This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft File: 9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft (raw, json) Hash identifier: 9oXOJ6yE7XWcpaIn/RYAW/TUrqOc0vyytOvw90UL5QQ= Subject key identifier: E6:AB:63:EA:50:F8:15:81:00:E1:A6:F9:78:AA:B1:DE:D2:FE:14:2C Authority key identifier: 9F:0D:24:C8:55:EE:E0:0F:E4:AB:F3:90:3C:6E:8F:CC:70:83:ED:4D Certificate issuer: /CN=9f0d24c855eee00fe4abf3903c6e8fcc7083ed4d Certificate serial: 2AA8A3901816092A34B01DDDC486A36539D55313 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nw0kyFXu4A_kq_OQPG6PzHCD7U0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft Manifest number: 04F1 Signing time: Fri 19 Dec 2025 17:57:33 +0000 Manifest this update: Fri 19 Dec 2025 17:52:33 +0000 Manifest next update: Sat 20 Dec 2025 19:06:33 +0000 Files and hashes: 1: 3138352e322e3136322e302f32332d3234203d3e20323135323639.roa (hash: sEO5Q+LtE+juFIMx1yqrmSkIjuvpVFxY8R1aiQqtGzs=) 2: 36322e3131322e3134342e302f32302d3234203d3e203230333236.roa (hash: PvFG9BZ+YdbKPRfUC/0dM3w7V209DRWmI/bk8VoBnFU=) 3: 3139332e33372e3233362e302f32342d3234203d3e203239383032.roa (hash: NPxcG44HSvUhEjS0S2kkms3rMNVlot0JsRdIfylKbjg=) 4: 36322e3131322e3132382e302f32302d3234203d3e20313338393937.roa (hash: X+PLwzsRRQMgaM/TWKrSkseThdECGWKV7QbjrMlPn80=) 5: 3138352e322e3136322e302f32332d3234203d3e203531383437.roa (hash: breC5Ek41qDRBKS2wQZurpJCqHLgY68sHvSK/et8bfI=) 6: 3139352e3138342e39322e302f32332d3233203d3e2035343634.roa (hash: OKc3uZvr3kmY38TGv/j5cCd/d8TD6IBU2hGWJY9u+K0=) 7: 3139342e302e3232392e302f32342d3234203d3e2035343634.roa (hash: oQj2no095+LyjZGzWOfw+sSJOW/7fRxpgUOPswu5nqM=) 8: 36322e3131322e3132382e302f32302d3234203d3e20323130353432.roa (hash: W95e9h2ypKBcN51G9gRI82wozQL8rXCLvGb2mHpv6bk=) 9: 36322e3131322e3132382e302f32302d3234203d3e20313532313739.roa (hash: GCjCQc0vdu8E+NZi5emgx2vW0PKbTzGL5UYc+2R4voE=) 10: 9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.crl (hash: AxYuR5cB7RdjpvKzdnM/gn7lWuKVSeQc9uPvLXqyZT0=) 11: 3138352e322e3136322e302f32332d3234203d3e20323136303433.roa (hash: GiYpmPsNeJIM+tOFpoqBAp0iPcUDNpER8nLACmla4d4=) 12: 326130303a316466303a3a2f33322d3332203d3e2035343634.roa (hash: hY/iIpaGanxmxatebFYi3ijTkZjHjUc/Iwjsijc0S+E=) 13: 36322e3131322e3134342e302f32302d3230203d3e203539363432.roa (hash: hNXCqst3dZC+Dp3skkO26cOwh1zWEwx2n+JeuoU1IgU=) 14: 3139332e33372e3233362e302f32342d3234203d3e203631333137.roa (hash: qxlkfW/nLMV9I5WoI6HQ89q00naILT20Rguml63Zf0A=) 15: 3139352e3138342e39322e302f32332d3234203d3e203631333137.roa (hash: qGNft1uCzkGwuPJH7iDQ4xUhWrhNnduWexIhT+DgvI8=) 16: 323030313a3637633a3333633a3a2f34382d3438203d3e2035343634.roa (hash: DuCHe81tO8TVOKBTNFQCS5fRuYDjbGZfxshPpJZXNzc=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.crl rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft rsync://rpki.ripe.net/repository/DEFAULT/nw0kyFXu4A_kq_OQPG6PzHCD7U0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 19:06:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:a8:a3:90:18:16:09:2a:34:b0:1d:dd:c4:86:a3:65:39:d5:53:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f0d24c855eee00fe4abf3903c6e8fcc7083ed4d Validity Not Before: Dec 19 17:52:33 2025 GMT Not After : Dec 20 19:06:33 2025 GMT Subject: CN=E6AB63EA50F8158100E1A6F978AAB1DED2FE142C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:de:e7:f2:4f:6e:24:b3:64:8c:61:d5:63:53: 3f:eb:b2:0c:9e:73:c9:ba:0a:2f:a7:df:9a:25:d9: de:e2:9a:f8:f5:6c:2c:70:37:68:4c:fc:9e:30:88: 77:f1:35:63:9b:21:1e:ba:a8:53:3e:00:d3:93:c8: 