This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.mft File: 0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.mft (raw, json) Hash identifier: s4uI8kQgY0SVBNEfFIzy1c6bYLBwB/VsmDyYx5OilB0= Subject key identifier: 3C:8A:67:21:19:8A:33:A2:E8:64:91:C1:78:8F:25:C2:6C:FD:0E:5A Authority key identifier: 0A:8B:61:A8:44:D6:C2:C7:AF:38:ED:CB:D1:65:D0:EF:FB:82:3E:45 Certificate issuer: /CN=0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45 Certificate serial: 5851DC97D2C25571072FA56792E6ACF08F6078F0 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.mft Manifest number: 029F Signing time: Sat 20 Dec 2025 04:35:33 +0000 Manifest this update: Sat 20 Dec 2025 04:30:33 +0000 Manifest next update: Sun 21 Dec 2025 07:24:33 +0000 Files and hashes: 1: 0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.crl (hash: 8RfQOoxk2l/cQn2S6dj0yGVCDHuXCnpQlTTaWtgv7vM=) 2: 326131343a373538313a6430303a3a2f34302d3438203d3e20323136343532.roa (hash: jAqeRW+G0tj75/HjlTu9upVrXQ/2AvwaP0ubMorKA1Q=) 3: 326131343a373538343a373030303a3a2f33362d3434203d3e20323136343532.roa (hash: bjWKUcdJK3JxiL+GqIgQQNiLJnq1CfKPBgs/UuOHrJA=) 4: 326131343a373538313a6430303a3a2f34342d3438203d3e203331383938.roa (hash: OYFGGb9dMqAtV18cBeD3NbZ0TuwCvJXmn37LZwaW7zg=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.crl rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 07:24:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:51:dc:97:d2:c2:55:71:07:2f:a5:67:92:e6:ac:f0:8f:60:78:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45 Validity Not Before: Dec 20 04:30:33 2025 GMT Not After : Dec 21 07:24:33 2025 GMT Subject: CN=3C8A6721198A33A2E86491C1788F25C26CFD0E5A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:73:5e:a6:9d:c6:e3:f5:fa:ff:48:4f:4f:d2: 46:c9:e0:07:03:de:f2:79:59:ae:fd:c0:91:95:f4: 9a:b1:80:f6:c4:97:42:b2:84:44:96:7a:a8:99:8e: 5d:92:e5:8b:73:39:36:b5:18:bf:ac:ad:5e:ae:fa: 91:07:93:1d:35:a8:1e:19:ca:c6:0c:8e:b1:cc:34: e9:c7:f4:42:97:8f:96:3e:7e:3c:00:99:e6:7c:55: 22:33:c3:7e:b5:eb:df:0c:8e:da:99:0f:ab:92:34: 39:f4:9d:c9:47:fd:ed:46:6f:a9:20:b2:5c:c3:cc: 97:32:6a:bf:0f:c6:c2:f1:f4:88:af:35:73:f4:c0: 03:ad:13:ed:86:6a:e3:d2:e9:e3:a6:0b:4a:a6:fb: 61:88:e6:c8:5d:6d:87:26:9c:ed:9f:7d:84:26:85: 58:9c:f0:05:da:7f:af:1c:5c:58:f0:40:87:25:9e: 8a:11:40:e4:40:3a:00:37:91:15:c4:61:d0:67:14: 9b:15:59:28:4c:c8:a2:40:d7:7d:fb:8a:ce:96:2e: c0:a8:cd:30:8b:e5:f7:80:6f:94:bb:7b:6e:0f:cb: ee:a1:5b:95:e1:fd:74:71:40:d9:7f:a8:8b:8e:40: a5:b5:2e:97:40:e1:d7:0a:98:dc:53:3e:08:25:66: c8:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:8A:67:21:19:8A:33:A2:E8:64:91:C1:78:8F:25:C2:6C:FD:0E:5A X509v3 Authority Key Identifier: