This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/0/BB8E87F353127CC923B1CC1F978699537EFAD66D.mft File: BB8E87F353127CC923B1CC1F978699537EFAD66D.mft (raw, json) Hash identifier: X62fmXEPOmV0Jdo3yblmj5+uDF0Vo9/H9fHb5C2iZM8= Subject key identifier: 89:F1:A8:6C:DA:56:2C:8B:21:92:C5:FC:CD:03:77:C3:50:E8:F1:9F Authority key identifier: BB:8E:87:F3:53:12:7C:C9:23:B1:CC:1F:97:86:99:53:7E:FA:D6:6D Certificate issuer: /CN=bb8e87f353127cc923b1cc1f978699537efad66d Certificate serial: 366AA57B7DDA8C3A5A536B5A6A4B2CA2365BAB7C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u46H81MSfMkjscwfl4aZU3761m0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/0/BB8E87F353127CC923B1CC1F978699537EFAD66D.mft Manifest number: 08 Signing time: Wed 24 Dec 2025 02:33:27 +0000 Manifest this update: Wed 24 Dec 2025 02:28:27 +0000 Manifest next update: Thu 25 Dec 2025 04:33:27 +0000 Files and hashes: 1: AS201386.asa (hash: Km0FYaY5IcqQati8Ra2iIk50ZJqz+8PvB+1BSoPkJKw=) 2: BB8E87F353127CC923B1CC1F978699537EFAD66D.crl (hash: 4UH+sAzfDBM9KsYYeL0UOOZmTBKv7kLhqOB9imYSf8E=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/0/BB8E87F353127CC923B1CC1F978699537EFAD66D.crl rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/0/BB8E87F353127CC923B1CC1F978699537EFAD66D.mft rsync://rpki.ripe.net/repository/DEFAULT/u46H81MSfMkjscwfl4aZU3761m0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 04:33:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:6a:a5:7b:7d:da:8c:3a:5a:53:6b:5a:6a:4b:2c:a2:36:5b:ab:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bb8e87f353127cc923b1cc1f978699537efad66d Validity Not Before: Dec 24 02:28:27 2025 GMT Not After : Dec 25 04:33:27 2025 GMT Subject: CN=89F1A86CDA562C8B2192C5FCCD0377C350E8F19F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:46:61:de:2c:4b:f3:d4:a8:de:7a:94:f1:14: 58:ac:2d:1a:26:c9:d2:af:92:e8:04:75:17:29:99: 57:d3:0c:a9:98:f9:1d:53:2c:af:da:45:89:fe:0a: ac:30:bc:20:1e:95:17:63:f1:4c:12:02:58:82:d7: 26:3f:27:54:18:e1:ce:c3:94:aa:dc:58:1c:da:9c: e0:53:45:f0:5f:f7:c4:b6:9d:40:0f:37:cb:a9:30: fb:03:d7:53:5f:7c:cb:40:7c:8a:e1:01:55:51:ad: 5e:e4:75:a6:3d:5f:70:7a:94:19:a9:0c:1b:7e:09: 53:0a:b6:05:ca:2f:20:fa:c8:85:31:71:9d:68:74: 48:c4:8d:5d:ba:b1:ea:1a:9b:db:c9:f7:0f:1d:0a: 13:6b:71:1b:95:7f:dd:a9:5a:40:62:bf:c2:11:91: 5d:ba:43:42:47:88:f2:55:87:d9:4a:b1:90:2e:d6: d4:4d:46:59:1e:74:23:98:de:78:c0:5c:04:93:3f: 67:34:c2:70:0a:9e:9e:d7:4f:33:32:90:e6:e5:49: 1c:60:1f:76:1b:8c:0e:21:6b:77:e7:58:41:a6:52: 21:39:f0:ad:c2:14:bd:f2:b6:c4:16:c5:de:70:33: a1:ba:c7:ec:c4:a6:a8:77:0e:e5:94:75:0d:57:6d: 21:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:F1:A8:6C:DA:56:2C:8B:21:92:C5:FC:CD:03:77:C3:50:E8:F1:9F X509v3 Authority Key Identifier: keyid:BB:8E:87:F3:53:12:7C:C9:23:B1:CC:1F:97:86:99:53:7E:FA:D6:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/0/BB8E87F353127CC923B1CC1F978699537EFAD66D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u46H81MSfMkjscwfl4aZU3761m0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/0/BB8E87F353127CC923B1CC1F978699537EFAD66D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:08:d8:15:43:3a:a0:11:be:8d:91:c7:e1:f2:cc:cb:0b:05: f1:aa:03:f5:34:bc:f5:3f:19:f3:b8:13:43:70:e7:e0:e0:f3: 7a:e9:17:db:1a:ca:54:cc:b9:09:13:5c:a4:e9:4d:80:20:c7: d4:2b:98:5c:c8:70:e4:66:ec:95:70:4f:06:74:2b:2a:a2:0c: f4:14:08:e7:67:15:ae:7d:d9:07:a0:8b:28:95:44:67:ed:03: 8e:df:8b:e7:1f:65:ae:58:27:39:b6:ca:d8:3d:31:ec:41:30: 7c:e0:b2:41:77:41:bc:cd:1b:bf:28:f3:ef:10:9a:40:32:3c: a5:36:72:21:6a:16:5b:c0:95:59:6c:35:14:9c:29:d9:70:ad: f5:6d:29:82:89:37:e4:6f:eb:ea:08:07:e5:f8:dc:46:32:83: 89:3d:f3:38:ff:96:07:a8:c6:27:34:b4:6c:c4:1c:8c:de:bc: 3b:03:f7:ff:3a:75:20:b9:b1:0b:10:83:6e:d6:55:ce:af:b0: 84:6b:29:25:a4:a6:55:55:1b:a8:69:7d:92:9b:f1:62:ad:6a: 68:ba:5c:9c:58:cc:54:35:7f:c8:02:c2:4e:dd:bd:ce:d7:a9: 13:61:e7:fc:d0:1d:cc:7a:86:e2:16:5b:fb:d0:70:f0:cd:16: 22:6c:49:2d -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUNmqle33ajDpaU2taakssojZbq3wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYmI4ZTg3ZjM1MzEyN2NjOTIzYjFjYzFmOTc4Njk5NTM3 ZWZhZDY2ZDAeFw0yNTEyMjQwMjI4MjdaFw0yNTEyMjUwNDMzMjdaMDMxMTAvBgNV BAMTKDg5RjFBODZDREE1NjJDOEIyMTkyQzVGQ0NEMDM3N0MzNTBFOEYxOUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDERmHeLEvz1KjeepTxFFisLRom ydKvkugEdRcpmVfTDKmY+R1TLK/aRYn+CqwwvCAelRdj8UwSAliC1yY/J1QY4c7D lKrcWBzanOBTRfBf98S2nUAPN8upMPsD11NffMtAfIrhAVVRrV7kdaY9X3B6lBmp DBt+CVMKtgXKLyD6yIUxcZ1odEjEjV26seoam9vJ9w8dChNrcRuVf92pWkBiv8IR kV26Q0JHiPJVh9lKsZAu1tRNRlkedCOY3njAXASTP2c0wnAKnp7XTzMykOblSRxg H3YbjA4ha3fnWEGmUiE58K3CFL3ytsQWxd5wM6G6x+zEpqh3DuWUdQ1XbSFxAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUifGobNpWLIshksX8zQN3w1Do8Z8wHwYDVR0j BBgwFoAUu46H81MSfMkjscwfl4aZU3761m0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTJiODQxNTYtOTU5Ny00NGI0LWJkMjQtNjVkZTJjMzU1 ZWZjLzAvQkI4RTg3RjM1MzEyN0NDOTIzQjFDQzFGOTc4Njk5NTM3RUZBRDY2RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3U0Nkg4MU1TZk1ranNjd2ZsNGFaVTM3 NjFtMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS81MmI4NDE1Ni05 NTk3LTQ0YjQtYmQyNC02NWRlMmMzNTVlZmMvMC9CQjhFODdGMzUzMTI3Q0M5MjNC MUNDMUY5Nzg2OTk1MzdFRkFENjZELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFQjYFUM6oBG+jZHH4fLM ywsF8aoD9TS89T8Z87gTQ3Dn4ODzeukX2xrKVMy5CRNcpOlNgCDH1CuYXMhw5Gbs lXBPBnQrKqIM9BQI52cVrn3ZB6CLKJVEZ+0Djt+L5x9lrlgnObbK2D0x7EEwfOCy QXdBvM0bvyjz7xCaQDI8pTZyIWoWW8CVWWw1FJwp2XCt9W0pgok35G/r6ggH5fjc RjKDiT3zOP+WB6jGJzS0bMQcjN68OwP3/zp1ILmxCxCDbtZVzq+whGspJaSmVVUb qGl9kpvxYq1qaLpcnFjMVDV/yALCTt29ztepE2Hn/NAdzHqG4hZb+9Bw8M0WImxJ LQ== -----END CERTIFICATE-----Generated at Wed Dec 24 10:44:48 2025 by rpki-client