This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/5a7c956c-22eb-4bb8-a327-ad97161295bc/0/020F7ED217FC36532E6B045CFBCCDA68A6604620.mft File: 020F7ED217FC36532E6B045CFBCCDA68A6604620.mft (raw, json) Hash identifier: qxqqyyqJtT4NBUcspNiMcCxHvoVY+iBLZms/ITdMWY0= Subject key identifier: F3:B9:E2:B4:2B:48:2B:98:28:D7:10:89:8E:EA:3E:34:26:2C:C5:DB Authority key identifier: 02:0F:7E:D2:17:FC:36:53:2E:6B:04:5C:FB:CC:DA:68:A6:60:46:20 Certificate issuer: /CN=020F7ED217FC36532E6B045CFBCCDA68A6604620 Certificate serial: 764C6A924253617BD1419C2EB952E6C7148D3A33 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/020F7ED217FC36532E6B045CFBCCDA68A6604620.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5a7c956c-22eb-4bb8-a327-ad97161295bc/0/020F7ED217FC36532E6B045CFBCCDA68A6604620.mft Manifest number: 9B Signing time: Sat 20 Dec 2025 08:55:46 +0000 Manifest this update: Sat 20 Dec 2025 08:50:46 +0000 Manifest next update: Sun 21 Dec 2025 11:59:46 +0000 Files and hashes: 1: 326131343a373538313a366663303a3a2f34342d3438203d3e20323037333839.roa (hash: k0slLXQGak8JfXgcycld4UCv11bkqqJyVwy8WgUs0W4=) 2: 326131343a373538313a366662303a3a2f34342d3438203d3e20323136343332.roa (hash: cip9cJqKeyNrJhvNYpxl3IQ3uuVk6x6ccrH22pN5xrA=) 3: 326131343a373538313a366530303a3a2f34302d3438203d3e2039393233.roa (hash: xTMyG8vk7HfhKOphzDUHjsL1N+HXzTu0fnBjhyB6AKQ=) 4: 326131343a373538313a366665303a3a2f34342d3438203d3e20323134383431.roa (hash: eJoFXZz3vH/PzqNzkkd4bWX4CpO0e/s0UWWhyH7ohGo=) 5: 326131343a373538313a366664303a3a2f34342d3438203d3e20323135393334.roa (hash: BfxFUd5DTechXRUy4Ex3ytqAtMEr8QPJBcDEM0dDVlg=) 6: 326131343a373538313a363030303a3a2f33362d3438203d3e20323034383434.roa (hash: 9WwOZQ+czh53N90Wic7WKUZpN9yKrnRBc/mSIwdZviM=) 7: 020F7ED217FC36532E6B045CFBCCDA68A6604620.crl (hash: CceRJZSijDCrpyAAkcTw01GPRbpOjhlKJf7yKXOAeWQ=) 8: 326131343a373538313a366430303a3a2f34302d3438203d3e20323035333239.roa (hash: UAf2blctTo7ZlN86/McI15QZsGre1E35LEt/FhIBXBM=) 9: 326131343a373538313a366330303a3a2f34302d3438203d3e20313938393534.roa (hash: fPBlj/OX226nVSvX0NnbhELuUhpZ2u/Ytd/uYZbhMTA=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5a7c956c-22eb-4bb8-a327-ad97161295bc/0/020F7ED217FC36532E6B045CFBCCDA68A6604620.crl rsync://rsync.paas.rpki.ripe.net/repository/5a7c956c-22eb-4bb8-a327-ad97161295bc/0/020F7ED217FC36532E6B045CFBCCDA68A6604620.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/020F7ED217FC36532E6B045CFBCCDA68A6604620.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 11:59:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:4c:6a:92:42:53:61:7b:d1:41:9c:2e:b9:52:e6:c7:14:8d:3a:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=020F7ED217FC36532E6B045CFBCCDA68A6604620 Validity Not Before: Dec 20 08:50:46 2025 GMT Not After : Dec 21 11:59:46 2025 GMT Subject: CN=F3B9E2B42B482B9828D710898EEA3E34262CC5DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:2c:e4:b9:09:5d:56:7e:dd:41:8a:fd:ad:cf: 4c:c4:b4:07:5c:51:53:47:53:ff:57:85:51:b1:fc: da:88:a6:37:05:4b:9a:aa:04:bb:46:d5:6a:52:59: 59:82:08:b4:dc:7f:7a:3f:ea:eb:f9:67:e2:64:20: 7b:d3:b0:69:96:9c:36:38:07:59:c7:d2:5d:a3:55: ee:cc:d6:15:1c:fa:50:ed:4d:98:4a:1c:f7:8c:95: f8:df:aa:52:2f:bc:aa:2b:85:19:45:1b:4a:26:00: fe:09:aa:6f:7e:77:31:ee:8d:ca:0e:75:70:af:5e: 58:d6:e8:18:73:c8:96:d1:74:17:ab:1a:61:4c:89: 3a:8b:35:a6:a8:74:d4:33:c2:77:f1:50:99:f0:8c: 7d:78:45:97:be:af:36:7a:ad:b2:2e:90:ed:a3:ce: fc:d1:4f:93:9c:ce:fb:d6:23:cb:e4:4b:7e:fe:37: e1:c8:a8:7b:bb:fa:ca:a3:4a:9f:a0:8a:91:f1:a0: cd:50:4c:ba:b1:ad:87:5e:a9:31:00:b4:ba:d5:30: 16:b2:c2:d6:cb:05:2c:8e:1d:a7:ac:67:89:d7:11: 47:04:6b:06:52:6e:e7:08:cd:55:a8:02:cf:dd:05: 84:b5:c8:26:6d:85:79:c1:55:ea:99:c8:8a:f0:88: 61:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:B9:E2:B4:2B:48:2B:98:28:D7:10:89:8E:EA:3E:34:26:2C:C5:DB X509v3 Authority Key Identifier: keyid:02:0F:7E:D2:17:FC:36:53:2E:6B:04:5C:FB:CC:DA:68:A6:60:46:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/5a7c956c-22eb-4bb8-a327-ad97161295bc/0/020F7ED217FC36532E6B045CFBCCDA68A6604620.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/020F7ED217FC36532E6B045CFBCCDA68A6604620.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5a7c956c-22eb-4bb8-a327-ad97161295bc/0/020F7ED217FC36532E6B045CFBCCDA68A6604620.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:74:0a:31:6b:a4:6f:ad:aa:88:09:8c:b9:f8:58:7b:68:34: 01:62:eb:fa:1a:f3:01:f8:79:75:da:3c:32:68:87:ea:ed:f0: 98:39:56:f2:32:44:a3:95:46:56:8a:fb:b5:5a:e6:36:c9:b9: 2f:d1:b1:d2:e3:95:6a:3f:77:c3:2c:9b:75:c5:e7:42:e1:24: 73:28:68:86:72:d0:4d:a3:96:f0:2b:1e:2b:7f:05:1d:46:c7: 08:10:b2:51:93:df:bc:96:17:64:d8:c4:21:28:1d:59:74:5f: 7f:2a:7a:75:28:fd:75:c3:fd:95:cc:80:12:59:b5:f4:0d:3d: 84:73:00:e3:af:e3:23:70:45:ec:22:60:5d:6c:fe:c0:77:ca: ab:94:66:43:ea:3e:c2:0e:31:4d:ea:b4:fc:e7:a7:48:38:92: 81:c3:3b:18:2a:7c:d3:0d:0b:c4:14:a7:5a:5e:f4:9c:f8:83: 60:d3:f4:59:f3:b6:3f:f9:46:b8:11:b1:30:fd:f1:46:9b:09: d1:4e:6b:85:e4:e4:8a:35:48:ba:ad:f2:a1:8c:b2:4a:ce:fd: 7c:c5:f1:2d:ae:af:17:26:4b:7f:be:e8:f1:56:fa:5c:da:e3: fa:4f:ce:d2:5a:66:b0:1e:da:3c:ea:84:c2:8b:55:d0:5a:e3: a4:9c:3f:ae -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUdkxqkkJTYXvRQZwuuVLmxxSNOjMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDIwRjdFRDIxN0ZDMzY1MzJFNkIwNDVDRkJDQ0RBNjhB NjYwNDYyMDAeFw0yNTEyMjAwODUwNDZaFw0yNTEyMjExMTU5NDZaMDMxMTAvBgNV BAMTKEYzQjlFMkI0MkI0ODJCOTgyOEQ3MTA4OThFRUEzRTM0MjYyQ0M1REIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWLOS5CV1Wft1Biv2tz0zEtAdc UVNHU/9XhVGx/NqIpjcFS5qqBLtG1WpSWVmCCLTcf3o/6uv5Z+JkIHvTsGmWnDY4 B1nH0l2jVe7M1hUc+lDtTZhKHPeMlfjfqlIvvKorhRlFG0omAP4Jqm9+dzHujcoO dXCvXljW6BhzyJbRdBerGmFMiTqLNaaodNQzwnfxUJnwjH14RZe+rzZ6rbIukO2j zvzRT5OczvvWI8vkS37+N+HIqHu7+sqjSp+gipHxoM1QTLqxrYdeqTEAtLrVMBay wtbLBSyOHaesZ4nXEUcEawZSbucIzVWoAs/dBYS1yCZthXnBVeqZyIrwiGERAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU87nitCtIK5go1xCJjuo+NCYsxdswHwYDVR0j BBgwFoAUAg9+0hf8NlMuawRc+8zaaKZgRiAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNWE3Yzk1NmMtMjJlYi00YmI4LWEzMjctYWQ5NzE2MTI5 NWJjLzAvMDIwRjdFRDIxN0ZDMzY1MzJFNkIwNDVDRkJDQ0RBNjhBNjYwNDYyMC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8wMjBGN0VEMjE3RkMzNjUzMkU2QjA0NUNG QkNDREE2OEE2NjA0NjIwLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzVhN2M5NTZjLTIyZWItNGJiOC1hMzI3LWFkOTcxNjEyOTViYy8wLzAyMEY3RUQy MTdGQzM2NTMyRTZCMDQ1Q0ZCQ0NEQTY4QTY2MDQ2MjAubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQC7dAox a6RvraqICYy5+Fh7aDQBYuv6GvMB+Hl12jwyaIfq7fCYOVbyMkSjlUZWivu1WuY2 ybkv0bHS45VqP3fDLJt1xedC4SRzKGiGctBNo5bwKx4rfwUdRscIELJRk9+8lhdk 2MQhKB1ZdF9/Knp1KP11w/2VzIASWbX0DT2EcwDjr+MjcEXsImBdbP7Ad8qrlGZD 6j7CDjFN6rT856dIOJKBwzsYKnzTDQvEFKdaXvSc+INg0/RZ87Y/+Ua4EbEw/fFG mwnRTmuF5OSKNUi6rfKhjLJKzv18xfEtrq8XJkt/vujxVvpc2uP6T87SWmawHto8 6oTCi1XQWuOknD+u -----END CERTIFICATE-----Generated at Sun Dec 21 02:01:53 2025 by rpki-client