This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/282b5e00-2ac3-49f1-a29b-26a5fdf0fa41/0/72F3EE169F9BD71F78A42D1A72FE0F2A824822D1.mft File: 72F3EE169F9BD71F78A42D1A72FE0F2A824822D1.mft (raw, json) Hash identifier: 6N0a9taPPEq9riVDW1crsfjAmFTZFNnpsdvIyiPx3WA= Subject key identifier: F2:FE:BA:7F:0D:39:1F:47:22:C3:C6:BD:B1:86:01:0B:B5:68:63:F4 Authority key identifier: 72:F3:EE:16:9F:9B:D7:1F:78:A4:2D:1A:72:FE:0F:2A:82:48:22:D1 Certificate issuer: /CN=72f3ee169f9bd71f78a42d1a72fe0f2a824822d1 Certificate serial: 1AAEB63D666E6589E228C2AF55562C753A15A2D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cvPuFp-b1x94pC0acv4PKoJIItE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/282b5e00-2ac3-49f1-a29b-26a5fdf0fa41/0/72F3EE169F9BD71F78A42D1A72FE0F2A824822D1.mft Manifest number: 013C Signing time: Sat 20 Dec 2025 02:23:54 +0000 Manifest this update: Sat 20 Dec 2025 02:18:54 +0000 Manifest next update: Sun 21 Dec 2025 05:36:54 +0000 Files and hashes: 1: 3139352e37342e34302e302f32322d3234203d3e203331313834.roa (hash: OWTrG12il6+R+m95Ctsd+LQNgEyVIDW3AMDlydaSO3g=) 2: 3139332e32322e3235332e302f32342d3234203d3e203331313834.roa (hash: WrMYNrMKiwcHb7Layep1L0ANnPM7z3AEErZKMOJmYxg=) 3: 72F3EE169F9BD71F78A42D1A72FE0F2A824822D1.crl (hash: iCN5foOPrDjB52a1Dy5M8KolWfy8VSW3/RSF+B2Ajtk=) 4: 326131333a363134303a3a2f32392d3332203d3e203331313834.roa (hash: HEAzsbwZSQMPtZWHDUG9J3+dKm/03SetBs7lrO1nkwI=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/282b5e00-2ac3-49f1-a29b-26a5fdf0fa41/0/72F3EE169F9BD71F78A42D1A72FE0F2A824822D1.crl rsync://rsync.paas.rpki.ripe.net/repository/282b5e00-2ac3-49f1-a29b-26a5fdf0fa41/0/72F3EE169F9BD71F78A42D1A72FE0F2A824822D1.mft rsync://rpki.ripe.net/repository/DEFAULT/cvPuFp-b1x94pC0acv4PKoJIItE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 05:36:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:ae:b6:3d:66:6e:65:89:e2:28:c2:af:55:56:2c:75:3a:15:a2:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72f3ee169f9bd71f78a42d1a72fe0f2a824822d1 Validity Not Before: Dec 20 02:18:54 2025 GMT Not After : Dec 21 05:36:54 2025 GMT Subject: CN=F2FEBA7F0D391F4722C3C6BDB186010BB56863F4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:c4:7a:1c:15:4c:21:67:b1:0d:ac:52:99:20: 4e:2b:96:ff:ea:f1:43:43:5f:90:cb:7a:03:f7:86: d0:cf:60:d7:43:5e:c6:06:64:5a:0f:7b:4b:c2:9f: 3f:db:e6:ae:5f:87:7c:b5:49:7e:94:08:aa:10:24: d1:e8:fe:00:01:ec:95:49:31:fe:56:0a:b5:2b:8e: f8:0c:6f:c1:f3:b0:c9:ee:ee:bd:1a:10:e9:99:04: b2:8c:1e:e7:44:a6:af:2b:67:a7:b5:a0:c0:76:ea: b2:8b:44:a9:1f:09:2b:55:06:d2:ce:95:18:fa:65: 21:fd:58:54:c8:9a:ee:cf:d9:b9:ab:a9:19:ef:1d: 13:f4:e0:03:06:2c:82:de:81:fd:58:46:fa:ee:a8: 6d:e0:f1:de:5f:47:67:af:0b:64:04:22:97:a8:1d: 3d:c7:fd:52:99:41:6d:87:df:73:a2:6c:6d:0f:88: 26:4c:7a:bc:50:33:64:f7:b4:a9:1e:53:fa:d3:65: a1:92:62:42:9a:92:4a:6e:b1:77:01:3b:9d:f9:02: 7a:6c:6d:43:ad:e0:c7:4a:9e:8f:33:a2:5b:10:5a: 9b:96:d6:0c:37:e5:1e:06:e8:fb:85:e5:2c:df:52: d6:64:f6:88:58:97:6f:ef:a4:93:68:6b:d6:60:cc: 82:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:FE:BA:7F:0D:39:1F:47:22:C3:C6:BD:B1:86:01:0B:B5:68:63:F4 X509v3 Authority Key Identifier: keyid:72:F3:EE:16:9F:9B:D7:1F:78:A4:2D:1A:72:FE:0F:2A:82:48:22:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/282b5e00-2ac3-49f1-a29b-26a5fdf0fa41/0/72F3EE169F9BD71F78A42D1A72FE0F2A824822D1.