0e:59:e0:1d:96:68:cf:13:a5:12:04:94:83:8b:7c: cc:b3:5e:ef:86:3c:fc:cd:24:94:9e:68:41:c4:f3: ee:c6:90:49:7a:cc:9b:bc:a1:da:0d:06:74:d8:88: 30:c9:f0:a2:5a:79:f9:11:ab:41:03:67:39:96:d9: 76:d7:43:a5:d9:d5:d2:fd:88:dc:98:09:3b:2d:8a: f7:87:d2:66:9e:56:68:12:2b:d7:43:be:c9:de:dc: 73:4c:d6:ec:81:4c:0f:82:43:26:f1:ae:47:ff:99: 09:09:7b:72:ae:32:df:34:7a:62:e4:5d:27:2d:06: 50:bf:1a:b4:ff:c4:ae:63:66:d0:ec:ef:18:07:55: c2:3f:6a:09:d5:e3:6f:17:da:14:2a:06:83:e3:d0: d1:da:ab:6d:34:fc:d0:75:88:5a:7e:38:be:ff:15: 6d:43:6b:0b:58:bb:90:fa:f9:b9:bd:f3:ed:3d:46: 16:e1:29:a1:48:79:68:7a:6c:37:98:ea:28:76:cd: 38:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:AB:63:EA:50:F8:15:81:00:E1:A6:F9:78:AA:B1:DE:D2:FE:14:2C X509v3 Authority Key Identifier: keyid:9F:0D:24:C8:55:EE:E0:0F:E4:AB:F3:90:3C:6E:8F:CC:70:83:ED:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nw0kyFXu4A_kq_OQPG6PzHCD7U0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:db:7c:dd:5f:b2:f3:2f:29:cc:1e:3f:15:45:b4:01:ec:f3: fd:85:83:0c:66:92:d8:b6:53:75:b2:51:2e:6c:29:b2:e4:5c: f4:c4:4c:bb:82:19:d2:93:64:e4:d7:52:d0:c4:33:ea:4b:ea: 7e:43:11:38:3a:bd:2a:a8:db:85:31:28:1a:cd:9f:de:ea:17: 29:41:8e:38:00:c2:f3:82:d2:bb:48:88:6f:2d:54:9a:dd:4a: f0:41:35:64:03:16:7a:db:40:af:64:87:60:a1:9a:99:ab:e0: 15:4b:56:a3:a5:23:b5:47:be:03:71:e4:0e:2a:d7:03:b5:8a: 4c:9d:63:d4:95:87:09:b0:4b:3b:d1:6c:da:f8:34:78:a7:5d: ec:6c:31:b6:0f:14:c7:75:e2:0b:af:63:26:a1:dd:0b:d7:7d: 3d:f5:44:4f:a7:66:aa:57:64:08:f2:3f:4a:04:ce:bd:42:4a: 9e:a7:e1:e4:1e:c2:84:7f:ed:9d:f0:f0:2b:53:2a:ab:ec:45: 6c:4e:cb:1f:01:29:37:2d:c0:e3:58:70:20:fe:a6:3e:b1:34: 32:78:3a:13:4f:38:df:a7:1d:73:c3:d6:24:65:98:74:b1:81: bf:02:d6:4b:42:0c:d6:27:47:ea:56:d1:0a:0d:c5:18:ee:fe: 16:6a:48:64 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUKqijkBgWCSo0sB3dxIajZTnVUxMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOWYwZDI0Yzg1NWVlZTAwZmU0YWJmMzkwM2M2ZThmY2M3 MDgzZWQ0ZDAeFw0yNTEyMTkxNzUyMzNaFw0yNTEyMjAxOTA2MzNaMDMxMTAvBgNV BAMTKEU2QUI2M0VBNTBGODE1ODEwMEUxQTZGOTc4QUFCMURFRDJGRTE0MkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF3ufyT24ks2SMYdVjUz/rsgye c8m6Ci+n35ol2d7imvj1bCxwN2hM/J4wiHfxNWObIR66qFM+ANOTyA5Z4B2WaM8T pRIElIOLfMyzXu+GPPzNJJSeaEHE8+7GkEl6zJu8odoNBnTYiDDJ8KJaefkRq0ED ZzmW2XbXQ6XZ1dL9iNyYCTstiveH0maeVmgSK9dDvsne3HNM1uyBTA+CQybxrkf/ mQkJe3KuMt80emLkXSctBlC/GrT/xK5jZtDs7xgHVcI/agnV428X2hQqBoPj0NHa q200/NB1iFp+OL7/FW1DawtYu5D6+bm98+09RhbhKaFIeWh6bDeY6ih2zTgjAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU5qtj6lD4FYEA4ab5eKqx3tL+FCwwHwYDVR0j BBgwFoAUnw0kyFXu4A/kq/OQPG6PzHCD7U0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWYzMTc2OGQtNDJiMS00ZTkyLWI4M2YtYmVmN2VlMDE3 ODEzLzAvOUYwRDI0Qzg1NUVFRTAwRkU0QUJGMzkwM0M2RThGQ0M3MDgzRUQ0RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL253MGt5Rlh1NEFfa3FfT1FQRzZQekhD RDdVMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hZjMxNzY4ZC00 MmIxLTRlOTItYjgzZi1iZWY3ZWUwMTc4MTMvMC85RjBEMjRDODU1RUVFMDBGRTRB QkYzOTAzQzZFOEZDQzcwODNFRDRELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM9t83V+y8y8pzB4/FUW0 Aezz/YWDDGaS2LZTdbJRLmwpsuRc9MRMu4IZ0pNk5NdS0MQz6kvqfkMRODq9Kqjb hTEoGs2f3uoXKUGOOADC84LSu0iIby1Umt1K8EE1ZAMWettAr2SHYKGamavgFUtW o6UjtUe+A3HkDirXA7WKTJ1j1JWHCbBLO9Fs2vg0eKdd7Gwxtg8Ux3XiC69jJqHd C9d9PfVET6dmqldkCPI/SgTOvUJKnqfh5B7ChH/tnfDwK1Mqq+xFbE7LHwEpNy3A 41hwIP6mPrE0Mng6E08436cdc8PWJGWYdLGBvwLWS0IM1idH6lbRCg3FGO7+FmpI ZA== -----END CERTIFICATE-----Generated at Sat Dec 20 10:52:33 2025 by rpki-client