This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9bb77c8a-2d69-4325-b4fa-603388c96bb3/0/DF083FC9C36AB37158AD80E5C84E76BE97ADC09F.mft File: DF083FC9C36AB37158AD80E5C84E76BE97ADC09F.mft (raw, json) Hash identifier: 9JZaJackXLRbQ0bsRBYwDw65ibmJ5t/eu+Peit1r6GI= Subject key identifier: 97:FC:FD:BD:0F:AA:E2:25:1A:4A:37:DE:59:02:0B:97:7C:ED:94:4B Authority key identifier: DF:08:3F:C9:C3:6A:B3:71:58:AD:80:E5:C8:4E:76:BE:97:AD:C0:9F Certificate issuer: /CN=df083fc9c36ab37158ad80e5c84e76be97adc09f Certificate serial: 06BB6E7837F74F88EC643851E07AAE118073B2D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3wg_ycNqs3FYrYDlyE52vpetwJ8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9bb77c8a-2d69-4325-b4fa-603388c96bb3/0/DF083FC9C36AB37158AD80E5C84E76BE97ADC09F.mft Manifest number: 23 Signing time: Mon 22 Dec 2025 10:03:17 +0000 Manifest this update: Mon 22 Dec 2025 09:58:17 +0000 Manifest next update: Tue 23 Dec 2025 14:02:17 +0000 Files and hashes: 1: 323030313a3637383a313134633a3a2f34382d3438203d3e20323034353335.roa (hash: 9p7lN4fPyJsdHWKsoNbq0ArF1KunMN6fkvMq7UIoE20=) 2: DF083FC9C36AB37158AD80E5C84E76BE97ADC09F.crl (hash: NKMTLBv/ff/BmIMm9IGLy0zIwU6/WqdS2ytfRfFz1DE=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9bb77c8a-2d69-4325-b4fa-603388c96bb3/0/DF083FC9C36AB37158AD80E5C84E76BE97ADC09F.crl rsync://rsync.paas.rpki.ripe.net/repository/9bb77c8a-2d69-4325-b4fa-603388c96bb3/0/DF083FC9C36AB37158AD80E5C84E76BE97ADC09F.mft rsync://rpki.ripe.net/repository/DEFAULT/3wg_ycNqs3FYrYDlyE52vpetwJ8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 10:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:bb:6e:78:37:f7:4f:88:ec:64:38:51:e0:7a:ae:11:80:73:b2:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df083fc9c36ab37158ad80e5c84e76be97adc09f Validity Not Before: Dec 22 09:58:17 2025 GMT Not After : Dec 23 14:02:17 2025 GMT Subject: CN=97FCFDBD0FAAE2251A4A37DE59020B977CED944B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:eb:de:a7:17:d1:ae:1f:77:37:c6:cf:0c:5d: 50:f9:47:47:a1:36:6a:2e:d4:97:6d:06:d9:9c:a4: f9:13:e5:09:04:37:18:37:b2:e1:14:f5:65:80:66: 4f:41:c7:fb:60:d1:30:7f:01:d8:28:ce:72:92:0c: 6b:8c:fe:21:a1:57:bd:86:7e:46:27:7b:20:e8:47: e1:dd:24:30:f7:13:1e:9c:00:1d:c9:eb:6a:53:a3: 9c:9c:0a:dc:f6:c3:e3:e9:01:8b:d6:79:40:d8:79: 4f:0e:71:74:ca:8e:06:b1:e3:14:15:49:0c:8f:4e: 3e:b5:25:47:73:0c:83:da:5e:49:95:64:07:6f:94: 01:fd:f2:7e:69:a8:90:8f:b0:f5:7f:f0:e4:f5:14: 45:bf:f4:d8:14:90:51:c1:32:32:7d:b8:4e:8b:b2: 92:38:99:66:51:c1:24:5a:59:f2:9f:d3:39:08:d7: c4:c2:bd:a7:77:7f:53:d8:4d:eb:b8:07:fb:7d:62: 99:ca:d4:7a:7a:ce:d8:14:3d:09:3d:f8:d3:b9:58: 15:9c:ca:66:5e:81:59:0d:62:59:61:b1:93:30:ef: 55:92:da:f0:a2:48:a9:d1:dd:3f:91:67:6b:9c:b6: c3:7c:1d:99:49:3f:62:8f:7d:6d:62:ec:b5:7b:5f: 2c:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:FC:FD:BD:0F:AA:E2:25:1A:4A:37:DE:59:02:0B:97:7C:ED:94:4B X509v3 Authority Key Identifier: keyid:DF:08:3F:C9:C3:6A:B3:71:58:AD:80:E5:C8:4E:76:BE:97:AD:C0:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9bb77c8a-2d69-4325-b4fa-603388c96bb3/0/DF083FC9C36AB37158AD80E5C84E76BE97ADC09F.