This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/1/87A4C84D4366DBB15A9090A55AA2DCEBA8723945.mft File: 87A4C84D4366DBB15A9090A55AA2DCEBA8723945.mft (raw, json) Hash identifier: /Ky/rqsdy1fZI9R0aLJcDHNM1H1f/vgFtzayh8T+pxM= Subject key identifier: 0B:C2:B5:79:42:50:10:F6:5F:C7:55:F1:7B:AB:A7:FD:B7:B0:C0:1B Authority key identifier: 87:A4:C8:4D:43:66:DB:B1:5A:90:90:A5:5A:A2:DC:EB:A8:72:39:45 Certificate issuer: /CN=87A4C84D4366DBB15A9090A55AA2DCEBA8723945 Certificate serial: 7F146643D946518B52B937B8B65E5573943B54BE Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/87A4C84D4366DBB15A9090A55AA2DCEBA8723945.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/1/87A4C84D4366DBB15A9090A55AA2DCEBA8723945.mft Manifest number: 0145 Signing time: Wed 17 Dec 2025 18:09:17 +0000 Manifest this update: Wed 17 Dec 2025 18:04:17 +0000 Manifest next update: Thu 18 Dec 2025 21:42:17 +0000 Files and hashes: 1: 326131343a373538313a393930353a3a2f34382d3438203d3e20323134333434.roa (hash: 0tk68iktR4A+Tmx1ow+QCPfURRQdgNg7+hqUgrcV4SU=) 2: 326131343a373538313a393966323a3a2f34382d3438203d3e20323134333434.roa (hash: GgRgpO0cir6J2JIvLpFaBWDg0/fcSkJg//f6BlSBDCY=) 3: 87A4C84D4366DBB15A9090A55AA2DCEBA8723945.crl (hash: iBPH3GbW5Y87rt0GnyDj56zo/RcYpxNKeUAbl5Vz/0w=) 4: 326131343a373538313a393966313a3a2f34382d3438203d3e20323134333434.roa (hash: eBRv+uDGLUqSp7a6GG/a9BPTN3/sPy8oPhg1ivi/5ik=) 5: 326131343a373538313a393966353a3a2f34382d3438203d3e20323134333434.roa (hash: WwRRTirG7edW5+geax/8pXpN1dZiLKdB/tgwh/uOeTM=) 6: 326131343a373538313a393930323a3a2f34382d3438203d3e20323134333434.roa (hash: 3uRQGY7O+ZvtbHNtgC5MF4VJ4PR1W0vGtZuXeGQdfrI=) 7: 326131343a373538313a393939393a3a2f34382d3438203d3e20323134333434.roa (hash: gWNOGizaCWeT+eChfA6O1CcYgC4CppF3JVd8ZgY0qsY=) 8: 326131343a373538313a393930333a3a2f34382d3438203d3e20323134333434.roa (hash: /zrjZ0ZqEzRDQ5mOWK+S06L45z9UxNhwijRkpqGoHX0=) 9: 326131343a373538313a393930343a3a2f34382d3438203d3e20323134333434.roa (hash: Kr++/O1eWk2rhooTEwkNaOpIKHaAHhcWSp5UY9Du6eM=) 10: 326131343a373538313a393966343a3a2f34382d3438203d3e20323134333434.roa (hash: aT8cghtaGkqPEEByCDT3I1TbWDM5+v3iYF7i8PWrF94=) 11: 326131343a373538313a393966333a3a2f34382d3438203d3e20323134333434.roa (hash: CfKfKnWr6AMoLiLfBVlrhneodY9KAu+Y1wDjsvoRWPk=) 12: 326131343a373538313a393938383a3a2f34382d3438203d3e20323134333434.roa (hash: oAguRb9pXNzPWjYX85q2YG/BjiE6PLmXVHXI0ai6PhQ=) 13: 