This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.mft File: 8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.mft (raw, json) Hash identifier: 9QtBJWjBD1vOITXxwB9wli44etir7cyRMQQfvXioGdM= Subject key identifier: 06:72:54:57:1A:2B:3C:F8:8A:DF:B1:14:05:52:5A:DC:FA:D2:7E:94 Authority key identifier: 8B:9B:A9:AD:DE:96:35:77:7B:F5:86:FD:49:3E:14:CD:30:F7:C4:CA Certificate issuer: /CN=8b9ba9adde9635777bf586fd493e14cd30f7c4ca Certificate serial: 7DA30D5931AFF79BA2E248748F0871CC3D88DE93 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i5uprd6WNXd79Yb9ST4UzTD3xMo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.mft Manifest number: 0516 Signing time: Fri 19 Dec 2025 13:37:33 +0000 Manifest this update: Fri 19 Dec 2025 13:32:33 +0000 Manifest next update: Sat 20 Dec 2025 14:20:33 +0000 Files and hashes: 1: 8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.crl (hash: eazALDDZYO2Y+ReSONxOVy2lWKOy2m5R2nRonenCZO0=) 2: 3138382e3136342e3135332e302f32342d3234203d3e203631333137.roa (hash: pkJz5L9iLZRF+OIvLDh3t2xUInq31L6An4us+3j1eD0=) 3: 3138382e3136342e3135322e302f32342d3234203d3e203631333137.roa (hash: PjHq1CK+fSk+5WuONiKJilG5oXTFh0dZnkKMEZVNP8E=) 4: 3138382e3136342e3135362e302f32342d3234203d3e20383334.roa (hash: sY/xAuh6Mg68YWt7c8TloEoU7TIBsTXsCx6tRGi7xp4=) 5: 3138382e3136342e3135352e302f32342d3234203d3e203631333137.roa (hash: W1I8woHaqJ6kU4xjFwKm1g6uV7UZ51m6Dv8R/7Dp0Oc=) 6: 3138382e3136342e3135342e302f32342d3234203d3e20383334.roa (hash: vvTevjxETDa595QBqFXtPC5dkfNklcd1MuoPmql9OGw=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.crl rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.mft rsync://rpki.ripe.net/repository/DEFAULT/i5uprd6WNXd79Yb9ST4UzTD3xMo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 14:20:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:a3:0d:59:31:af:f7:9b:a2:e2:48:74:8f:08:71:cc:3d:88:de:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b9ba9adde9635777bf586fd493e14cd30f7c4ca Validity Not Before: Dec 19 13:32:33 2025 GMT Not After : Dec 20 14:20:33 2025 GMT Subject: CN=067254571A2B3CF88ADFB11405525ADCFAD27E94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:a0:8b:11:ba:29:ad:3d:9b:8e:f5:f5:bb:6a: c6:d0:9a:05:43:8f:d7:85:85:b5:4a:e5:6d:cf:b6: f3:77:c6:e9:50:e9:97:bd:86:67:77:1b:26:4d:64: c2:b6:ee:69:a8:d1:24:87:c5:80:10:d6:e3:e9:28: cb:33:ba:5c:cc:86:08:34:42:e5:ff:a2:1c:70:e5: 27:70:02:a6:0f:3e:e5:e8:33:38:83:43:ae:7f:63: 5b:fd:9f:b4:8f:2e:c9:de:6b:fe:92:b5:5d:08:c4: f5:17:b6:5a:78:49:3f:c0:7d:a7:00:1e:e3:ea:b9: 84:7a:74:c7:3e:79:99:30:bd:94:58:f6:38:36:8a: 86:9a:45:0e:9a:07:1f:45:fe:b4:f3:74:f2:a2:64: 75:38:05:ff:12:5b:4e:f1:79:39:93:f8:1a:ae:e3: aa:9c:d9:8c:3b:5d:1c:b0:d0:2b:2c:5b:00:11:5f: 61:c3:94:14:8d:ad:04:b9:25:9d:c7:46:ad:20:4c: 7c:f7:5c:f7:ca:1b:3a:3d:ae:02:ff:4a:e8:e7:81: eb:ff:d5:07:5a:ed:d6:8d:87:33:af:cd:4e:fe:ce: 95:48:da:e2:3d:ea:40:9f:f6:78:3d:aa:e9:6d:dd: