This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.mft File: 830E06419FC46A2802F6F03B71368AC7BAAF64CE.mft (raw, json) Hash identifier: cknspfwVbay/irkF+c8xSjgLObc1y8ITmy0QlSOc4PE= Subject key identifier: 2E:54:48:59:C8:EB:30:84:3B:BF:F2:05:DE:43:11:D8:74:E7:19:47 Authority key identifier: 83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE Certificate issuer: /CN=830e06419fc46a2802f6f03b71368ac7baaf64ce Certificate serial: 309D18046BE8E228C07C9A5E6C96056777D05D99 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.mft Manifest number: 04E2 Signing time: Fri 19 Dec 2025 14:07:33 +0000 Manifest this update: Fri 19 Dec 2025 14:02:33 +0000 Manifest next update: Sat 20 Dec 2025 17:40:33 +0000 Files and hashes: 1: 34352e38392e3134382e302f32332d3234203d3e20383334.roa (hash: Au9oQ3qTWYtfxThFmWtVA/8gugCQhBrqps9xbTZiqo0=) 2: 34352e39332e3138342e302f32342d3234203d3e20323135333438.roa (hash: WuhjfEGxgnUblhWiSTciY5olX30b9mmfrhJBU4OPYFY=) 3: 34352e3134302e33372e302f32342d3234203d3e20323638363234.roa (hash: FqBzJG7QyS5rhAL6kP0DnaUbBW+1O9qvi1K+fqN47FU=) 4: 34352e3133322e3231392e302f32342d3234203d3e203536393133.roa (hash: LgxsptwYXiKaAUBWPl2FzHApl9GRPHPCKLBon5Z4Y1I=) 5: 34352e3134352e3234312e302f32342d3234203d3e20383334.roa (hash: pPd1T7/n7wSEex84D0bbPA7sw5pSmXLYFj3f9wYPbC0=) 6: 3138352e3235302e34322e302f32332d3233203d3e203338313935.roa (hash: N+mjQzTN9eKn05wWYxGO3ym5VpigEEyuw5Wil2CeqM0=) 7: 34352e3134302e33382e302f32342d3234203d3e203330363434.roa (hash: pgys4dKx+35Hg2BzEkcta2TxxholJ1T4995uIhT8Aeg=) 8: 326130653a666363303a3a2f32392d3239203d3e20323031393633.roa (hash: 8+yPsa43TFpd5bryniVq+R/mS0l3RvJVwdUmjJuuDIk=) 9: 3138352e3235302e34302e302f32342d3234203d3e2035303635.roa (hash: vADHpi7lqq2FTz+I44BCLsWOTCezg1eq9mEd669wIuU=) 10: 34352e3133322e3231382e302f32342d3234203d3e20383334.roa (hash: pbWgbf3Z9k/Vp5McQhjO5BRe+dobiN8M8hutoOHnDIA=) 11: 34352e38392e3135302e302f32332d3234203d3e20313532313739.roa (hash: hd+a1khpY29A3GDYfNLzWao9yX3aCS4vUId7ZnXPCC4=) 12: 34352e38392e3135302e302f32332d3234203d3e20313338393937.roa (hash: smn3sboQyoA3CPmf3JjoxNaRPhD1ofeV3o7i3x5m8hU=) 13: 34352e3132382e31322e302f32332d3234203d3e20383334.roa (hash: eLJWCWbxEQgDeE1wotxgC/UVUKhDY5SIchlsKqSoar0=) 14: 34352e3134352e3234322e302f32342d3234203d3e203631333137.roa (hash: pTg06oxajXpI71ZXI8g/lx5GH1NCIopoua34IGLJlFw=) 15: 34352e3134302e33362e302f32342d3234203d3e203136323736.roa (hash: bbdkgz3gQGx4brckdYck4FKHluP707hNf2aov4e5c2A=) 16: 34352e3134352e3234302e302f32342d3234203d3e20323639303730.roa (hash: ZZTeFnnkmIFoyKByZKAoXkqiW3x9U8bfEnkF0EICwb0=) 17: 34352e3134302e33392e302f32342d3234203d3e20323132333834.roa (hash: L7EHGwvWSSXWjiN+ge5rSBcePeV6DFnXvflhKIMhGIM=) 