This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft File: 42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft (raw, json) Hash identifier: Bq0tAUitG0+Gggyprwb830DGIcM6HPeywIzTRX5ZAfA= Subject key identifier: 11:EF:11:07:18:4F:A5:45:6F:85:75:C1:76:2A:D6:CA:34:E3:8A:DF Authority key identifier: 42:E5:08:FB:A8:96:0F:48:07:1B:11:9A:CC:BF:57:BD:BF:3A:80:57 Certificate issuer: /CN=42e508fba8960f48071b119accbf57bdbf3a8057 Certificate serial: 47693E5B61B7D77F995C55D959E44BB79639C632 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft Manifest number: 025C Signing time: Sat 20 Dec 2025 06:20:22 +0000 Manifest this update: Sat 20 Dec 2025 06:15:22 +0000 Manifest next update: Sun 21 Dec 2025 08:03:22 +0000 Files and hashes: 1: 326130623a346530343a3a2f34382d3438203d3e203236393534.roa (hash: kjCVplBQIQWTrk/MT/vsXbIMmP0BY/AuB2NZAKC1i00=) 2: 326130623a346530343a626565663a3a2f34382d3438203d3e203236393534.roa (hash: dXSnrOSsmksjfaruQTR4onccvLxLXawLPmHLDP+0pZ0=) 3: 36322e3138322e3139322e302f32312d3234203d3e203432353332.roa (hash: 3uX+IJtCK1auUN/owB303ntI6bBy0+b5ouSYztCnTmQ=) 4: 326130623a346530343a646561643a3a2f34382d3438203d3e203331383938.roa (hash: V5g1oVVpactG3mKu8PF61hy91x6gtyEU1mTZQLj69yk=) 5: 42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl (hash: GHolNfXUvPuEnuIfz4TA71C2a7x7HqIThULyNwSgROA=) 6: 5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer (hash: xVnvGBOQAGx7ddcmxacteZKEbUgAqtkW3B5rWiVC4Gw=) 7: 3139352e39352e3134392e302f32342d3234203d3e203236393534.roa (hash: 4RKcXrOywUF2n3zLGUholuQfQjsDw3jfgXGtm0jfONU=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 08:03:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:69:3e:5b:61:b7:d7:7f:99:5c:55:d9:59:e4:4b:b7:96:39:c6:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42e508fba8960f48071b119accbf57bdbf3a8057 Validity Not Before: Dec 20 06:15:22 2025 GMT Not After : Dec 21 08:03:22 2025 GMT Subject: CN=11EF1107184FA5456F8575C1762AD6CA34E38ADF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:77:24:28:6a:36:4e:52:45:df:1f:35:9d:5b: 64:a3:05:26:40:d9:76:9c:f6:7a:2e:5c:5d:d1:2d: 45:f1:23:55:74:6f:16:fa:d4:85:8d:7b:ca:03:09: 99:87:cf:71:9b:a7:b5:d0:76:9d:c5:72:81:74:75: b8:d2:63:62:7e:95:89:68:7e:a3:1c:fe:15:b1:d8: 63:a0:52:d9:db:8c:da:12:e4:16:cb:3e:18:de:8e: 6d:74:19:da:c8:8d:18:20:09:16:97:bd:15:69:bd: 04:be:f7:0d:9a:83:12:e5:a2:dc:e4:a8:73:d0:07: fa:ec:06:1a:d6:e5:fe:fc:3d:35:70:96:4d:e4:77: 19:bb:32:90:00:4d:70:bf:17:7f:4e:28:03:6a:43: e0:43:1b:8e:b0:d1:18:e9:23:72:fa:18:02:c8:a6: 27:a8:9e:67:7f:dd:1e:7c:b1:50:5f:f6:59:5e:cb: f7:06:1d:95:2c:15:df:a1:ac:4f:87:b1:fe:50:90: 9e:00:20:51:5a:81:b9:5d:e1:1c:7f:15:c0:e9:c7: b9:c2:09:87:0c:fa:2c:eb:cd:fa:34:e1:80:49:79: 10:63:09:a5:2a:0e:54:0d:72:27:84:0a:86:a1:1e: bf:18:26:22:72:06:df:1d:7e:d4:4d:02:68:c1:73: