This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.mft File: 069FAF47FF48AEF4C98F5097074530A74C111AB9.mft (raw, json) Hash identifier: pLzcbW3KhojN6e40kXtLJcrA6W1eBu5yHRmMN+O7ru8= Subject key identifier: 27:4A:69:6D:AB:43:2E:64:4D:C4:8E:67:5A:EB:16:92:56:21:04:3E Authority key identifier: 06:9F:AF:47:FF:48:AE:F4:C9:8F:50:97:07:45:30:A7:4C:11:1A:B9 Certificate issuer: /CN=069FAF47FF48AEF4C98F5097074530A74C111AB9 Certificate serial: 6D0E652E1DF2765244CCDF1898D0B0ACA44C7998 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/069FAF47FF48AEF4C98F5097074530A74C111AB9.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.mft Manifest number: 041D Signing time: Thu 18 Dec 2025 18:07:48 +0000 Manifest this update: Thu 18 Dec 2025 18:02:48 +0000 Manifest next update: Fri 19 Dec 2025 21:09:48 +0000 Files and hashes: 1: 069FAF47FF48AEF4C98F5097074530A74C111AB9.crl (hash: 2pNvjf10DfsgDas+XVe2tEh87X6RWS59S8S0zZ3x140=) 2: 326130663a383563313a3335373a3a2f34382d3438203d3e20323135363137.roa (hash: 0B/fHqDaAtnHXiIonhpxQ7ujnJI7VSnPxGbabzcBFIA=) 3: 326130663a383563313a3335313a3a2f34382d3438203d3e20343031333836.roa (hash: pdFac+QI0R/UPdzS1q2a9ExUPSLxlAAabS/RPyMDKJ0=) 4: 326130663a383563313a3336333a3a2f34382d3438203d3e20323135363137.roa (hash: G15mowLoM7Eub0vLuxgC+jxtFArNOkVyDHG13blFH8s=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.crl rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.mft rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/069FAF47FF48AEF4C98F5097074530A74C111AB9.cer rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 21:09:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:0e:65:2e:1d:f2:76:52:44:cc:df:18:98:d0:b0:ac:a4:4c:79:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=069FAF47FF48AEF4C98F5097074530A74C111AB9 Validity Not Before: Dec 18 18:02:48 2025 GMT Not After : Dec 19 21:09:48 2025 GMT Subject: CN=274A696DAB432E644DC48E675AEB16925621043E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:50:ea:6d:2a:cd:be:ca:b4:a2:21:ae:ef:c2: fe:99:0d:3d:24:0e:c5:10:9f:c3:d5:51:a7:45:42: c5:c5:be:d2:27:ca:7c:14:62:90:d0:15:11:e4:a9: 1a:7e:fb:a7:61:5d:81:63:59:cc:9b:01:39:eb:df: 84:35:ff:72:d7:47:cf:13:f7:9b:c3:1c:15:fd:db: 1c:11:62:c7:7a:34:19:bc:94:ac:50:a4:c2:26:36: dc:ea:7b:2a:17:97:a0:32:ca:fa:d2:fc:74:9b:27: 42:85:c9:20:79:3e:1c:e5:18:b5:4e:d0:2f:36:77: 23:8a:25:eb:68:34:e1:c7:59:75:34:91:89:4a:a1: 8c:a9:19:86:45:9b:12:0b:83:e2:33:ac:62:43:dd: 46:42:9f:b2:9f:d6:c8:c5:22:04:3c:ba:84:86:8b: cb:f4:73:a9:29:1c:9b:5b:62:85:2d:08:a9:d4:00: e1:ce:6a:78:57:23:a9:7b:7c:0f:79:d9:5c:71:61: bc:c9:10:34:09:8d:1f:cb:f4:0d:d5:c8:c9:b1:9d: 57:09:b5:e5:1d:38:cd:cb:1c:64:a3:ac:bf:c6:10: ac:72:a5:a8:96:cd:80:5a:00:b0:0e:2a:84:49:25: 09:bb:0a:ac:48:df:e1:43:eb:cc:7a:b7:27:30:ad: 36:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:4A:69:6D:AB:43:2E:64:4D:C4:8E:67:5A:EB:16:92:56:21:04:3E X509v3 Authority Key Identifier: keyid:06:9F:AF:47:FF:48:AE:F4:C9:8F:50:97:07:45:30:A7:4C:11:1A:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/069FAF47FF48AEF4C98F5097074530A74C111AB9.