This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.mft File: 8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.mft (raw, json) Hash identifier: p/LDBb2LGinJfRTDSfRqmtl/BGfZgDh19V9K0Li98XI= Subject key identifier: FA:0B:E4:8E:01:4D:35:BD:A4:AF:5E:D6:05:04:11:44:79:40:E0:A6 Authority key identifier: 8E:07:D3:1C:64:52:F7:A6:B2:4E:63:CD:DC:49:0E:12:E0:AF:B3:8C Certificate issuer: /CN=8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C Certificate serial: 57F6DF0A09EE4CF651A2E7A8CEB37F4FD185BC46 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.mft Manifest number: 02D9 Signing time: Sun 28 Dec 2025 01:23:39 +0000 Manifest this update: Sun 28 Dec 2025 01:18:39 +0000 Manifest next update: Mon 29 Dec 2025 03:36:39 +0000 Files and hashes: 1: 326131343a373538313a343833303a3a2f34342d3438203d3e20323135323231.roa (hash: j14pv+Fih0N85ic38d12TDY0uRhDLdNY7cvkmnI17jw=) 2: 326131343a373538313a343332303a3a2f34342d3438203d3e2039343232.roa (hash: gQv5NI8fa+cTBzk0tpepQG6QGKXWkVIlxityrSNAUjQ=) 3: 326131343a373538313a343331303a3a2f34342d3438203d3e20323135313731.roa (hash: z2fbMMdTRhRUpcDHMD2rvY/J1s4P2i8N3FhzYltODNc=) 4: 326131343a373538313a343934303a3a2f34342d3434203d3e20323135313731.roa (hash: 7nhFTtPjQhKd1Ac2yjZIA1kYzFwc8dF19rkGkZd+QFk=) 5: 326131343a373538313a343835303a3a2f34342d3438203d3e20323135333739.roa (hash: mgbh+id7sfJxNC8FBIA9w2AVClblyfoF7d8LLx0Ph9g=) 6: 326131343a373538313a343934303a3a2f34342d3438203d3e20313335363539.roa (hash: isp+v1bbWY3zX+eoFLAf4eK3r9/zMrMmocZ2PNCW2Rw=) 7: 326131343a373538313a343835663a3a2f34382d3438203d3e20323135333739.roa (hash: LiQaiw5undZF8O9ZPrbB+SuBZXPDpvcvnNafAQKgteo=) 8: 326131343a373538313a343834303a3a2f34342d3438203d3e20323135323839.roa (hash: IeK6ZG/g9V25xfR3xKZZdyq5xuMwonnHdhMMCLRMWBo=) 9: 326131343a373538313a343535353a3a2f34382d3438203d3e20323136333735.roa (hash: JVdP0q01IdpmOHNHM/8N7QIeZGO9fY1B0zhs290wioo=) 10: 326131343a373538313a343835633a3a2f34382d3438203d3e20313431303637.roa (hash: 9VIFUmaELJ+SuXK7+C+ONAUKoDB5ufOLiduhS88tcKE=) 11: 326131343a373538313a343535303a3a2f34342d3438203d3e20323136333735.roa (hash: 33Hc4k2qb/SFtHgCtF148ZPS40TPUk0mIWne3Kl1fjs=) 12: 326131343a373538313a343831303a3a2f34342d3438203d3e20323135363734.roa (hash: HscFYsQcMtvjpDQJk86+k68Lr7MoMlx0VU02QHyOcGk=) 13: 326131343a373538313a343836303a3a2f34342d3438203d3e20313531353434.roa (hash: XJo8jS2djpRteJlKSIzBy0GSOcq3Jj/2wBDjV1PmcuQ=) 14: 326131343a373538313a343536303a3a2f34342d3438203d3e20323135313731.roa (hash: QP4KPs363lKNvbDMC91nWR64EDb9a5wYXaiiUC4k7Hs=) 15: 326131343a373538313a343731303a3a2f34342d3438203d3e20313439363930.roa (hash: rLVUcUxyRgJtw6VSAGlKyA8uqmBel4P5gDB+BMhpgCc=) 16: 326131343a373538313a343835653a3a2f34382d3438203d3e20323134363737.roa (hash: iHR6gaBLhEeuJStOmjFzEe4Moo+lPwxxC1xTUcqx6g4=) 17: 8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.crl (hash: nWBJpJNHJVdW5wEV/Uk0RR2vmkXbQTsfgKcFdTsdRlk=) 18: 326131343a373538313a343832303a3a2f34342d3438203d3e20323135323233.roa (hash: 8fwqZHGyIJyFYdJn0gwpv+qKZFLFFwexw2Z/QOknvfY=) 19: 326131343a373538313a343635303a3a2f34342d3438203d3e20313335363539.roa (hash: 3t/0qmEuc7HUJ6jbuOuPnmd3ve4/XpcLhj4VdVBS4pk=) 20: 326131343a373538313a343534303a3a2f34342d3438203d3e203434383137.roa (hash: lL21MUDpM3YDFXY+VNPjMEqMt9/EFafQb01ArsWLAjk=) 21: 326131343a373538313a343030303a3a2f33362d3438203d3e203434383137.roa (hash: 06Oq8kkXsOv0rKoRYz/dx2UXUSYf9kyOjrjjxWn2c2o=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.crl rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:f6:df:0a:09:ee:4c:f6:51:a2:e7:a8:ce:b3:7f:4f:d1:85:bc:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C Validity Not Before: Dec 28 01:18:39 2025 GMT Not After : Dec 29 03:36:39 2025 GMT Subject: CN=FA0BE48E014D35BDA4AF5ED6050411447940E0A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:e2:4d:6b:30:98:41:5a:e2:95:d3:b7:7e:a0: b1:c3:ae:5e:e3:35:16:d6:46:ba:6f:8d:95:e4:05: 50:e1:e1:ed:4f:a9:d4:b9:e0:4c:4f:64:b7:e9:f6: e5:90:5d:9e:e6:09:ea:f1:16:c2:3f:a9:b6:2f:6f: f4:4e:dd:2f:ef:e6:94:82:54:a4:86:07:65:5d:11: b6:bc:b6:59:b2:8f:74:d8:9b:e9:80:55:b6:4e:b0: 47:69:cb:90:ce:90:3d:9b:2f:4f:3c:ac:00:94:ac: ff:52:5b:40:bd:ae:00:56:bd:6d:38:b6:1b:f9:c2: 16:bc:bb:f2:6d:bb:a5:fd:cf:b3:7e:1f:f7:21:61: 41:61:1a:dc:52:87:09:bb:64:93:bf:25:c7:a9:d1: e0:5c:da:5c:e5:7e:e4:dd:44:8d:3f:7d:b8:b9:f2: 85:ab:46:3c:ca:d5:f0:56:d5:6c:b8:f1:24:18:09: 8d:67:f7:b6:89:82:0c:1d:32:e1:e8:b1:2f:ce:bf: 44:aa:d4:6e:c0:c9:e1:3b:30:4a:fe:1a:60:f2:08: de:e4:08:fd:a5:fe:03:10:72:d1:f9:4e:3c:00:b4: 67:00:4f:c3:44:47:16:59:09:88:9d:64:54:a9:57: 0d:a1:50:19:1c:57:0e:5c:9c:52:05:1a:40:58:ec: 3b:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:0B:E4:8E:01:4D:35:BD:A4:AF:5E:D6:05:04:11:44:79:40:E0:A6 X509v3 Authority Key Identifier: keyid:8E:07:D3:1C:64:52:F7:A6:B2:4E:63:CD:DC:49:0E:12:E0:AF:B3:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:48:3d:8c:9d:52:26:13:8e:48:62:b0:ee:c6:58:cd:fc:7b: 