This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/29066f5d-ecc1-4927-95c1-e1a8df8f9897/0/1498141819112B8446C2D4A3111F53038F05DBE9.mft File: 1498141819112B8446C2D4A3111F53038F05DBE9.mft (raw, json) Hash identifier: cxvVsgzJ+FQT3nlgLNNH3yU0xwBg5I1ALkpKpeCWhA8= Subject key identifier: 9A:94:1C:89:5F:7A:6A:E2:93:A2:FB:EA:7A:73:49:47:8A:21:F5:F8 Authority key identifier: 14:98:14:18:19:11:2B:84:46:C2:D4:A3:11:1F:53:03:8F:05:DB:E9 Certificate issuer: /CN=1498141819112b8446c2d4a3111f53038f05dbe9 Certificate serial: 636995255D1D90EB48BFF18E00A20757DC48C403 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FJgUGBkRK4RGwtSjER9TA48F2-k.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/29066f5d-ecc1-4927-95c1-e1a8df8f9897/0/1498141819112B8446C2D4A3111F53038F05DBE9.mft Manifest number: 011F Signing time: Sun 21 Dec 2025 15:17:38 +0000 Manifest this update: Sun 21 Dec 2025 15:12:38 +0000 Manifest next update: Mon 22 Dec 2025 19:03:38 +0000 Files and hashes: 1: 3138352e39312e3131342e302f32342d3234203d3e20323132323338.roa (hash: O3+fkuGYHEGuJgzobwksf3BrAnxvmElLOiQKqynfHQQ=) 2: 3138352e39312e3131332e302f32342d3234203d3e20323134323038.roa (hash: qSSu/jTa9CtmAhgZlrJ1s4QldXeKp0EqfLu29FuP5Zs=) 3: 3138352e39312e3131352e302f32342d3234203d3e2034363337.roa (hash: ck91ILJJRhGrU5dcx7s2t1suhnGyLbRTekoZlADPXPE=) 4: 1498141819112B8446C2D4A3111F53038F05DBE9.crl (hash: 8YT5Ecv3l/f1qpZYZPB41Lpc/b6CeZgdkrUvfQ/QDA0=) 5: 3138352e39312e3131322e302f32342d3234203d3e20383334.roa (hash: XesoIFDmsJmrSdpgdAV0vhyomNLwoypYQnvo40xyQgs=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/29066f5d-ecc1-4927-95c1-e1a8df8f9897/0/1498141819112B8446C2D4A3111F53038F05DBE9.crl rsync://rsync.paas.rpki.ripe.net/repository/29066f5d-ecc1-4927-95c1-e1a8df8f9897/0/1498141819112B8446C2D4A3111F53038F05DBE9.mft rsync://rpki.ripe.net/repository/DEFAULT/FJgUGBkRK4RGwtSjER9TA48F2-k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 19:03:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:69:95:25:5d:1d:90:eb:48:bf:f1:8e:00:a2:07:57:dc:48:c4:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1498141819112b8446c2d4a3111f53038f05dbe9 Validity Not Before: Dec 21 15:12:38 2025 GMT Not After : Dec 22 19:03:38 2025 GMT Subject: CN=9A941C895F7A6AE293A2FBEA7A7349478A21F5F8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:ba:0b:dd:20:4f:b3:4c:b8:47:d0:b9:b5:de: 8d:f4:82:79:dd:a3:b0:4b:35:ea:7f:d7:07:12:d1: 0a:62:2c:26:56:cc:ca:82:4f:f4:2f:de:47:2c:d4: db:39:eb:eb:bc:bb:6e:ff:fe:ad:d6:ea:50:14:89: 3d:a4:00:81:70:ee:4d:79:50:86:7d:89:0b:a9:f4: 16:b2:92:08:3d:55:20:83:bd:a1:aa:e6:d8:b3:ad: 3a:5a:97:51:84:5a:d1:5f:d7:42:4b:95:d4:98:ba: 52:22:4b:ac:69:a1:96:6a:b2:48:a6:82:34:6a:3f: 06:0d:f3:34:4a:ec:b5:95:33:71:64:10:3b:f8:a8: dc:05:c4:ca:b3:5f:2c:ca:6e:b9:ed:55:dc:0f:25: 11:62:2c:14:e0:bc:0d:a6:4f:4f:59:f1:dc:ab:d2: ac:5b:d6:9b:59:1f:91:02:19:11:31:70:7f:c4:71: f5:40:80:f2:bf:36:ea:30:bd:9a:28:2e:33:90:e0: 96:28:75:1a:5e:11:f4:be:4f:ca:89:cd:3c:24:b2: 22:31:70:3a:70:e1:29:44:ac:0b:c3:67:30:14:18: 2e:e1:71:d6:59:a9:8d:0c:aa:f2:5b:b0:40:0d:a0: 87:03:f9:be:90:d3:ef:ed:97:20:a8:26:18:ec:b4: 30:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:94:1C:89:5F:7A:6A:E2:93:A2:FB:EA:7A:73:49:47:8A:21:F5:F8 X509v3 Authority Key Identifier: keyid:14:98:14:18:19:11:2B:84:46:C2:D4:A3:11:1F:53:03:8F:05:DB:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/29066f5d-ecc1-4927-95c1-e1a8df8f9897/0/1498141819112B8446C2D4A3111F53038F05DBE9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FJgUGBkRK4RGwtSjER9TA48F2-k.