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cvPuFp-b1x94pC0acv4PKoJIItE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/282b5e00-2ac3-49f1-a29b-26a5fdf0fa41/0/72F3EE169F9BD71F78A42D1A72FE0F2A824822D1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:52:a8:cc:1b:9c:29:2c:b6:b3:16:e0:ca:9c:39:cd:c7:d6: 89:e7:00:dc:55:01:cd:77:db:eb:9c:c2:d3:69:00:d0:2f:b5: 37:c4:18:4e:75:c5:08:be:43:d5:e8:e8:26:aa:2d:6c:1d:e2: b7:a6:6f:0f:7f:a7:9c:c5:51:35:bc:c6:28:f8:5f:5f:00:47: 83:43:10:2c:54:d4:25:aa:22:70:c5:9e:0b:30:a5:2f:fb:04: 32:d3:4f:f4:80:47:a1:73:85:ce:bd:f0:3e:01:37:55:40:f6: a4:fc:d9:50:c7:9e:8f:8d:52:b1:19:03:5e:82:29:89:90:d0: 0d:3d:ab:ce:cd:e8:c9:b8:2a:78:72:e8:91:3a:32:57:47:55: 1c:9a:90:ff:ed:32:81:79:42:fc:ce:a8:e1:b5:7a:64:fc:38: 3d:91:5d:c6:93:f9:06:7e:26:cd:1d:98:5e:a9:58:4a:14:1c: d4:a2:dc:ca:2f:90:2a:5d:fc:f1:7e:ca:a6:c5:c9:e2:99:4c: 41:f5:f0:e8:02:28:62:a5:fa:d2:3e:26:c6:6e:22:9f:17:02: bb:d3:a5:1f:a1:87:23:90:22:58:90:80:03:aa:4e:8a:95:25: b4:90:23:f9:2e:52:93:a6:20:03:da:cd:a4:89:1d:2e:c2:72: bb:d2:1a:2a -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUGq62PWZuZYniKMKvVVYsdToVotgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzJmM2VlMTY5ZjliZDcxZjc4YTQyZDFhNzJmZTBmMmE4 MjQ4MjJkMTAeFw0yNTEyMjAwMjE4NTRaFw0yNTEyMjEwNTM2NTRaMDMxMTAvBgNV BAMTKEYyRkVCQTdGMEQzOTFGNDcyMkMzQzZCREIxODYwMTBCQjU2ODYzRjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjxHocFUwhZ7ENrFKZIE4rlv/q 8UNDX5DLegP3htDPYNdDXsYGZFoPe0vCnz/b5q5fh3y1SX6UCKoQJNHo/gAB7JVJ Mf5WCrUrjvgMb8HzsMnu7r0aEOmZBLKMHudEpq8rZ6e1oMB26rKLRKkfCStVBtLO lRj6ZSH9WFTImu7P2bmrqRnvHRP04AMGLILegf1YRvruqG3g8d5fR2evC2QEIpeo HT3H/VKZQW2H33OibG0PiCZMerxQM2T3tKkeU/rTZaGSYkKakkpusXcBO535Anps bUOt4MdKno8zolsQWpuW1gw35R4G6PuF5SzfUtZk9ohYl2/vpJNoa9ZgzILXAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU8v66fw05H0ciw8a9sYYBC7VoY/QwHwYDVR0j BBgwFoAUcvPuFp+b1x94pC0acv4PKoJIItEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjgyYjVlMDAtMmFjMy00OWYxLWEyOWItMjZhNWZkZjBm YTQxLzAvNzJGM0VFMTY5RjlCRDcxRjc4QTQyRDFBNzJGRTBGMkE4MjQ4MjJEMS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2N2UHVGcC1iMXg5NHBDMGFjdjRQS29K SUl0RS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yODJiNWUwMC0y YWMzLTQ5ZjEtYTI5Yi0yNmE1ZmRmMGZhNDEvMC83MkYzRUUxNjlGOUJENzFGNzhB NDJEMUE3MkZFMEYyQTgyNDgyMkQxLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW1KozBucKSy2sxbgypw5 zcfWiecA3FUBzXfb65zC02kA0C+1N8QYTnXFCL5D1ejoJqotbB3it6ZvD3+nnMVR NbzGKPhfXwBHg0MQLFTUJaoicMWeCzClL/sEMtNP9IBHoXOFzr3wPgE3VUD2pPzZ UMeej41SsRkDXoIpiZDQDT2rzs3oybgqeHLokToyV0dVHJqQ/+0ygXlC/M6o4bV6 ZPw4PZFdxpP5Bn4mzR2YXqlYShQc1KLcyi+QKl388X7KpsXJ4plMQfXw6AIoYqX6 0j4mxm4inxcCu9OlH6GHI5AiWJCAA6pOipUltJAj+S5Sk6YgA9rNpIkdLsJyu9Ia Kg== -----END CERTIFICATE-----Generated at Sat Dec 20 17:00:05 2025 by rpki-client