This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.mft File: B149F23A3E99C4760297DD7104B400C835D86D19.mft (raw, json) Hash identifier: 96eA0n2OCb//Rr2GlBeBfwsepVpaFxpOZTYZc5jcuLg= Subject key identifier: 40:16:4D:71:D5:1A:36:DC:DF:0A:62:07:3C:3B:E6:DC:CB:0C:70:A3 Authority key identifier: B1:49:F2:3A:3E:99:C4:76:02:97:DD:71:04:B4:00:C8:35:D8:6D:19 Certificate issuer: /CN=B149F23A3E99C4760297DD7104B400C835D86D19 Certificate serial: 161F9B06A552A27C0DA1D596A09B016C82BB4F48 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B149F23A3E99C4760297DD7104B400C835D86D19.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.mft Manifest number: A5 Signing time: Fri 19 Dec 2025 11:03:45 +0000 Manifest this update: Fri 19 Dec 2025 10:58:45 +0000 Manifest next update: Sat 20 Dec 2025 11:26:45 +0000 Files and hashes: 1: 326131343a373538333a663436303a3a2f34342d3438203d3e20323131353735.roa (hash: LMFmuLJ4IgxIQCv2slhgNeKFDMCx6rSWhmkOn3RblbI=) 2: B149F23A3E99C4760297DD7104B400C835D86D19.crl (hash: HyrC19XuRypc/DPKlvfgr7j1cNDmKBl488w3D7a5uPI=) 3: 6CBB5872C1432E2E2EB073D795852B3C3508301E.cer (hash: aUe6wenVbT4PBkWmmhokArka/STtyRgYs3gLyhoHFJw=) 4: 326131343a373538333a663436303a3a2f34342d3438203d3e20323134373230.roa (hash: 4YEjtMXLVEjj9+5CMQ85BeokEYmpgzJkQtl+GYY10z4=) 5: E2D8063C20C5FF1C1C1ACC3AD4E9D0C0C8648229.cer (hash: ttIHeVow2IErbUXmp4n67KjX2H68UmfVMTfPkOmulDw=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.crl rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B149F23A3E99C4760297DD7104B400C835D86D19.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 11:26:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:1f:9b:06:a5:52:a2:7c:0d:a1:d5:96:a0:9b:01:6c:82:bb:4f:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B149F23A3E99C4760297DD7104B400C835D86D19 Validity Not Before: Dec 19 10:58:45 2025 GMT Not After : Dec 20 11:26:45 2025 GMT Subject: CN=40164D71D51A36DCDF0A62073C3BE6DCCB0C70A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ac:c5:9c:ee:85:c9:d7:71:1f:e4:73:e2:b8: 97:54:62:5f:f6:00:b7:f4:4f:8d:68:72:59:41:e3: 3e:90:1f:53:05:90:15:81:f2:02:55:7a:74:34:74: 60:cb:4c:91:0b:93:20:4b:60:e0:a8:0b:c9:70:d3: 17:58:ef:20:4d:74:81:12:fc:90:44:e8:3a:9a:74: 31:07:a7:b9:18:93:e8:ed:fa:ac:bd:f0:ae:cc:22: 43:92:fb:8d:29:6a:12:b1:0c:24:5a:ad:54:9f:44: e6:51:c2:cc:ce:36:7b:89:88:86:cc:d7:14:18:73: a7:7d:57:7e:ff:06:b2:54:18:49:25:40:52:47:d7: d0:fd:ea:91:14:c8:76:d1:2c:ac:a1:9f:ff:07:79: cf:fb:07:59:36:ba:0d:2c:b2:ef:a2:37:6a:da:65: 7b:b4:9c:e5:e9:1f:54:e9:41:d6:d6:7f:9e:de:b2: e9:ec:f5:8b:4a:6c:5c:55:ec:df:b7:63:0c:e2:e8: 28:47:a6:c7:3a:4b:93:9b:fb:90:ba:5c:2f:8e:0c: 8c:10:1f:3f:9d:13:6c:10:ef:c8:d8:38:2a:78:b3: 5a:92:1e:0b:01:8c:24:1c:27:4e:4e:bf:6b:bf:84: fe:b9:31:97:37:70:7e:09:fd:a5:a8:9c:ca:b3:4e: 83:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:16:4D:71:D5:1A:36:DC:DF:0A:62:07:3C:3B:E6:DC:CB:0C:70:A3 X509v3 Authority Key Identifier: keyid:B1:49:F2:3A:3E:99:C4:76:02:97:DD:71:04:B4:00:C8:35:D8:6D:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B149F23A3E99C4760297DD7104B400C835D86D19.