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/29066f5d-ecc1-4927-95c1-e1a8df8f9897/0/1498141819112B8446C2D4A3111F53038F05DBE9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:0a:85:7f:1b:4e:12:a2:32:31:e7:9d:4d:f1:2c:1d:d9:ad: 25:58:8f:94:4d:57:83:0e:d4:b9:6b:5d:94:5b:72:2e:e8:d8: db:26:8f:6c:11:d5:30:30:c5:4a:5b:23:a8:ad:93:63:08:92: 41:bc:22:a3:a6:b6:3f:f4:bc:b5:a4:94:5e:cf:32:90:51:2e: 24:72:81:21:94:f9:7a:4c:04:6e:00:df:12:fb:9d:75:48:42: cc:33:3d:fc:1f:65:52:48:7b:3f:0e:a3:2f:f3:67:d4:1b:71: d8:35:f1:97:27:bf:cb:6c:e3:28:05:14:d1:24:90:20:d5:03: ff:fb:23:cf:c3:8d:b0:f2:42:5f:52:c5:d2:0a:39:54:1d:12: 20:a2:d6:f2:a3:30:aa:b3:2c:b7:d3:b3:89:b1:cf:3f:6c:2c: 2f:f6:0f:68:1d:ad:4b:57:44:47:67:05:3c:d9:67:c5:c6:d8: fb:d9:a6:43:ee:80:81:40:bf:66:db:8b:4a:36:58:c3:8e:89: 8a:4b:fd:b7:eb:32:6e:a7:d6:27:e6:9b:c5:a1:86:62:9a:5f: 3d:44:5a:63:db:6e:01:e7:20:dd:09:84:e0:7d:e5:5a:02:ee: ce:ef:0f:02:0c:15:61:bd:21:a5:9b:12:a9:b4:fa:85:76:5c: 85:23:6e:ee -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUY2mVJV0dkOtIv/GOAKIHV9xIxAMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTQ5ODE0MTgxOTExMmI4NDQ2YzJkNGEzMTExZjUzMDM4 ZjA1ZGJlOTAeFw0yNTEyMjExNTEyMzhaFw0yNTEyMjIxOTAzMzhaMDMxMTAvBgNV BAMTKDlBOTQxQzg5NUY3QTZBRTI5M0EyRkJFQTdBNzM0OTQ3OEEyMUY1RjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDougvdIE+zTLhH0Lm13o30gnnd o7BLNep/1wcS0QpiLCZWzMqCT/Qv3kcs1Ns56+u8u27//q3W6lAUiT2kAIFw7k15 UIZ9iQup9Baykgg9VSCDvaGq5tizrTpal1GEWtFf10JLldSYulIiS6xpoZZqskim gjRqPwYN8zRK7LWVM3FkEDv4qNwFxMqzXyzKbrntVdwPJRFiLBTgvA2mT09Z8dyr 0qxb1ptZH5ECGRExcH/EcfVAgPK/NuowvZooLjOQ4JYodRpeEfS+T8qJzTwksiIx cDpw4SlErAvDZzAUGC7hcdZZqY0MqvJbsEANoIcD+b6Q0+/tlyCoJhjstDCnAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUmpQciV96auKTovvqenNJR4oh9fgwHwYDVR0j BBgwFoAUFJgUGBkRK4RGwtSjER9TA48F2+kwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjkwNjZmNWQtZWNjMS00OTI3LTk1YzEtZTFhOGRmOGY5 ODk3LzAvMTQ5ODE0MTgxOTExMkI4NDQ2QzJENEEzMTExRjUzMDM4RjA1REJFOS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0ZKZ1VHQmtSSzRSR3d0U2pFUjlUQTQ4 RjItay5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yOTA2NmY1ZC1l Y2MxLTQ5MjctOTVjMS1lMWE4ZGY4Zjk4OTcvMC8xNDk4MTQxODE5MTEyQjg0NDZD MkQ0QTMxMTFGNTMwMzhGMDVEQkU5Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHAqFfxtOEqIyMeedTfEs HdmtJViPlE1Xgw7UuWtdlFtyLujY2yaPbBHVMDDFSlsjqK2TYwiSQbwio6a2P/S8 taSUXs8ykFEuJHKBIZT5ekwEbgDfEvuddUhCzDM9/B9lUkh7Pw6jL/Nn1Btx2DXx lye/y2zjKAUU0SSQINUD//sjz8ONsPJCX1LF0go5VB0SIKLW8qMwqrMst9OzibHP P2wsL/YPaB2tS1dER2cFPNlnxcbY+9mmQ+6AgUC/ZtuLSjZYw46Jikv9t+sybqfW J+abxaGGYppfPURaY9tuAecg3QmE4H3lWgLuzu8PAgwVYb0hpZsSqbT6hXZchSNu 7g== -----END CERTIFICATE-----Generated at Mon Dec 22 10:35:15 2025 by rpki-client