This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2fe2b27a-1ec5-4ab7-978e-6da9cf9f3790/0/5DEFE0922F4F55270DCD5C08F04F1C7BF26073C3.mft File: 5DEFE0922F4F55270DCD5C08F04F1C7BF26073C3.mft (raw, json) Hash identifier: ypFq3sXDQrWfO5Mnp88ZYxKUbQiMblRi6g7fbjw0XSM= Subject key identifier: 16:AF:C9:BB:43:8F:38:2F:74:B9:E7:A5:6A:2C:66:D8:B0:28:D0:7E Authority key identifier: 5D:EF:E0:92:2F:4F:55:27:0D:CD:5C:08:F0:4F:1C:7B:F2:60:73:C3 Certificate issuer: /CN=5defe0922f4f55270dcd5c08f04f1c7bf26073c3 Certificate serial: 5CEFDA5C41F3CD57BCC63735092BC677FC16B71D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xe_gki9PVScNzVwI8E8ce_Jgc8M.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2fe2b27a-1ec5-4ab7-978e-6da9cf9f3790/0/5DEFE0922F4F55270DCD5C08F04F1C7BF26073C3.mft Manifest number: 044E Signing time: Wed 17 Dec 2025 04:42:20 +0000 Manifest this update: Wed 17 Dec 2025 04:37:20 +0000 Manifest next update: Thu 18 Dec 2025 05:31:20 +0000 Files and hashes: 1: 5DEFE0922F4F55270DCD5C08F04F1C7BF26073C3.crl (hash: ps8QYR/vpSPFaMgCfEiT3UaBhh93NRH6A4YjQGGdHLw=) 2: 34352e3134362e3136332e302f32342d3234203d3e20323136313833.roa (hash: dEyrefnnKSg66lfx459XJ2SroTggGi4go9Zp+DRZdvU=) 3: 34352e3134362e3136302e302f32332d3233203d3e203437343437.roa (hash: 31YTnxmdtZ2cp3Cw9rcOHPD6ZzrVs4b/Az5vMfbmmIM=) 4: 34352e3134362e3136322e302f32342d3234203d3e203138363331.roa (hash: C/6HJC1mRnTjt5un9I/ly/ex3eg1Ngny62cwbLuyXag=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2fe2b27a-1ec5-4ab7-978e-6da9cf9f3790/0/5DEFE0922F4F55270DCD5C08F04F1C7BF26073C3.crl rsync://rsync.paas.rpki.ripe.net/repository/2fe2b27a-1ec5-4ab7-978e-6da9cf9f3790/0/5DEFE0922F4F55270DCD5C08F04F1C7BF26073C3.mft rsync://rpki.ripe.net/repository/DEFAULT/Xe_gki9PVScNzVwI8E8ce_Jgc8M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 05:31:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:ef:da:5c:41:f3:cd:57:bc:c6:37:35:09:2b:c6:77:fc:16:b7:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5defe0922f4f55270dcd5c08f04f1c7bf26073c3 Validity Not Before: Dec 17 04:37:20 2025 GMT Not After : Dec 18 05:31:20 2025 GMT Subject: CN=16AFC9BB438F382F74B9E7A56A2C66D8B028D07E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:bc:af:99:57:08:84:1c:b3:ce:c9:86:4c:2c: b4:0f:b7:ae:42:47:b9:fa:ee:a5:c4:4a:01:4b:5f: af:8a:c4:bb:6b:de:e2:13:23:0c:ad:0f:f1:41:73: 4e:39:f9:d5:e7:c3:71:31:ff:f5:34:1f:01:35:eb: b5:62:33:8c:79:77:fe:53:9f:12:d8:c7:21:91:22: df:84:3a:e8:c4:a3:8f:5a:b9:67:c7:94:48:51:ff: 0f:45:f3:92:15:3b:5c:15:50:44:0e:f6:9a:27:d9: 90:bb:19:a1:e8:4c:bd:c7:d8:fd:ee:29:b0:86:f7: ea:8e:a0:0f:cb:c1:63:1b:7c:8b:0d:45:93:b3:3a: 41:5b:13:91:c7:93:45:05:c6:af:7d:fb:6e:3d:2d: 20:ea:7d:1c:8f:e3:e0:a2:9c:04:74:7d:a5:ba:bb: 4c:ae:de:9a:e7:7e:7a:29:8d:1f:d3:07:2e:c4:aa: da:0e:74:20:11:fc:09:8f:88:24:25:bc:75:9f:ae: 1d:19:95:ae:4a:6d:90:52:3c:8b:bb:89:f1:da:df: 5f:26:4a:2d:69:64:66:e4:fa:e4:15:51:8b:0f:52: 70:46:f4:b8:fc:e9:24:99:62:e1:70:3a:8b:38:81: 5a:0a:f2:8f:ea:50:91:ec:01:90:f7:6e:0a:9b:ea: 6b:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:AF:C9:BB:43:8F:38:2F:74:B9:E7:A5:6A:2C:66:D8:B0:28:D0:7E X509v3 Authority Key Identifier: keyid:5D:EF:E0:92:2F:4F:55:27:0D:CD:5C:08:F0:4F:1C:7B:F2:60:73:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2fe2b27a-1ec5-4ab7-978e-6da9cf9f3790/0/5DEFE0922F4F55270DCD5C08F04F1C7BF26073C3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xe_gki9PVScNzVwI8E8ce_Jgc8M.