This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.mft File: 8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.mft (raw, json) Hash identifier: 8x2jIulC8anMZ8Eqf2pddI8Ed0ih4oEFEcg2TNX7pFc= Subject key identifier: 9D:36:B4:54:1C:5F:35:C0:5A:7D:B5:B7:45:A4:EF:DC:D3:5F:9E:EF Authority key identifier: 8E:07:D3:1C:64:52:F7:A6:B2:4E:63:CD:DC:49:0E:12:E0:AF:B3:8C Certificate issuer: /CN=8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C Certificate serial: 7FBF70883CB3DA2B4B6A6149322128E9144F05B0 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.mft Manifest number: 02CF Signing time: Sat 20 Dec 2025 14:59:18 +0000 Manifest this update: Sat 20 Dec 2025 14:54:18 +0000 Manifest next update: Sun 21 Dec 2025 16:20:18 +0000 Files and hashes: 1: 8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.crl (hash: /dW4pwII1AyaLGgVl0sYQVOd8PY7lGCzR201LeqRIsc=) 2: 326131343a373538313a343635303a3a2f34342d3438203d3e20313335363539.roa (hash: 3t/0qmEuc7HUJ6jbuOuPnmd3ve4/XpcLhj4VdVBS4pk=) 3: 326131343a373538313a343332303a3a2f34342d3438203d3e2039343232.roa (hash: gQv5NI8fa+cTBzk0tpepQG6QGKXWkVIlxityrSNAUjQ=) 4: 326131343a373538313a343731303a3a2f34342d3438203d3e20313439363930.roa (hash: rLVUcUxyRgJtw6VSAGlKyA8uqmBel4P5gDB+BMhpgCc=) 5: 326131343a373538313a343836303a3a2f34342d3438203d3e20313531353434.roa (hash: XJo8jS2djpRteJlKSIzBy0GSOcq3Jj/2wBDjV1PmcuQ=) 6: 326131343a373538313a343834303a3a2f34342d3438203d3e20323135323839.roa (hash: IeK6ZG/g9V25xfR3xKZZdyq5xuMwonnHdhMMCLRMWBo=) 7: 326131343a373538313a343833303a3a2f34342d3438203d3e20323135323231.roa (hash: j14pv+Fih0N85ic38d12TDY0uRhDLdNY7cvkmnI17jw=) 8: 326131343a373538313a343535303a3a2f34342d3438203d3e20323136333735.roa (hash: 33Hc4k2qb/SFtHgCtF148ZPS40TPUk0mIWne3Kl1fjs=) 9: 326131343a373538313a343534303a3a2f34342d3438203d3e203434383137.roa (hash: lL21MUDpM3YDFXY+VNPjMEqMt9/EFafQb01ArsWLAjk=) 10: 326131343a373538313a343835663a3a2f34382d3438203d3e20323135333739.roa (hash: LiQaiw5undZF8O9ZPrbB+SuBZXPDpvcvnNafAQKgteo=) 11: 326131343a373538313a343831303a3a2f34342d3438203d3e20323135363734.roa (hash: HscFYsQcMtvjpDQJk86+k68Lr7MoMlx0VU02QHyOcGk=) 12: 326131343a373538313a343934303a3a2f34342d3438203d3e20313335363539.roa (hash: isp+v1bbWY3zX+eoFLAf4eK3r9/zMrMmocZ2PNCW2Rw=) 13: 326131343a373538313a343832303a3a2f34342d3438203d3e20323135323233.roa (hash: 8fwqZHGyIJyFYdJn0gwpv+qKZFLFFwexw2Z/QOknvfY=) 14: 326131343a373538313a343934303a3a2f34342d3434203d3e20323135313731.roa (hash: 7nhFTtPjQhKd1Ac2yjZIA1kYzFwc8dF19rkGkZd+QFk=) 15: 326131343a373538313a343835633a3a2f34382d3438203d3e20313431303637.roa (hash: 9VIFUmaELJ+SuXK7+C+ONAUKoDB5ufOLiduhS88tcKE=) 16: 326131343a373538313a343535353a3a2f34382d3438203d3e20323136333735.roa (hash: JVdP0q01IdpmOHNHM/8N7QIeZGO9fY1B0zhs290wioo=) 17: 326131343a373538313a343030303a3a2f33362d3438203d3e203434383137.roa (hash: 06Oq8kkXsOv0rKoRYz/dx2UXUSYf9kyOjrjjxWn2c2o=) 18: 326131343a373538313a343835653a3a2f34382d3438203d3e20323134363737.roa (hash: iHR6gaBLhEeuJStOmjFzEe4Moo+lPwxxC1xTUcqx6g4=) 19: 326131343a373538313a343331303a3a2f34342d3438203d3e20323135313731.roa (hash: z2fbMMdTRhRUpcDHMD2rvY/J1s4P2i8N3FhzYltODNc=) 20: 326131343a373538313a343835303a3a2f34342d3438203d3e20323135333739.roa (hash: mgbh+id7sfJxNC8FBIA9w2AVClblyfoF7d8LLx0Ph9g=) 21: 326131343a373538313a343536303a3a2f34342d3438203d3e20323135313731.roa (hash: QP4KPs363lKNvbDMC91nWR64EDb9a5wYXaiiUC4k7Hs=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.crl rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:bf:70:88:3c:b3:da:2b:4b:6a:61:49:32:21:28:e9:14:4f:05:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C Validity Not Before: Dec 20 14:54:18 2025 GMT Not After : Dec 21 16:20:18 2025 GMT Subject: CN=9D36B4541C5F35C05A7DB5B745A4EFDCD35F9EEF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:00:0f:81:c5:c7:ba:68:db:0f:e9:55:f9:1d: 47:3c:02:5a:95:fa:f7:01:c5:e6:33:31:59:33:87: fd:03:f6:d1:02:b3:17:a2:93:73:c7:47:00:c7:2e: 6e:e3:3f:54:f8:b0:c6:db:29:9d:df:62:f4:55:e6: 4b:ca:eb:34:5e:97:17:22:d4:a0:53:da:d9:81:6d: 15:82:29:0c:fe:69:51:c0:4a:cb:c8:91:e8:84:b7: 78:1a:76:ba:9e:bc:f1:78:41:14:17:a3:4a:35:c7: 77:15:fa:62:f6:56:0e:a8:b2:0d:63:78:d6:fe:a3: e0:f3:37:50:61:20:fd:68:87:63:3c:16:81:0b:de: 00:b0:c4:cf:02:f6:c7:98:23:ca:79:95:02:cd:16: 9c:47:76:d9:14:ca:61:68:b5:4f:52:a5:95:bc:07: c7:df:2d:4b:b8:22:c6:2c:7f:d9:49:0a:68:7f:fb: 26:d3:2d:a9:00:af:06:6a:41:2b:55:df:4f:a3:0f: 38:8a:ea:35:2f:19:2c:eb:54:a1:be:92:d2:f7:ef: fb:85:59:da:68:98:ec:83:46:24:7a:5c:93:0c:ea: c7:24:f4:f4:fa:5b:ec:c6:53:cb:46:92:83:3a:ae: 26:7b:13:d6:ae:29:1c:41:e4:09:d5:61:a5:06:8a: c2:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:36:B4:54:1C:5F:35:C0:5A:7D:B5:B7:45:A4:EF:DC:D3:5F:9E:EF X509v3 Authority Key Identifier: keyid:8E:07:D3:1C:64:52:F7:A6:B2:4E:63:CD:DC:49:0E:12:E0:AF:B3:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:9f:46:c7:e3:b5:05:a3:48:16:87:e7:52:19:93:4e:cb:f1: 