keyid:0A:8B:61:A8:44:D6:C2:C7:AF:38:ED:CB:D1:65:D0:EF:FB:82:3E:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:cd:1b:b3:b0:5c:72:fb:59:70:b4:27:8c:bd:78:31:d3:35: 5a:a2:79:35:e7:67:b5:39:fc:95:4d:0f:25:64:3d:2f:68:ef: 5d:8d:11:6b:6f:e5:c7:12:6c:ca:d4:c2:4b:54:fa:29:18:d3: fa:3c:d8:68:49:c4:e0:91:9a:09:7d:b7:b4:e8:95:05:bb:47: f6:58:31:98:6a:68:5c:11:c1:76:e9:e7:5e:81:95:cf:34:1a: ca:f8:88:35:09:53:62:3a:59:67:e7:57:3c:b6:ae:be:79:84: 5e:b2:bf:33:4c:e5:c3:ac:a1:0a:2e:9b:37:5b:77:78:3c:ae: 8e:08:18:07:bc:60:b2:c6:ea:5a:35:a8:08:08:db:8f:92:15: f1:f8:cb:e5:8a:ef:e7:81:34:c2:f4:28:f1:bf:79:8c:97:72: 76:72:6c:dc:e2:a2:14:26:f2:b0:cc:31:8d:93:10:1e:76:88: 19:26:93:bf:cf:03:07:fb:d8:ed:8f:6d:0d:85:4f:09:dc:d2: 66:82:8c:a4:bf:b6:4d:32:f5:3c:9f:1e:c6:9b:f9:b3:0e:9a: d8:2d:c4:63:7b:3f:ec:f7:c2:e4:25:31:aa:63:ce:20:7e:43: 70:76:f4:d1:03:79:5e:8c:a5:37:19:50:44:0e:a6:d3:d6:43: c1:2d:0e:10 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUWFHcl9LCVXEHL6Vnkuas8I9gePAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEE4QjYxQTg0NEQ2QzJDN0FGMzhFRENCRDE2NUQwRUZG QjgyM0U0NTAeFw0yNTEyMjAwNDMwMzNaFw0yNTEyMjEwNzI0MzNaMDMxMTAvBgNV BAMTKDNDOEE2NzIxMTk4QTMzQTJFODY0OTFDMTc4OEYyNUMyNkNGRDBFNUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKc16mncbj9fr/SE9P0kbJ4AcD 3vJ5Wa79wJGV9JqxgPbEl0KyhESWeqiZjl2S5YtzOTa1GL+srV6u+pEHkx01qB4Z ysYMjrHMNOnH9EKXj5Y+fjwAmeZ8VSIzw361698MjtqZD6uSNDn0nclH/e1Gb6kg slzDzJcyar8PxsLx9IivNXP0wAOtE+2GauPS6eOmC0qm+2GI5shdbYcmnO2ffYQm hVic8AXaf68cXFjwQIclnooRQORAOgA3kRXEYdBnFJsVWShMyKJA1337is6WLsCo zTCL5feAb5S7e24Py+6hW5Xh/XRxQNl/qIuOQKW1LpdA4dcKmNxTPgglZsjRAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUPIpnIRmKM6LoZJHBeI8lwmz9DlowHwYDVR0j BBgwFoAUCothqETWwsevOO3L0WXQ7/uCPkUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzJjNDA1ZjEtYzMyZC00N2NlLTg5NDMtMDc1MmVkMTNk OGVmLzEvMEE4QjYxQTg0NEQ2QzJDN0FGMzhFRENCRDE2NUQwRUZGQjgyM0U0NS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8wQThCNjFBODQ0RDZDMkM3QUYzOEVEQ0JE MTY1RDBFRkZCODIzRTQ1LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzcyYzQwNWYxLWMzMmQtNDdjZS04OTQzLTA3NTJlZDEzZDhlZi8xLzBBOEI2MUE4 NDRENkMyQzdBRjM4RURDQkQxNjVEMEVGRkI4MjNFNDUubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBqzRuz sFxy+1lwtCeMvXgx0zVaonk152e1OfyVTQ8lZD0vaO9djRFrb+XHEmzK1MJLVPop GNP6PNhoScTgkZoJfbe06JUFu0f2WDGYamhcEcF26edegZXPNBrK+Ig1CVNiOlln 51c8tq6+eYResr8zTOXDrKEKLps3W3d4PK6OCBgHvGCyxupaNagICNuPkhXx+Mvl iu/ngTTC9Cjxv3mMl3J2cmzc4qIUJvKwzDGNkxAedogZJpO/zwMH+9jtj20NhU8J 3NJmgoykv7ZNMvU8nx7Gm/mzDprYLcRjez/s98LkJTGqY84gfkNwdvTRA3lejKU3 GVBEDqbT1kPBLQ4Q -----END CERTIFICATE-----Generated at Sat Dec 20 16:59:44 2025 by rpki-client