This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.mft File: 8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.mft (raw, json) Hash identifier: sRpj4rt+laV8PL4efGsOG/2uQljxd0eeM+ytiF8aaCU= Subject key identifier: 48:B4:30:09:51:8E:CC:9B:18:B7:C3:5F:AE:27:A7:86:8D:1A:DD:AA Authority key identifier: 8B:AD:30:7C:D4:DF:11:01:4E:40:ED:DF:FF:D6:0F:9A:09:E6:E9:5C Certificate issuer: /CN=8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C Certificate serial: 0138DADFB6F90383E1F69227BE5FAEBE32714F1A Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.mft Manifest number: 026D Signing time: Sat 20 Dec 2025 21:44:05 +0000 Manifest this update: Sat 20 Dec 2025 21:39:05 +0000 Manifest next update: Mon 22 Dec 2025 00:18:05 +0000 Files and hashes: 1: 8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.crl (hash: XbWp7QxOJm3ZeKM34vMJEIV0Qm18DYQ/Z2Ei2NGPpbw=) 2: 326131333a393634343a343030303a3a2f34302d3430203d3e20323034323931.roa (hash: 1o4m8PJbpPTt/WwCt8wMPBTEbmCl+8vcVtrKZbTYjFM=) 3: 326131333a393634343a343061653a3a2f34382d3438203d3e20323034323931.roa (hash: /APvQtIczoMdPeFgS8yLWOSzDbhA86h5Cc1N87vUKRI=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.crl rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.mft rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.cer rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.crl rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.mft rsync://rpki.ripe.net/repository/DEFAULT/8dBXL-cpkb0yhUuscWZ269rSKs4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:38:da:df:b6:f9:03:83:e1:f6:92:27:be:5f:ae:be:32:71:4f:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C Validity Not Before: Dec 20 21:39:05 2025 GMT Not After : Dec 22 00:18:05 2025 GMT Subject: CN=48B43009518ECC9B18B7C35FAE27A7868D1ADDAA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:4b:5f:11:61:fb:98:d3:5e:40:c6:b8:68:6a: 2c:1b:d8:0c:54:aa:25:dc:0c:90:db:3a:f4:9c:dd: 25:a3:61:8d:99:b8:5f:8b:86:57:f5:ad:fd:1b:4f: 49:39:cb:e5:fe:25:38:aa:48:05:e1:61:50:0f:45: 66:d4:a6:46:bd:ec:aa:7d:c3:72:a3:7c:cf:f9:04: 53:92:e2:76:9b:75:3d:70:ad:15:1d:a6:0f:c5:1c: cd:ce:2c:24:9f:f3:d7:8d:91:4a:6b:82:cd:23:0f: f9:2b:32:ce:6c:5a:15:b3:17:7a:ea:b8:b4:85:1b: 63:3c:98:7a:7d:6d:5d:1b:2d:df:d9:66:ac:e9:fa: 58:e2:78:24:00:b7:02:36:36:f5:04:84:50:6a:b9: 94:1d:c4:e8:59:8e:ef:2c:2a:8a:89:b3:e7:5c:dc: 40:a3:35:c8:17:76:b7:86:fe:b2:1b:92:fa:8f:13: 0b:2c:75:6b:b1:84:14:aa:97:92:1b:06:0a:fa:66: 9e:4d:b5:38:a9:b3:9f:b1:cc:07:c3:8b:61:d7:02: e6:70:a9:2f:3b:51:42:f3:44:96:a1:37:92:dc:fc: 02:c0:f8:e0:51:b5:b9:e3:7c:98:16:36:08:2d:04: f7:c6:62:66:53:f3:36:1f:cc:09:bb:8d:99:ee:03: 82:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:B4:30:09:51:8E:CC:9B:18:B7:C3:5F:AE:27:A7:86:8D:1A:DD:AA