This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.mft File: B172548FA3C460E26CB519EE524361BCA6C7132E.mft (raw, json) Hash identifier: pAzZNXDUe+/9B0fEnbENOYzcQCePDgsyHJ/cdjeuHbA= Subject key identifier: D2:EF:64:90:7D:9A:38:47:B8:60:DE:AB:D1:B3:14:FB:88:17:E8:50 Authority key identifier: B1:72:54:8F:A3:C4:60:E2:6C:B5:19:EE:52:43:61:BC:A6:C7:13:2E Certificate issuer: /CN=b172548fa3c460e26cb519ee524361bca6c7132e Certificate serial: 53E3BC2B01011D1C5B5D0C812B1B68BD266E03B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.mft Manifest number: 0444 Signing time: Sat 20 Dec 2025 08:17:34 +0000 Manifest this update: Sat 20 Dec 2025 08:12:34 +0000 Manifest next update: Sun 21 Dec 2025 10:50:34 +0000 Files and hashes: 1: 39332e39352e3131332e302f32342d3234203d3e203136323736.roa (hash: cS6LWz+NEHJoa0EQVb5z92UR8C9jaztUFOxHHwpRPsY=) 2: 39332e39352e3131342e302f32342d3234203d3e20383334.roa (hash: 9slNHWe/rU70bOx5vd9mZUqmB1nBl1QE+Gk0eZLBnt8=) 3: 39332e39352e3131372e302f32342d3234203d3e203231383539.roa (hash: Un+iljfa6BQzZnEghHopYhiwkN2j6KkmFMitjF4eFLQ=) 4: 39332e39352e3131382e302f32342d3234203d3e20313336353537.roa (hash: RxEOrEQDuw8FdSr63g/e7GeuRwx0a/xo6StPeRUp3pQ=) 5: 39332e39352e3131352e302f32342d3234203d3e20313938353834.roa (hash: FutqYRyHBMmN+0PD6TfHd0Z48pzfzxz1hCrgLY7AwAA=) 6: 39332e39352e3131322e302f32342d3234203d3e20333937393233.roa (hash: xW60VF00UJ78V2ZgHJcPViZgzWFpqx2V/5GdcswFg/k=) 7: B172548FA3C460E26CB519EE524361BCA6C7132E.crl (hash: 7VEStGkawKf5uaBIx2d9FEEycch5IpPXY6kizSfsuWI=) 8: 39332e39352e3131362e302f32342d3234203d3e203630373831.roa (hash: wiR4lXrHDBacVR9rhY/OZ5EVnNOlMyR8f6ZVRqs7p88=) 9: 39332e39352e3131352e302f32342d3234203d3e20313335333932.roa (hash: fGOsLQpuq7w+Mlth5Jlzw6zSul9g+K81meekR3kD4oA=) 10: 39332e39352e3131392e302f32342d3234203d3e20323135343337.roa (hash: iuam+Y72SFbVuzZ6DMbPvd9+i2O4uNgJ9aW8l1vNV9U=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.crl rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.mft rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:e3:bc:2b:01:01:1d:1c:5b:5d:0c:81:2b:1b:68:bd:26:6e:03:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b172548fa3c460e26cb519ee524361bca6c7132e Validity Not Before: Dec 20 08:12:34 2025 GMT Not After : Dec 21 10:50:34 2025 GMT Subject: CN=D2EF64907D9A3847B860DEABD1B314FB8817E850 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:2f:69:f5:79:39:4c:78:8e:f6:3e:c6:85:37: 81:ad:07:c0:38:13:b9:b5:65:58:4d:08:c8:c4:ab: c3:c3:6b:92:4a:1b:55:11:34:66:b2:03:9f:6a:ed: 8e:15:d6:6e:f4:78:d3:21:ce:b9:28:29:8a:02:2b: 56:9b:37:12:f0:68:f0:8b:41:51:86:50:c0:67:63: 14:6d:4c:fa:8c:fb:39:0f:ae:c3:15:a0:7b:65:c7: a9:19:58:bb:46:c0:7b:ef:a0:aa:b8:4a:56:8c:59: 61:90:12:d2:61:e3:31:55:b4:d1:17:fd:be:94:9b: c3:d5:45:92:33:11:c4:c2:e4:ba:29:22:ca:0e:45: 76:22:a0:61:50:df:22:e4:c6:06:bf:f7:78:d2:dc: 31:fc:8d:e8:e1:54:7c:34:6c:d2:a4:57:76:42:cb: 44:f2:4a:c4:47:da:fd:7e:46:1f:22:5f:0d:88:6d: 9e:2e:b9:0a:10:af:72:77:b3:12:5d:89:fe:3a:cf: 