f5:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:EF:11:07:18:4F:A5:45:6F:85:75:C1:76:2A:D6:CA:34:E3:8A:DF X509v3 Authority Key Identifier: keyid:42:E5:08:FB:A8:96:0F:48:07:1B:11:9A:CC:BF:57:BD:BF:3A:80:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:9a:f7:c6:b5:a7:e7:54:ea:e2:9c:01:1b:a6:2a:93:70:37: 85:e5:b5:16:ef:ab:21:76:b4:a5:23:43:57:42:14:ab:fc:44: 92:14:86:b6:38:e7:18:17:15:b2:cc:c7:25:67:86:09:9f:cf: d0:55:bf:f2:c7:68:32:6e:27:a3:b5:1c:79:c2:03:c8:c3:3a: 2d:31:f4:63:fa:f4:28:ab:76:b0:23:0d:fc:db:55:96:6f:d1: 95:00:b2:16:e9:87:78:f7:9b:11:9b:15:97:c9:8f:c1:e3:bb: b9:d9:d7:40:ce:51:7c:b3:0c:f3:2f:43:f0:af:07:f5:e6:10: d3:ed:e5:83:dd:fe:45:52:fd:c4:d7:4f:03:6e:57:e1:90:48: a0:89:a7:ae:cf:fe:c5:ba:cb:97:0f:5e:63:3b:33:9a:a6:fa: e5:40:9b:dd:ef:4e:82:30:36:a2:b4:7e:f1:3b:9c:c4:a7:3c: 70:8e:27:4f:ce:fa:86:8f:51:49:1e:c1:cd:ed:87:20:03:4f: 36:58:79:f2:0b:91:9c:e1:ae:52:b9:08:be:13:9e:25:cc:41: 06:17:6f:5e:c3:b1:f6:65:e3:00:56:82:17:08:42:70:c4:10: a5:3b:b1:03:c9:ed:00:4c:32:8c:19:a3:62:65:b3:33:a8:47: 1b:a2:6e:34 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUR2k+W2G313+ZXFXZWeRLt5Y5xjIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDJlNTA4ZmJhODk2MGY0ODA3MWIxMTlhY2NiZjU3YmRi ZjNhODA1NzAeFw0yNTEyMjAwNjE1MjJaFw0yNTEyMjEwODAzMjJaMDMxMTAvBgNV BAMTKDExRUYxMTA3MTg0RkE1NDU2Rjg1NzVDMTc2MkFENkNBMzRFMzhBREYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/dyQoajZOUkXfHzWdW2SjBSZA 2Xac9nouXF3RLUXxI1V0bxb61IWNe8oDCZmHz3Gbp7XQdp3FcoF0dbjSY2J+lYlo fqMc/hWx2GOgUtnbjNoS5BbLPhjejm10GdrIjRggCRaXvRVpvQS+9w2agxLlotzk qHPQB/rsBhrW5f78PTVwlk3kdxm7MpAATXC/F39OKANqQ+BDG46w0RjpI3L6GALI pieonmd/3R58sVBf9lley/cGHZUsFd+hrE+Hsf5QkJ4AIFFagbld4Rx/FcDpx7nC CYcM+izrzfo04YBJeRBjCaUqDlQNcieECoahHr8YJiJyBt8dftRNAmjBc/WDAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUEe8RBxhPpUVvhXXBdirWyjTjit8wHwYDVR0j BBgwFoAUQuUI+6iWD0gHGxGazL9Xvb86gFcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzNiOGVjMDEtOGJhNS00NzlmLWEyMjktMGFiNzBlNDgx NWJiLzAvNDJFNTA4RkJBODk2MEY0ODA3MUIxMTlBQ0NCRjU3QkRCRjNBODA1Ny5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1F1VUktNmlXRDBnSEd4R2F6TDlYdmI4 NmdGYy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS83M2I4ZWMwMS04 YmE1LTQ3OWYtYTIyOS0wYWI3MGU0ODE1YmIvMC80MkU1MDhGQkE4OTYwRjQ4MDcx QjExOUFDQ0JGNTdCREJGM0E4MDU3Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFJr3xrWn51Tq4pwBG6Yq k3A3heW1Fu+rIXa0pSNDV0IUq/xEkhSGtjjnGBcVsszHJWeGCZ/P0FW/8sdoMm4n o7UcecIDyMM6LTH0Y/r0KKt2sCMN/NtVlm/RlQCyFumHePebEZsVl8mPweO7udnX QM5RfLMM8y9D8K8H9eYQ0+3lg93+RVL9xNdPA25X4ZBIoImnrs/+xbrLlw9eYzsz mqb65UCb3e9OgjA2orR+8TucxKc8cI4nT876ho9RSR7Bze2HIANPNlh58guRnOGu UrkIvhOeJcxBBhdvXsOx9mXjAFaCFwhCcMQQpTuxA8ntAEwyjBmjYmWzM6hHG6Ju NA== -----END CERTIFICATE-----Generated at Sat Dec 20 21:30:15 2025 by rpki-client