This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.mft File: 5ECB4CADBBADD500F49CA697D566A2761E017608.mft (raw, json) Hash identifier: fPXDIQgdptgFkEM/drTld27T91leFhH/Wavc6JA0cGQ= Subject key identifier: 3D:8B:33:8F:95:80:82:46:2A:77:01:F5:E3:83:AB:E6:0D:95:51:6D Authority key identifier: 5E:CB:4C:AD:BB:AD:D5:00:F4:9C:A6:97:D5:66:A2:76:1E:01:76:08 Certificate issuer: /CN=5ecb4cadbbadd500f49ca697d566a2761e017608 Certificate serial: 6756FBCC9057E7805B95AE8774E3DC46CBAB0C2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XstMrbut1QD0nKaX1Waidh4Bdgg.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.mft Manifest number: 0222 Signing time: Fri 19 Dec 2025 00:47:33 +0000 Manifest this update: Fri 19 Dec 2025 00:42:33 +0000 Manifest next update: Sat 20 Dec 2025 03:03:33 +0000 Files and hashes: 1: 3231332e3235342e3137302e302f32342d3234203d3e203438363738.roa (hash: ttSPLNkVmnmfbB1Jg0U4OFMRv4cZWxzTg6oBluFltrk=) 2: 3134312e3139332e3232382e302f32342d3234203d3e20323134323038.roa (hash: p1kuPenqcy6Et0XPjwxcCLB+vpEy3ekHhe4EodnqolI=) 3: 3231332e3235342e3137302e302f32342d3234203d3e20323134393431.roa (hash: WuIyFXGDgkt2cltxoxT/RYao20HHu+r0Sn5rfpjFnHA=) 4: 3231332e3235342e3137302e302f32342d3234203d3e20323038343833.roa (hash: gjwDheXZBS8eOtwo7Ja5xPFcujfV7TC07EH1z972oQ4=) 5: 5ECB4CADBBADD500F49CA697D566A2761E017608.crl (hash: 02KV/1U9rY4q/FZBG/g5jnwnxkEoF3S0uKuoHHtJl+c=) 6: 38302e37352e3232312e302f32342d3234203d3e203438393235.roa (hash: Q4yUdFFGtrq1xUVDtHn0DoNWjht0ICRHxiUX7p+xRAQ=) 7: 38362e35342e3137322e302f32342d3234203d3e20323134343332.roa (hash: WVXkrZeMKS19WGWwMJQfqNOjJpC3bIU6zT5pImMreVs=) 8: 3137302e36322e3139302e302f32342d3234203d3e203438393235.roa (hash: 8/++60jg7XtzmZ45FRECeqxUVy5048XlFvcQJYMNUjo=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.crl rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.mft rsync://rpki.ripe.net/repository/DEFAULT/XstMrbut1QD0nKaX1Waidh4Bdgg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 03:03:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:56:fb:cc:90:57:e7:80:5b:95:ae:87:74:e3:dc:46:cb:ab:0c:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ecb4cadbbadd500f49ca697d566a2761e017608 Validity Not Before: Dec 19 00:42:33 2025 GMT Not After : Dec 20 03:03:33 2025 GMT Subject: CN=3D8B338F958082462A7701F5E383ABE60D95516D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:de:37:52:6c:dd:93:30:7e:0f:e0:9a:76:88: 19:17:30:d0:cc:c4:50:5a:62:26:10:2e:00:c0:76: 64:1e:75:12:db:9a:bc:86:94:b8:54:f8:74:fe:b7: b2:e3:35:32:33:6f:97:fe:9e:bf:8c:f5:18:54:e7: 39:f9:e0:fe:71:bd:9e:46:c2:22:4d:d2:1a:50:7b: de:ab:a3:61:55:cf:cb:ed:ce:7f:fb:47:2a:21:33: 75:c2:fb:4e:ea:e9:5c:d1:20:ee:43:4a:43:0a:46: 6a:30:2a:5c:ca:22:67:fc:9b:17:1a:b2:64:42:b8: d1:bd:d8:65:36:0b:16:5f:af:9e:a9:12:c6:61:07: ab:b6:99:5c:ec:e9:f9:16:6c:74:a3:e6:7d:f1:e8: c0:fb:ed:f1:06:b7:cb:37:35:4a:94:75:c1:83:29: 6e:60:96:0f:52:21:b2:0c:eb:23:9b:84:b7:c4:5c: 0a:f3:8a:b3:73:c2:b9:30:3a:0e:68:99:90:86:15: f3:d6:af:26:42:b9:72:54:56:08:83:2c:1d:01:14: 7b:3d:9b:42:0d:7c:0e:17:2c:9e:94:54:4d:b7:7a: ed:bf:27:79:87:6f:92:fa:e3:09:89:c6:67:4d:8f: b0:e9:99:c5:9a:05:f4:82:cd:2c:f0:f6:4b:73:fd: 16:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:8B:33:8F:95:80:82:46:2A:77:01:F5:E3:83:AB:E6:0D:95:51:6D X509v3 Authority Key Identifier: keyid:5E:CB:4C:AD:BB:AD:D5:00:F4:9C:A6:97:D5:66:A2:76:1E:01:76:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XstMrbut1QD0nKaX1Waidh4Bdgg.