This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.mft File: 8F4CE7722F99075D94738B7E61070401269EB3D6.mft (raw, json) Hash identifier: nlUtHDNrM9EaPhntXLotLwYt634c+lGRMg4kk32hPuU= Subject key identifier: A2:4C:90:28:70:98:97:94:D2:DC:53:9F:F4:53:9A:6A:05:CC:C8:FD Authority key identifier: 8F:4C:E7:72:2F:99:07:5D:94:73:8B:7E:61:07:04:01:26:9E:B3:D6 Certificate issuer: /CN=8f4ce7722f99075d94738b7e61070401269eb3d6 Certificate serial: 0E50B836127883478E1477FC92F75F254EC743F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.mft Manifest number: 05C2 Signing time: Fri 19 Dec 2025 19:22:33 +0000 Manifest this update: Fri 19 Dec 2025 19:17:33 +0000 Manifest next update: Sat 20 Dec 2025 21:59:33 +0000 Files and hashes: 1: 38352e3230392e31392e302f32342d3234203d3e203131383738.roa (hash: Nx4wSG2k5MsgvkZE/SkqlmuALnm8blh30hh9Mbxj2MU=) 2: 3138352e3138312e332e302f32342d3234203d3e20323030303137.roa (hash: yu4VS8d4SOotNR90wp+Yzh042rOQsTRk/ltNPBkKiBs=) 3: 37372e38332e3235342e302f32342d3234203d3e203432383331.roa (hash: B5BKp3Kt7IC0lBSFIyTVJVOYl/EnjscrkC95vEdRQdg=) 4: 36322e3139322e3137322e302f32342d3234203d3e20323632323837.roa (hash: 2GimDrI+u19G9USJIxEoIwe+FIkjWzBTs+tdLgZWAyE=) 5: 37372e38332e3235322e302f32342d3234203d3e203533313037.roa (hash: 3Dh0+QL4Ca7K3/8ZGEgIxNy6qmtIRAGaEkPcZns1GuY=) 6: 3138352e3138312e302e302f32342d3234203d3e2035303635.roa (hash: jKhLBm90tx+Wj64bfhAOaNtyd2IRsOIjohul50fMfmI=) 7: 36322e3139322e3137332e302f32342d3234203d3e2038313030.roa (hash: VR4JLJ2ZU8eUzCRER2JzBOvrizo3+I5iCEURL4jUDUs=) 8: 8F4CE7722F99075D94738B7E61070401269EB3D6.crl (hash: tFpelNhid/TD137dWzoJ3n1JuZnKpZ7tqWJbwWhXfUM=) 9: 3139332e3136332e3132372e302f32342d3234203d3e20313439393438.roa (hash: 1dKp6xe+eLRTQoCYGUtbaGkzNAIMlS65VuQGc12R6RA=) 10: 37372e38332e3235352e302f32342d3234203d3e20333937333733.roa (hash: 1mKwdC2ZIiOIr7Rnoef/+fSq7c6umW7Rd7kmaMzPSt8=) 11: 36322e3139322e3137332e302f32342d3234203d3e203235363933.roa (hash: 7LxiUpW29bCJDw6ndbnVxwTHPen7XCpx03brWPSWNVo=) 12: 3231322e3130322e3131342e302f32342d3234203d3e20323132363039.roa (hash: k4QPq18KIVcE3YfXs1geEObswKolsmORhNCPU0jWep8=) 13: 3138352e3138312e322e302f32342d3234203d3e20323132363639.roa (hash: AO/2wQxFVW1dCHNtgSdMO8qdA9TP6KJffP27Y2ywVzk=) 14: 36322e3139322e3137342e302f32342d3234203d3e20313939303538.roa (hash: 7SPDhEMWd1gl2XtQJzxrngcOVdYu9T7eD0t4enh6w+8=) 15: 38352e3230392e31362e302f32342d3234203d3e20343030303339.roa (hash: p6Bk0gZf8IBhPL6y8ZeFGMDiI7CTICtCBqH+ui8UNPk=) 16: 