This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.mft File: 0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.mft (raw, json) Hash identifier: 95r+IIAfP/PBkID6oCLwLcfj6AliaQ/Rzi/87h1aTwI= Subject key identifier: BE:3D:09:2C:11:55:2C:25:43:B1:9D:67:CC:17:3F:06:1F:21:D2:CD Authority key identifier: 0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3 Certificate issuer: /CN=0d7ffae300def0876bf84890fb6ea17be841a4d3 Certificate serial: 74F52C7FA9251FC35462F253667356668E3819C2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.mft Manifest number: 0221 Signing time: Fri 19 Dec 2025 19:12:33 +0000 Manifest this update: Fri 19 Dec 2025 19:07:33 +0000 Manifest next update: Sat 20 Dec 2025 19:55:33 +0000 Files and hashes: 1: 3138352e3231332e3235302e302f32342d3234203d3e20383334.roa (hash: AdBhWG3tduIcvZfuPBuZ6+H3XrmqS9vxHZW/13wo/SQ=) 2: 3139342e33342e3235322e302f32342d3234203d3e203439353831.roa (hash: CdOWg7XQ7TdzzLDF2E3vbhyf4TDBRs7VuKir2QIc0i4=) 3: 3139342e33342e3235332e302f32342d3234203d3e2035303635.roa (hash: tD+eYvXQsGkCcpnz6s7EBRYpOf8Iu4vdb3Qy27wUI6g=) 4: 38352e3131372e3232382e302f32342d3234203d3e20323134343538.roa (hash: rcAG2FX2+ZD0Qb1+KeZK9os832Q7CwzkoxVHQi9yY7k=) 5: 3138352e3231332e3234392e302f32342d3234203d3e20343030393039.roa (hash: 4O3foUV7f18NUYJQaeBYgK+aW1lr+7o+ea8CcQjVzCw=) 6: 38352e3131372e3233302e302f32342d3234203d3e2035303635.roa (hash: 8/mMTd8OI6hx+rEazKaA5i9flVTt9So8wwSfFF6xpVo=) 7: 0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl (hash: RyEojxbbls8Mhp9AuyWjwlEarr8kU4WqriRlsd37PXQ=) 8: 3139342e33342e3235342e302f32342d3234203d3e203231383539.roa (hash: oRJ6rz+Ka3hQ2WzKZBHZ2DPnxmRlyUWLsU5w15SE0A0=) 9: 3138352e3231332e3234382e302f32342d3234203d3e20323035383836.roa (hash: ODfn5/rpX0/qAWjZsS/cv+gVh3kFgfI7CdBECTg9zww=) 10: 38352e3131372e3232392e302f32342d3234203d3e20313439313037.roa (hash: Mdj3IIZJ097ibJGhSOfHP4GOBLdG4jAp1zNpVSxesFg=) 11: 3138352e3231332e3234382e302f32342d3234203d3e203235313938.roa (hash: sZxo3uMJdWqVPeybtzRbPRus3n/g4Q3Q2K1jBCVUZj0=) 12: 38352e3131372e3232392e302f32342d3234203d3e203138353236.roa (hash: VL0qbnMthkW/z4M9i7RCycr128NaCWPDKcNp8MPhOx8=) 13: 38352e3131372e3233312e302f32342d3234203d3e20323133373234.roa (hash: ohyXGo6Fwg3029u2hdROae+jQf4VI2skgvLUXH3jI8w=) 14: 3139342e33342e3235352e302f32342d3234203d3e20313431393638.roa (hash: iQ9RYSqOmsvIqARX4nqI9wEFn//drkKsHCDo7XaSdTU=) 15: 3138352e3231332e3235312e302f32342d3234203d3e20393834.roa (hash: A919/Bekrj6rZbVlRAQ3zY8i9Bm4Qio6XVxQpWLOfQM=) 16: 3138352e3231332e3234392e302f32342d3234203d3e203235313938.roa (hash: RAmqdtOqt2GXnv4T7A8gAKdg4H2+TG5CqjE3/MvQxnU=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.mft rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:f5:2c:7f:a9:25:1f:c3:54:62:f2:53:66:73:56:66:8e:38:19:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d7ffae300def0876bf84890fb6ea17be841a4d3 Validity Not Before: Dec 19 19:07:33 2025 GMT Not After : Dec 20 19:55:33 2025 GMT Subject: CN=BE3D092C11552C2543B19D67CC173F061F21D2CD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:c5:9b:24:10:73:2e:32:c1:92:4f:4b:ef:b7: 6b:a2:7a:21:99:ec:29:2b:84:29:e3:01:3d:77:27: 2e:b0:3c:0c:af:b6:86:25:75:94:af:c2:24:70:f1: a9:8f:7b:18:c3:8b:43:33:37:be:43:2e:29:85:3e: f4:e2:36:d4:e3:7d:94:e4:78:53:74:eb:6a:f4:ec: c9:db:88:cc:9b:e3:18:5c:4f:c3:2d:18:b2:86:9a: d4:e4:68:a9:be:7e:7a:56:72:1c:86:2a:21:92:05: 5e:83:21:d2:93:fb:d2:d4:e5:e5:8d:15:cd:0e:dd: d6:4f:b3:5c:97:b0:ce:db:3a:76:eb:7a:00:eb:45: e1:6a:30:c4:35:bc:8e:ff:3f:c6:ad:4e:de:7e:39: e7:50:e7:9c:90:78:ac:03:31:5c:40:bb:bc:37:4f: 26:25:47:a6:ca:0a:33:50:bb:c0:d5:9d:c1:e6:bd: 81:da:e1:4b:09:5b:a6:a7:f7:6f:eb:7f:a6:30:5b: 92:5f:09:8d:1f:19:c1:3b:d4:83:d2:e6:13:24:12: 3c:44:a4:fb:79:a7:7f:47:d8:09:64:e0:ab:a9:4a: b2:b2:0f:86:04:00:d7:75:b1:cd:05:76:c4:f0:7f: 01:81:1b:f9:d9:0f:75:e3:de:f3:35:70:71:85:da: 5d:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:3D:09:2C:11:55:2C:25:43:B1:9D:67:CC:17:3F:06:1F:21:D2:CD X509v3 Authority Key Identifier: keyid:0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:2c:24:f9:de:44:99:36:d8:d1:9d:bb:72:fe:cf:67:9d:cd: 9b:29:93:fc:2f:3c:b5:6b:7b:5f:ef:ce:25:54:e0:58:8c:a8: a5:76:97:27:c0:e3:25:10:76:49:ec:a8:b0:b1:e0:a1:18:26: 35:1c:f8:8f:22:10:98:26:bf:52:0e:35:a1:73:42:60:52:50: 65:ba:22:58:8b:54:4f:56:34:00:cc:57:21:73:d2:64:e7:ec: d0:5f:b9:22:24:f7:11:ea:5e:6f:94:bb:cb:a2:e0:18:22:3e: cf:68:4b:12:aa:8c:14:d4:bf:a8:e0:c9:0b:a8:89:0d:84:05: 86:be:1e:16:b6:43:e4:b8:b1:b0:4c:40:bc:1e:ff:c6:22:50: 2a:13:16:25:19:01:98:63:35:a5:6e:ca:ba:0e:ef:7b:57:04: 4f:0a:c7:79:d3:ec:45:3f:fb:27:cc:6f:7e:61:dc:e3:71:eb: 46:fa:f9:5c:59:59:8b:5a:2c:0f:cc:9f:19:e0:4e:3c:83:e7: bf:4c:ef:fe:23:64:17:f7:d2:4a:e8:88:76:a3:f5:85:10:90: ca:e0:c2:8e:55:cb:be:ca:8b:d3:55:e2:63:39:63:fe:05:35: 12:a4:84:22:20:fb:fe:23:b5:1b:b2:0e:25:d3:96:db:04:50: e8:40:3d:ff -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUdPUsf6klH8NUYvJTZnNWZo44GcIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMGQ3ZmZhZTMwMGRlZjA4NzZiZjg0ODkwZmI2ZWExN2Jl ODQxYTRkMzAeFw0yNTEyMTkxOTA3MzNaFw0yNTEyMjAxOTU1MzNaMDMxMTAvBgNV BAMTKEJFM0QwOTJDMTE1NTJDMjU0M0IxOUQ2N0NDMTczRjA2MUYyMUQyQ0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpxZskEHMuMsGST0vvt2uieiGZ 7CkrhCnjAT13Jy6wPAyvtoYldZSvwiRw8amPexjDi0MzN75DLimFPvTiNtTjfZTk eFN062r07MnbiMyb4xhcT8MtGLKGmtTkaKm+fnpWchyGKiGSBV6DIdKT+9LU5eWN Fc0O3dZPs1yXsM7bOnbregDrReFqMMQ1vI7/P8atTt5+OedQ55yQeKwDMVxAu7w3 TyYlR6bKCjNQu8DVncHmvYHa4UsJW6an92/rf6YwW5JfCY0fGcE71IPS5hMkEjxE pPt5p39H2Alk4KupSrKyD4YEANd1sc0FdsTwfwGBG/nZD3Xj3vM1cHGF2l0vAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUvj0JLBFVLCVDsZ1nzBc/Bh8h0s0wHwYDVR0j BBgwFoAUDX/64wDe8Idr+EiQ+26he+hBpNMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODExM2RkYTYtN2FkZS00NDVkLThjNmUtNDQ4YTc4ZTQ4 Y2ExLzEvMEQ3RkZBRTMwMERFRjA4NzZCRjg0ODkwRkI2RUExN0JFODQxQTREMy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RYXzY0d0RlOElkci1FaVEtMjZoZS1o QnBOTS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84MTEzZGRhNi03 YWRlLTQ0NWQtOGM2ZS00NDhhNzhlNDhjYTEvMS8wRDdGRkFFMzAwREVGMDg3NkJG ODQ4OTBGQjZFQTE3QkU4NDFBNEQzLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjywk+d5EmTbY0Z27cv7P Z53NmymT/C88tWt7X+/OJVTgWIyopXaXJ8DjJRB2SeyosLHgoRgmNRz4jyIQmCa/ Ug41oXNCYFJQZboiWItUT1Y0AMxXIXPSZOfs0F+5IiT3Eepeb5S7y6LgGCI+z2hL EqqMFNS/qODJC6iJDYQFhr4eFrZD5LixsExAvB7/xiJQKhMWJRkBmGM1pW7Kug7v e1cETwrHedPsRT/7J8xvfmHc43HrRvr5XFlZi1osD8yfGeBOPIPnv0zv/iNkF/fS SuiIdqP1hRCQyuDCjlXLvsqL01XiYzlj/gU1EqSEIiD7/iO1G7IOJdOW2wRQ6EA9 /w== -----END CERTIFICATE-----Generated at Sat Dec 20 00:23:50 2025 by rpki-client