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2fe2b27a-1ec5-4ab7-978e-6da9cf9f3790/0/5DEFE0922F4F55270DCD5C08F04F1C7BF26073C3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:41:f8:64:35:ac:0b:e4:1b:89:68:89:78:c8:21:4c:17:53: a5:81:91:b8:94:72:6f:90:7b:68:71:8f:39:e2:ce:2a:30:15: 7c:eb:51:dd:02:24:84:77:7a:17:12:0a:79:09:66:5f:4e:e1: 54:c6:f5:23:f6:79:6e:a6:7f:c9:87:04:b9:75:27:48:1b:47: 56:54:09:87:2e:f5:48:aa:fd:b2:d3:6c:68:76:91:a9:1d:ed: 7b:19:14:11:53:37:9a:45:5b:79:2f:1c:d6:80:c4:34:d5:24: 5b:7e:2e:54:5d:0d:a0:0a:d6:16:b4:99:f4:c3:10:3e:ec:39: a2:ec:01:bb:2a:17:cd:58:42:34:51:10:39:4e:31:21:7b:63: 92:94:ff:52:7f:95:dd:8b:dd:fd:75:7d:0c:2e:d0:b7:c2:71: aa:67:3d:47:56:37:db:02:6b:d4:70:e4:ae:c1:9e:e7:81:fc: 9b:f6:35:92:96:77:21:02:b5:d3:11:29:6f:ac:6f:63:46:e3: 85:56:75:2c:cb:0e:04:36:0d:a7:14:18:d5:aa:ea:74:28:47: 22:33:f0:2b:2f:5b:f5:b0:70:46:27:ef:a4:bb:71:6a:8a:8d: 9c:92:51:d6:df:3b:b4:a2:5e:fa:02:59:5f:70:66:a8:27:1d: 92:1c:b7:3c -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUXO/aXEHzzVe8xjc1CSvGd/wWtx0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNWRlZmUwOTIyZjRmNTUyNzBkY2Q1YzA4ZjA0ZjFjN2Jm MjYwNzNjMzAeFw0yNTEyMTcwNDM3MjBaFw0yNTEyMTgwNTMxMjBaMDMxMTAvBgNV BAMTKDE2QUZDOUJCNDM4RjM4MkY3NEI5RTdBNTZBMkM2NkQ4QjAyOEQwN0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWvK+ZVwiEHLPOyYZMLLQPt65C R7n67qXESgFLX6+KxLtr3uITIwytD/FBc045+dXnw3Ex//U0HwE167ViM4x5d/5T nxLYxyGRIt+EOujEo49auWfHlEhR/w9F85IVO1wVUEQO9pon2ZC7GaHoTL3H2P3u KbCG9+qOoA/LwWMbfIsNRZOzOkFbE5HHk0UFxq99+249LSDqfRyP4+CinAR0faW6 u0yu3prnfnopjR/TBy7EqtoOdCAR/AmPiCQlvHWfrh0Zla5KbZBSPIu7ifHa318m Si1pZGbk+uQVUYsPUnBG9Lj86SSZYuFwOos4gVoK8o/qUJHsAZD3bgqb6mvpAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUFq/Ju0OPOC90ueelaixm2LAo0H4wHwYDVR0j BBgwFoAUXe/gki9PVScNzVwI8E8ce/Jgc8MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMmZlMmIyN2EtMWVjNS00YWI3LTk3OGUtNmRhOWNmOWYz NzkwLzAvNURFRkUwOTIyRjRGNTUyNzBEQ0Q1QzA4RjA0RjFDN0JGMjYwNzNDMy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1hlX2draTlQVlNjTnpWd0k4RThjZV9K Z2M4TS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yZmUyYjI3YS0x ZWM1LTRhYjctOTc4ZS02ZGE5Y2Y5ZjM3OTAvMC81REVGRTA5MjJGNEY1NTI3MERD RDVDMDhGMDRGMUM3QkYyNjA3M0MzLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQUH4ZDWsC+QbiWiJeMgh TBdTpYGRuJRyb5B7aHGPOeLOKjAVfOtR3QIkhHd6FxIKeQlmX07hVMb1I/Z5bqZ/ yYcEuXUnSBtHVlQJhy71SKr9stNsaHaRqR3texkUEVM3mkVbeS8c1oDENNUkW34u VF0NoArWFrSZ9MMQPuw5ouwBuyoXzVhCNFEQOU4xIXtjkpT/Un+V3Yvd/XV9DC7Q t8Jxqmc9R1Y32wJr1HDkrsGe54H8m/Y1kpZ3IQK10xEpb6xvY0bjhVZ1LMsOBDYN pxQY1arqdChHIjPwKy9b9bBwRifvpLtxaoqNnJJR1t87tKJe+gJZX3BmqCcdkhy3 PA== -----END CERTIFICATE-----Generated at Wed Dec 17 11:19:37 2025 by rpki-client