37372e38332e3235322e302f32342d3234203d3e20323734383237.roa (hash: 1TkU9CuZNSKSA6n8CCEVJKfR3/eejFvKDG72x42fajA=) 17: 38352e3230392e31382e302f32342d3234203d3e20323132343136.roa (hash: J4P/0pJKXXswWDL/U/aSyTpYbnb7RCTWwOsChVTVKX0=) 18: 38352e3230392e31372e302f32342d3234203d3e2038313030.roa (hash: QDSk8x00L35RICmReakqpkA/56+KGgKX4susJmbToXY=) 19: 38352e3230392e31372e302f32342d3234203d3e203235363933.roa (hash: sfBR34BQfUnBG/Dfs9RgO4NWV6dIYQiGWUQLFQnMRUU=) 20: 37372e38332e3235332e302f32342d3234203d3e20333938333835.roa (hash: oAOTNgxw6bYQVCzHD93BNrqwf7e2+dYeRkUxzvhfYNE=) 21: 3138352e3138312e312e302f32342d3234203d3e203232313638.roa (hash: j6aiC8hmqjNX8bvUvtzfL/WZD+CbfD2TNLTq4Vkaxb8=) 22: 36322e3139322e3137352e302f32342d3234203d3e203332313637.roa (hash: /WAm5dy4jlcwivOnkIFnMuEvBCc6QOLwRlkX4YTGCBc=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.crl rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.mft rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 21:59:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:50:b8:36:12:78:83:47:8e:14:77:fc:92:f7:5f:25:4e:c7:43:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f4ce7722f99075d94738b7e61070401269eb3d6 Validity Not Before: Dec 19 19:17:33 2025 GMT Not After : Dec 20 21:59:33 2025 GMT Subject: CN=A24C902870989794D2DC539FF4539A6A05CCC8FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:1c:f9:ec:6d:b7:12:cf:fa:66:44:e4:25:6e: 44:0d:7e:5e:ee:c4:d7:5c:19:0d:71:0a:96:5a:3e: a6:14:1b:22:d4:2e:29:40:cb:95:ef:73:c7:08:b4: f2:79:82:73:bf:98:c4:97:05:9c:9b:28:e3:15:09: 09:67:e5:e4:7e:28:ce:b5:ef:31:95:de:39:83:8b: b6:50:84:95:3e:e8:ca:80:9e:09:18:cd:23:c3:b5: c1:f9:08:46:18:52:49:5e:bd:58:39:c6:ba:4c:f0: 44:08:13:44:3c:14:f5:0d:7e:f5:93:f2:f0:51:69: ab:05:c5:34:44:e0:8a:6f:eb:dc:bf:b7:68:17:69: 80:cc:9f:8b:93:92:45:cc:bd:2e:67:48:1a:20:0f: cf:43:57:de:a1:68:0a:6b:da:11:cd:90:68:57:2e: e7:48:37:50:46:8b:b0:db:22:8b:e1:ea:93:77:25: f2:70:d3:52:a0:4f:0a:20:14:d3:1e:91:92:29:38: 19:51:5c:88:5d:ec:99:8b:f1:08:08:bb:b1:88:6c: ac:dc:50:1c:c5:a5:e0:2a:28:20:ff:dd:dd:14:c3: 13:23:0a:d0:cf:e7:3a:5f:c8:24:81:71:fe:e4:16: 61:fa:0b:af:ea:b4:1b:31:bd:d6:4e:d7:d3:4c:92: 8f:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:4C:90:28:70:98:97:94:D2:DC:53:9F:F4:53:9A:6A:05:CC:C8:FD X509v3 Authority Key Identifier: keyid:8F:4C:E7:72:2F:99:07:5D:94:73:8B:7E:61:07:04:01:26:9E:B3:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:ac:cb:13:b9:5f:46:8c:48:ac:6d:6a:36:00:30:79:9c:ee: c7:0b:52:59:7b:3c:54:8c:a9:63:35:d1:c7:01:c7:55:dd:43: d6:e4:bb:b9:a0:c9:0c:bc:76:0b:6d:51:d4:d4:fa:bb:c7:8a: 88:36:39:17:33:1d:66:d8:1c:bf:cf:66:9b:fe:5e:08:58:bc: 93:49:8b:67:81:fe:18:f4:fd:37:06:49:09:07:29:85:99:de: 73:48:59:87:63:a0:ac:6b:db:26:ea:47:70:f6:99:e2:4d:fa: f5:5c:7b:0b:36:d0:23:ad:5b:e9:93:ab:7d:35:e6:41:a8:fc: 65:fd:de:da:8b:55:6f:7f:9a:f4:c9:5e:ca:88:41:8e:6b:58: 46:ec:7b:8d:7c:46:f1:78:15:85:4e:b7:e5:96:74:25:f9:58: c6:4a:40:21:b3:94:8a:b5:55:71:6b:45:9c:9c:be:1c:6e:dc: bc:7a:6c:aa:2e:b6:58:06:44:a4:5f:15:7b:18:ae:bf:ba:a9: 93:8e:18:c3:d2:c9:cf:d5:ac:a2:f6:d9:7f:e1:c6:1f:84:ad: 55:06:9d:c9:48:9e:1c:f3:61:79:37:4d:56:21:7b:cc:b0:13: e3:63:6c:0f:89:c1:e7:e1:75:8f:39:ba:ca:e9:e6:f0:77:38: 45:e4:1b:ec -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUDlC4NhJ4g0eOFHf8kvdfJU7HQ/IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGY0Y2U3NzIyZjk5MDc1ZDk0NzM4YjdlNjEwNzA0MDEy NjllYjNkNjAeFw0yNTEyMTkxOTE3MzNaFw0yNTEyMjAyMTU5MzNaMDMxMTAvBgNV BAMTKEEyNEM5MDI4NzA5ODk3OTREMkRDNTM5RkY0NTM5QTZBMDVDQ0M4RkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJHPnsbbcSz/pmROQlbkQNfl7u xNdcGQ1xCpZaPqYUGyLULilAy5Xvc8cItPJ5gnO/mMSXBZybKOMVCQln5eR+KM61 7zGV3jmDi7ZQhJU+6MqAngkYzSPDtcH5CEYYUklevVg5xrpM8EQIE0Q8FPUNfvWT 8vBRaasFxTRE4Ipv69y/t2gXaYDMn4uTkkXMvS5nSBogD89DV96haApr2hHNkGhX LudIN1BGi7DbIovh6pN3JfJw01KgTwogFNMekZIpOBlRXIhd7JmL8QgIu7GIbKzc UBzFpeAqKCD/3d0UwxMjCtDP5zpfyCSBcf7kFmH6C6/qtBsxvdZO19NMko87AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUokyQKHCYl5TS3FOf9FOaagXMyP0wHwYDVR0j BBgwFoAUj0znci+ZB12Uc4t+YQcEASaes9YwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWE5NzcxMTUtNTExMC00MjU3LTk0ZWYtNGQyYjQzODg0 MDQwLzAvOEY0Q0U3NzIyRjk5MDc1RDk0NzM4QjdFNjEwNzA0MDEyNjlFQjNENi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2owem5jaS1aQjEyVWM0dC1ZUWNFQVNh ZXM5WS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYTk3NzExNS01 MTEwLTQyNTctOTRlZi00ZDJiNDM4ODQwNDAvMC84RjRDRTc3MjJGOTkwNzVEOTQ3 MzhCN0U2MTA3MDQwMTI2OUVCM0Q2Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADKzLE7lfRoxIrG1qNgAw eZzuxwtSWXs8VIypYzXRxwHHVd1D1uS7uaDJDLx2C21R1NT6u8eKiDY5FzMdZtgc v89mm/5eCFi8k0mLZ4H+GPT9NwZJCQcphZnec0hZh2OgrGvbJupHcPaZ4k369Vx7 CzbQI61b6ZOrfTXmQaj8Zf3e2otVb3+a9MleyohBjmtYRux7jXxG8XgVhU635ZZ0 JflYxkpAIbOUirVVcWtFnJy+HG7cvHpsqi62WAZEpF8Vexiuv7qpk44Yw9LJz9Ws ovbZf+HGH4StVQadyUieHPNheTdNViF7zLAT42NsD4nB5+F1jzm6yunm8Hc4ReQb 7A== -----END CERTIFICATE-----Generated at Sat Dec 20 08:08:08 2025 by rpki-client