This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1b22759c-d097-4faa-9dce-dd46c1d30ec8/2/6CBB5872C1432E2E2EB073D795852B3C3508301E.mft File: 6CBB5872C1432E2E2EB073D795852B3C3508301E.mft (raw, json) Hash identifier: nQU8145Ekkwop8Z+sfqGwKEAmlC23C8L9lvOd+xF0e0= Subject key identifier: BF:EB:16:A8:42:7B:B3:40:C1:56:C2:91:6A:9B:8D:27:C7:DA:F9:14 Authority key identifier: 6C:BB:58:72:C1:43:2E:2E:2E:B0:73:D7:95:85:2B:3C:35:08:30:1E Certificate issuer: /CN=6CBB5872C1432E2E2EB073D795852B3C3508301E Certificate serial: 4FF962EC9FE1A1BEF4DF91DD7563D78871B65541 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/6CBB5872C1432E2E2EB073D795852B3C3508301E.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1b22759c-d097-4faa-9dce-dd46c1d30ec8/2/6CBB5872C1432E2E2EB073D795852B3C3508301E.mft Manifest number: 0A Signing time: Fri 19 Dec 2025 16:05:05 +0000 Manifest this update: Fri 19 Dec 2025 16:00:05 +0000 Manifest next update: Sat 20 Dec 2025 16:36:05 +0000 Files and hashes: 1: 326131343a373538333a663430303a3a2f34342d3438203d3e20323130333532.roa (hash: ekXEHAQEwANLbMF852Ghqg+UVdQoN4/n6Mi8g6Ght3A=) 2: 6CBB5872C1432E2E2EB073D795852B3C3508301E.crl (hash: OwKvdGL8GH1xbddpt2kSx219ut836tLqXfw2IbRrh20=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1b22759c-d097-4faa-9dce-dd46c1d30ec8/2/6CBB5872C1432E2E2EB073D795852B3C3508301E.crl rsync://rsync.paas.rpki.ripe.net/repository/1b22759c-d097-4faa-9dce-dd46c1d30ec8/2/6CBB5872C1432E2E2EB073D795852B3C3508301E.mft rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/6CBB5872C1432E2E2EB073D795852B3C3508301E.cer rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.crl rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B149F23A3E99C4760297DD7104B400C835D86D19.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 11:26:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:f9:62:ec:9f:e1:a1:be:f4:df:91:dd:75:63:d7:88:71:b6:55:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6CBB5872C1432E2E2EB073D795852B3C3508301E Validity Not Before: Dec 19 16:00:05 2025 GMT Not After : Dec 20 16:36:05 2025 GMT Subject: CN=BFEB16A8427BB340C156C2916A9B8D27C7DAF914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:ad:6d:85:6e:b9:8c:ba:f5:71:eb:41:bc:23: 2d:03:f9:be:fc:c9:b6:9b:c4:eb:0f:6b:80:97:5e: 8d:77:50:64:8b:fd:f0:59:83:b6:60:d9:38:a7:aa: 15:60:49:28:3b:f6:60:10:f4:6c:8d:36:d9:69:5d: 21:8a:23:a5:4c:f7:ed:73:9d:2b:16:44:95:2d:ac: 95:d7:b4:37:24:bb:d6:7e:b5:1c:dd:1b:63:c9:ed: d3:ff:5d:50:f4:ef:24:45:35:8c:e1:ef:dd:7c:42: aa:36:69:0e:0b:30:96:e6:3c:4d:9f:18:4d:12:45: e0:10:cb:83:4e:63:ef:32:9b:57:80:82:81:78:8b: 59:14:dd:88:6a:f2:e1:d5:98:a9:d5:e3:85:09:c0: 7d:4e:b1:00:bc:c1:a5:50:b1:11:bf:84:21:30:0a: 3b:58:78:59:26:da:4d:6f:17:3c:e7:71:17:fd:9d: 03:e9:78:85:75:d4:28:5f:9b:53:b9:00:31:8a:e1: 98:6e:6c:61:33:f9:d6:dc:2b:56:66:6a:ca:0b:f9: d3:9c:1e:9d:5c:4d:2d:cc:70:07:5e:50:20:97:98: f1:21:d5:c1:f6:fd:1b:e4:8b:f1:8e:75:d7:8d:94: 9b:15:46:9a:32:0b:31:63:2a:02:5a:ec:9d:e8:56: ca:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:EB:16:A8:42:7B:B3:40:C1:56:C2:91:6A:9B:8D:27:C7:DA:F9:14 X509v3 Authority Key Identifier: keyid:6C:BB:58:72:C1:43:2E:2E:2E:B0:73:D7:95:85:2B:3C:35:08:30:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1b22759c-d097-4faa-9dce-dd46c1d30ec8/2/6CBB5872C1432E2E2EB073D795852B3C3508301E.