This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8070615f-d26d-42e3-a145-5c7b67b2b64e/0/2C12F0A080F021F2BA25BC0C6EA7E06B67AAD05E.mft File: 2C12F0A080F021F2BA25BC0C6EA7E06B67AAD05E.mft (raw, json) Hash identifier: 1EjCjUN4srkfp4IaNbwBSALxF4uaNJTEP6wEoiq8sm8= Subject key identifier: D7:87:F1:E2:B7:39:A2:37:4F:21:21:85:45:B7:A3:96:19:0E:A9:39 Authority key identifier: 2C:12:F0:A0:80:F0:21:F2:BA:25:BC:0C:6E:A7:E0:6B:67:AA:D0:5E Certificate issuer: /CN=2c12f0a080f021f2ba25bc0c6ea7e06b67aad05e Certificate serial: 17CB96EE8A831F27D3B83B2A22BE490FB14E3F84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LBLwoIDwIfK6JbwMbqfga2eq0F4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8070615f-d26d-42e3-a145-5c7b67b2b64e/0/2C12F0A080F021F2BA25BC0C6EA7E06B67AAD05E.mft Manifest number: 01B1 Signing time: Mon 22 Dec 2025 04:24:29 +0000 Manifest this update: Mon 22 Dec 2025 04:19:29 +0000 Manifest next update: Tue 23 Dec 2025 07:23:29 +0000 Files and hashes: 1: 326131343a623430303a3a2f33322d3332203d3e20323133323739.roa (hash: 5hhgwEfLD9bumu2w7kC2KzlKzBKITTTKNPZHvvEg0u8=) 2: 326131343a623430303a3a2f34382d3438203d3e20323133323739.roa (hash: Nc5etJGF6V1MhXz6BJTwE4uruzNAtPHTBPUBd5SZlN4=) 3: 2C12F0A080F021F2BA25BC0C6EA7E06B67AAD05E.crl (hash: TgtC4QTQxzFR7M5UM+dej0BtAXHBN4fFJ3dPvkoESCk=) 4: AS213279.asa (hash: nJRzaMfqdZ5AI+sMn9wPdQBE/Wcrkghpk4PHewl3Wz8=) 5: 326131343a623430303a3a2f32392d3438203d3e2030.roa (hash: NhcbptlixcA3mbsPTqMiibAOrNSU1BYwO66fMNiKSfA=) 6: 326131343a623430303a34393a3a2f34382d3438203d3e20323133323739.roa (hash: riIdsxtRctFPDHrFJWh54sUuVf2OxjI79zxryuANdmE=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8070615f-d26d-42e3-a145-5c7b67b2b64e/0/2C12F0A080F021F2BA25BC0C6EA7E06B67AAD05E.crl rsync://rsync.paas.rpki.ripe.net/repository/8070615f-d26d-42e3-a145-5c7b67b2b64e/0/2C12F0A080F021F2BA25BC0C6EA7E06B67AAD05E.mft rsync://rpki.ripe.net/repository/DEFAULT/LBLwoIDwIfK6JbwMbqfga2eq0F4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 07:23:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:cb:96:ee:8a:83:1f:27:d3:b8:3b:2a:22:be:49:0f:b1:4e:3f:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2c12f0a080f021f2ba25bc0c6ea7e06b67aad05e Validity Not Before: Dec 22 04:19:29 2025 GMT Not After : Dec 23 07:23:29 2025 GMT Subject: CN=D787F1E2B739A2374F21218545B7A396190EA939 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:24:66:52:40:27:0a:3e:3e:3d:2d:2b:ea:3b: c3:02:90:5a:36:8f:0c:52:0c:e7:de:6a:44:87:fa: 52:aa:57:50:1d:67:ef:55:ad:d2:ec:69:b0:4a:51: b8:de:70:a4:a6:fa:bd:e3:3b:c5:c2:73:a6:be:1c: 08:c2:44:d3:13:91:36:30:60:ca:52:62:f3:38:22: d4:bb:2f:3c:71:69:87:4f:05:dd:bc:0d:9d:22:42: 19:3e:0f:ba:e9:12:0a:2d:c1:30:df:9d:13:b3:f9: 7e:a7:e5:48:7d:8f:65:ee:8e:73:8a:bc:2c:40:09: df:69:33:bd:b7:9c:1c:18:2c:04:43:e6:a6:ff:13: 06:dc:ce:ba:c4:9b:2c:87:e3:e7:80:7c:d4:32:1f: f5:cb:02:d8:01:75:7d:be:0a:f5:00:a9:2d:c0:74: 78:19:36:54:0d:2f:e0:3f:87:1c:14:e8:a5:42:cc: 31:c1:c0:5b:d6:8b:63:98:a0:59:b0:db:6b:d4:9e: 42:94:2c:30:09:b9:a8:54:bf:d9:ae:dd:ae:9f:0f: 07:a7:ec:61:72:a2:8f:a4:51:0d:64:b3:77:8b:d6: d5:a5:bb:05:3f:d2:68:c0:fd:1b:0a:54:a1:88:a3: ba:32:0a:2f:2a:64:e9:08:76:48:27:06:18:bc:79: 