This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.mft File: 25827D84056B8444CC2A7842759035354B8416BC.mft (raw, json) Hash identifier: 8CSyaZF0Ajy8R6AlIp+cSVYyeBlj5HeLWsqHG5kSKjc= Subject key identifier: CF:3F:37:36:31:B5:1F:08:9E:6F:FC:8B:8D:AF:C5:17:42:9D:65:AD Authority key identifier: 25:82:7D:84:05:6B:84:44:CC:2A:78:42:75:90:35:35:4B:84:16:BC Certificate issuer: /CN=25827d84056b8444cc2a7842759035354b8416bc Certificate serial: 252D564B67A05E0ECCF57399F30166A5497D98F5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JYJ9hAVrhETMKnhCdZA1NUuEFrw.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.mft Manifest number: 02F1 Signing time: Mon 22 Dec 2025 11:22:46 +0000 Manifest this update: Mon 22 Dec 2025 11:17:46 +0000 Manifest next update: Tue 23 Dec 2025 13:37:46 +0000 Files and hashes: 1: 3138352e3133342e3139312e302f32342d3234203d3e20323037343837.roa (hash: wMCy3m1h75GfC2ATV5bYCJD7S6jjiI8Si5ikYie+OUI=) 2: AS207487.asa (hash: Ha+forEe+xS82UGSV4B7j+UWBj+/I05XFS+Ojajx3y4=) 3: 326131343a313463313a3230303a3a2f34302d3438203d3e203138363037.roa (hash: eBGi76bk+i5KfnHGqq9jtzpn0gh813x0+GlA90AUkZI=) 4: 25827D84056B8444CC2A7842759035354B8416BC.crl (hash: b7/Surlvv+Fd8U1EefQlXMXZUn4RmnUKWftbchriVL0=) 5: 326131343a313463303a3a2f34382d3438203d3e20323037343837.roa (hash: MAksePoJ+rnc08XyHZPcbQHx/BhF1iv7lCiKD0GFWxw=) 6: AS18607.asa (hash: ol8lct09PZ1pqBOGDq6LTNV0i5NYMmiHGhSWuOi+FwQ=) 7: 326131343a313463303a313a3a2f34382d3438203d3e20323037343837.roa (hash: nCuZ5ADJB2e8lGpTQQDYT3/JtyMvU82Myd2okt8I23s=) 8: 326131343a313463303a323a3a2f34382d3438203d3e20323037343837.roa (hash: lVUTv9ePxFs76NYMpRch/wm8DFit0p7cLkwe+1lgWxI=) 9: 58E92F2C3859C2D0EF322A871688CB22928E2F3E.cer (hash: gYiT3SS0bbmQQSp3p/LPeJzfbx3ujd90DskZO9GZ0PQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.crl rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.mft rsync://rpki.ripe.net/repository/DEFAULT/JYJ9hAVrhETMKnhCdZA1NUuEFrw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 13:37:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:2d:56:4b:67:a0:5e:0e:cc:f5:73:99:f3:01:66:a5:49:7d:98:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25827d84056b8444cc2a7842759035354b8416bc Validity Not Before: Dec 22 11:17:46 2025 GMT Not After : Dec 23 13:37:46 2025 GMT Subject: CN=CF3F373631B51F089E6FFC8B8DAFC517429D65AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:6b:e1:f8:06:8d:60:8d:4e:40:33:a0:1d:2f: 97:72:9c:4c:71:7e:76:dc:33:3a:dc:ec:68:b1:a5: d5:61:50:57:fe:0b:e8:ce:ed:b9:4c:5d:1a:2e:9d: e2:36:30:8e:57:80:5b:65:66:25:6b:c9:1c:da:e9: 9f:3d:b0:1c:a6:cc:c8:65:a4:93:bc:a0:ce:c0:9c: 7d:9d:1d:7f:4f:74:2f:82:94:0b:f6:ea:89:fa:cf: e9:11:19:af:03:c6:8f:9d:43:45:40:d8:32:e1:dc: 93:58:25:52:40:0a:50:79:c9:c6:4e:c5:55:76:60: 4c:9c:25:e4:01:10:79:8a:59:1d:97:df:4d:28:fb: 77:41:f7:ed:69:10:a5:8f:cc:53:e5:b0:88:ce:5e: 16:67:44:c1:c8:d3:33:be:0a:92:28:76:d7:5f:00: 72:89:7f:1b:7b:a1:9e:20:d6:27:36:47:40:6c:30: 01:05:2c:92:01:33:d1:b8:30:7a:a9:05:0e:2d:0b: 2e:2d:12:f1:59:33:c9:ef:b1:9b:e9:43:98:b9:c7: eb:00:7e:6d:d1:91:69:fa:20:fe:68:e2:5c:e3:e0: e0:31:7b:3c:23:bc:90:c8:93:ff:b9:90:60:48:c7: da:9b:9f:92:9f:f4:a5:4e:71:31:c7:b8:cd:48:50: 0b:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:3F:37:36:31:B5:1F:08:9E:6F:FC:8B:8D:AF:C5:17:42:9D:65:AD X509v3 Authority Key Identifier: keyid:25:82:7D:84:05:6B:84:44:CC:2A:78:42:75:90:35:35:4B:84:16:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JYJ9hAVrhETMKnhCdZA1NUuEFrw.