This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.mft File: 5ECB4CADBBADD500F49CA697D566A2761E017608.mft (raw, json) Hash identifier: 6hSWUYUSezSuMCpk8cYbuObkEyfQcWGkhU1l7dcEGGo= Subject key identifier: A9:D8:D5:1B:3F:18:C4:34:CB:48:A7:9C:61:4A:86:75:2B:7E:A8:62 Authority key identifier: 5E:CB:4C:AD:BB:AD:D5:00:F4:9C:A6:97:D5:66:A2:76:1E:01:76:08 Certificate issuer: /CN=5ecb4cadbbadd500f49ca697d566a2761e017608 Certificate serial: 19C0E0D907EF8DA6792EF2CC58C7678011E629CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XstMrbut1QD0nKaX1Waidh4Bdgg.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.mft Manifest number: 0223 Signing time: Fri 19 Dec 2025 19:07:33 +0000 Manifest this update: Fri 19 Dec 2025 19:02:33 +0000 Manifest next update: Sat 20 Dec 2025 20:35:33 +0000 Files and hashes: 1: 5ECB4CADBBADD500F49CA697D566A2761E017608.crl (hash: yVTbudpd4ZH8ECAsTKlwcFI2ynn4O8gcaQtpkWA8OS0=) 2: 3134312e3139332e3232382e302f32342d3234203d3e20323134323038.roa (hash: p1kuPenqcy6Et0XPjwxcCLB+vpEy3ekHhe4EodnqolI=) 3: 38302e37352e3232312e302f32342d3234203d3e203438393235.roa (hash: Q4yUdFFGtrq1xUVDtHn0DoNWjht0ICRHxiUX7p+xRAQ=) 4: 38362e35342e3137322e302f32342d3234203d3e20323134343332.roa (hash: WVXkrZeMKS19WGWwMJQfqNOjJpC3bIU6zT5pImMreVs=) 5: 3231332e3235342e3137302e302f32342d3234203d3e20323134393431.roa (hash: WuIyFXGDgkt2cltxoxT/RYao20HHu+r0Sn5rfpjFnHA=) 6: 3231332e3235342e3137302e302f32342d3234203d3e203438363738.roa (hash: ttSPLNkVmnmfbB1Jg0U4OFMRv4cZWxzTg6oBluFltrk=) 7: 3137302e36322e3139302e302f32342d3234203d3e203438393235.roa (hash: 8/++60jg7XtzmZ45FRECeqxUVy5048XlFvcQJYMNUjo=) 8: 3231332e3235342e3137302e302f32342d3234203d3e20323038343833.roa (hash: gjwDheXZBS8eOtwo7Ja5xPFcujfV7TC07EH1z972oQ4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.crl rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.mft rsync://rpki.ripe.net/repository/DEFAULT/XstMrbut1QD0nKaX1Waidh4Bdgg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 20:35:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:c0:e0:d9:07:ef:8d:a6:79:2e:f2:cc:58:c7:67:80:11:e6:29:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ecb4cadbbadd500f49ca697d566a2761e017608 Validity Not Before: Dec 19 19:02:33 2025 GMT Not After : Dec 20 20:35:33 2025 GMT Subject: CN=A9D8D51B3F18C434CB48A79C614A86752B7EA862 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:bd:3d:fc:31:bb:26:39:54:58:37:30:6e:3b: 3d:a5:32:9d:aa:43:3c:62:cc:44:ca:c0:55:1e:46: b3:b9:7d:f5:db:9a:23:8a:b5:dc:12:b0:4b:92:7b: d9:15:eb:cc:17:0c:41:13:d4:ec:38:59:20:24:2e: c1:49:4a:4b:2a:b6:bb:55:30:86:13:95:76:1f:d0: 98:ea:08:3b:d4:0c:f8:98:d4:34:89:da:9c:53:04: 24:72:75:70:b5:2d:6b:b5:b4:8a:48:47:5c:15:52: 4c:a3:b5:5c:bc:60:1d:6f:bd:32:7a:51:71:d1:b8: 1b:0c:aa:d0:6f:94:95:5b:f6:5b:a5:58:3a:74:29: df:7b:34:41:e3:10:e5:d0:31:a5:ba:a7:c5:6c:25: 97:38:01:22:c6:c7:ba:32:98:bb:16:e7:ac:d2:9d: 17:85:cd:ff:54:f6:22:98:3d:ca:56:23:c4:8f:43: c7:91:b6:7c:da:f0:8e:9f:31:df:dc:5e:88:96:31: 8e:f2:67:5a:9e:04:1c:f7:24:69:d3:46:cb:f4:8c: 3f:87:a0:9f:16:73:5e:96:28:9f:af:21:8a:cd:d6: 82:86:4c:61:57:eb:15:9d:6f:13:b6:cd:22:63:d2: 6f:d8:21:fa:9f:b4:7b:3d:f9:89:dc:53:ee:89:4e: 67:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:D8:D5:1B:3F:18:C4:34:CB:48:A7:9C:61:4A:86:75:2B:7E:A8:62 X509v3 Authority Key Identifier: keyid:5E:CB:4C:AD:BB:AD:D5:00:F4:9C:A6:97:D5:66:A2:76:1E:01:76:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XstMrbut1QD0nKaX1Waidh4Bdgg.