c9:59:50:76:ca:1b:f8:09:30:f3:c6:e6:01:08:68: 51:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:72:54:57:1A:2B:3C:F8:8A:DF:B1:14:05:52:5A:DC:FA:D2:7E:94 X509v3 Authority Key Identifier: keyid:8B:9B:A9:AD:DE:96:35:77:7B:F5:86:FD:49:3E:14:CD:30:F7:C4:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i5uprd6WNXd79Yb9ST4UzTD3xMo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:eb:fb:1e:66:2a:59:4e:3c:c5:77:80:b4:7e:d7:0b:fe:b1: 9b:2d:87:ce:bc:3b:1c:f6:b7:fd:70:fb:0e:f0:fd:fe:30:f0: 3e:c6:5c:e4:f8:ea:19:d1:1a:df:ef:e4:db:be:97:05:e5:83: 51:9d:c5:0b:55:3b:9c:5c:1d:95:cd:bd:bd:16:24:83:de:51: f8:4b:1d:12:32:8e:10:0d:20:35:3a:9d:c4:bf:83:b7:fa:2a: 62:3a:f0:0a:8d:f0:d9:93:38:9b:cd:bc:da:2c:61:5e:27:eb: 14:61:ea:cc:91:93:0a:9f:e8:16:39:df:ee:a6:ed:fc:1c:45: aa:f5:84:72:8c:4c:44:4c:53:b1:08:f7:6f:44:c0:c0:c3:cb: 8d:cc:cd:17:20:35:88:6c:ff:70:54:2e:f2:a1:be:a7:0c:6a: a5:40:29:88:70:f4:4d:77:45:81:da:de:80:1b:4b:0a:22:d6: eb:1a:a6:87:dd:ff:70:d6:da:16:54:36:a9:0b:55:49:0c:b3: 99:1f:44:13:38:6d:c1:5c:11:72:2b:8e:a9:19:5b:73:5a:fa: 12:f6:22:4f:96:ae:df:a0:8f:dc:44:18:93:40:30:0c:24:15: 67:d8:3f:62:e9:b6:af:f1:49:06:fd:45:00:56:fd:0f:df:ed: b5:ec:c7:f1 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUfaMNWTGv95ui4kh0jwhxzD2I3pMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI5YmE5YWRkZTk2MzU3NzdiZjU4NmZkNDkzZTE0Y2Qz MGY3YzRjYTAeFw0yNTEyMTkxMzMyMzNaFw0yNTEyMjAxNDIwMzNaMDMxMTAvBgNV BAMTKDA2NzI1NDU3MUEyQjNDRjg4QURGQjExNDA1NTI1QURDRkFEMjdFOTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8oIsRuimtPZuO9fW7asbQmgVD j9eFhbVK5W3PtvN3xulQ6Ze9hmd3GyZNZMK27mmo0SSHxYAQ1uPpKMszulzMhgg0 QuX/ohxw5SdwAqYPPuXoMziDQ65/Y1v9n7SPLsnea/6StV0IxPUXtlp4ST/AfacA HuPquYR6dMc+eZkwvZRY9jg2ioaaRQ6aBx9F/rTzdPKiZHU4Bf8SW07xeTmT+Bqu 46qc2Yw7XRyw0CssWwARX2HDlBSNrQS5JZ3HRq0gTHz3XPfKGzo9rgL/Sujngev/ 1Qda7daNhzOvzU7+zpVI2uI96kCf9ng9qult3clZUHbKG/gJMPPG5gEIaFEfAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUBnJUVxorPPiK37EUBVJa3PrSfpQwHwYDVR0j BBgwFoAUi5uprd6WNXd79Yb9ST4UzTD3xMowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNmMwMzA4OTAtZjZlMC00MTBjLWJjOTktYWYwOTIxZDFj M2E0LzAvOEI5QkE5QURERTk2MzU3NzdCRjU4NkZENDkzRTE0Q0QzMEY3QzRDQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2k1dXByZDZXTlhkNzlZYjlTVDRVelRE M3hNby5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YzAzMDg5MC1m NmUwLTQxMGMtYmM5OS1hZjA5MjFkMWMzYTQvMC84QjlCQTlBRERFOTYzNTc3N0JG NTg2RkQ0OTNFMTRDRDMwRjdDNENBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnuv7HmYqWU48xXeAtH7X C/6xmy2Hzrw7HPa3/XD7DvD9/jDwPsZc5PjqGdEa3+/k276XBeWDUZ3FC1U7nFwd lc29vRYkg95R+EsdEjKOEA0gNTqdxL+Dt/oqYjrwCo3w2ZM4m8282ixhXifrFGHq zJGTCp/oFjnf7qbt/BxFqvWEcoxMRExTsQj3b0TAwMPLjczNFyA1iGz/cFQu8qG+ pwxqpUApiHD0TXdFgdregBtLCiLW6xqmh93/cNbaFlQ2qQtVSQyzmR9EEzhtwVwR ciuOqRlbc1r6EvYiT5au36CP3EQYk0AwDCQVZ9g/Yum2r/FJBv1FAFb9D9/ttezH 8Q== -----END CERTIFICATE-----Generated at Fri Dec 19 21:52:01 2025 by rpki-client