95:a7:db:bd:5a:f6:c8:56:58:33:f2:48:fa:e6:6d:7b:c5:8c: 01:a9:13:66:a9:0e:40:a0:c9:0f:43:ed:4b:ba:ec:15:0a:74: 08:74:14:33:fc:f8:0b:07:09:d2:8f:4d:ca:4a:a8:6a:b8:0a: 59:82:ab:e4:60:ce:54:9a:fe:7a:4d:74:c1:c3:ad:7d:6c:0a: 0c:78:4b:60:74:01:57:b7:19:10:cb:f6:72:19:27:dc:96:c2: 5b:c8:2c:29:a6:6a:04:65:89:10:8c:be:b0:90:86:91:c0:13: bf:97:f1:76:4e:c0:21:4c:d8:13:79:1c:6b:55:0f:76:7f:7a: fe:3f:5c:0e:e9:43:6b:dd:7b:3a:b8:ed:37:bd:07:7f:f6:03: 5a:6e:d4:3b:53:cb:ef:51:e5:af:0c:ef:fb:32:29:5d:ce:06: e0:b3:72:4a:54:1d:f4:9f:22:c6:9a:32:e0:41:33:d6:8d:44: 18:1d:c1:b4:71:81:01:46:99:86:de:77:68:99:4b:a9:25:de: 5d:0e:8a:b0:b0:24:14:de:47:0d:f3:e7:70:e3:74:d1:cc:c9: 69:9a:ee:94:bf:20:85:df:ce:0b:11:15:56:ed:93:31:e1:9f: 6e:83:57:f0 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUf79wiDyz2itLamFJMiEo6RRPBbAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEUwN0QzMUM2NDUyRjdBNkIyNEU2M0NEREM0OTBFMTJF MEFGQjM4QzAeFw0yNTEyMjAxNDU0MThaFw0yNTEyMjExNjIwMThaMDMxMTAvBgNV BAMTKDlEMzZCNDU0MUM1RjM1QzA1QTdEQjVCNzQ1QTRFRkRDRDM1RjlFRUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrAA+Bxce6aNsP6VX5HUc8AlqV +vcBxeYzMVkzh/0D9tECsxeik3PHRwDHLm7jP1T4sMbbKZ3fYvRV5kvK6zRelxci 1KBT2tmBbRWCKQz+aVHASsvIkeiEt3gadrqevPF4QRQXo0o1x3cV+mL2Vg6osg1j eNb+o+DzN1BhIP1oh2M8FoEL3gCwxM8C9seYI8p5lQLNFpxHdtkUymFotU9SpZW8 B8ffLUu4IsYsf9lJCmh/+ybTLakArwZqQStV30+jDziK6jUvGSzrVKG+ktL37/uF WdpomOyDRiR6XJMM6sck9PT6W+zGU8tGkoM6riZ7E9auKRxB5AnVYaUGisK9AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUnTa0VBxfNcBafbW3RaTv3NNfnu8wHwYDVR0j BBgwFoAUjgfTHGRS96ayTmPN3EkOEuCvs4wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMzExZTQ3YzQtMDJmMC00NjU3LTkwMjItZDJiODNjZmY4 NzU1LzQvOEUwN0QzMUM2NDUyRjdBNkIyNEU2M0NEREM0OTBFMTJFMEFGQjM4Qy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC84RTA3RDMxQzY0NTJGN0E2QjI0RTYzQ0RE QzQ5MEUxMkUwQUZCMzhDLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzMxMWU0N2M0LTAyZjAtNDY1Ny05MDIyLWQyYjgzY2ZmODc1NS80LzhFMDdEMzFD NjQ1MkY3QTZCMjRFNjNDRERDNDkwRTEyRTBBRkIzOEMubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBcn0bH 47UFo0gWh+dSGZNOy/GVp9u9WvbIVlgz8kj65m17xYwBqRNmqQ5AoMkPQ+1LuuwV CnQIdBQz/PgLBwnSj03KSqhquApZgqvkYM5Umv56TXTBw619bAoMeEtgdAFXtxkQ y/ZyGSfclsJbyCwppmoEZYkQjL6wkIaRwBO/l/F2TsAhTNgTeRxrVQ92f3r+P1wO 6UNr3Xs6uO03vQd/9gNabtQ7U8vvUeWvDO/7Mildzgbgs3JKVB30nyLGmjLgQTPW jUQYHcG0cYEBRpmG3ndomUupJd5dDoqwsCQU3kcN8+dw43TRzMlpmu6UvyCF384L ERVW7ZMx4Z9ug1fw -----END CERTIFICATE-----Generated at Sat Dec 20 19:50:25 2025 by rpki-client