This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/1/8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E.mft File: 8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E.mft (raw, json) Hash identifier: FB8NQsT8dQqZfPl6TjC5dZI9T+SS0fUFssZrMTw4Zok= Subject key identifier: E2:AE:1B:B5:D2:C6:A2:62:C9:8E:83:7C:6C:BA:E9:D1:41:38:E0:7D Authority key identifier: 8B:CE:7E:72:AB:BB:AD:00:53:63:93:A0:84:0B:BA:0A:BF:3A:A2:8E Certificate issuer: /CN=8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E Certificate serial: 0B44F89F5523EED74681B33B84196C6B7AC6F2FD Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/1/8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E.mft Manifest number: 0D Signing time: Sat 20 Dec 2025 11:36:41 +0000 Manifest this update: Sat 20 Dec 2025 11:31:41 +0000 Manifest next update: Sun 21 Dec 2025 11:58:41 +0000 Files and hashes: 1: 326130663a316363353a313730303a3a2f34302d3438203d3e20323032393339.roa (hash: UEeOHO3GGvYWxfR4E2Tbh4+FLPM0KvboVmPBm/zMcrM=) 2: 8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E.crl (hash: 0UeTS9z7dNmlfij1CXLEjOpyI7bZcDxulzn+TaNV3aM=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/1/8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E.crl rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/1/8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E.mft rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E.cer rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/75A838E02C61800F73D3019DE0A51F567B64BC0E.crl rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/75A838E02C61800F73D3019DE0A51F567B64BC0E.mft rsync://rpki.ripe.net/repository/DEFAULT/dag44CxhgA9z0wGd4KUfVntkvA4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 11:58:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:44:f8:9f:55:23:ee:d7:46:81:b3:3b:84:19:6c:6b:7a:c6:f2:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E Validity Not Before: Dec 20 11:31:41 2025 GMT Not After : Dec 21 11:58:41 2025 GMT Subject: CN=E2AE1BB5D2C6A262C98E837C6CBAE9D14138E07D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:97:e9:59:97:56:ac:2e:8a:0c:29:c0:96:eb: ad:3c:d3:24:8c:ef:c1:08:39:83:54:bc:d3:4d:6f: df:7a:23:01:07:5b:87:d5:09:77:47:20:da:aa:ad: 85:d1:7a:ac:bb:df:53:cf:39:c8:d8:fe:61:e6:3a: 54:0e:70:51:1a:62:96:0f:a9:30:7b:d5:ea:16:1d: 60:74:89:68:0e:c1:83:d3:fe:e1:30:76:a2:67:04: 20:e4:61:30:9f:35:a6:e7:41:51:00:8b:c2:63:15: c8:a2:51:b3:6a:40:17:12:35:4f:db:59:37:d1:89: 2f:cc:a4:8a:f7:bf:ab:83:8b:1a:3b:33:ed:de:7e: c6:1e:ef:52:22:92:c9:d4:a4:29:c2:3f:0a:9f:8f: 5e:20:fd:a3:bd:46:76:2a:a6:8d:e3:36:ff:39:82: 5b:27:43:44:11:e2:f3:52:09:6b:f6:d9:af:1a:55: ab:32:21:9a:c3:fe:4c:9e:31:8e:94:bf:cc:5d:b6: 5e:93:a1:b0:b3:28:98:65:d7:e9:94:e2:e2:80:4d: 0f:2d:28:a3:78:b4:8f:b5:5b:3c:10:71:65:fc:48: 66:a8:fc:dd:4a:03:95:6e:2c:59:68:75:d3:49:a9: 22:2f:69:c2:27:4f:5a:03:72:48:09:9c:b8:ec:a5: 