X509v3 Authority Key Identifier: keyid:8B:AD:30:7C:D4:DF:11:01:4E:40:ED:DF:FF:D6:0F:9A:09:E6:E9:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:bd:fc:40:08:36:e4:93:32:bd:07:93:f3:73:14:9a:b2:3c: 33:f3:2e:b9:fa:51:31:23:44:e9:c3:f5:40:76:ca:39:a6:47: 47:8e:e9:83:54:93:b4:fa:b6:04:18:4a:10:b0:16:90:8d:a7: 4d:39:8d:a0:30:b1:e9:12:55:31:a1:17:0e:e4:61:75:d2:ad: ec:a2:e1:26:47:06:83:9e:53:bd:83:ac:31:19:79:96:06:b3: f6:b1:00:ee:99:ef:02:d3:ac:d1:35:6c:f2:bb:13:92:74:78: e6:04:86:ca:aa:e8:87:b9:2f:eb:53:51:d0:bd:b9:e3:7b:17: cb:5c:9c:5d:ec:92:8f:9b:91:5d:37:d9:5f:f5:3c:fe:5c:51: a2:d6:fe:05:19:20:dc:da:88:a8:c3:ea:73:8d:df:a7:f4:0e: bc:c9:61:01:fd:73:7c:17:93:21:c6:75:c1:97:f3:47:81:9b: 81:fa:fa:60:52:06:70:0d:98:85:e0:bc:88:cd:1e:21:2e:ef: e6:2c:5c:8a:a9:db:0c:8a:14:1a:8c:69:9a:bc:20:a9:6e:af: 96:8e:1a:aa:16:c7:94:51:d0:c4:2b:10:93:21:69:6c:7c:79: 27:d0:f2:c1:df:b5:69:00:c6:3e:17:98:8f:f0:5f:b8:e2:99: 41:c5:05:6a -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUATja37b5A4Ph9pInvl+uvjJxTxowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEJBRDMwN0NENERGMTEwMTRFNDBFRERGRkZENjBGOUEw OUU2RTk1QzAeFw0yNTEyMjAyMTM5MDVaFw0yNTEyMjIwMDE4MDVaMDMxMTAvBgNV BAMTKDQ4QjQzMDA5NTE4RUNDOUIxOEI3QzM1RkFFMjdBNzg2OEQxQUREQUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7S18RYfuY015Axrhoaiwb2AxU qiXcDJDbOvSc3SWjYY2ZuF+Lhlf1rf0bT0k5y+X+JTiqSAXhYVAPRWbUpka97Kp9 w3KjfM/5BFOS4nabdT1wrRUdpg/FHM3OLCSf89eNkUprgs0jD/krMs5sWhWzF3rq uLSFG2M8mHp9bV0bLd/ZZqzp+ljieCQAtwI2NvUEhFBquZQdxOhZju8sKoqJs+dc 3ECjNcgXdreG/rIbkvqPEwssdWuxhBSql5IbBgr6Zp5NtTips5+xzAfDi2HXAuZw qS87UULzRJahN5Lc/ALA+OBRtbnjfJgWNggtBPfGYmZT8zYfzAm7jZnuA4KhAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUSLQwCVGOzJsYt8Nfrienho0a3aowHwYDVR0j BBgwFoAUi60wfNTfEQFOQO3f/9YPmgnm6VwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjVlYWU3NDUtOGFjOS00ZTcxLWJjOTQtZmNiMjYxNzAz Zjk2LzEvOEJBRDMwN0NENERGMTEwMTRFNDBFRERGRkZENjBGOUEwOUU2RTk1Qy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lMzBkZTg0Yi00MDBhLTRm ZDEtYWI4YS1lNzYxNmUyNDViNDkvMC84QkFEMzA3Q0Q0REYxMTAxNEU0MEVEREZG RkQ2MEY5QTA5RTZFOTVDLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzY1ZWFlNzQ1LThhYzktNGU3MS1iYzk0LWZjYjI2MTcwM2Y5Ni8xLzhCQUQzMDdD RDRERjExMDE0RTQwRURERkZGRDYwRjlBMDlFNkU5NUMubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCEvfxA CDbkkzK9B5PzcxSasjwz8y65+lExI0Tpw/VAdso5pkdHjumDVJO0+rYEGEoQsBaQ jadNOY2gMLHpElUxoRcO5GF10q3souEmRwaDnlO9g6wxGXmWBrP2sQDume8C06zR NWzyuxOSdHjmBIbKquiHuS/rU1HQvbnjexfLXJxd7JKPm5FdN9lf9Tz+XFGi1v4F GSDc2oiow+pzjd+n9A68yWEB/XN8F5MhxnXBl/NHgZuB+vpgUgZwDZiF4LyIzR4h Lu/mLFyKqdsMihQajGmavCCpbq+WjhqqFseUUdDEKxCTIWlsfHkn0PLB37VpAMY+ F5iP8F+44plBxQVq -----END CERTIFICATE-----Generated at Sun Dec 21 10:32:36 2025 by rpki-client