66:0c:90:48:b7:7d:a1:0a:74:32:ac:3f:52:52:b2:6c:5e:95: 9b:cc:64:76:be:70:8d:0a:81:80:1b:1f:13:86:20:b2:61:6e: 1a:6a:cc:20:7b:ab:88:fb:ff:6b:3b:da:69:fb:3b:15:09:f3: 73:2b:8f:f8:bc:67:54:50:2a:b7:5b:65:e6:32:a7:c3:9f:08: dd:a9:f7:33:90:2b:9d:3d:77:f5:79:91:03:53:9f:8c:f9:b9: 42:15:c0:00:6a:ad:2d:d8:aa:d6:b8:0d:cf:1a:9e:24:70:75: 38:5c:f6:ce:b9:06:ba:82:ea:63:55:93:83:5b:39:8c:77:e0: d0:ba:26:97:e1:05:d0:21:d7:df:82:95:c3:eb:36:49:a7:7c: 48:3b:0a:e2:a9:10:fa:68:6b:38:fa:84:f9:46:9f:33:56:36: 62:62:59:8c:27:01:6f:20:5e:e4:45:b3:c0:c9:50:e4:fe:56: 3d:f7:34:74:7e:dd:a1:69:b7:f5:6b:e9:f4:39:96:64:5b:41: 71:8a:6e:2e:7a:05:0c:c4:cb:6a:f3:96:bd:05:a7:3d:b1:67: 9e:fb:ad:19:b4:88:e2:21:c0:3f:3f:f1:ff:4a:91:36:cc:b5: 27:47:80:8d -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUV/bfCgnuTPZRoueozrN/T9GFvEYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEUwN0QzMUM2NDUyRjdBNkIyNEU2M0NEREM0OTBFMTJF MEFGQjM4QzAeFw0yNTEyMjgwMTE4MzlaFw0yNTEyMjkwMzM2MzlaMDMxMTAvBgNV BAMTKEZBMEJFNDhFMDE0RDM1QkRBNEFGNUVENjA1MDQxMTQ0Nzk0MEUwQTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM4k1rMJhBWuKV07d+oLHDrl7j NRbWRrpvjZXkBVDh4e1PqdS54ExPZLfp9uWQXZ7mCerxFsI/qbYvb/RO3S/v5pSC VKSGB2VdEba8tlmyj3TYm+mAVbZOsEdpy5DOkD2bL088rACUrP9SW0C9rgBWvW04 thv5wha8u/Jtu6X9z7N+H/chYUFhGtxShwm7ZJO/Jcep0eBc2lzlfuTdRI0/fbi5 8oWrRjzK1fBW1Wy48SQYCY1n97aJggwdMuHosS/Ov0Sq1G7AyeE7MEr+GmDyCN7k CP2l/gMQctH5TjwAtGcAT8NERxZZCYidZFSpVw2hUBkcVw5cnFIFGkBY7DvdAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU+gvkjgFNNb2kr17WBQQRRHlA4KYwHwYDVR0j BBgwFoAUjgfTHGRS96ayTmPN3EkOEuCvs4wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMzExZTQ3YzQtMDJmMC00NjU3LTkwMjItZDJiODNjZmY4 NzU1LzQvOEUwN0QzMUM2NDUyRjdBNkIyNEU2M0NEREM0OTBFMTJFMEFGQjM4Qy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC84RTA3RDMxQzY0NTJGN0E2QjI0RTYzQ0RE QzQ5MEUxMkUwQUZCMzhDLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzMxMWU0N2M0LTAyZjAtNDY1Ny05MDIyLWQyYjgzY2ZmODc1NS80LzhFMDdEMzFD NjQ1MkY3QTZCMjRFNjNDRERDNDkwRTEyRTBBRkIzOEMubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAVSD2M nVImE45IYrDuxljN/HtmDJBIt32hCnQyrD9SUrJsXpWbzGR2vnCNCoGAGx8ThiCy YW4aaswge6uI+/9rO9pp+zsVCfNzK4/4vGdUUCq3W2XmMqfDnwjdqfczkCudPXf1 eZEDU5+M+blCFcAAaq0t2KrWuA3PGp4kcHU4XPbOuQa6gupjVZODWzmMd+DQuiaX 4QXQIdffgpXD6zZJp3xIOwriqRD6aGs4+oT5Rp8zVjZiYlmMJwFvIF7kRbPAyVDk /lY99zR0ft2habf1a+n0OZZkW0Fxim4uegUMxMtq85a9Bac9sWee+60ZtIjiIcA/ P/H/SpE2zLUnR4CN -----END CERTIFICATE-----Generated at Sun Dec 28 08:02:25 2025 by rpki-client