This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.mft File: 8184669B0189B7FABE05E700325A0D74957BEB27.mft (raw, json) Hash identifier: VzIq8/QdGNYQbTm7QEgKK5EpmZxLfhLdgnnTMdoIIzs= Subject key identifier: BB:2A:73:25:14:7D:30:38:DD:05:F8:B1:7A:E6:BF:EC:37:37:1D:2B Authority key identifier: 81:84:66:9B:01:89:B7:FA:BE:05:E7:00:32:5A:0D:74:95:7B:EB:27 Certificate issuer: /CN=8184669b0189b7fabe05e700325a0d74957beb27 Certificate serial: 6AACEDF90F4BDD6BF6020D54BFB63C4125CADF31 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gYRmmwGJt_q-BecAMloNdJV76yc.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.mft Manifest number: 0169 Signing time: Sat 20 Dec 2025 01:22:34 +0000 Manifest this update: Sat 20 Dec 2025 01:17:34 +0000 Manifest next update: Sun 21 Dec 2025 04:33:34 +0000 Files and hashes: 1: 3231332e3135372e3131362e302f32332d3233203d3e203230353130.roa (hash: u6D0nQIamyf1rwT6EphlkmgpGmdsHhrROhbEzSFSSxQ=) 2: 3231332e3135372e3130372e302f32342d3234203d3e203530323631.roa (hash: fkThFrWbc2SNg5nWL/DjCmp7efO9LKVSLfyHO63Odeo=) 3: 3231332e3135372e3132332e302f32342d3234203d3e203235313938.roa (hash: V87tDHJfEWPvC2C8BO/oDFyDQW6yLu4jA4a47My2iC0=) 4: 3231332e3135372e3132322e302f32342d3234203d3e2039333034.roa (hash: aUvc4UTsIU7R0m9dsnmxWesOTPr9WQo6/RshJ5X0hb4=) 5: 3231332e3135372e3131322e302f32322d3232203d3e203230353130.roa (hash: oXC9Asr9SJ7DSslxSZaWUX9xWnSBbY5iUxbxwvvcFUI=) 6: 3231332e3135372e3131382e302f32332d3233203d3e203230353130.roa (hash: U2rsj2GmpPBYV9RPLITNHzbaDI2Gxelnlov5msxX9eI=) 7: 3231332e3135372e3132312e302f32342d3234203d3e203633313939.roa (hash: dfTQeycU3bCp9xP/UQaKaAmwMbvByiZ/89C4YDPwYlY=) 8: 8184669B0189B7FABE05E700325A0D74957BEB27.crl (hash: kwm3EThouTfCsC/UEgSQjXlZmMIGfqfCIm+gbzR7kk0=) 9: 3231332e3135372e3132332e302f32342d3234203d3e20323035383836.roa (hash: 7VQoOdpqpVmjCELFW51uez7QJpyJbjW4JNhtOxfsg8E=) 10: 3231332e3135372e3132302e302f32342d3234203d3e203432383331.roa (hash: obPbW0ZKO9rq4yp7c5UqzqijavPW0CV78gaYhHaBReI=) 11: 3231332e3135372e39362e302f32302d3230203d3e203230353130.roa (hash: cK22q6rO6KtktflqsQYlSr1z73xEpoVM/WNGnd6YIEI=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.crl rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.mft rsync://rpki.ripe.net/repository/DEFAULT/gYRmmwGJt_q-BecAMloNdJV76yc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 04:33:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:ac:ed:f9:0f:4b:dd:6b:f6:02:0d:54:bf:b6:3c:41:25:ca:df:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8184669b0189b7fabe05e700325a0d74957beb27 Validity Not Before: Dec 20 01:17:34 2025 GMT Not After : Dec 21 04:33:34 2025 GMT Subject: CN=BB2A7325147D3038DD05F8B17AE6BFEC37371D2B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:85:46:96:94:f4:6b:b1:72:95:6e:3c:06:59: be:3d:a9:5c:18:9f:ca:0f:9d:26:2f:60:73:f3:a3: eb:9a:ca:05:bb:40:2b:38:b7:dc:bd:90:3e:e5:75: 98:82:9b:db:64:5f:72:fe:22:2d:49:64:ec:09:45: cb:d2:68:b0:bf:37:c3:5d:48:e2:ac:c5:90:b1:be: 99:50:4e:8d:0b:d2:3b:b9:6d:1f:48:1a:95:ec:2a: 0f:8c:1d:da:60:b7:2d:a2:a8:ea:29:f9:7a:72:5c: 95:c5:a7:44:03:54:21:76:e7:92:d5:46:43:1a:a8: 2d:cc:3b:8a:9c:86:6a:7b:b2:5f:aa:63:e3:5f:a5: b5:32:4b:7c:5e:fb:1f:0f:a1:0c:a9:bf:43:f1:e9: 