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/6CBB5872C1432E2E2EB073D795852B3C3508301E.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1b22759c-d097-4faa-9dce-dd46c1d30ec8/2/6CBB5872C1432E2E2EB073D795852B3C3508301E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:ab:aa:b9:b1:41:43:b2:7f:d3:f5:a4:c6:94:1c:3c:d1:5b: 56:5b:d9:e5:14:e2:29:2b:8c:c6:3b:fb:69:34:8d:94:db:92: c1:36:e7:6b:0c:86:11:59:6d:60:6b:e7:a4:33:dc:3f:61:58: e7:42:c6:2d:44:85:99:30:73:e5:cf:65:9a:41:c7:32:40:72: 05:e1:61:c8:94:8f:cd:20:f1:58:54:c2:a1:78:fc:2d:db:41: 2f:c0:45:49:a9:3c:3a:7e:74:23:67:22:28:34:02:c1:b5:02: 26:f4:ca:33:a3:f6:4c:e8:76:dd:c8:7b:19:85:4f:56:30:b0: 5a:01:fc:5d:ef:44:2e:f4:34:60:b8:31:95:32:a8:99:4a:35: f8:4c:ec:7a:ba:f2:e3:74:57:99:57:ba:f3:2f:0d:12:b3:df: 8a:bd:66:f6:e2:e5:8a:2a:4f:6a:ee:ea:ea:f1:5c:33:84:52: 30:ac:a0:43:b5:aa:aa:fa:d0:f9:81:ef:01:a6:a3:a8:0a:19: e6:ff:5d:da:33:77:1a:11:38:12:45:bc:92:07:37:51:a6:a0: 43:03:64:b1:89:d2:0d:43:ec:c9:65:c9:58:89:82:2b:d3:cc: 16:1a:1f:d4:93:7a:c5:56:d7:8c:14:ef:d0:9a:86:29:46:03: 90:07:ed:99 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUT/li7J/hob7035HddWPXiHG2VUEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkNCQjU4NzJDMTQzMkUyRTJFQjA3M0Q3OTU4NTJCM0Mz NTA4MzAxRTAeFw0yNTEyMTkxNjAwMDVaFw0yNTEyMjAxNjM2MDVaMDMxMTAvBgNV BAMTKEJGRUIxNkE4NDI3QkIzNDBDMTU2QzI5MTZBOUI4RDI3QzdEQUY5MTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTrW2FbrmMuvVx60G8Iy0D+b78 ybabxOsPa4CXXo13UGSL/fBZg7Zg2TinqhVgSSg79mAQ9GyNNtlpXSGKI6VM9+1z nSsWRJUtrJXXtDcku9Z+tRzdG2PJ7dP/XVD07yRFNYzh7918Qqo2aQ4LMJbmPE2f GE0SReAQy4NOY+8ym1eAgoF4i1kU3Yhq8uHVmKnV44UJwH1OsQC8waVQsRG/hCEw CjtYeFkm2k1vFzzncRf9nQPpeIV11Chfm1O5ADGK4ZhubGEz+dbcK1ZmasoL+dOc Hp1cTS3McAdeUCCXmPEh1cH2/Rvki/GOddeNlJsVRpoyCzFjKgJa7J3oVsrFAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUv+sWqEJ7s0DBVsKRapuNJ8fa+RQwHwYDVR0j BBgwFoAUbLtYcsFDLi4usHPXlYUrPDUIMB4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMWIyMjc1OWMtZDA5Ny00ZmFhLTlkY2UtZGQ0NmMxZDMw ZWM4LzIvNkNCQjU4NzJDMTQzMkUyRTJFQjA3M0Q3OTU4NTJCM0MzNTA4MzAxRS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ODFmOTc4Mi04OThlLTRi ODMtOTVlNi00ZmY0YWI3NWM5ZGMvMi82Q0JCNTg3MkMxNDMyRTJFMkVCMDczRDc5 NTg1MkIzQzM1MDgzMDFFLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzFiMjI3NTljLWQwOTctNGZhYS05ZGNlLWRkNDZjMWQzMGVjOC8yLzZDQkI1ODcy QzE0MzJFMkUyRUIwNzNENzk1ODUyQjNDMzUwODMwMUUubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQARq6q5 sUFDsn/T9aTGlBw80VtWW9nlFOIpK4zGO/tpNI2U25LBNudrDIYRWW1ga+ekM9w/ YVjnQsYtRIWZMHPlz2WaQccyQHIF4WHIlI/NIPFYVMKhePwt20EvwEVJqTw6fnQj ZyIoNALBtQIm9Mozo/ZM6HbdyHsZhU9WMLBaAfxd70Qu9DRguDGVMqiZSjX4TOx6 uvLjdFeZV7rzLw0Ss9+KvWb24uWKKk9q7urq8VwzhFIwrKBDtaqq+tD5ge8BpqOo Chnm/13aM3caETgSRbySBzdRpqBDA2SxidINQ+zJZclYiYIr08wWGh/Uk3rFVteM FO/QmoYpRgOQB+2Z -----END CERTIFICATE-----Generated at Fri Dec 19 20:16:30 2025 by rpki-client