This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/83e4757f-d37f-4fd6-a69b-d74bdd6b87dc/0/5E5179BB1757068D7028510FEEB1177AA7CC8818.mft File: 5E5179BB1757068D7028510FEEB1177AA7CC8818.mft (raw, json) Hash identifier: dF8KydVpxNJGwPqK1MJIjW516sfoC0bwKaBZgR5bNXs= Subject key identifier: 96:36:C8:A8:85:22:EC:8D:0B:02:40:07:1D:56:1E:72:20:C1:F5:AC Authority key identifier: 5E:51:79:BB:17:57:06:8D:70:28:51:0F:EE:B1:17:7A:A7:CC:88:18 Certificate issuer: /CN=5e5179bb1757068d7028510feeb1177aa7cc8818 Certificate serial: 4F13328F03BD7BE0D1A93005B4A71379935B6D79 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XlF5uxdXBo1wKFEP7rEXeqfMiBg.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/83e4757f-d37f-4fd6-a69b-d74bdd6b87dc/0/5E5179BB1757068D7028510FEEB1177AA7CC8818.mft Manifest number: 05B2 Signing time: Fri 19 Dec 2025 20:22:33 +0000 Manifest this update: Fri 19 Dec 2025 20:17:33 +0000 Manifest next update: Sat 20 Dec 2025 22:58:33 +0000 Files and hashes: 1: 5E5179BB1757068D7028510FEEB1177AA7CC8818.crl (hash: uyhYC1+l/lHCD28duCEPPSpEKxmRmF5wI8cgAoQXEVI=) 2: 3139322e3130392e31302e302f32342d3234203d3e203239383032.roa (hash: zPOJooX1SbIfEdoUfLmfFj+bOWKjqS7oznOqpFqjTp4=) 3: 38332e3135302e3231362e302f32342d3234203d3e20383334.roa (hash: EBm40X3KjUETSjt3aOY0gb7euO7RTR4g317z8UFpEX0=) 4: 38332e3135302e3231362e302f32322d3234203d3e203631333137.roa (hash: bA7vtpR0TyML0HjZJJdgMHPc1uK0jGA3YpWrjwZ8y+U=) 5: 38332e3135302e3231372e302f32342d3234203d3e20323132353034.roa (hash: k8RY7QTEncAN/MOxUGAuMRRlssrdtl7ahwCsdlVrRY0=) 6: 38332e3135302e3231382e302f32342d3234203d3e20313939343135.roa (hash: yCFgEcnTSAhMVf29HMHp04B1k4DqC3mlqJPDdmg8wFQ=) 7: 3139322e3130392e31312e302f32342d3234203d3e203136323736.roa (hash: qRWEBAMqR9/oXRv8A+nfXFduPkpHZgx8k4TEVcf/LOk=) 8: 38332e3135302e3231392e302f32342d3234203d3e203533333430.roa (hash: GXLgWx6Q3CLvfyeGG+4M+PXnBAwSeVlRcKDTfEKYkeQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/83e4757f-d37f-4fd6-a69b-d74bdd6b87dc/0/5E5179BB1757068D7028510FEEB1177AA7CC8818.crl rsync://rsync.paas.rpki.ripe.net/repository/83e4757f-d37f-4fd6-a69b-d74bdd6b87dc/0/5E5179BB1757068D7028510FEEB1177AA7CC8818.mft rsync://rpki.ripe.net/repository/DEFAULT/XlF5uxdXBo1wKFEP7rEXeqfMiBg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 22:58:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:13:32:8f:03:bd:7b:e0:d1:a9:30:05:b4:a7:13:79:93:5b:6d:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e5179bb1757068d7028510feeb1177aa7cc8818 Validity Not Before: Dec 19 20:17:33 2025 GMT Not After : Dec 20 22:58:33 2025 GMT Subject: CN=9636C8A88522EC8D0B0240071D561E7220C1F5AC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:8d:1f:86:0c:7f:86:ad:aa:d1:b2:b7:04:6d: 68:5d:74:e6:86:88:fa:5b:7b:f8:9d:48:c4:30:bb: f4:04:9e:10:a5:21:e9:00:ea:fc:bc:17:d0:48:f2: c5:28:6c:1f:c5:80:b3:b3:83:2c:8a:04:2a:f6:ad: 38:fa:7b:50:00:25:2f:85:d8:0e:d6:0a:f0:69:75: da:f9:64:1c:2a:ca:be:16:07:98:c5:fe:8c:79:e4: 27:00:44:99:33:09:f6:38:4e:52:33:08:d0:00:22: 6a:36:60:24:ef:42:fc:f8:90:6d:c4:09:40:b1:da: d8:52:79:f4:da:6e:ab:99:2d:8f:54:6d:23:91:81: 82:d5:a6:ad:97:db:fd:d1:ff:1e:26:a6:52:a6:cb: cc:f7:33:85:8f:2e:32:7b:7f:43:13:0c:b0:02:07: 2e:2d:0b:7c:e1:22:cd:24:6e:ad:10:92:c6:8a:c5: 75:ca:d9:7a:91:e4:11:87:6c:94:f2:4a:be:27:75: 