3e:b0:7e:f5:b3:09:05:ce:c5:97:d1:71:82:ba:43: 58:81:b7:02:6f:ec:fd:74:be:45:e4:d7:83:28:ce: c1:3e:35:c2:1f:24:15:53:7e:60:df:e1:a7:c5:3d: fc:49:db:ac:3c:5d:cc:ee:eb:6d:10:a8:0d:8d:d1: 58:b8:92:5a:b6:b9:a3:63:00:7b:9d:c3:ea:8e:c1: 2a:8b:7c:59:56:62:46:2c:8e:89:b7:0b:22:88:fe: e5:c7:0c:c4:86:52:02:f4:f1:84:23:98:e3:54:57: 48:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:2A:73:25:14:7D:30:38:DD:05:F8:B1:7A:E6:BF:EC:37:37:1D:2B X509v3 Authority Key Identifier: keyid:81:84:66:9B:01:89:B7:FA:BE:05:E7:00:32:5A:0D:74:95:7B:EB:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gYRmmwGJt_q-BecAMloNdJV76yc.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:bc:fc:16:1b:41:b7:e5:ae:e6:81:4e:8b:1f:b6:7f:f1:39: 80:d4:05:55:b8:db:ba:2f:4c:23:31:93:6d:be:0e:97:93:36: e3:f0:d5:1b:91:8e:bd:df:13:eb:5d:9e:20:00:b1:9d:36:f6: bd:92:3b:18:d0:8b:b5:44:1f:78:eb:74:10:79:68:dc:56:82: 45:31:10:d1:f3:c7:7c:34:86:db:da:44:bb:62:67:5b:bb:98: b7:d8:d4:d8:81:e2:a6:ff:3e:a9:d5:4a:b6:13:85:f8:d2:24: de:28:40:21:9d:95:43:a4:06:63:f2:7d:58:03:2f:85:91:72: cd:d5:9e:f8:f0:80:59:12:c9:00:d9:ce:36:77:28:c6:cc:60: f0:a8:d7:81:45:e2:70:ba:7c:e6:d5:db:27:51:49:a0:a9:80: ba:e8:81:9e:dd:8c:4d:00:b7:b3:96:88:2f:c9:11:e4:6d:3c: 3d:99:e9:15:f3:e2:08:33:42:a5:ac:fd:6c:92:e0:22:65:3c: b0:3d:6c:66:85:f8:b7:aa:bb:61:6f:a4:95:2d:40:df:e9:22: 59:87:d8:ec:91:7d:9e:3c:3f:c5:ff:91:4b:e6:a2:f0:4d:f1: 91:aa:48:43:02:37:af:14:91:46:24:ad:59:2b:9d:98:11:7f: be:f9:85:46 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUaqzt+Q9L3Wv2Ag1Uv7Y8QSXK3zEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODE4NDY2OWIwMTg5YjdmYWJlMDVlNzAwMzI1YTBkNzQ5 NTdiZWIyNzAeFw0yNTEyMjAwMTE3MzRaFw0yNTEyMjEwNDMzMzRaMDMxMTAvBgNV BAMTKEJCMkE3MzI1MTQ3RDMwMzhERDA1RjhCMTdBRTZCRkVDMzczNzFEMkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0hUaWlPRrsXKVbjwGWb49qVwY n8oPnSYvYHPzo+uaygW7QCs4t9y9kD7ldZiCm9tkX3L+Ii1JZOwJRcvSaLC/N8Nd SOKsxZCxvplQTo0L0ju5bR9IGpXsKg+MHdpgty2iqOop+XpyXJXFp0QDVCF255LV RkMaqC3MO4qchmp7sl+qY+NfpbUyS3xe+x8PoQypv0Px6T6wfvWzCQXOxZfRcYK6 Q1iBtwJv7P10vkXk14MozsE+NcIfJBVTfmDf4afFPfxJ26w8Xczu620QqA2N0Vi4 klq2uaNjAHudw+qOwSqLfFlWYkYsjom3CyKI/uXHDMSGUgL08YQjmONUV0g1AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUuypzJRR9MDjdBfixeua/7Dc3HSswHwYDVR0j BBgwFoAUgYRmmwGJt/q+BecAMloNdJV76ycwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTQzMWU0MmUtMGQ3Zi00NGQwLTgxM2YtYjVlM2EyYWJi ZTI1LzAvODE4NDY2OUIwMTg5QjdGQUJFMDVFNzAwMzI1QTBENzQ5NTdCRUIyNy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2dZUm1td0dKdF9xLUJlY0FNbG9OZEpW NzZ5Yy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hNDMxZTQyZS0w ZDdmLTQ0ZDAtODEzZi1iNWUzYTJhYmJlMjUvMC84MTg0NjY5QjAxODlCN0ZBQkUw NUU3MDAzMjVBMEQ3NDk1N0JFQjI3Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ7z8FhtBt+Wu5oFOix+2 f/E5gNQFVbjbui9MIzGTbb4Ol5M24/DVG5GOvd8T612eIACxnTb2vZI7GNCLtUQf eOt0EHlo3FaCRTEQ0fPHfDSG29pEu2JnW7uYt9jU2IHipv8+qdVKthOF+NIk3ihA IZ2VQ6QGY/J9WAMvhZFyzdWe+PCAWRLJANnONncoxsxg8KjXgUXicLp85tXbJ1FJ oKmAuuiBnt2MTQC3s5aIL8kR5G08PZnpFfPiCDNCpaz9bJLgImU8sD1sZoX4t6q7 YW+klS1A3+kiWYfY7JF9njw/xf+RS+ai8E3xkapIQwI3rxSRRiStWSudmBF/vvmF Rg== -----END CERTIFICATE-----Generated at Sat Dec 20 21:13:37 2025 by rpki-client