67:a6:1a:f7:38:9e:e7:33:f8:a9:ff:81:bf:c4:6a: cf:c2:86:9d:fd:57:af:68:ae:ec:ed:06:bc:c1:78: 12:6f:5a:7f:6d:97:2c:47:2c:e2:78:d0:d2:81:d0: c9:2e:e1:34:a6:d4:a0:f1:3e:3e:4c:73:73:a6:59: a3:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:EF:64:90:7D:9A:38:47:B8:60:DE:AB:D1:B3:14:FB:88:17:E8:50 X509v3 Authority Key Identifier: keyid:B1:72:54:8F:A3:C4:60:E2:6C:B5:19:EE:52:43:61:BC:A6:C7:13:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:a4:5c:24:dc:19:4b:36:1b:20:9b:b5:c8:95:50:fb:83:96: 38:24:61:89:e5:a4:e5:fd:8d:27:83:ef:df:36:2d:61:29:5b: 8b:38:ba:57:3c:6e:e3:1c:14:76:9f:e2:b0:8c:19:43:00:54: b1:2d:e6:45:cf:ba:0e:67:83:cf:94:ca:4f:95:d3:bc:c2:e9: 44:e6:47:06:81:25:bc:bb:81:28:d6:79:38:33:23:a7:f4:a9: 4a:4f:3c:9e:87:e3:c8:94:9c:3d:48:1c:f4:cb:4f:6c:d0:23: d0:51:83:fa:cc:07:66:c8:55:cf:83:af:e5:1f:d1:68:ca:0c: d2:d4:ec:0e:5d:7d:37:b0:7f:17:16:86:b9:d4:26:62:d6:0e: 61:33:ae:87:f7:0b:46:2f:eb:24:dd:be:ed:30:40:86:1a:be: 35:c8:3f:5e:b0:ff:71:5b:cb:d8:fd:e7:69:a0:b9:74:91:30: c8:ef:d5:bd:a9:ef:4b:8e:c8:30:45:73:2f:20:c8:15:b0:53: 7c:e0:ec:69:7f:e8:4a:9b:67:ee:19:0d:a6:91:81:54:ee:40: 01:84:f2:dd:2a:36:c0:35:4d:70:35:84:bd:8f:be:77:9e:98: 6a:64:2a:2f:23:d8:8f:96:77:96:26:ac:33:a8:e4:9f:16:d7: 55:b3:61:37 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUU+O8KwEBHRxbXQyBKxtovSZuA7cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYjE3MjU0OGZhM2M0NjBlMjZjYjUxOWVlNTI0MzYxYmNh NmM3MTMyZTAeFw0yNTEyMjAwODEyMzRaFw0yNTEyMjExMDUwMzRaMDMxMTAvBgNV BAMTKEQyRUY2NDkwN0Q5QTM4NDdCODYwREVBQkQxQjMxNEZCODgxN0U4NTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzL2n1eTlMeI72PsaFN4GtB8A4 E7m1ZVhNCMjEq8PDa5JKG1URNGayA59q7Y4V1m70eNMhzrkoKYoCK1abNxLwaPCL QVGGUMBnYxRtTPqM+zkPrsMVoHtlx6kZWLtGwHvvoKq4SlaMWWGQEtJh4zFVtNEX /b6Um8PVRZIzEcTC5LopIsoORXYioGFQ3yLkxga/93jS3DH8jejhVHw0bNKkV3ZC y0TySsRH2v1+Rh8iXw2IbZ4uuQoQr3J3sxJdif46z2emGvc4nucz+Kn/gb/Eas/C hp39V69oruztBrzBeBJvWn9tlyxHLOJ40NKB0Mku4TSm1KDxPj5Mc3OmWaOrAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU0u9kkH2aOEe4YN6r0bMU+4gX6FAwHwYDVR0j BBgwFoAUsXJUj6PEYOJstRnuUkNhvKbHEy4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOTY1NzNlODgtZGFiYS00YWM3LWEyZWQtMzIxYzgyNzdk MjVlLzAvQjE3MjU0OEZBM0M0NjBFMjZDQjUxOUVFNTI0MzYxQkNBNkM3MTMyRS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3NYSlVqNlBFWU9Kc3RSbnVVa05odkti SEV5NC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85NjU3M2U4OC1k YWJhLTRhYzctYTJlZC0zMjFjODI3N2QyNWUvMC9CMTcyNTQ4RkEzQzQ2MEUyNkNC NTE5RUU1MjQzNjFCQ0E2QzcxMzJFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkaRcJNwZSzYbIJu1yJVQ +4OWOCRhieWk5f2NJ4Pv3zYtYSlbizi6Vzxu4xwUdp/isIwZQwBUsS3mRc+6DmeD z5TKT5XTvMLpROZHBoElvLuBKNZ5ODMjp/SpSk88nofjyJScPUgc9MtPbNAj0FGD +swHZshVz4Ov5R/RaMoM0tTsDl19N7B/FxaGudQmYtYOYTOuh/cLRi/rJN2+7TBA hhq+Ncg/XrD/cVvL2P3naaC5dJEwyO/VvanvS47IMEVzLyDIFbBTfODsaX/oSptn 7hkNppGBVO5AAYTy3So2wDVNcDWEvY++d56YamQqLyPYj5Z3liasM6jknxbXVbNh Nw== -----END CERTIFICATE-----Generated at Sat Dec 20 18:39:17 2025 by rpki-client