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:13:44:3d:d0:cf:e4:1f:49:c6:87:62:3f:98:e2:6a:e2:22: 56:54:24:04:91:f4:8c:24:5a:38:26:9a:b6:13:bb:d5:b7:cf: 39:10:b0:51:89:01:d7:bf:c7:a3:cb:f7:83:5c:5b:49:4b:86: 3b:11:e3:c8:12:8c:9a:6e:7c:4e:0e:65:f9:b1:45:53:2c:42: 7a:f7:2a:cc:93:03:f0:9b:1a:ee:b1:aa:39:6f:c3:16:53:7b: 1d:e8:08:45:12:40:25:be:f9:1a:a1:e5:16:43:37:c3:2f:88: dc:20:a5:ed:99:e7:be:92:ad:52:ab:4c:72:a4:32:a4:cf:aa: 86:d6:64:d5:29:c8:91:b2:3c:e6:97:7d:23:5c:03:07:f2:63: 27:67:bf:b7:01:fd:e6:99:11:ae:87:62:9f:56:3d:d2:66:51: 63:cb:69:fb:33:a0:66:2f:f3:4e:f9:dc:fb:ed:fe:69:a9:a6: eb:1e:08:c7:8b:5e:17:4e:94:37:ae:7d:1f:1b:a3:90:16:03: 7b:c2:b3:b4:e2:6e:56:55:a8:0d:ea:66:23:72:12:9d:3b:88: 1d:ae:65:55:83:34:bb:f7:85:b3:bc:e6:23:84:8c:f6:19:7a: df:df:59:f8:5a:ee:6d:a9:9a:2d:8c:be:62:2b:65:b1:29:19: 83:65:72:4e -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUFh+bBqVSonwNodWWoJsBbIK7T0gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjE0OUYyM0EzRTk5QzQ3NjAyOTdERDcxMDRCNDAwQzgz NUQ4NkQxOTAeFw0yNTEyMTkxMDU4NDVaFw0yNTEyMjAxMTI2NDVaMDMxMTAvBgNV BAMTKDQwMTY0RDcxRDUxQTM2RENERjBBNjIwNzNDM0JFNkRDQ0IwQzcwQTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1rMWc7oXJ13Ef5HPiuJdUYl/2 ALf0T41ocllB4z6QH1MFkBWB8gJVenQ0dGDLTJELkyBLYOCoC8lw0xdY7yBNdIES /JBE6DqadDEHp7kYk+jt+qy98K7MIkOS+40pahKxDCRarVSfROZRwszONnuJiIbM 1xQYc6d9V37/BrJUGEklQFJH19D96pEUyHbRLKyhn/8Hec/7B1k2ug0ssu+iN2ra ZXu0nOXpH1TpQdbWf57esuns9YtKbFxV7N+3Ywzi6ChHpsc6S5Ob+5C6XC+ODIwQ Hz+dE2wQ78jYOCp4s1qSHgsBjCQcJ05Ov2u/hP65MZc3cH4J/aWonMqzToP/AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUQBZNcdUaNtzfCmIHPDvm3MsMcKMwHwYDVR0j BBgwFoAUsUnyOj6ZxHYCl91xBLQAyDXYbRkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOTgxZjk3ODItODk4ZS00YjgzLTk1ZTYtNGZmNGFiNzVj OWRjLzIvQjE0OUYyM0EzRTk5QzQ3NjAyOTdERDcxMDRCNDAwQzgzNUQ4NkQxOS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9CMTQ5RjIzQTNFOTlDNDc2MDI5N0RENzEw NEI0MDBDODM1RDg2RDE5LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 Lzk4MWY5NzgyLTg5OGUtNGI4My05NWU2LTRmZjRhYjc1YzlkYy8yL0IxNDlGMjNB M0U5OUM0NzYwMjk3REQ3MTA0QjQwMEM4MzVEODZEMTkubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCZE0Q9 0M/kH0nGh2I/mOJq4iJWVCQEkfSMJFo4Jpq2E7vVt885ELBRiQHXv8ejy/eDXFtJ S4Y7EePIEoyabnxODmX5sUVTLEJ69yrMkwPwmxrusao5b8MWU3sd6AhFEkAlvvka oeUWQzfDL4jcIKXtmee+kq1Sq0xypDKkz6qG1mTVKciRsjzml30jXAMH8mMnZ7+3 Af3mmRGuh2KfVj3SZlFjy2n7M6BmL/NO+dz77f5pqabrHgjHi14XTpQ3rn0fG6OQ FgN7wrO04m5WVagN6mYjchKdO4gdrmVVgzS794WzvOYjhIz2GXrf31n4Wu5tqZot jL5iK2WxKRmDZXJO -----END CERTIFICATE-----Generated at Fri Dec 19 20:10:39 2025 by rpki-client