This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/2/AEEAEEFF1C1C26B1A008C22C843AB45DCAD157ED.mft File: AEEAEEFF1C1C26B1A008C22C843AB45DCAD157ED.mft (raw, json) Hash identifier: X9Y/hPJIuXrPht32qxuRGDLFzgzD67F6cYv02DznKNQ= Subject key identifier: D1:50:E0:15:9B:FE:8C:1C:89:26:11:1C:E1:85:26:BC:B4:AD:05:2B Authority key identifier: AE:EA:EE:FF:1C:1C:26:B1:A0:08:C2:2C:84:3A:B4:5D:CA:D1:57:ED Certificate issuer: /CN=AEEAEEFF1C1C26B1A008C22C843AB45DCAD157ED Certificate serial: 598ED00E5B6B7869E22E32B3CABD2D48169A42AD Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/AEEAEEFF1C1C26B1A008C22C843AB45DCAD157ED.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/2/AEEAEEFF1C1C26B1A008C22C843AB45DCAD157ED.mft Manifest number: 03 Signing time: Wed 24 Dec 2025 02:33:27 +0000 Manifest this update: Wed 24 Dec 2025 02:28:27 +0000 Manifest next update: Thu 25 Dec 2025 03:57:27 +0000 Files and hashes: 1: 326130663a316363353a313031303a3a2f34342d3438203d3e20323136323939.roa (hash: MXahPf9Lj2zVOENVBE4q+FEfvHiUAMJ2dGoOScL1QgA=) 2: AEEAEEFF1C1C26B1A008C22C843AB45DCAD157ED.crl (hash: KI/Nb4EsQNBroT1hIegXpgZ8s3p1HfQm9qpe/6UPVBg=) 3: 326130663a316363353a326631303a3a2f34342d3438203d3e20323031333836.roa (hash: pBdcJZvRMeh4xUlwHoVjZ2H6JoMj65McebqGPnPWn5I=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/2/AEEAEEFF1C1C26B1A008C22C843AB45DCAD157ED.crl rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/2/AEEAEEFF1C1C26B1A008C22C843AB45DCAD157ED.mft rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/AEEAEEFF1C1C26B1A008C22C843AB45DCAD157ED.cer rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/75A838E02C61800F73D3019DE0A51F567B64BC0E.crl rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/75A838E02C61800F73D3019DE0A51F567B64BC0E.mft rsync://rpki.ripe.net/repository/DEFAULT/dag44CxhgA9z0wGd4KUfVntkvA4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 03:57:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:8e:d0:0e:5b:6b:78:69:e2:2e:32:b3:ca:bd:2d:48:16:9a:42:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AEEAEEFF1C1C26B1A008C22C843AB45DCAD157ED Validity Not Before: Dec 24 02:28:27 2025 GMT Not After : Dec 25 03:57:27 2025 GMT Subject: CN=D150E0159BFE8C1C8926111CE18526BCB4AD052B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:4a:ea:be:ef:64:4d:23:db:20:67:ed:35:b1: 20:7c:65:33:ed:62:25:42:99:1a:92:30:91:97:b9: b6:53:61:78:76:a7:95:fe:53:05:f7:f3:2d:05:ee: 03:27:3a:60:e7:6d:04:9e:51:9d:8f:00:e7:74:04: 17:3c:ec:a9:9c:63:fc:3b:77:f6:ad:bc:96:70:bb: 7a:a9:3d:12:62:ea:ab:e5:39:2d:32:21:9b:c6:cc: d3:c4:6f:33:71:b1:7a:0c:7f:4b:50:85:1f:93:fc: be:c4:d9:12:17:36:24:3b:94:83:6c:f9:48:38:97: 13:c0:78:1a:86:d8:41:58:ae:03:ff:31:70:bf:4e: 7c:cb:9e:d9:ac:ae:18:92:70:f1:a1:3c:af:b2:4b: 56:61:aa:c1:2e:37:bb:4e:0d:38:3a:15:80:d3:0d: af:4d:79:11:8d:6d:e7:8d:e1:3f:e5:06:75:a3:a3: 6d:05:dc:6a:29:af:9a:04:ae:67:29:44:55:f2:c4: 68:57:e0:bb:45:e9:ff:02:cc:70:e0:e6:24:09:5a: 9d:95:3e:8e:66:02:df:f0:b7:e3:15:12:78:4d:57: 62:c4:99:f5:cc:06:fc:b8:53:3b:9c:87:1c:11:af: 2f:38:19:a6:ec:bb:03:b5:d9:c2:cf:3f:3e:04:8a: 59:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:50:E0:15:9B:FE:8C:1C:89:26:11:1C:E1:85:26:BC:B4:AD:05:2B X509v3 Authority Key Identifier: keyid:AE:EA:EE:FF:1C:1C:26:B1:A0:08:C2:2C:84:3A:B4:5D:CA:D1:57:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/2/AEEAEEFF1C1C26B1A008C22C843AB45DCAD157ED.