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:be:e3:cc:7a:c5:2d:b9:a1:20:70:a3:b0:14:85:0b:24:f4: fe:25:60:c3:e3:8c:e2:ad:9c:5a:1a:b8:cb:b5:6e:68:c4:b5: 47:78:75:ef:4e:8b:cf:b9:6a:4c:62:0b:54:ec:9a:24:3f:84: f1:b2:66:9e:90:af:73:10:c8:40:05:e0:e0:74:73:6a:56:c1: 41:e5:2a:05:74:05:55:c6:d6:aa:94:14:96:3c:77:12:c9:a9: fb:d7:34:3c:9c:4b:84:1f:05:9b:57:a9:51:39:ec:59:28:c1: c6:ba:53:94:cb:7d:e9:9c:26:83:7e:f7:bf:f2:d9:9d:b4:77: 82:ee:37:35:34:fb:66:54:39:15:a7:2d:39:8f:b9:47:75:a0: a1:44:e0:26:69:32:67:8f:67:86:e3:f7:b7:fd:42:08:ef:fe: 37:0f:f4:5d:71:6b:09:72:53:bd:e7:c5:45:04:2d:dc:9d:26: 27:2b:15:d4:16:fb:1e:4b:0d:e2:75:ab:31:4c:37:43:e0:1a: d2:90:3b:f8:04:3d:3a:af:69:82:d6:10:eb:34:5e:44:2c:5d: fb:5b:3d:d4:e1:62:60:45:55:23:73:67:7e:bf:94:e3:eb:be: 3f:ed:5c:49:b9:45:fb:0e:f8:86:9f:bd:4f:09:b0:d5:05:cd: 74:4c:7a:3a -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUZ1b7zJBX54Bbla6HdOPcRsurDCwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNWVjYjRjYWRiYmFkZDUwMGY0OWNhNjk3ZDU2NmEyNzYx ZTAxNzYwODAeFw0yNTEyMTkwMDQyMzNaFw0yNTEyMjAwMzAzMzNaMDMxMTAvBgNV BAMTKDNEOEIzMzhGOTU4MDgyNDYyQTc3MDFGNUUzODNBQkU2MEQ5NTUxNkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC03jdSbN2TMH4P4Jp2iBkXMNDM xFBaYiYQLgDAdmQedRLbmryGlLhU+HT+t7LjNTIzb5f+nr+M9RhU5zn54P5xvZ5G wiJN0hpQe96ro2FVz8vtzn/7RyohM3XC+07q6VzRIO5DSkMKRmowKlzKImf8mxca smRCuNG92GU2CxZfr56pEsZhB6u2mVzs6fkWbHSj5n3x6MD77fEGt8s3NUqUdcGD KW5glg9SIbIM6yObhLfEXArzirNzwrkwOg5omZCGFfPWryZCuXJUVgiDLB0BFHs9 m0INfA4XLJ6UVE23eu2/J3mHb5L64wmJxmdNj7DpmcWaBfSCzSzw9ktz/RapAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUPYszj5WAgkYqdwH144Or5g2VUW0wHwYDVR0j BBgwFoAUXstMrbut1QD0nKaX1Waidh4BdggwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWMwZTEzZDgtYmZlMC00MjM1LWFmYjQtZDUzZWRmYmFj ZGQyLzAvNUVDQjRDQURCQkFERDUwMEY0OUNBNjk3RDU2NkEyNzYxRTAxNzYwOC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1hzdE1yYnV0MVFEMG5LYVgxV2FpZGg0 QmRnZy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYzBlMTNkOC1i ZmUwLTQyMzUtYWZiNC1kNTNlZGZiYWNkZDIvMC81RUNCNENBREJCQURENTAwRjQ5 Q0E2OTdENTY2QTI3NjFFMDE3NjA4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAL7jzHrFLbmhIHCjsBSF CyT0/iVgw+OM4q2cWhq4y7VuaMS1R3h1706Lz7lqTGILVOyaJD+E8bJmnpCvcxDI QAXg4HRzalbBQeUqBXQFVcbWqpQUljx3Esmp+9c0PJxLhB8Fm1epUTnsWSjBxrpT lMt96Zwmg373v/LZnbR3gu43NTT7ZlQ5FactOY+5R3WgoUTgJmkyZ49nhuP3t/1C CO/+Nw/0XXFrCXJTvefFRQQt3J0mJysV1Bb7HksN4nWrMUw3Q+Aa0pA7+AQ9Oq9p gtYQ6zReRCxd+1s91OFiYEVVI3Nnfr+U4+u+P+1cSblF+w74hp+9Twmw1QXNdEx6 Og== -----END CERTIFICATE-----Generated at Fri Dec 19 13:48:20 2025 by rpki-client