBB664869676290FA77B2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:93:ad:f9:78:68:20:e8:09:95:13:f0:fd:c5: b5:f1:1d:61:67:f2:2b:12:bb:e4:5e:74:4e:76:55: 7e:4f:13:dc:be:cd:06:76:7e:43:7b:92:4c:9c:f2: f2:a5:31:9b:b2:9b:f7:97:5d:86:75:c8:5e:dd:6b: 6c:98:d7:57:1c:04:bd:79:85:2e:8c:63:c5:08:d7: 2b:e8:24:ac:89:cf:2e:d4:c5:97:c3:16:9f:b1:ab: f2:98:e1:2a:a2:5e:9c:55:21:f6:98:e1:e8:14:17: ec:12:20:9e:36:fe:fe:d5:51:cf:af:44:fb:89:43: a8:1a:a0:1f:f6:88:db:c2:c6:1a:5a:f8:9b:f3:03: 03:c3:49:b5:ed:e6:15:45:a1:1c:5f:70:64:14:9b: d2:65:e4:14:6b:57:75:76:9a:6d:6d:73:61:da:b2: e0:c4:07:96:4d:11:f9:dd:a8:18:7b:1e:2a:f6:f4: 7e:d2:e4:39:9f:5d:ef:1a:d8:25:d8:03:6b:da:a0: bd:29:25:5e:71:c0:52:11:28:06:ac:b9:1d:e6:e0: ec:a2:63:e3:79:a4:dc:71:5a:d7:f9:10:15:22:4f: 26:c2:82:2f:fb:5e:a7:13:80:2b:ec:30:24:bb:7d: f9:6b:ea:a1:3d:73:b2:8e:fc:48:ac:7f:0d:09:69: 8b:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:CC:BC:BC:46:1B:7A:AA:5C:FC:BB:66:48:69:67:62:90:FA:77:B2 X509v3 Authority Key Identifier: keyid:F9:68:DC:AE:B0:6D:C8:F2:6E:0E:5B:97:35:B0:02:29:03:D7:3C:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1b22759c-d097-4faa-9dce-dd46c1d30ec8/1/F968DCAEB06DC8F26E0E5B9735B0022903D73C76.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/F968DCAEB06DC8F26E0E5B9735B0022903D73C76.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1b22759c-d097-4faa-9dce-dd46c1d30ec8/1/F968DCAEB06DC8F26E0E5B9735B0022903D73C76.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:f9:ca:e5:a9:d9:6d:bb:a6:c2:2e:f2:65:69:5d:94:70:2b: 16:ef:8d:67:e5:a0:95:d5:79:c0:73:da:1f:75:6e:e5:3a:3f: be:3f:85:ef:31:4d:82:01:ea:17:ed:22:d5:70:83:a2:bd:2a: 57:ae:bb:2e:09:0e:2a:1c:ce:8c:14:df:e3:ba:ab:ef:6e:b6: 2f:e0:34:53:a9:80:13:44:be:86:43:c1:e3:31:b2:17:a0:a0: 87:cf:a9:23:9c:a7:9c:90:0f:8d:5d:15:12:01:0a:08:19:4b: 46:95:4d:1f:ab:d1:ae:6d:7c:a3:ec:ab:21:73:45:26:04:56: f7:8d:17:36:8e:0f:ce:e6:82:48:ab:86:d1:9e:c9:8d:c6:e6: 37:32:38:a3:82:d2:56:0c:49:08:22:e8:2c:c0:93:94:6e:55: 91:8a:ad:41:8f:d0:22:65:dd:70:fb:a3:ca:7d:39:09:ea:c7: 91:84:9c:8c:11:a1:24:b6:f4:41:2d:3a:63:de:f4:4e:29:c3: 64:77:d3:69:73:f3:4d:b1:70:32:b8:8d:01:25:fb:65:0c:5d: 89:d3:ad:99:03:12:d1:b2:41:d1:25:78:c3:5a:2e:57:6d:88: 76:d8:31:22:1f:f7:13:0d:fb:3d:b5:33:72:19:ff:85:b6:11: e8:6f:39:79 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUTb41Si1qHgUHeRsCQjwtBwdu/90wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjk2OERDQUVCMDZEQzhGMjZFMEU1Qjk3MzVCMDAyMjkw M0Q3M0M3NjAeFw0yNTEyMTkxNzEwMDVaFw0yNTEyMjAxODE2MDVaMDMxMTAvBgNV BAMTKDA5Q0NCQ0JDNDYxQjdBQUE1Q0ZDQkI2NjQ4Njk2NzYyOTBGQTc3QjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyk635eGgg6AmVE/D9xbXxHWFn 8isSu+RedE52VX5PE9y+zQZ2fkN7kkyc8vKlMZuym/eXXYZ1yF7da2yY11ccBL15 hS6MY8UI1yvoJKyJzy7UxZfDFp+xq/KY4SqiXpxVIfaY4egUF+wSIJ42/v7VUc+v RPuJQ6gaoB/2iNvCxhpa+JvzAwPDSbXt5hVFoRxfcGQUm9Jl5BRrV3V2mm1tc2Ha suDEB5ZNEfndqBh7Hir29H7S5DmfXe8a2CXYA2vaoL0pJV5xwFIRKAasuR3m4Oyi Y+N5pNxxWtf5EBUiTybCgi/7XqcTgCvsMCS7fflr6qE9c7KO/Eisfw0JaYvFAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUCcy8vEYbeqpc/LtmSGlnYpD6d7IwHwYDVR0j BBgwFoAU+WjcrrBtyPJuDluXNbACKQPXPHYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMWIyMjc1OWMtZDA5Ny00ZmFhLTlkY2UtZGQ0NmMxZDMw ZWM4LzEvRjk2OERDQUVCMDZEQzhGMjZFMEU1Qjk3MzVCMDAyMjkwM0Q3M0M3Ni5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lMjZlYjEzNi00ZmU1LTRl NjEtYTRkOC1mMzQ1ZjUyYmMyNWQvMC9GOTY4RENBRUIwNkRDOEYyNkUwRTVCOTcz NUIwMDIyOTAzRDczQzc2LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzFiMjI3NTljLWQwOTctNGZhYS05ZGNlLWRkNDZjMWQzMGVjOC8xL0Y5NjhEQ0FF QjA2REM4RjI2RTBFNUI5NzM1QjAwMjI5MDNENzNDNzYubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCI+crl qdltu6bCLvJlaV2UcCsW741n5aCV1XnAc9ofdW7lOj++P4XvMU2CAeoX7SLVcIOi vSpXrrsuCQ4qHM6MFN/juqvvbrYv4DRTqYATRL6GQ8HjMbIXoKCHz6kjnKeckA+N XRUSAQoIGUtGlU0fq9GubXyj7Kshc0UmBFb3jRc2jg/O5oJIq4bRnsmNxuY3Mjij gtJWDEkIIugswJOUblWRiq1Bj9AiZd1w+6PKfTkJ6seRhJyMEaEktvRBLTpj3vRO KcNkd9Npc/NNsXAyuI0BJftlDF2J062ZAxLRskHRJXjDWi5XbYh22DEiH/cTDfs9 tTNyGf+FthHobzl5 -----END CERTIFICATE-----Generated at Fri Dec 19 22:02:45 2025 by rpki-client