This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.mft File: 7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.mft (raw, json) Hash identifier: NyGP2Kdh05nwpkj6wkx/8qSM5xblhVxehxb76nnbOLk= Subject key identifier: C9:A9:9B:99:ED:EB:53:A6:4B:C4:11:38:97:54:1C:1D:AC:51:B7:84 Authority key identifier: 7E:51:CA:C1:CE:2A:FE:19:58:B1:FB:6A:62:37:71:7B:0B:5D:48:10 Certificate issuer: /CN=7e51cac1ce2afe1958b1fb6a6237717b0b5d4810 Certificate serial: 3DB01E9CFCC10CC9A04BA4348D15A95A63A4C17A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/flHKwc4q_hlYsftqYjdxewtdSBA.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.mft Manifest number: 01C2 Signing time: Sat 20 Dec 2025 06:02:34 +0000 Manifest this update: Sat 20 Dec 2025 05:57:34 +0000 Manifest next update: Sun 21 Dec 2025 09:21:34 +0000 Files and hashes: 1: 34352e36362e36302e302f32342d3234203d3e203634323637.roa (hash: cbfpOHzPblb2WASq0wU52hsvllNVr9+yj+txEB6RkPc=) 2: 3134312e39382e34302e302f32342d3234203d3e20383334.roa (hash: 1TukN0pM0sLV0WOTh4i1NM+3ZCa+53jVC714ffS/R84=) 3: 34352e36362e36302e302f32342d3234203d3e20333937363330.roa (hash: k+SYPfDN9LQJECS1UonvNmHDxhpd9538JqlrP15jpdk=) 4: 3134312e39382e34312e302f32342d3234203d3e203330303538.roa (hash: 4au55wB65f+exj00ZmF8CDavdM91WWgRwv7GAFTVWFE=) 5: 34352e36362e36322e302f32342d3234203d3e20323131323237.roa (hash: dWPUpxtuxXlxf6fr58m1XtSUGtx0xECSVy3vpTHDKS4=) 6: 34352e36362e36302e302f32342d3234203d3e203534323532.roa (hash: DXKAJcDCz4lMHo7tc9y0QWfG/7N7gsmn4pCFO3+VuBw=) 7: 3134312e39382e34322e302f32342d3234203d3e203432383331.roa (hash: 6ZVZSqjoq8egcUsUMz7rnJfuPRuV1YHJP8qC/sHWbVE=) 8: 7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.crl (hash: qcHho2EtR9o4bgFyyC0ZVUI2elcpi2v2gOfLz28G7zo=) 9: 34352e36362e36332e302f32342d3234203d3e20323134343332.roa (hash: wmPPJI/7JEF1H/CquPITiadzgzmoOhPgK2mmspIXims=) 10: 3134312e39382e34332e302f32342d3234203d3e2039333034.roa (hash: EUrjF0PmxgD6k8/uJk6czg5XM/CvfFtfbWFt5avYo9A=) 11: 34352e36362e36312e302f32342d3234203d3e20323733323432.roa (hash: aW1O7EqU7dyDx/rtiMAdVQbK5eQsDxMcZUdjF1F6EUY=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.crl rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.mft rsync://rpki.ripe.net/repository/DEFAULT/flHKwc4q_hlYsftqYjdxewtdSBA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:21:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:b0:1e:9c:fc:c1:0c:c9:a0:4b:a4:34:8d:15:a9:5a:63:a4:c1:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e51cac1ce2afe1958b1fb6a6237717b0b5d4810 Validity Not Before: Dec 20 05:57:34 2025 GMT Not After : Dec 21 09:21:34 2025 GMT Subject: CN=C9A99B99EDEB53A64BC4113897541C1DAC51B784 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:32:a5:a3:02:4c:09:82:f5:ed:db:23:cf:db: 6d:ee:f7:b5:af:19:67:a5:3b:e7:7a:12:78:e8:e7: 3b:fe:07:04:3c:79:a7:c6:34:83:00:63:b7:ed:20: 74:ba:cc:83:2d:74:a5:d7:ee:de:19:e5:a3:8c:78: 00:0e:e4:ba:32:83:27:f2:f1:2c:07:54:0b:d0:4a: 48:5b:50:35:5d:18:a8:e2:55:d2:0b:7c:4f:95:e0: 23:0e:27:04:13:ec:08:81:6c:fe:6a:f1:fa:20:eb: 71:18:d2:e0:98:eb:51:55:e1:2f:c4:98:cc:5d:77: 6b:36:8d:06:f7:05:5b:ba:7f:9a:ea:30:40:87:ac: 10:0c:3e:56:47:a1:a4:ad:d8:0a:17:9a:56:7b:39: f9:a1:c6:0a:36:2b:e2:c3:f9:3a:5b:ac:b9:13:28: 95:86:fe:d5:8c:a1:ef:90:cd:2e:20:08:d3:63:6e: 16:d9:52:0c:95:87:c9:6b:ae:a8:1d:46:6f:66:e1: 2c:8d:15:1b:1f:ad:5a:56:b2:a6:7e:78:58:0b:2f: 8a:44:0c:99:da:20:9c:64:99:34:3b:37:4d:ba:67: 53:e1:e2:db:a6:80:d8:94:66:5c:d6:55:9d:23:53: 79:1e:41:81:98:1c:37:7d:37:bb:f9:fc:ac:46:b0: 76:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:A9:9B:99:ED:EB:53:A6:4B:C4:11:38:97:54:1C:1D:AC:51:B7:84 X509v3 Authority Key Identifier: keyid:7E:51:CA:C1:CE:2A:FE:19:58:B1:FB:6A:62:37:71:7B:0B:5D:48:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/flHKwc4q_hlYsftqYjdxewtdSBA.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:f6:69:5e:35:0c:32:5f:b5:bb:74:70:b4:a9:36:1c:b7:bc: 01:80:b4:74:69:d9:a6:4f:cc:59:b9:ad:e4:35:2f:23:f9:44: 5d:9b:ba:3f:39:9c:05:ee:57:c0:69:46:9e:90:15:ed:6a:9e: 9f:cd:0f:3c:c7:86:92:69:28:66:41:85:8f:74:b5:13:38:e8: 93:8e:14:2b:91:9c:9f:ac:5d:d4:41:f4:0e:a8:e3:2e:37:07: b9:c0:25:37:c3:df:41:bf:d0:b3:33:0b:35:de:a1:ac:55:e6: cf:ce:1f:e6:04:13:23:3c:57:a0:20:40:3a:7f:a5:f4:8d:a0: 06:44:ab:c0:53:e6:9e:ac:36:41:0c:7b:9a:43:0e:6f:4e:a1: fd:e9:60:8d:02:12:3e:ba:48:b8:d3:ea:a0:1d:3d:df:cd:ba: 83:c8:6b:ea:68:b2:d0:83:10:b2:6f:e8:fc:c9:e6:0e:e9:be: c9:7b:f7:a2:72:e5:10:d1:22:c8:74:c8:11:1b:87:99:c8:51: 0d:59:a9:ac:cd:4c:12:13:2a:fd:50:8b:ab:67:fb:6f:5b:b7: e0:d1:02:c1:3b:c8:37:2e:f7:71:50:c1:f6:a3:43:5a:55:9d: 64:89:47:8c:01:14:5e:a9:00:21:1d:d4:ff:94:e7:dc:51:d6: 25:ab:63:a6 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUPbAenPzBDMmgS6Q0jRWpWmOkwXowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN2U1MWNhYzFjZTJhZmUxOTU4YjFmYjZhNjIzNzcxN2Iw YjVkNDgxMDAeFw0yNTEyMjAwNTU3MzRaFw0yNTEyMjEwOTIxMzRaMDMxMTAvBgNV BAMTKEM5QTk5Qjk5RURFQjUzQTY0QkM0MTEzODk3NTQxQzFEQUM1MUI3ODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDMqWjAkwJgvXt2yPP223u97Wv GWelO+d6Enjo5zv+BwQ8eafGNIMAY7ftIHS6zIMtdKXX7t4Z5aOMeAAO5Loygyfy 8SwHVAvQSkhbUDVdGKjiVdILfE+V4CMOJwQT7AiBbP5q8fog63EY0uCY61FV4S/E mMxdd2s2jQb3BVu6f5rqMECHrBAMPlZHoaSt2AoXmlZ7Ofmhxgo2K+LD+TpbrLkT KJWG/tWMoe+QzS4gCNNjbhbZUgyVh8lrrqgdRm9m4SyNFRsfrVpWsqZ+eFgLL4pE DJnaIJxkmTQ7N026Z1Ph4tumgNiUZlzWVZ0jU3keQYGYHDd9N7v5/KxGsHbbAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUyambme3rU6ZLxBE4l1QcHaxRt4QwHwYDVR0j BBgwFoAUflHKwc4q/hlYsftqYjdxewtdSBAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODgxYjdmMDgtZGQ5NC00Y2QwLWFhMzgtODUxMmYxNTJi ZDMyLzAvN0U1MUNBQzFDRTJBRkUxOTU4QjFGQjZBNjIzNzcxN0IwQjVENDgxMC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZsSEt3YzRxX2hsWXNmdHFZamR4ZXd0 ZFNCQS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84ODFiN2YwOC1k ZDk0LTRjZDAtYWEzOC04NTEyZjE1MmJkMzIvMC83RTUxQ0FDMUNFMkFGRTE5NThC MUZCNkE2MjM3NzE3QjBCNUQ0ODEwLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL/ZpXjUMMl+1u3RwtKk2 HLe8AYC0dGnZpk/MWbmt5DUvI/lEXZu6PzmcBe5XwGlGnpAV7Wqen80PPMeGkmko ZkGFj3S1Ezjok44UK5Gcn6xd1EH0DqjjLjcHucAlN8PfQb/QszMLNd6hrFXmz84f 5gQTIzxXoCBAOn+l9I2gBkSrwFPmnqw2QQx7mkMOb06h/elgjQISPrpIuNPqoB09 3826g8hr6miy0IMQsm/o/MnmDum+yXv3onLlENEiyHTIERuHmchRDVmprM1MEhMq /VCLq2f7b1u34NECwTvINy73cVDB9qNDWlWdZIlHjAEUXqkAIR3U/5Tn3FHWJatj pg== -----END CERTIFICATE-----Generated at Sat Dec 20 11:19:15 2025 by rpki-client