This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.mft File: CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.mft (raw, json) Hash identifier: MDbFG1RfbFqS0sxgh7BGrw6Kq9OTtE4cgczMv9SIU00= Subject key identifier: E8:74:17:A5:F9:DC:DE:44:67:99:BB:84:02:F1:E6:9A:6E:E2:17:3B Authority key identifier: CC:79:1A:1F:5C:B3:BB:2C:AF:7C:28:38:21:12:E2:69:BF:1D:0F:2F Certificate issuer: /CN=CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F Certificate serial: 7A29C9CC0A9DE4BF04BF097C6BB9112ADCB807EC Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.mft Manifest number: CA Signing time: Sat 20 Dec 2025 21:05:25 +0000 Manifest this update: Sat 20 Dec 2025 21:00:25 +0000 Manifest next update: Sun 21 Dec 2025 22:05:25 +0000 Files and hashes: 1: 326131343a373538303a666637303a3a2f34382d3438203d3e20323033393135.roa (hash: zyXKXDvOIxNrBW5QrQm19sSxkRDmx9tFlmRCkefYJk4=) 2: 326131343a373538303a666637663a3a2f34382d3438203d3e20323033393135.roa (hash: AKQUYWOgneoO1qpRyAABoiC4d23AXJsif2Ph8QnUXyw=) 3: 326131343a373538303a666637313a3a2f34382d3438203d3e20323033393135.roa (hash: tQOuxzjoO2gOr2+IueULnKw1bzMsp7EoDLzHElEe0zw=) 4: 326131343a373538303a666637633a3a2f34382d3438203d3e20323033393135.roa (hash: o5X2AD19YxTsiyZsqxaO6LcogckEDGsmBlZBOovT7M0=) 5: 326131343a373538303a666637353a3a2f34382d3438203d3e20323033393135.roa (hash: 9QAAhr1wwrheqUnrWa4FkevZ/+WKuCODK+T1ZZmcwl8=) 6: 326131343a373538303a666637363a3a2f34382d3438203d3e20323033393135.roa (hash: BkHJMnQDPpptXCMBwmodU4zh5ifR8UsDSgAYqmaYZ4U=) 7: 326131343a373538303a666637333a3a2f34382d3438203d3e20323033393135.roa (hash: GieRIT3AIgJdp4hafy8WbPzRF4MVeOc7uBzRolQt/Os=) 8: 326131343a373538303a666637643a3a2f34382d3438203d3e20323033393135.roa (hash: H+78AH4TYlugOgXjwzDN7rCd3EnIWoVZYuyJbZiEnfs=) 9: 326131343a373538303a666637383a3a2f34382d3438203d3e20323033393135.roa (hash: HnRWSrEpeOmuzTKhKK+Ly8/65pwZBhG8hC56Nip/vA0=) 10: CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.crl (hash: F3XH9i6Ug1MvsDRWVdj2NR4ded77N60Gg/bUD/cZ6yE=) 11: 326131343a373538303a666637653a3a2f34382d3438203d3e20323033393135.roa (hash: U6uqpQVMvicANeE1+RdGwfiUHzScjnhV12wDyDdzXu8=) 12: 326131343a373538303a666637373a3a2f34382d3438203d3e20323033393135.roa (hash: F5/aVvIreRBQw19BMcjvtJaH6IAMjMe6w+V1TelngZU=) 13: 326131343a373538303a666637323a3a2f34382d3438203d3e20323033393135.roa (hash: h9EOAcugJrwunceFQsvuVh/viiSOkDi6CuOcdJIPWnA=) 14: 326131343a373538303a666637623a3a2f34382d3438203d3e20323033393135.roa (hash: +Dm2JEqaSsfzmcw/vRVxZqJazGgE0R+iZSKdYatTFPI=) 15: 326131343a373538303a666637393a3a2f34382d3438203d3e20323033393135.roa (hash: 4JRXyyfbh5S+gtwReXpBVGHg5Hfkr5m0dh1qPG0/BKw=) 16: 326131343a373538303a666637613a3a2f34382d3438203d3e20323033393135.roa (hash: lVFPEuT+Vv7EHAhCsqJ2Rg8eFP3usNSJ0TffuGmsFKE=) 17: 326131343a373538303a666637343a3a2f34382d3438203d3e20323033393135.roa (hash: wat7PE9fGydcz5ayop5kavvbRXomHufzivqvTvbesao=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.crl rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 22:05:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:29:c9:cc:0a:9d:e4:bf:04:bf:09:7c:6b:b9:11:2a:dc:b8:07:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F Validity Not Before: Dec 20 21:00:25 2025 GMT Not After : Dec 21 22:05:25 2025 GMT Subject: CN=E87417A5F9DCDE446799BB8402F1E69A6EE2173B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:da:85:60:10:43:fd:76:48:f9:77:6b:a3:4d: a1:7d:92:35:d2:d8:bb:b7:a3:43:6e:a9:f2:7e:81: 