326131343a373538313a393930313a3a2f34382d3438203d3e20323134333434.roa (hash: i94AFUzw6e810fYgj7x6pZ8Yx8k5H6Glrkwkeys08UU=) 14: 326131343a373538313a393965653a3a2f34382d3438203d3e20323134333434.roa (hash: 3oBSnEnPYocyloNNfV7eH1ZnHXiKOV8dASwMij3b8+0=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/1/87A4C84D4366DBB15A9090A55AA2DCEBA8723945.crl rsync://rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/1/87A4C84D4366DBB15A9090A55AA2DCEBA8723945.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/87A4C84D4366DBB15A9090A55AA2DCEBA8723945.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 21:42:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:14:66:43:d9:46:51:8b:52:b9:37:b8:b6:5e:55:73:94:3b:54:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87A4C84D4366DBB15A9090A55AA2DCEBA8723945 Validity Not Before: Dec 17 18:04:17 2025 GMT Not After : Dec 18 21:42:17 2025 GMT Subject: CN=0BC2B579425010F65FC755F17BABA7FDB7B0C01B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:fb:e2:17:57:e3:43:6e:0f:f6:51:78:48:d9: dd:72:25:1c:84:78:8e:42:de:64:74:18:86:a0:4e: c8:f1:1e:93:3f:01:e9:ab:ab:c0:51:50:85:d4:4f: 1c:91:f3:ad:41:8b:72:50:b4:7a:ed:02:e6:d1:77: 73:18:39:ac:20:ee:f6:35:80:a5:7d:a3:b4:da:88: ce:f4:7b:6c:03:a0:1e:40:79:e3:c4:aa:65:79:a8: e4:9f:a8:a1:76:ce:60:4f:5f:1f:30:91:01:df:10: 7a:c0:90:bb:fa:73:c4:51:02:ac:df:c9:dc:f9:f0: bf:85:1a:99:ba:f4:66:06:b5:f7:9d:57:07:0c:d2: 1e:a4:22:33:9c:a4:21:dc:91:f7:15:b8:72:12:60: ee:3a:d6:28:ea:8f:a3:52:c3:f9:9b:c8:a7:ed:6d: 54:c5:77:8e:ee:ca:71:17:7c:80:78:8d:71:97:39: 44:bc:60:c0:71:30:1a:79:ec:29:3c:5e:42:8e:21: 6b:9b:43:81:26:3b:0f:ad:89:06:ac:b0:de:e9:e0: 0b:9f:89:e9:82:91:bb:a9:09:ac:ed:6f:05:bf:c6: b6:fd:46:c9:78:11:85:06:9a:13:82:3d:5d:ef:8d: fb:9c:ef:47:63:5f:87:28:c0:e3:97:bc:f4:b5:0c: 42:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:C2:B5:79:42:50:10:F6:5F:C7:55:F1:7B:AB:A7:FD:B7:B0:C0:1B X509v3 Authority Key Identifier: keyid:87:A4:C8:4D:43:66:DB:B1:5A:90:90:A5:5A:A2:DC:EB:A8:72:39:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/1/87A4C84D4366DBB15A9090A55AA2DCEBA8723945.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/87A4C84D4366DBB15A9090A55AA2DCEBA8723945.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/1/87A4C84D4366DBB15A9090A55AA2DCEBA8723945.