22:30:0b:ab:06:06:57:94:fc:6f:4b:d6:8a:c4:3d: 7c:6a:22:d1:8c:95:22:80:fa:4b:6a:bc:36:72:61: 5b:30:49:23:a2:46:a0:94:d7:c3:3f:da:a4:c4:0b: f2:57:3d:fd:77:f1:84:68:29:4a:27:3e:da:81:f9: f3:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:36:C8:A8:85:22:EC:8D:0B:02:40:07:1D:56:1E:72:20:C1:F5:AC X509v3 Authority Key Identifier: keyid:5E:51:79:BB:17:57:06:8D:70:28:51:0F:EE:B1:17:7A:A7:CC:88:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/83e4757f-d37f-4fd6-a69b-d74bdd6b87dc/0/5E5179BB1757068D7028510FEEB1177AA7CC8818.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XlF5uxdXBo1wKFEP7rEXeqfMiBg.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/83e4757f-d37f-4fd6-a69b-d74bdd6b87dc/0/5E5179BB1757068D7028510FEEB1177AA7CC8818.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:a4:e2:04:f9:65:fe:fa:b5:0c:0b:73:c5:0e:d1:e5:f8:90: 47:59:94:92:70:6e:cf:02:cd:06:c3:0e:0c:1b:fb:64:58:79: 6c:dc:90:f8:48:bc:0a:ba:a6:60:30:3e:87:f7:9c:18:55:62: bd:c0:44:2c:f1:71:eb:1e:08:bc:2a:ba:f6:fb:54:53:41:7c: c4:d3:9a:62:61:0e:86:91:03:7f:83:bf:1e:32:80:5d:74:8a: bf:95:2a:69:4e:9f:8f:6c:9f:8f:ee:3c:3c:25:e2:f8:a1:9f: bc:67:c1:42:5a:c3:bc:48:0d:41:31:02:a1:d7:b2:d7:c7:2c: f5:96:c7:68:b4:57:c9:46:6c:e4:fd:d0:8a:4c:64:32:b1:05: 45:cb:09:c4:43:d1:ff:04:55:b3:1a:8e:43:c8:ea:d0:c2:1a: 66:2a:88:2e:80:44:51:91:be:c1:76:75:8f:49:d0:6f:b6:99: 84:82:e9:e8:0c:3e:d0:b8:22:0a:a7:bf:e2:ec:f5:ab:58:87: b0:94:e4:f2:90:b9:e2:d6:88:bc:9d:a1:c4:6d:43:4e:70:0a: 97:5a:69:23:18:e6:f5:b4:76:c4:35:99:bc:b2:1e:05:d9:f3: 7c:41:9f:42:99:8d:b8:9c:74:96:76:ed:ec:de:9d:13:fb:2b: e7:55:2b:47 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUTxMyjwO9e+DRqTAFtKcTeZNbbXkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNWU1MTc5YmIxNzU3MDY4ZDcwMjg1MTBmZWViMTE3N2Fh N2NjODgxODAeFw0yNTEyMTkyMDE3MzNaFw0yNTEyMjAyMjU4MzNaMDMxMTAvBgNV BAMTKDk2MzZDOEE4ODUyMkVDOEQwQjAyNDAwNzFENTYxRTcyMjBDMUY1QUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsjR+GDH+GrarRsrcEbWhddOaG iPpbe/idSMQwu/QEnhClIekA6vy8F9BI8sUobB/FgLOzgyyKBCr2rTj6e1AAJS+F 2A7WCvBpddr5ZBwqyr4WB5jF/ox55CcARJkzCfY4TlIzCNAAImo2YCTvQvz4kG3E CUCx2thSefTabquZLY9UbSORgYLVpq2X2/3R/x4mplKmy8z3M4WPLjJ7f0MTDLAC By4tC3zhIs0kbq0QksaKxXXK2XqR5BGHbJTySr4ndSIwC6sGBleU/G9L1orEPXxq ItGMlSKA+ktqvDZyYVswSSOiRqCU18M/2qTEC/JXPf138YRoKUonPtqB+fMRAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUljbIqIUi7I0LAkAHHVYeciDB9awwHwYDVR0j BBgwFoAUXlF5uxdXBo1wKFEP7rEXeqfMiBgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODNlNDc1N2YtZDM3Zi00ZmQ2LWE2OWItZDc0YmRkNmI4 N2RjLzAvNUU1MTc5QkIxNzU3MDY4RDcwMjg1MTBGRUVCMTE3N0FBN0NDODgxOC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1hsRjV1eGRYQm8xd0tGRVA3ckVYZXFm TWlCZy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84M2U0NzU3Zi1k MzdmLTRmZDYtYTY5Yi1kNzRiZGQ2Yjg3ZGMvMC81RTUxNzlCQjE3NTcwNjhENzAy ODUxMEZFRUIxMTc3QUE3Q0M4ODE4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnKTiBPll/vq1DAtzxQ7R 5fiQR1mUknBuzwLNBsMODBv7ZFh5bNyQ+Ei8CrqmYDA+h/ecGFVivcBELPFx6x4I vCq69vtUU0F8xNOaYmEOhpEDf4O/HjKAXXSKv5UqaU6fj2yfj+48PCXi+KGfvGfB QlrDvEgNQTECodey18cs9ZbHaLRXyUZs5P3QikxkMrEFRcsJxEPR/wRVsxqOQ8jq 0MIaZiqILoBEUZG+wXZ1j0nQb7aZhILp6Aw+0LgiCqe/4uz1q1iHsJTk8pC54taI vJ2hxG1DTnAKl1ppIxjm9bR2xDWZvLIeBdnzfEGfQpmNuJx0lnbt7N6dE/sr51Ur Rw== -----END CERTIFICATE-----Generated at Sat Dec 20 14:38:25 2025 by rpki-client