This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.mft File: BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.mft (raw, json) Hash identifier: TGUH9CvDztcJ06ptZIdoVD3XE3pO6l7L2qz7p1a2brc= Subject key identifier: E2:A9:22:BA:14:4A:E4:96:BB:14:B9:FF:00:75:64:67:31:F5:AC:8E Authority key identifier: BE:0B:B7:88:69:CD:B2:AD:0C:97:1A:6A:85:8A:30:21:3E:AE:C4:7D Certificate issuer: /CN=be0bb78869cdb2ad0c971a6a858a30213eaec47d Certificate serial: 7E36B9E893620C8DA5313A882BF1DA022B4AFB04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vgu3iGnNsq0MlxpqhYowIT6uxH0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.mft Manifest number: 01A3 Signing time: Sat 20 Dec 2025 12:57:34 +0000 Manifest this update: Sat 20 Dec 2025 12:52:34 +0000 Manifest next update: Sun 21 Dec 2025 13:50:34 +0000 Files and hashes: 1: 3137382e3234382e37342e302f32342d3234203d3e20323039313831.roa (hash: JOjM4S47fNK82HVGI3kzft2889UH/2/CmD3owvdrCqM=) 2: 3137382e3234382e37352e302f32342d3234203d3e20313939303538.roa (hash: 0IUSu+qptfP2e6dJnAny9tG4Cb2xcvVtmtBD0i4piak=) 3: 3139352e34322e3131322e302f32332d3233203d3e203438343335.roa (hash: LnJ/05IgVINSSDv4l3ajCKuAD4mr9PXKyWCylRmwux0=) 4: 3137382e3234382e37372e302f32342d3234203d3e20323133373833.roa (hash: IZUL7zEfrS59nO5eqaFvUNxkfEHC3BRjyZY2ApRcoSg=) 5: 3137382e3234382e37322e302f32342d3234203d3e20313531383732.roa (hash: 562I7wk8pDZNtdMzcEoC9Q7KQUjR9i2cYfXfdpaRXg8=) 6: BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.crl (hash: WLo4WKDD7KHoxi/uj0s2lP2OLrkceTBkzaMg5X+MLD4=) 7: 3137382e3234382e37362e302f32342d3234203d3e203432383331.roa (hash: FQiM0Ff1DCSzma5DiHQMrsfmN7QznFFoSzW1a5q9Q2M=) 8: 3139352e34322e3131332e302f32342d3234203d3e203438343335.roa (hash: aYbyRGpjGAy7pzSZSZu9mIeZ8V/FjY5/eUQvPy2nJ/Y=) 9: 3139332e3136392e37382e302f32332d3234203d3e203530343334.roa (hash: i+j0/SqL92pXqr/Yt38MmbwZjTIQClt05q1Bhtl74qs=) 10: 3137382e3234382e37382e302f32342d3234203d3e20323132333834.roa (hash: 55oHxRvhLlFnFgVNA6T2hJ74AYC9yyl40HSKUWc/res=) 11: 3139332e3136392e37382e302f32332d3234203d3e203438343335.roa (hash: 0e4l5EqcD9+SWWVL79QZba03Lu9mdjyR/TfDJr390dA=) 12: 3137382e3234382e37392e302f32342d3234203d3e20313335333932.roa (hash: nkla74pmgzof6BdGTx/D9Sn3aXq/+fT/xyCtH2Ux1lE=) 13: 3139332e3136392e37382e302f32332d3233203d3e203438343335.roa (hash: IDuy7mlGaLMOCgzEdx2/1ouXbZ90tr9UBkMDq0knNXg=) 14: 3139352e34322e3131322e302f32342d3234203d3e203438343335.roa (hash: 0fCZnPcUR/TU0KGeDhdE4rzY8AMOIFMDCEwGzQYi3Zw=) 15: 3137382e3234382e37332e302f32342d3234203d3e20313431393638.roa (hash: zMoHCJaZZ5vI4uszw9fV0p+6ygU9pfTnJ4jfa1DsJEg=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.crl rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.mft rsync://rpki.ripe.net/repository/DEFAULT/vgu3iGnNsq0MlxpqhYowIT6uxH0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:36:b9:e8:93:62:0c:8d:a5:31:3a:88:2b:f1:da:02:2b:4a:fb:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be0bb78869cdb2ad0c971a6a858a30213eaec47d Validity Not Before: Dec 20 12:52:34 2025 GMT Not After : Dec 21 13:50:34 2025 GMT Subject: CN=E2A922BA144AE496BB14B9FF0075646731F5AC8E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:ef:58:55:ca:5e:1d:58:5b:ad:7a:d2:65:ee: 90:3d:46:e1:c3:39:40:75:8b:b7:6a:ed:b5:a7:55: 7c:10:80:7e:7a:07:1d:b1:1d:dd:99:ba:bf:a0:69: 04:84:78:d9:5e:bd:5a:d0:f6:26:9a:a7:7f:8c:36: 66:e4:8d:62:03:54:a0:5c:b1:da:9d:60:da:01:58: ff:fe:2d:6b:2b:02:ee:01:05:a6:0d:cc:76:38:a1: 27:6f:09:7c:08:bd:46:35:99:f2:43:b1:a3:84:84: fb:c9:9d:39:4e:5b:34:be:80:e7:56:74:b8:0f:10: 67:b3:9c:f4:52:94:91:3d:c0:9d:72:17:4a:cc:3a: b8:9f:59:e5:42:da:62:c0:bd:1d:92:05:7b:32:1e: e7:1b:2f:29:88:6d:5d:58:04:ca:32:61:a3:52:78: 1d:42:ad:72:ad:91:ed:6d:e3:b6:46:dd:7c:09:db: 4e:7b:41:e5:80:5b:a7:0e:dc:5a:88:18:e2:d5:cc: 7e:0a:f7:39:c8:60:bf:b9:5f:3e:df:8e:5e:21:6e: 04:1e:a1:08:e8:e3:3c:e1:28:54:88:05:65:e4:08: bb:cd:96:d2:23:53:a5:77:c1:63:3d:21:bb:bd:bf: ab:85:92:55:8e:22:34:7d:6e:f0:5d:a6:3d:fe:1f: 21:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:A9:22:BA:14:4A:E4:96:BB:14:B9:FF:00:75:64:67:31:F5:AC:8E X509v3 Authority Key Identifier: keyid:BE:0B:B7:88:69:CD:B2:AD:0C:97:1A:6A:85:8A:30:21:3E:AE:C4:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vgu3iGnNsq0MlxpqhYowIT6uxH0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:e4:53:9f:54:fc:c0:f3:3c:57:39:fb:9e:8d:2f:d1:a8:61: 75:75:74:fc:f7:c2:ca:5a:c6:ac:eb:f9:b3:79:06:61:74:e8: a2:03:02:d2:e9:49:be:ba:04:ed:df:58:57:a4:46:b0:34:5f: bd:57:25:91:8d:8c:5b:bc:1d:14:4e:f8:5e:0f:81:1a:01:8c: 34:43:de:fe:c9:e9:4f:10:52:f3:31:20:cb:a8:8c:70:e4:1f: dc:81:42:f7:bc:43:3c:9c:f1:8f:cc:1e:fc:89:ca:6f:d6:c6: ab:02:4b:bd:63:98:56:62:27:0f:58:ec:fd:79:b7:84:05:ce: ec:04:4d:91:4f:77:1d:13:c2:2a:8a:15:70:94:80:d9:78:44: 8d:16:41:c8:e9:be:f7:10:08:e2:3b:db:56:4a:73:71:46:ee: 59:34:60:f6:27:f1:3c:0c:d4:0e:02:0a:a0:5d:d6:60:7b:ea: 75:f4:e8:6c:73:e1:dc:f6:43:98:93:46:5f:7b:bc:fe:ca:a5: 96:49:ff:8d:e6:74:5d:cc:9c:5b:09:36:49:0f:54:68:3e:fb: bd:d6:84:b4:79:64:4b:20:31:26:60:93:b3:dc:1e:85:43:ac: 6d:fe:d9:a7:7f:81:cd:31:1c:5c:50:34:5a:40:69:46:af:cc: d7:fc:e1:9f -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUfja56JNiDI2lMTqIK/HaAitK+wQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYmUwYmI3ODg2OWNkYjJhZDBjOTcxYTZhODU4YTMwMjEz ZWFlYzQ3ZDAeFw0yNTEyMjAxMjUyMzRaFw0yNTEyMjExMzUwMzRaMDMxMTAvBgNV BAMTKEUyQTkyMkJBMTQ0QUU0OTZCQjE0QjlGRjAwNzU2NDY3MzFGNUFDOEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL71hVyl4dWFutetJl7pA9RuHD OUB1i7dq7bWnVXwQgH56Bx2xHd2Zur+gaQSEeNlevVrQ9iaap3+MNmbkjWIDVKBc sdqdYNoBWP/+LWsrAu4BBaYNzHY4oSdvCXwIvUY1mfJDsaOEhPvJnTlOWzS+gOdW dLgPEGeznPRSlJE9wJ1yF0rMOrifWeVC2mLAvR2SBXsyHucbLymIbV1YBMoyYaNS eB1CrXKtke1t47ZG3XwJ2057QeWAW6cO3FqIGOLVzH4K9znIYL+5Xz7fjl4hbgQe oQjo4zzhKFSIBWXkCLvNltIjU6V3wWM9Ibu9v6uFklWOIjR9bvBdpj3+HyEvAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU4qkiuhRK5Ja7FLn/AHVkZzH1rI4wHwYDVR0j BBgwFoAUvgu3iGnNsq0MlxpqhYowIT6uxH0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWMxNDMzODctZjAxMy00OTIyLTgzOGUtZTE4ODY0YmUx ZTRhLzAvQkUwQkI3ODg2OUNEQjJBRDBDOTcxQTZBODU4QTMwMjEzRUFFQzQ3RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3ZndTNpR25Oc3EwTWx4cHFoWW93SVQ2 dXhIMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYzE0MzM4Ny1m MDEzLTQ5MjItODM4ZS1lMTg4NjRiZTFlNGEvMC9CRTBCQjc4ODY5Q0RCMkFEMEM5 NzFBNkE4NThBMzAyMTNFQUVDNDdELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjuRTn1T8wPM8Vzn7no0v 0ahhdXV0/PfCylrGrOv5s3kGYXToogMC0ulJvroE7d9YV6RGsDRfvVclkY2MW7wd FE74Xg+BGgGMNEPe/snpTxBS8zEgy6iMcOQf3IFC97xDPJzxj8we/InKb9bGqwJL vWOYVmInD1js/Xm3hAXO7ARNkU93HRPCKooVcJSA2XhEjRZByOm+9xAI4jvbVkpz cUbuWTRg9ifxPAzUDgIKoF3WYHvqdfTobHPh3PZDmJNGX3u8/sqllkn/jeZ0Xcyc Wwk2SQ9UaD77vdaEtHlkSyAxJmCTs9wehUOsbf7Zp3+BzTEcXFA0WkBpRq/M1/zh nw== -----END CERTIFICATE-----Generated at Sat Dec 20 15:26:16 2025 by rpki-client