This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/4c9acece-d05b-4f73-9c6e-d8785d1789c3/1/E9D2F7329F5BA42EE0D898228DEE58B64CA813FE.mft File: E9D2F7329F5BA42EE0D898228DEE58B64CA813FE.mft (raw, json) Hash identifier: 1tfhZnWyaIycKv4zk8APLvkR78zPASmUfKXrFJFLoTA= Subject key identifier: 57:AF:6B:B9:B7:32:94:BB:0D:2E:D2:05:93:91:B0:5D:27:A4:72:AE Authority key identifier: E9:D2:F7:32:9F:5B:A4:2E:E0:D8:98:22:8D:EE:58:B6:4C:A8:13:FE Certificate issuer: /CN=E9D2F7329F5BA42EE0D898228DEE58B64CA813FE Certificate serial: 10ABDB17F419E18EB62301E9D6CC5E4005D0D6E3 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/E9D2F7329F5BA42EE0D898228DEE58B64CA813FE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/4c9acece-d05b-4f73-9c6e-d8785d1789c3/1/E9D2F7329F5BA42EE0D898228DEE58B64CA813FE.mft Manifest number: 3C Signing time: Thu 18 Dec 2025 09:10:34 +0000 Manifest this update: Thu 18 Dec 2025 09:05:34 +0000 Manifest next update: Fri 19 Dec 2025 10:36:34 +0000 Files and hashes: 1: 326131343a373538313a6230303a3a2f34302d3438203d3e20323134353735.roa (hash: YwVA55nGhmg50Nrcm1+tsq8Rc4xtCFLwJqkp0AhkdXQ=) 2: E9D2F7329F5BA42EE0D898228DEE58B64CA813FE.crl (hash: 8SFyuxYQ58WoeZBea+kwVyEnfD6/15AV+rPdFTf3lVs=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/4c9acece-d05b-4f73-9c6e-d8785d1789c3/1/E9D2F7329F5BA42EE0D898228DEE58B64CA813FE.crl rsync://rsync.paas.rpki.ripe.net/repository/4c9acece-d05b-4f73-9c6e-d8785d1789c3/1/E9D2F7329F5BA42EE0D898228DEE58B64CA813FE.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/E9D2F7329F5BA42EE0D898228DEE58B64CA813FE.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 10:36:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:ab:db:17:f4:19:e1:8e:b6:23:01:e9:d6:cc:5e:40:05:d0:d6:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E9D2F7329F5BA42EE0D898228DEE58B64CA813FE Validity Not Before: Dec 18 09:05:34 2025 GMT Not After : Dec 19 10:36:34 2025 GMT Subject: CN=57AF6BB9B73294BB0D2ED2059391B05D27A472AE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:2d:3e:b6:b7:6e:1e:eb:71:cd:2a:fe:d7:e0: 32:c3:72:c6:48:0d:2f:48:4d:32:c6:dc:30:cd:ff: c7:fc:30:1d:8e:c4:46:ef:2c:a3:90:9e:69:42:75: d4:e8:36:ba:c9:9d:a4:cc:97:7c:33:73:41:4f:f3: 9f:8a:fe:51:00:79:5a:9c:3e:60:43:98:b6:5c:bb: cd:06:e2:03:0a:45:d3:7f:ec:84:55:8e:3a:ef:99: a8:a2:81:26:d4:9e:e2:b7:db:29:f9:0c:ef:16:67: 4a:b2:4f:c1:58:32:1c:54:31:66:f1:82:46:55:30: 17:2c:44:9f:84:8d:0b:0d:14:07:45:b6:90:bd:60: 7f:f9:2a:70:07:db:fb:3f:1f:17:05:d5:32:5c:55: 0c:c9:a4:87:9a:46:8a:99:a8:8b:ca:db:e8:8e:05: b9:79:64:bf:98:6a:3d:42:f2:0b:c3:e3:c4:96:3e: ae:bb:af:d6:a5:02:3a:79:aa:93:30:5d:32:33:2b: c2:42:7a:0a:39:7e:11:50:91:82:72:3b:71:fd:1e: 4e:82:db:5d:e8:66:9f:e3:1a:d7:26:3b:d3:09:70: 37:49:a3:24:ef:35:75:1f:e7:63:6b:5b:61:54:a8: 78:2d:1e:62:94:d8:f4:fa:a8:e7:6c:e7:c2:90:ce: 14:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:AF:6B:B9:B7:32:94:BB:0D:2E:D2:05:93:91:B0:5D:27:A4:72:AE X509v3 Authority Key Identifier: keyid:E9:D2:F7:32:9F:5B:A4:2E:E0:D8:98:22:8D:EE:58:B6:4C:A8:13:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/4c9acece-d05b-4f73-9c6e-d8785d1789c3/1/E9D2F7329F5BA42EE0D898228DEE58B64CA813FE.