7f:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:87:F1:E2:B7:39:A2:37:4F:21:21:85:45:B7:A3:96:19:0E:A9:39 X509v3 Authority Key Identifier: keyid:2C:12:F0:A0:80:F0:21:F2:BA:25:BC:0C:6E:A7:E0:6B:67:AA:D0:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8070615f-d26d-42e3-a145-5c7b67b2b64e/0/2C12F0A080F021F2BA25BC0C6EA7E06B67AAD05E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LBLwoIDwIfK6JbwMbqfga2eq0F4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8070615f-d26d-42e3-a145-5c7b67b2b64e/0/2C12F0A080F021F2BA25BC0C6EA7E06B67AAD05E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:93:b7:9c:8c:77:ea:a4:95:73:1d:17:9f:98:f2:6e:c6:d0: 20:05:97:31:bd:67:6e:4d:f9:87:ac:bc:37:40:d5:4b:81:7a: fd:f7:54:40:14:21:5a:f1:a9:8d:4d:d1:98:81:69:19:2a:42: dd:7b:f5:48:c7:73:c7:66:93:19:02:30:bd:12:f5:8c:c9:a9: 64:2b:b6:ac:06:aa:1c:04:02:69:f2:18:b8:6e:d1:c2:10:04: a3:26:0b:f4:6c:43:37:4f:1e:5f:54:e8:18:01:dc:94:83:8a: 4f:4f:4a:30:2d:be:04:c8:6c:97:76:2a:95:8d:a0:84:bc:3d: b6:a4:f6:c5:9c:a1:81:cb:4b:55:77:ce:b8:f4:93:b9:2c:e2: 4a:fb:f6:62:cf:ad:af:f2:51:ea:02:e5:37:74:d0:7d:de:bb: 8f:fc:ff:c6:35:a3:81:15:79:90:94:0e:cb:0f:65:a3:82:71: 90:4f:26:d8:9c:37:d1:bd:e5:0f:a8:c1:ea:cc:be:9a:85:08: 5e:ac:96:40:75:23:3e:2e:e4:4f:45:6c:40:8c:81:b2:2b:0e: 15:66:14:ff:b3:2c:3c:eb:7a:1f:13:66:0b:78:f1:19:74:c7: bb:29:88:4f:f0:74:c5:2c:01:b4:21:c4:1a:77:ae:22:f4:e7: 4e:3b:c1:4d -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUF8uW7oqDHyfTuDsqIr5JD7FOP4QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMmMxMmYwYTA4MGYwMjFmMmJhMjViYzBjNmVhN2UwNmI2 N2FhZDA1ZTAeFw0yNTEyMjIwNDE5MjlaFw0yNTEyMjMwNzIzMjlaMDMxMTAvBgNV BAMTKEQ3ODdGMUUyQjczOUEyMzc0RjIxMjE4NTQ1QjdBMzk2MTkwRUE5MzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvJGZSQCcKPj49LSvqO8MCkFo2 jwxSDOfeakSH+lKqV1AdZ+9VrdLsabBKUbjecKSm+r3jO8XCc6a+HAjCRNMTkTYw YMpSYvM4ItS7LzxxaYdPBd28DZ0iQhk+D7rpEgotwTDfnROz+X6n5Uh9j2XujnOK vCxACd9pM723nBwYLARD5qb/EwbczrrEmyyH4+eAfNQyH/XLAtgBdX2+CvUAqS3A dHgZNlQNL+A/hxwU6KVCzDHBwFvWi2OYoFmw22vUnkKULDAJuahUv9mu3a6fDwen 7GFyoo+kUQ1ks3eL1tWluwU/0mjA/RsKVKGIo7oyCi8qZOkIdkgnBhi8eX/XAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU14fx4rc5ojdPISGFRbejlhkOqTkwHwYDVR0j BBgwFoAULBLwoIDwIfK6JbwMbqfga2eq0F4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODA3MDYxNWYtZDI2ZC00MmUzLWExNDUtNWM3YjY3YjJi NjRlLzAvMkMxMkYwQTA4MEYwMjFGMkJBMjVCQzBDNkVBN0UwNkI2N0FBRDA1RS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0xCTHdvSUR3SWZLNkpid01icWZnYTJl cTBGNC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84MDcwNjE1Zi1k MjZkLTQyZTMtYTE0NS01YzdiNjdiMmI2NGUvMC8yQzEyRjBBMDgwRjAyMUYyQkEy NUJDMEM2RUE3RTA2QjY3QUFEMDVFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAspO3nIx36qSVcx0Xn5jy bsbQIAWXMb1nbk35h6y8N0DVS4F6/fdUQBQhWvGpjU3RmIFpGSpC3Xv1SMdzx2aT GQIwvRL1jMmpZCu2rAaqHAQCafIYuG7RwhAEoyYL9GxDN08eX1ToGAHclIOKT09K MC2+BMhsl3YqlY2ghLw9tqT2xZyhgctLVXfOuPSTuSziSvv2Ys+tr/JR6gLlN3TQ fd67j/z/xjWjgRV5kJQOyw9lo4JxkE8m2Jw30b3lD6jB6sy+moUIXqyWQHUjPi7k T0VsQIyBsisOFWYU/7MsPOt6HxNmC3jxGXTHuymIT/B0xSwBtCHEGneuIvTnTjvB TQ== -----END CERTIFICATE-----Generated at Mon Dec 22 14:29:50 2025 by rpki-client