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:c3:dd:96:d6:66:82:8d:2f:c7:35:b2:88:c8:57:ab:3e:0f: 47:3b:7e:dd:b9:e7:b4:e9:0f:e2:d8:04:c6:83:1e:c2:4c:3e: 2c:35:b9:78:8d:1f:96:a8:2f:4e:43:b8:9f:c1:03:f8:ee:6d: 45:d7:80:22:b8:11:c0:cc:fe:74:16:dd:0d:2b:f8:cc:d3:34: be:6f:bc:49:ce:39:3e:38:bf:fb:5d:e5:8f:3a:8e:18:56:56: 19:86:0a:9a:13:26:36:bd:33:29:a0:a3:2d:75:16:8a:4e:bf: a8:a8:66:42:47:ca:aa:d5:ea:32:32:68:a9:ba:45:01:52:c6: 40:c4:3d:ec:c6:c2:38:66:ff:c8:88:fa:2a:65:5d:db:3e:54: 89:40:d1:d5:cf:1e:b6:bd:83:90:cd:23:f4:62:a5:d1:0a:df: c4:ef:7f:28:3f:3f:7a:47:4f:d0:79:51:2b:fc:d4:7f:02:47: c1:19:55:d9:51:f0:e8:fc:5d:e9:60:61:e5:32:76:19:24:42: 0f:88:16:bb:f9:01:9e:a0:92:25:d7:a0:54:82:ee:71:a2:5b: 93:07:35:fd:d0:71:ef:5e:a4:95:9a:b3:90:cf:ba:ce:28:72: b0:b3:5e:f6:f5:a1:c7:45:4a:10:53:a6:36:07:d7:75:0c:f0: 5c:5b:91:3b -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUfxRmQ9lGUYtSuTe4tl5Vc5Q7VL4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODdBNEM4NEQ0MzY2REJCMTVBOTA5MEE1NUFBMkRDRUJB ODcyMzk0NTAeFw0yNTEyMTcxODA0MTdaFw0yNTEyMTgyMTQyMTdaMDMxMTAvBgNV BAMTKDBCQzJCNTc5NDI1MDEwRjY1RkM3NTVGMTdCQUJBN0ZEQjdCMEMwMUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2++IXV+NDbg/2UXhI2d1yJRyE eI5C3mR0GIagTsjxHpM/Aemrq8BRUIXUTxyR861Bi3JQtHrtAubRd3MYOawg7vY1 gKV9o7TaiM70e2wDoB5AeePEqmV5qOSfqKF2zmBPXx8wkQHfEHrAkLv6c8RRAqzf ydz58L+FGpm69GYGtfedVwcM0h6kIjOcpCHckfcVuHISYO461ijqj6NSw/mbyKft bVTFd47uynEXfIB4jXGXOUS8YMBxMBp57Ck8XkKOIWubQ4EmOw+tiQassN7p4Auf iemCkbupCaztbwW/xrb9Rsl4EYUGmhOCPV3vjfuc70djX4cowOOXvPS1DEK9AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUC8K1eUJQEPZfx1Xxe6un/bewwBswHwYDVR0j BBgwFoAUh6TITUNm27FakJClWqLc66hyOUUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTVkNGMwMGItZDEwNS00OTA2LWI5ODEtMWQwMzQzZTMw MWRhLzEvODdBNEM4NEQ0MzY2REJCMTVBOTA5MEE1NUFBMkRDRUJBODcyMzk0NS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC84N0E0Qzg0RDQzNjZEQkIxNUE5MDkwQTU1 QUEyRENFQkE4NzIzOTQ1LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2E1ZDRjMDBiLWQxMDUtNDkwNi1iOTgxLTFkMDM0M2UzMDFkYS8xLzg3QTRDODRE NDM2NkRCQjE1QTkwOTBBNTVBQTJEQ0VCQTg3MjM5NDUubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBmw92W 1maCjS/HNbKIyFerPg9HO37duee06Q/i2ATGgx7CTD4sNbl4jR+WqC9OQ7ifwQP4 7m1F14AiuBHAzP50Ft0NK/jM0zS+b7xJzjk+OL/7XeWPOo4YVlYZhgqaEyY2vTMp oKMtdRaKTr+oqGZCR8qq1eoyMmipukUBUsZAxD3sxsI4Zv/IiPoqZV3bPlSJQNHV zx62vYOQzSP0YqXRCt/E738oPz96R0/QeVEr/NR/AkfBGVXZUfDo/F3pYGHlMnYZ JEIPiBa7+QGeoJIl16BUgu5xoluTBzX90HHvXqSVmrOQz7rOKHKws1729aHHRUoQ U6Y2B9d1DPBcW5E7 -----END CERTIFICATE-----Generated at Thu Dec 18 09:53:50 2025 by rpki-client