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/E9D2F7329F5BA42EE0D898228DEE58B64CA813FE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/4c9acece-d05b-4f73-9c6e-d8785d1789c3/1/E9D2F7329F5BA42EE0D898228DEE58B64CA813FE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:75:48:41:79:6b:e8:f4:29:05:e3:66:6a:58:64:3e:df:de: 36:c2:f7:1a:54:0b:c6:1f:d2:f0:4d:e6:41:ca:52:92:b6:44: 4f:e6:ad:45:40:f3:e2:1b:fd:8d:42:a1:09:57:5b:58:b0:0a: 78:83:d9:a6:58:cc:ce:fd:4e:36:21:51:10:53:db:53:d1:df: 22:c8:53:68:fa:6e:5f:fd:e2:80:ab:b8:d6:3e:b3:5f:cd:0a: f8:71:78:d2:06:25:30:f8:fe:3a:6d:d7:83:9a:ec:b8:6b:4e: 44:63:56:57:40:3c:c0:1d:93:2c:2a:3a:bf:b3:7a:c5:20:cb: e2:17:c8:c0:ae:f6:20:3c:64:96:db:3a:ce:82:76:eb:52:2b: ea:e3:1d:b0:8d:c8:95:bb:91:5c:0b:8c:b4:13:ff:8f:0d:d6: 64:5f:07:a7:21:14:c8:45:0e:c2:04:76:3b:26:10:1f:42:91: 36:3b:f7:74:25:63:e1:05:4c:d5:98:0b:90:66:b7:23:b0:41: 30:1e:60:d4:93:06:65:8e:fc:fa:6d:6f:98:4a:e6:1b:d5:fe: f8:c3:af:e9:ae:32:2c:a7:ee:38:6b:dc:ab:9b:d2:9f:35:65: 27:8f:2f:50:d7:f7:99:2e:25:fe:2e:d3:5c:d4:bb:1c:f6:fc: cc:c9:ff:f8 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUEKvbF/QZ4Y62IwHp1sxeQAXQ1uMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTlEMkY3MzI5RjVCQTQyRUUwRDg5ODIyOERFRTU4QjY0 Q0E4MTNGRTAeFw0yNTEyMTgwOTA1MzRaFw0yNTEyMTkxMDM2MzRaMDMxMTAvBgNV BAMTKDU3QUY2QkI5QjczMjk0QkIwRDJFRDIwNTkzOTFCMDVEMjdBNDcyQUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfLT62t24e63HNKv7X4DLDcsZI DS9ITTLG3DDN/8f8MB2OxEbvLKOQnmlCddToNrrJnaTMl3wzc0FP85+K/lEAeVqc PmBDmLZcu80G4gMKRdN/7IRVjjrvmaiigSbUnuK32yn5DO8WZ0qyT8FYMhxUMWbx gkZVMBcsRJ+EjQsNFAdFtpC9YH/5KnAH2/s/HxcF1TJcVQzJpIeaRoqZqIvK2+iO Bbl5ZL+Yaj1C8gvD48SWPq67r9alAjp5qpMwXTIzK8JCego5fhFQkYJyO3H9Hk6C 213oZp/jGtcmO9MJcDdJoyTvNXUf52NrW2FUqHgtHmKU2PT6qOds58KQzhQjAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUV69rubcylLsNLtIFk5GwXSekcq4wHwYDVR0j BBgwFoAU6dL3Mp9bpC7g2Jgije5YtkyoE/4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNGM5YWNlY2UtZDA1Yi00ZjczLTljNmUtZDg3ODVkMTc4 OWMzLzEvRTlEMkY3MzI5RjVCQTQyRUUwRDg5ODIyOERFRTU4QjY0Q0E4MTNGRS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9FOUQyRjczMjlGNUJBNDJFRTBEODk4MjI4 REVFNThCNjRDQTgxM0ZFLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzRjOWFjZWNlLWQwNWItNGY3My05YzZlLWQ4Nzg1ZDE3ODljMy8xL0U5RDJGNzMy OUY1QkE0MkVFMEQ4OTgyMjhERUU1OEI2NENBODEzRkUubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCxdUhB eWvo9CkF42ZqWGQ+3942wvcaVAvGH9LwTeZBylKStkRP5q1FQPPiG/2NQqEJV1tY sAp4g9mmWMzO/U42IVEQU9tT0d8iyFNo+m5f/eKAq7jWPrNfzQr4cXjSBiUw+P46 bdeDmuy4a05EY1ZXQDzAHZMsKjq/s3rFIMviF8jArvYgPGSW2zrOgnbrUivq4x2w jciVu5FcC4y0E/+PDdZkXwenIRTIRQ7CBHY7JhAfQpE2O/d0JWPhBUzVmAuQZrcj sEEwHmDUkwZljvz6bW+YSuYb1f74w6/prjIsp+44a9yrm9KfNWUnjy9Q1/eZLiX+ LtNc1Lsc9vzMyf/4 -----END CERTIFICATE-----Generated at Thu Dec 18 21:03:19 2025 by rpki-client