18: 34352e3134352e3234332e302f32342d3234203d3e20313337323335.roa (hash: Vyj6lQsSFmsAqcK6RGLYVMn7iV5vJhAX4GBUoB1+oMo=) 19: 34352e38392e3135302e302f32332d3234203d3e20323130353432.roa (hash: Ymdbnf0H8VIDp2h5OwlBLkLPkpG++nC20m+3X7rdp/E=) 20: 3138352e3235302e34312e302f32342d3234203d3e20383334.roa (hash: TMPX219AVqeVt8TCx3hdL3+PdjuG6qjdSrAINRTXrt8=) 21: 34352e3132382e31322e302f32342d3234203d3e20313336353537.roa (hash: Og0W7TwDKg18gSOzRskc5OEF19lsnNis615D+7M7BhY=) 22: 34352e39332e3138352e302f32342d3234203d3e2039303039.roa (hash: YsgVKvqjDSfl5cY3VgnMOM/cSxhu5cHJw+NQE7V5wtA=) 23: 34352e3132382e31342e302f32332d3233203d3e20323734373836.roa (hash: V6mtJWR732G/FJGWxHZiLboD66+fB4OqjGMzuHg8F6s=) 24: 34352e39332e3138362e302f32332d3234203d3e2033333230.roa (hash: QsFkBfitbwvpDW+gZ0ARVvjc1k4LIU/KZWDeJAgWITQ=) 25: 34352e3133322e3231362e302f32342d3234203d3e203232343237.roa (hash: tUuPnhV53bW4URPIQtmcdJ9t+c19vj++YF4z51T+ooE=) 26: 34352e3133322e3231372e302f32342d3234203d3e20333935333734.roa (hash: 3xSg64X6b/VGeaW1sbUHbRQvvDa5xSkfsAgZrM/ksog=) 27: 34352e3132382e31332e302f32342d3234203d3e20313939393235.roa (hash: s2TQDlDgm+LKEqHBlB2hd8f187DM1tFrRFf93seXSWo=) 28: 830E06419FC46A2802F6F03B71368AC7BAAF64CE.crl (hash: S7uHL5WmWJ2bDkGjsLAsbwlM9EDzuI62SxnT2gWieU4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.crl rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.mft rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 17:40:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:9d:18:04:6b:e8:e2:28:c0:7c:9a:5e:6c:96:05:67:77:d0:5d:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=830e06419fc46a2802f6f03b71368ac7baaf64ce Validity Not Before: Dec 19 14:02:33 2025 GMT Not After : Dec 20 17:40:33 2025 GMT Subject: CN=2E544859C8EB30843BBFF205DE4311D874E71947 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:e4:2e:17:70:91:8d:af:cc:1a:ef:4c:40:d3: ea:8a:58:58:05:ba:2d:e2:d5:74:ef:aa:f4:29:bf: 73:d8:3c:bf:45:eb:94:e1:e0:9e:71:cb:80:0a:c8: 75:c4:bc:d6:15:25:49:ea:72:c6:ef:00:b5:f4:7f: ec:4a:3c:9f:aa:f6:87:b8:95:c2:4f:cd:a2:1e:05: fe:45:5d:63:bb:de:50:0a:35:91:b7:f8:e8:f8:49: 9e:24:62:9c:3e:af:52:88:f7:c8:b8:f6:49:34:a3: 30:07:c3:13:64:d8:4b:4e:70:70:32:35:ab:4d:bf: 41:3c:86:57:20:55:6c:28:33:25:f9:40:8e:b3:3b: 84:cc:2f:06:32:85:87:e3:14:bc:db:e8:2d:ff:c5: a4:0f:66:17:e0:ea:de:4c:34:d8:ce:6d:85:0b:ce: fc:20:fa:e8:e3:24:7b:28:fd:df:a6:43:ec:43:20: 05:6b:5d:54:38:d9:6e:ae:63:ea:99:7e:d4:6c:2b: f9:fc:d2:6f:c1:22:0b:21:43:bb:27:7d:00:60:a6: 75:ff:ef:38:da:29:a6:34:a8:b7:80:a8:ef:10:5b: ca:82:9c:ba:a9:ac:14:68:f4:f5:41:ed:a5:8d:9a: 15:99:f9:ca:df:6e:eb:a4:ad:ba:67:7b:9d:ae:7d: 17:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:54:48:59:C8:EB:30:84:3B:BF:F2:05:DE:43:11:D8:74:E7:19:47 X509v3 Authority Key Identifier: keyid:83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:8f:33:49:a0:0d:29:c6:85:a0:21:dc:27:17:f9:96:d6:73: a7:88:fe:e6:a3:bc:da:ce:42:f9:09:75:93:a7:f0:b5:12:ac: 9e:e2:f6:ec:37:da:6a:6e:a9:e3:9b:73:0c:7a:e8:a0:e8:30: 03:5e:fe:ae:3c:db:57:f4:23:d8:92:b5:05:6a:1f:a9:94:79: bd:ff:6d:68:0c:59:63:f1:71:02:45:50:be:e8:5c:94:b8:16: d8:73:4e:b3:a5:e2:9e:a5:bc:33:2b:b7:23:67:84:2d:d1:51: 21:5f:d0:e4:6c:a4:56:a8:3a:85:22:39:0b:cb:ef:74:f2:71: f5:51:28:1e:1d:2f:f5:51:0c:09:a6:50:d6:2b:41:04:bf:33: 22:80:97:02:8f:da:9f:32:2d:64:4a:cb:c3:02:fa:b7:41:6b: fd:0f:28:31:f4:0d:95:51:ce:ed:b7:80:dd:6e:06:5e:3b:4b: 4d:93:41:8b:34:4a:28:22:65:73:57:e0:85:44:9f:b4:fa:90: 28:c9:c6:4c:e7:dc:0b:31:4e:f9:f7:8a:2b:f4:79:b4:ca:fc: 56:60:63:49:c6:d7:a4:aa:52:59:8b:d8:30:4a:d9:93:75:45: 5b:a3:44:15:7f:a9:94:67:04:37:48:ee:2b:31:ae:fd:ad:05: 40:08:28:2d -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUMJ0YBGvo4ijAfJpebJYFZ3fQXZkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODMwZTA2NDE5ZmM0NmEyODAyZjZmMDNiNzEzNjhhYzdi YWFmNjRjZTAeFw0yNTEyMTkxNDAyMzNaFw0yNTEyMjAxNzQwMzNaMDMxMTAvBgNV BAMTKDJFNTQ0ODU5QzhFQjMwODQzQkJGRjIwNURFNDMxMUQ4NzRFNzE5NDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC65C4XcJGNr8wa70xA0+qKWFgF ui3i1XTvqvQpv3PYPL9F65Th4J5xy4AKyHXEvNYVJUnqcsbvALX0f+xKPJ+q9oe4 lcJPzaIeBf5FXWO73lAKNZG3+Oj4SZ4kYpw+r1KI98i49kk0ozAHwxNk2EtOcHAy NatNv0E8hlcgVWwoMyX5QI6zO4TMLwYyhYfjFLzb6C3/xaQPZhfg6t5MNNjObYUL zvwg+ujjJHso/d+mQ+xDIAVrXVQ42W6uY+qZftRsK/n80m/BIgshQ7snfQBgpnX/ 7zjaKaY0qLeAqO8QW8qCnLqprBRo9PVB7aWNmhWZ+crfbuukrbpne52ufRcxAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQULlRIWcjrMIQ7v/IF3kMR2HTnGUcwHwYDVR0j BBgwFoAUgw4GQZ/EaigC9vA7cTaKx7qvZM4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOGUwZDZhNGQtYmE2Ny00OTc5LThkMTItMGVkNDc0OGZj ODZlLzAvODMwRTA2NDE5RkM0NkEyODAyRjZGMDNCNzEzNjhBQzdCQUFGNjRDRS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2d3NEdRWl9FYWlnQzl2QTdjVGFLeDdx dlpNNC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84ZTBkNmE0ZC1i YTY3LTQ5NzktOGQxMi0wZWQ0NzQ4ZmM4NmUvMC84MzBFMDY0MTlGQzQ2QTI4MDJG NkYwM0I3MTM2OEFDN0JBQUY2NENFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEY8zSaANKcaFoCHcJxf5 ltZzp4j+5qO82s5C+Ql1k6fwtRKsnuL27Dfaam6p45tzDHrooOgwA17+rjzbV/Qj 2JK1BWofqZR5vf9taAxZY/FxAkVQvuhclLgW2HNOs6XinqW8Myu3I2eELdFRIV/Q 5GykVqg6hSI5C8vvdPJx9VEoHh0v9VEMCaZQ1itBBL8zIoCXAo/anzItZErLwwL6 t0Fr/Q8oMfQNlVHO7beA3W4GXjtLTZNBizRKKCJlc1fghUSftPqQKMnGTOfcCzFO +feKK/R5tMr8VmBjScbXpKpSWYvYMErZk3VFW6NEFX+plGcEN0juKzGu/a0FQAgo LQ== -----END CERTIFICATE-----Generated at Sat Dec 20 09:29:30 2025 by rpki-client