78:e0:7b:e9:9b:cd:67:96:b9:9d:e7:e7:34:a9:b9: 95:6d:6d:ba:21:4e:11:08:97:3e:75:de:d8:bd:9b: 6e:7c:76:14:fd:4f:d3:82:43:79:ff:4e:09:f7:4f: bb:36:e0:9d:a8:5e:11:1f:61:ec:d4:7d:f4:a0:a8: cb:c9:2d:47:af:f8:95:75:23:c7:c1:ad:0d:be:3f: 10:7a:b9:18:4b:3e:13:a4:a6:71:89:85:79:b1:16: 07:a8:0b:a5:de:f4:0e:ba:bc:af:e4:b7:2c:66:a4: ed:1e:ea:50:01:0d:78:9d:e8:bf:1e:87:63:5d:b2: e3:21:95:f7:68:d4:ed:73:32:c0:ac:fc:40:c5:2f: c5:30:1c:d1:c0:c8:39:20:dd:8a:5d:75:a2:1f:fa: 74:7b:ff:69:9e:f0:ae:71:d1:42:9a:de:d1:7c:ef: cc:cb:19:80:ae:10:bd:0c:7e:74:fd:e2:c4:cf:0e: a1:e4:86:1f:9e:aa:66:ea:90:36:7b:d0:46:79:20: 03:d6:a4:f7:fc:97:f8:7c:51:14:25:aa:20:ac:b3: 11:01:08:17:e5:f5:51:73:71:e1:2b:94:7a:2f:48: 0f:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:74:17:A5:F9:DC:DE:44:67:99:BB:84:02:F1:E6:9A:6E:E2:17:3B X509v3 Authority Key Identifier: keyid:CC:79:1A:1F:5C:B3:BB:2C:AF:7C:28:38:21:12:E2:69:BF:1D:0F:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:af:18:d6:61:1a:dc:70:5b:e7:8e:03:a5:79:f6:2a:bf:e9: 70:6f:0d:47:63:55:93:7e:e3:bf:95:dc:ca:db:07:e9:f3:c4: ff:6e:80:19:92:5f:c8:91:77:8c:d5:3f:8e:c3:e7:68:3b:ce: b9:13:5c:5d:07:7d:38:c8:53:a5:44:32:10:b0:fa:c8:7d:5e: 29:a4:7e:31:60:19:71:fe:0e:30:6d:73:c7:4b:e4:0c:c6:b6: c7:d0:73:54:05:df:40:21:36:5b:80:ae:32:d0:62:fd:43:e4: de:1a:40:42:76:f0:a1:f1:5f:74:74:cf:40:58:40:40:3a:43: 6c:56:97:82:59:b0:13:6f:50:94:2b:bb:77:36:8b:f5:6b:38: dc:a4:98:5c:20:a8:ae:10:95:46:c4:70:01:e2:09:d6:cd:09: af:1e:61:b1:06:ea:c1:7f:1f:f7:b3:5a:21:7e:d8:29:e8:b7: 56:4c:ac:6c:8f:10:89:06:78:c6:b7:7d:00:d8:cb:48:ec:e7: 54:1b:33:10:ca:8e:ff:e6:ba:dd:53:76:2e:62:ff:82:75:de: fa:6f:4f:b7:60:a7:ad:a7:36:b2:92:82:e0:67:bb:02:3b:55: 73:44:e1:a5:47:12:70:68:e7:48:1d:24:17:40:f5:c2:24:48: 8c:48:04:5a -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUeinJzAqd5L8Evwl8a7kRKty4B+wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0M3OTFBMUY1Q0IzQkIyQ0FGN0MyODM4MjExMkUyNjlC RjFEMEYyRjAeFw0yNTEyMjAyMTAwMjVaFw0yNTEyMjEyMjA1MjVaMDMxMTAvBgNV BAMTKEU4NzQxN0E1RjlEQ0RFNDQ2Nzk5QkI4NDAyRjFFNjlBNkVFMjE3M0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDw2oVgEEP9dkj5d2ujTaF9kjXS 2Lu3o0NuqfJ+gXjge+mbzWeWuZ3n5zSpuZVtbbohThEIlz513ti9m258dhT9T9OC Q3n/Tgn3T7s24J2oXhEfYezUffSgqMvJLUev+JV1I8fBrQ2+PxB6uRhLPhOkpnGJ hXmxFgeoC6Xe9A66vK/ktyxmpO0e6lABDXid6L8eh2NdsuMhlfdo1O1zMsCs/EDF L8UwHNHAyDkg3YpddaIf+nR7/2me8K5x0UKa3tF878zLGYCuEL0MfnT94sTPDqHk hh+eqmbqkDZ70EZ5IAPWpPf8l/h8URQlqiCssxEBCBfl9VFzceErlHovSA89AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU6HQXpfnc3kRnmbuEAvHmmm7iFzswHwYDVR0j BBgwFoAUzHkaH1yzuyyvfCg4IRLiab8dDy8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYjdhMGFhNTYtNGExZC00YmE4LWFiNjYtYzU5ZmVkNGMz N2ZjLzEvQ0M3OTFBMUY1Q0IzQkIyQ0FGN0MyODM4MjExMkUyNjlCRjFEMEYyRi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9DQzc5MUExRjVDQjNCQjJDQUY3QzI4Mzgy MTEyRTI2OUJGMUQwRjJGLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2I3YTBhYTU2LTRhMWQtNGJhOC1hYjY2LWM1OWZlZDRjMzdmYy8xL0NDNzkxQTFG NUNCM0JCMkNBRjdDMjgzODIxMTJFMjY5QkYxRDBGMkYubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQC8rxjW YRrccFvnjgOlefYqv+lwbw1HY1WTfuO/ldzK2wfp88T/boAZkl/IkXeM1T+Ow+do O865E1xdB304yFOlRDIQsPrIfV4ppH4xYBlx/g4wbXPHS+QMxrbH0HNUBd9AITZb gK4y0GL9Q+TeGkBCdvCh8V90dM9AWEBAOkNsVpeCWbATb1CUK7t3Nov1azjcpJhc IKiuEJVGxHAB4gnWzQmvHmGxBurBfx/3s1ohftgp6LdWTKxsjxCJBnjGt30A2MtI 7OdUGzMQyo7/5rrdU3YuYv+Cdd76b0+3YKetpzaykoLgZ7sCO1VzROGlRxJwaOdI HSQXQPXCJEiMSARa -----END CERTIFICATE-----Generated at Sun Dec 21 06:55:17 2025 by rpki-client