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:11:d1:79:9e:fd:48:e6:19:82:0c:cc:9c:46:b8:10:69:e1: d7:4b:14:32:92:15:57:1d:03:49:5e:3c:95:3b:e4:ed:a0:cd: 1b:dc:96:bc:9c:50:fa:cb:31:b2:01:98:75:7d:0c:98:5d:9e: d7:50:f4:f7:8c:8f:37:04:97:52:08:f4:6c:6d:77:ad:e3:4d: 6f:fb:e4:68:f1:6c:56:d0:80:b1:f1:da:4a:ca:78:55:e7:8f: c6:8a:2f:e3:f7:42:f9:d9:9c:39:3a:55:ef:d5:75:30:0f:63: 39:4c:35:4c:4b:b2:be:75:3e:ea:7d:8d:3b:6b:e3:8f:1d:b6: 04:22:f2:fe:ee:3c:81:fb:16:13:0b:78:1c:17:55:36:41:14: 2c:78:21:b3:f5:ed:2d:45:a6:5f:1b:35:3c:f1:f3:6b:29:57: 98:15:8d:a3:34:3d:72:01:c1:56:db:16:3d:52:a7:74:38:74: e9:e7:4d:8c:2c:2a:ea:35:3a:8b:cc:8e:79:75:b2:f1:55:99: c1:b2:2e:5e:fd:44:39:07:5f:49:7d:19:24:1b:7e:9e:f3:c7: 36:cd:2e:46:82:6f:be:63:07:be:06:4e:92:80:30:41:ec:3d: 60:13:94:2e:e4:ae:0d:1d:2b:f2:ae:5d:0c:d0:f9:28:a8:d9: fd:b3:34:79 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUbQ5lLh3ydlJEzN8YmNCwrKRMeZgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDY5RkFGNDdGRjQ4QUVGNEM5OEY1MDk3MDc0NTMwQTc0 QzExMUFCOTAeFw0yNTEyMTgxODAyNDhaFw0yNTEyMTkyMTA5NDhaMDMxMTAvBgNV BAMTKDI3NEE2OTZEQUI0MzJFNjQ0REM0OEU2NzVBRUIxNjkyNTYyMTA0M0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEUOptKs2+yrSiIa7vwv6ZDT0k DsUQn8PVUadFQsXFvtInynwUYpDQFRHkqRp++6dhXYFjWcybATnr34Q1/3LXR88T 95vDHBX92xwRYsd6NBm8lKxQpMImNtzqeyoXl6AyyvrS/HSbJ0KFySB5PhzlGLVO 0C82dyOKJetoNOHHWXU0kYlKoYypGYZFmxILg+IzrGJD3UZCn7Kf1sjFIgQ8uoSG i8v0c6kpHJtbYoUtCKnUAOHOanhXI6l7fA952VxxYbzJEDQJjR/L9A3VyMmxnVcJ teUdOM3LHGSjrL/GEKxypaiWzYBaALAOKoRJJQm7CqxI3+FD68x6tycwrTbbAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUJ0ppbatDLmRNxI5nWusWklYhBD4wHwYDVR0j BBgwFoAUBp+vR/9IrvTJj1CXB0Uwp0wRGrkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjNkNWY2ODItYjUxYi00ODEyLWI4YjEtNDMwZTM4Njgz NzQ4LzIvMDY5RkFGNDdGRjQ4QUVGNEM5OEY1MDk3MDc0NTMwQTc0QzExMUFCOS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84NGQ1MTgxMC0xOTg3LTQ3 MDEtOGYxZi04NDI1MTExOTY0ZjQvMC8wNjlGQUY0N0ZGNDhBRUY0Qzk4RjUwOTcw NzQ1MzBBNzRDMTExQUI5LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzIzZDVmNjgyLWI1MWItNDgxMi1iOGIxLTQzMGUzODY4Mzc0OC8yLzA2OUZBRjQ3 RkY0OEFFRjRDOThGNTA5NzA3NDUzMEE3NEMxMTFBQjkubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA5EdF5 nv1I5hmCDMycRrgQaeHXSxQykhVXHQNJXjyVO+TtoM0b3Ja8nFD6yzGyAZh1fQyY XZ7XUPT3jI83BJdSCPRsbXet401v++Ro8WxW0ICx8dpKynhV54/Gii/j90L52Zw5 OlXv1XUwD2M5TDVMS7K+dT7qfY07a+OPHbYEIvL+7jyB+xYTC3gcF1U2QRQseCGz 9e0tRaZfGzU88fNrKVeYFY2jND1yAcFW2xY9Uqd0OHTp502MLCrqNTqLzI55dbLx VZnBsi5e/UQ5B19JfRkkG36e88c2zS5Ggm++Ywe+Bk6SgDBB7D1gE5Qu5K4NHSvy rl0M0PkoqNn9szR5 -----END CERTIFICATE-----Generated at Fri Dec 19 11:48:43 2025 by rpki-client