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3wg_ycNqs3FYrYDlyE52vpetwJ8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9bb77c8a-2d69-4325-b4fa-603388c96bb3/0/DF083FC9C36AB37158AD80E5C84E76BE97ADC09F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c8:a5:a7:5b:1c:bf:30:57:71:53:0e:71:84:f0:d4:3b:09:e5: 97:35:ff:aa:b5:ea:3c:5f:1c:93:0c:b7:f1:11:91:e7:4a:08: 2d:bc:4e:9f:2e:ed:76:12:f7:84:8a:3a:5d:4c:ea:05:92:a4: fe:6b:64:9e:46:6e:6c:8a:9a:cc:c4:39:ab:24:f2:f7:f0:5f: 0a:fc:bb:ce:3e:0a:97:ee:31:f5:e3:6f:dd:fa:4c:59:2c:53: 60:e5:55:dd:61:15:39:bb:fc:66:50:6d:53:50:3b:3d:d4:a0: 36:53:1d:94:f9:a8:9b:cf:e9:b7:5d:c8:4a:fa:0f:7f:85:e6: db:30:23:6e:b6:0e:df:d9:cd:27:8b:0b:ba:02:93:1e:e7:df: 0c:25:60:0a:10:66:e5:6a:e1:54:70:1a:4d:6d:2b:f7:d7:e7: f0:11:e8:63:3f:36:2d:1e:cd:ab:81:27:0f:cc:e8:81:a4:3a: 47:fd:eb:c4:37:a6:81:73:94:76:53:74:a7:17:0a:46:9b:96: 44:00:b9:d1:51:45:10:ef:1c:68:97:d2:16:aa:4a:cd:26:38: 39:d4:54:15:bb:7a:41:c8:dc:99:e5:20:10:ea:cf:77:9f:9c: 9f:c8:8b:d6:e2:25:ee:ff:8a:83:ac:35:10:41:0e:db:8c:a7: dc:37:bd:7f -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUBrtueDf3T4jsZDhR4HquEYBzstMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZGYwODNmYzljMzZhYjM3MTU4YWQ4MGU1Yzg0ZTc2YmU5 N2FkYzA5ZjAeFw0yNTEyMjIwOTU4MTdaFw0yNTEyMjMxNDAyMTdaMDMxMTAvBgNV BAMTKDk3RkNGREJEMEZBQUUyMjUxQTRBMzdERTU5MDIwQjk3N0NFRDk0NEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCG696nF9GuH3c3xs8MXVD5R0eh Nmou1JdtBtmcpPkT5QkENxg3suEU9WWAZk9Bx/tg0TB/AdgoznKSDGuM/iGhV72G fkYneyDoR+HdJDD3Ex6cAB3J62pTo5ycCtz2w+PpAYvWeUDYeU8OcXTKjgax4xQV SQyPTj61JUdzDIPaXkmVZAdvlAH98n5pqJCPsPV/8OT1FEW/9NgUkFHBMjJ9uE6L spI4mWZRwSRaWfKf0zkI18TCvad3f1PYTeu4B/t9YpnK1Hp6ztgUPQk9+NO5WBWc ymZegVkNYllhsZMw71WS2vCiSKnR3T+RZ2uctsN8HZlJP2KPfW1i7LV7Xyy7AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUl/z9vQ+q4iUaSjfeWQILl3ztlEswHwYDVR0j BBgwFoAU3wg/ycNqs3FYrYDlyE52vpetwJ8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWJiNzdjOGEtMmQ2OS00MzI1LWI0ZmEtNjAzMzg4Yzk2 YmIzLzAvREYwODNGQzlDMzZBQjM3MTU4QUQ4MEU1Qzg0RTc2QkU5N0FEQzA5Ri5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzN3Z195Y05xczNGWXJZRGx5RTUydnBl dHdKOC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85YmI3N2M4YS0y ZDY5LTQzMjUtYjRmYS02MDMzODhjOTZiYjMvMC9ERjA4M0ZDOUMzNkFCMzcxNThB RDgwRTVDODRFNzZCRTk3QURDMDlGLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyKWnWxy/MFdxUw5xhPDU OwnllzX/qrXqPF8ckwy38RGR50oILbxOny7tdhL3hIo6XUzqBZKk/mtknkZubIqa zMQ5qyTy9/BfCvy7zj4Kl+4x9eNv3fpMWSxTYOVV3WEVObv8ZlBtU1A7PdSgNlMd lPmom8/pt13ISvoPf4Xm2zAjbrYO39nNJ4sLugKTHuffDCVgChBm5WrhVHAaTW0r 99fn8BHoYz82LR7Nq4EnD8zogaQ6R/3rxDemgXOUdlN0pxcKRpuWRAC50VFFEO8c aJfSFqpKzSY4OdRUFbt6QcjcmeUgEOrPd5+cn8iL1uIl7v+Kg6w1EEEO24yn3De9 fw== -----END CERTIFICATE-----Generated at Mon Dec 22 15:58:20 2025 by rpki-client