6b:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:AE:1B:B5:D2:C6:A2:62:C9:8E:83:7C:6C:BA:E9:D1:41:38:E0:7D X509v3 Authority Key Identifier: keyid:8B:CE:7E:72:AB:BB:AD:00:53:63:93:A0:84:0B:BA:0A:BF:3A:A2:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/1/8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/1/8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:d0:38:38:6f:dc:dd:eb:aa:b3:55:6e:77:e6:37:4e:ed:5e: 0b:4c:3e:10:8d:79:7c:42:a6:65:fa:4c:02:01:6a:d4:b3:56: 31:8e:ba:7f:25:53:60:25:d1:7f:d5:b3:05:dc:c5:9f:7a:8d: 89:7c:25:32:75:5b:da:80:e2:24:6b:ab:69:6f:eb:6c:55:6b: 60:8c:5f:74:3f:e6:f9:0c:6a:21:35:22:80:87:96:89:7a:ec: d5:e7:94:78:fb:cd:66:75:39:69:b1:b6:16:46:0c:b1:35:7d: 76:63:be:db:f8:95:f4:04:f6:9f:f9:9b:98:49:f6:07:66:5d: 92:18:49:94:80:1d:16:63:0d:6a:03:08:bc:4c:b8:4f:ad:71: 17:7e:3c:51:0f:86:1d:21:0c:66:44:86:b8:51:74:e5:97:30: f8:67:16:f4:9d:a6:7f:9f:7d:93:b3:74:58:52:42:f7:df:7d: ca:33:a4:83:8a:ce:44:cc:fb:6c:19:f1:5b:d5:9e:63:fe:e6: 40:a0:81:b6:08:bc:b9:53:70:37:cf:c9:f5:c5:38:ff:83:ec: 01:09:2f:e1:6b:c8:85:62:8f:d7:ae:87:c8:ed:68:b3:d5:78: e9:40:5a:7e:1c:5f:d3:0d:db:da:fc:42:9f:a1:a9:39:6e:c5: d4:6f:4a:a2 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUC0T4n1Uj7tdGgbM7hBlsa3rG8v0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEJDRTdFNzJBQkJCQUQwMDUzNjM5M0EwODQwQkJBMEFC RjNBQTI4RTAeFw0yNTEyMjAxMTMxNDFaFw0yNTEyMjExMTU4NDFaMDMxMTAvBgNV BAMTKEUyQUUxQkI1RDJDNkEyNjJDOThFODM3QzZDQkFFOUQxNDEzOEUwN0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbl+lZl1asLooMKcCW66080ySM 78EIOYNUvNNNb996IwEHW4fVCXdHINqqrYXReqy731PPOcjY/mHmOlQOcFEaYpYP qTB71eoWHWB0iWgOwYPT/uEwdqJnBCDkYTCfNabnQVEAi8JjFciiUbNqQBcSNU/b WTfRiS/MpIr3v6uDixo7M+3efsYe71IiksnUpCnCPwqfj14g/aO9RnYqpo3jNv85 glsnQ0QR4vNSCWv22a8aVasyIZrD/kyeMY6Uv8xdtl6TobCzKJhl1+mU4uKATQ8t KKN4tI+1WzwQcWX8SGao/N1KA5VuLFloddNJqSIvacInT1oDckgJnLjspWt1AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU4q4btdLGomLJjoN8bLrp0UE44H0wHwYDVR0j BBgwFoAUi85+cqu7rQBTY5OghAu6Cr86oo4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMzA4ZjhiM2UtMDUxZS00YzQ0LTljYjUtN2I4MzMxZWY5 YTA0LzEvOEJDRTdFNzJBQkJCQUQwMDUzNjM5M0EwODQwQkJBMEFCRjNBQTI4RS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lMjZlYjEzNi00ZmU1LTRl NjEtYTRkOC1mMzQ1ZjUyYmMyNWQvMC84QkNFN0U3MkFCQkJBRDAwNTM2MzkzQTA4 NDBCQkEwQUJGM0FBMjhFLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzMwOGY4YjNlLTA1MWUtNGM0NC05Y2I1LTdiODMzMWVmOWEwNC8xLzhCQ0U3RTcy QUJCQkFEMDA1MzYzOTNBMDg0MEJCQTBBQkYzQUEyOEUubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB50Dg4 b9zd66qzVW535jdO7V4LTD4QjXl8QqZl+kwCAWrUs1Yxjrp/JVNgJdF/1bMF3MWf eo2JfCUydVvagOIka6tpb+tsVWtgjF90P+b5DGohNSKAh5aJeuzV55R4+81mdTlp sbYWRgyxNX12Y77b+JX0BPaf+ZuYSfYHZl2SGEmUgB0WYw1qAwi8TLhPrXEXfjxR D4YdIQxmRIa4UXTllzD4Zxb0naZ/n32Ts3RYUkL3333KM6SDis5EzPtsGfFb1Z5j /uZAoIG2CLy5U3A3z8n1xTj/g+wBCS/ha8iFYo/XrofI7Wiz1XjpQFp+HF/TDdva /EKfoak5bsXUb0qi -----END CERTIFICATE-----Generated at Sun Dec 21 01:37:20 2025 by rpki-client