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/AEEAEEFF1C1C26B1A008C22C843AB45DCAD157ED.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/2/AEEAEEFF1C1C26B1A008C22C843AB45DCAD157ED.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d3:98:01:e7:92:21:b3:9d:38:68:97:c2:70:14:0c:c2:c9:9b: b2:23:89:bd:00:93:50:99:7c:bf:ad:67:94:a4:8e:44:e5:45: d4:2c:54:39:a9:79:03:ee:4c:48:fe:1e:da:1e:ed:26:58:70: 6a:54:79:e3:1c:ef:7d:93:b1:a4:2c:b5:f6:46:1f:f5:cf:e2: 24:4f:53:93:3f:44:d2:95:a1:08:d5:34:f9:68:ea:0d:72:ef: 39:32:f3:a9:30:07:92:f8:14:41:dc:8e:44:65:f4:c6:6b:3e: be:cf:32:96:b8:b5:18:b2:d9:17:d2:0b:02:b2:5c:b9:a8:90: 6c:97:cf:6b:75:4e:cd:05:d2:e2:39:7a:2f:d2:25:2c:e2:4f: 5f:ae:e6:08:2e:03:fc:30:91:cb:ce:59:a7:1f:ee:b6:28:87: 65:38:99:b1:24:9a:5e:a7:7f:ba:56:a5:75:fe:32:df:a9:b6: 59:10:70:b4:47:cc:5e:1c:7b:a6:25:0b:56:8c:94:23:29:89: 2e:8a:99:7e:fe:ab:43:36:65:bd:e8:3a:79:e4:c2:28:46:ac: a2:3b:eb:a4:1d:4b:36:bd:81:87:48:16:04:25:ec:39:a8:86: 2a:b5:07:ed:eb:40:a9:9b:85:71:75:45:a8:39:c6:86:66:9d: a9:6e:74:3f -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUWY7QDltreGniLjKzyr0tSBaaQq0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUVFQUVFRkYxQzFDMjZCMUEwMDhDMjJDODQzQUI0NURD QUQxNTdFRDAeFw0yNTEyMjQwMjI4MjdaFw0yNTEyMjUwMzU3MjdaMDMxMTAvBgNV BAMTKEQxNTBFMDE1OUJGRThDMUM4OTI2MTExQ0UxODUyNkJDQjRBRDA1MkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1Suq+72RNI9sgZ+01sSB8ZTPt YiVCmRqSMJGXubZTYXh2p5X+UwX38y0F7gMnOmDnbQSeUZ2PAOd0BBc87KmcY/w7 d/atvJZwu3qpPRJi6qvlOS0yIZvGzNPEbzNxsXoMf0tQhR+T/L7E2RIXNiQ7lINs +Ug4lxPAeBqG2EFYrgP/MXC/TnzLntmsrhiScPGhPK+yS1ZhqsEuN7tODTg6FYDT Da9NeRGNbeeN4T/lBnWjo20F3Gopr5oErmcpRFXyxGhX4LtF6f8CzHDg5iQJWp2V Po5mAt/wt+MVEnhNV2LEmfXMBvy4UzuchxwRry84GabsuwO12cLPPz4EillRAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU0VDgFZv+jByJJhEc4YUmvLStBSswHwYDVR0j BBgwFoAUruru/xwcJrGgCMIshDq0XcrRV+0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTJiODQxNTYtOTU5Ny00NGI0LWJkMjQtNjVkZTJjMzU1 ZWZjLzIvQUVFQUVFRkYxQzFDMjZCMUEwMDhDMjJDODQzQUI0NURDQUQxNTdFRC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lMjZlYjEzNi00ZmU1LTRl NjEtYTRkOC1mMzQ1ZjUyYmMyNWQvMC9BRUVBRUVGRjFDMUMyNkIxQTAwOEMyMkM4 NDNBQjQ1RENBRDE1N0VELmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzUyYjg0MTU2LTk1OTctNDRiNC1iZDI0LTY1ZGUyYzM1NWVmYy8yL0FFRUFFRUZG MUMxQzI2QjFBMDA4QzIyQzg0M0FCNDVEQ0FEMTU3RUQubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDTmAHn kiGznThol8JwFAzCyZuyI4m9AJNQmXy/rWeUpI5E5UXULFQ5qXkD7kxI/h7aHu0m WHBqVHnjHO99k7GkLLX2Rh/1z+IkT1OTP0TSlaEI1TT5aOoNcu85MvOpMAeS+BRB 3I5EZfTGaz6+zzKWuLUYstkX0gsCsly5qJBsl89rdU7NBdLiOXov0iUs4k9fruYI LgP8MJHLzlmnH+62KIdlOJmxJJpep3+6VqV1/jLfqbZZEHC0R8xeHHumJQtWjJQj KYkuipl+/qtDNmW96Dp55MIoRqyiO+ukHUs2vYGHSBYEJew5qIYqtQft60Cpm4Vx dUWoOcaGZp2pbnQ/ -----END CERTIFICATE-----Generated at Wed Dec 24 10:44:49 2025 by rpki-client