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:4e:f6:1b:71:e5:d4:83:0b:f8:2b:79:d2:bc:97:cc:27:78: 33:4b:ac:f8:ee:5a:1c:2c:56:54:46:76:13:3a:c8:83:06:1c: 21:72:96:ab:11:0d:7a:cd:f0:42:45:f3:98:49:86:05:5e:aa: 68:4d:e4:47:0c:a7:04:c7:ee:18:80:d5:8b:45:50:58:ca:55: 8d:73:1c:10:d1:0e:00:34:4a:02:9e:07:0e:da:fa:4e:0e:04: 36:45:72:ea:24:5d:d1:ae:cf:6c:27:9a:1e:41:37:94:35:ed: a2:cb:ad:92:c8:20:8c:07:79:a1:6f:39:aa:09:3e:97:19:3d: 68:77:61:65:78:5d:dc:a4:cb:22:21:3c:81:99:76:0a:59:20: 51:35:7d:26:9e:dc:69:32:db:0a:29:a6:9d:c9:ea:53:1a:3e: e3:06:66:77:50:52:42:8b:07:76:7e:16:37:71:2e:71:27:fe: b1:38:0b:be:71:7d:2c:6a:86:a2:e8:2b:10:45:89:76:4c:29: 7b:bc:e9:55:72:9e:47:1d:10:66:11:e7:a7:ce:55:76:3e:29: 14:30:e9:cc:49:9f:37:2b:f7:ae:e9:a7:3f:78:4b:44:0f:8e: bd:0a:6a:f1:8f:0d:08:d7:69:54:16:65:9a:da:58:d9:ab:69: 9e:a7:72:3d -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUJS1WS2egXg7M9XOZ8wFmpUl9mPUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjU4MjdkODQwNTZiODQ0NGNjMmE3ODQyNzU5MDM1MzU0 Yjg0MTZiYzAeFw0yNTEyMjIxMTE3NDZaFw0yNTEyMjMxMzM3NDZaMDMxMTAvBgNV BAMTKENGM0YzNzM2MzFCNTFGMDg5RTZGRkM4QjhEQUZDNTE3NDI5RDY1QUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZa+H4Bo1gjU5AM6AdL5dynExx fnbcMzrc7GixpdVhUFf+C+jO7blMXRouneI2MI5XgFtlZiVryRza6Z89sBymzMhl pJO8oM7AnH2dHX9PdC+ClAv26on6z+kRGa8Dxo+dQ0VA2DLh3JNYJVJAClB5ycZO xVV2YEycJeQBEHmKWR2X300o+3dB9+1pEKWPzFPlsIjOXhZnRMHI0zO+CpIodtdf AHKJfxt7oZ4g1ic2R0BsMAEFLJIBM9G4MHqpBQ4tCy4tEvFZM8nvsZvpQ5i5x+sA fm3RkWn6IP5o4lzj4OAxezwjvJDIk/+5kGBIx9qbn5Kf9KVOcTHHuM1IUAtTAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUzz83NjG1Hwieb/yLja/FF0KdZa0wHwYDVR0j BBgwFoAUJYJ9hAVrhETMKnhCdZA1NUuEFrwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjliYmZkY2YtMzVjZC00NTI0LThmZmEtMzAwNWIwYjY5 YTI5LzAvMjU4MjdEODQwNTZCODQ0NENDMkE3ODQyNzU5MDM1MzU0Qjg0MTZCQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0pZSjloQVZyaEVUTUtuaENkWkExTlV1 RUZydy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82OWJiZmRjZi0z NWNkLTQ1MjQtOGZmYS0zMDA1YjBiNjlhMjkvMC8yNTgyN0Q4NDA1NkI4NDQ0Q0My QTc4NDI3NTkwMzUzNTRCODQxNkJDLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG072G3Hl1IML+Ct50ryX zCd4M0us+O5aHCxWVEZ2EzrIgwYcIXKWqxENes3wQkXzmEmGBV6qaE3kRwynBMfu GIDVi0VQWMpVjXMcENEOADRKAp4HDtr6Tg4ENkVy6iRd0a7PbCeaHkE3lDXtosut ksggjAd5oW85qgk+lxk9aHdhZXhd3KTLIiE8gZl2ClkgUTV9Jp7caTLbCimmncnq Uxo+4wZmd1BSQosHdn4WN3EucSf+sTgLvnF9LGqGougrEEWJdkwpe7zpVXKeRx0Q ZhHnp85Vdj4pFDDpzEmfNyv3rumnP3hLRA+OvQpq8Y8NCNdpVBZlmtpY2atpnqdy PQ== -----END CERTIFICATE-----Generated at Tue Dec 23 04:32:15 2025 by rpki-client