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:a5:f1:e5:0d:7e:dc:de:a3:10:ab:91:8a:97:5d:17:15:cb: 75:ac:32:59:03:c1:00:55:bc:75:13:24:6e:6b:f0:d4:bf:b7: b2:de:0a:53:19:83:9f:1d:2e:39:ce:cd:3a:3c:3b:ea:08:51: 31:d9:24:a3:fb:32:78:18:51:f2:e7:6a:5e:65:3f:65:2e:df: d5:88:6f:45:9f:e6:0c:76:cd:7b:a7:aa:e4:f4:4c:25:02:3f: 9d:26:0b:38:3f:7f:17:de:d2:ab:5b:34:d6:9b:ad:a2:23:f7: df:10:89:e3:b5:19:4b:91:e5:d1:76:7f:f5:84:3a:57:4d:10: 79:60:dc:24:a3:09:c2:14:8b:d0:c3:89:52:3a:4e:1a:a9:8d: a3:65:d4:7d:7c:eb:84:e5:17:82:39:d7:2d:fd:d6:d0:c1:2e: e0:7a:05:cd:9f:7d:db:5d:c0:c6:e3:b8:7d:f9:47:79:d6:17: 6b:1d:df:7f:10:f1:bf:e3:61:e0:eb:6b:eb:ad:07:23:68:5d: e7:e1:16:49:01:0e:37:00:5b:36:fe:a0:08:bd:c1:44:67:a8: 45:e3:27:30:d0:78:35:18:fd:83:f4:0a:1f:d4:b0:09:d8:1a: 31:99:b3:7a:92:e2:c5:50:ce:8f:9b:b0:27:1b:b8:23:2e:26: af:08:3b:ec -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUGcDg2QfvjaZ5LvLMWMdngBHmKcowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNWVjYjRjYWRiYmFkZDUwMGY0OWNhNjk3ZDU2NmEyNzYx ZTAxNzYwODAeFw0yNTEyMTkxOTAyMzNaFw0yNTEyMjAyMDM1MzNaMDMxMTAvBgNV BAMTKEE5RDhENTFCM0YxOEM0MzRDQjQ4QTc5QzYxNEE4Njc1MkI3RUE4NjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCavT38MbsmOVRYNzBuOz2lMp2q QzxizETKwFUeRrO5ffXbmiOKtdwSsEuSe9kV68wXDEET1Ow4WSAkLsFJSksqtrtV MIYTlXYf0JjqCDvUDPiY1DSJ2pxTBCRydXC1LWu1tIpIR1wVUkyjtVy8YB1vvTJ6 UXHRuBsMqtBvlJVb9lulWDp0Kd97NEHjEOXQMaW6p8VsJZc4ASLGx7oymLsW56zS nReFzf9U9iKYPcpWI8SPQ8eRtnza8I6fMd/cXoiWMY7yZ1qeBBz3JGnTRsv0jD+H oJ8Wc16WKJ+vIYrN1oKGTGFX6xWdbxO2zSJj0m/YIfqftHs9+YncU+6JTmcjAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUqdjVGz8YxDTLSKecYUqGdSt+qGIwHwYDVR0j BBgwFoAUXstMrbut1QD0nKaX1Waidh4BdggwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWMwZTEzZDgtYmZlMC00MjM1LWFmYjQtZDUzZWRmYmFj ZGQyLzAvNUVDQjRDQURCQkFERDUwMEY0OUNBNjk3RDU2NkEyNzYxRTAxNzYwOC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1hzdE1yYnV0MVFEMG5LYVgxV2FpZGg0 QmRnZy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYzBlMTNkOC1i ZmUwLTQyMzUtYWZiNC1kNTNlZGZiYWNkZDIvMC81RUNCNENBREJCQURENTAwRjQ5 Q0E2OTdENTY2QTI3NjFFMDE3NjA4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdKXx5Q1+3N6jEKuRipdd FxXLdawyWQPBAFW8dRMkbmvw1L+3st4KUxmDnx0uOc7NOjw76ghRMdkko/syeBhR 8udqXmU/ZS7f1YhvRZ/mDHbNe6eq5PRMJQI/nSYLOD9/F97Sq1s01putoiP33xCJ 47UZS5Hl0XZ/9YQ6V00QeWDcJKMJwhSL0MOJUjpOGqmNo2XUfXzrhOUXgjnXLf3W 0MEu4HoFzZ99213AxuO4fflHedYXax3ffxDxv+Nh4Otr660HI2hd5+EWSQEONwBb Nv6gCL3BRGeoReMnMNB4NRj9g/QKH9SwCdgaMZmzepLixVDOj5uwJxu4Iy4mrwg7 7A== -----END CERTIFICATE-----Generated at Sat Dec 20 13:32:26 2025 by rpki-client