This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.mft File: CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.mft (raw, json) Hash identifier: l35dED2PTuSMhqScu0CgxZBMfFxGZGQYRVXEml/yN2Y= Subject key identifier: 1D:2C:68:09:65:92:52:7C:A6:05:82:09:CC:A1:D0:47:FC:E9:28:93 Authority key identifier: CB:29:A7:76:69:DF:5A:7A:5C:B5:06:D8:39:EE:8A:A4:33:7C:CA:AC Certificate issuer: /CN=cb29a77669df5a7a5cb506d839ee8aa4337ccaac Certificate serial: 6B16B87772B428A2F17F5AAB1B3D365B5175AFF9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yymndmnfWnpctQbYOe6KpDN8yqw.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.mft Manifest number: 0170 Signing time: Sat 20 Dec 2025 00:03:57 +0000 Manifest this update: Fri 19 Dec 2025 23:58:57 +0000 Manifest next update: Sun 21 Dec 2025 00:31:57 +0000 Files and hashes: 1: 3139342e3132342e3233362e302f32342d3234203d3e203630373335.roa (hash: lmVh0tkdqz2ZaktlfIJzzJLuyL6wItEcUEPI+PVNqdo=) 2: 326130663a336363323a3a2f33322d3332203d3e20323037393336.roa (hash: bLMKUTu2LDh7TH4JEFo2TwGKCx3JiqqNy6hRd14etMM=) 3: 326130663a336363333a323030303a3a2f33362d3336203d3e203630373335.roa (hash: hZUNrJfyUHgUntGAqdSVlBaE4wglKTi9y0zmmly1bMY=) 4: 326130663a336363313a3a2f33322d3332203d3e20323037393336.roa (hash: 4eRihxuyWrFmyrmWNHP+q80BiQuGj/+XTMKJH0kDcVI=) 5: 326130663a336363303a3a2f33322d3332203d3e20323037393336.roa (hash: E+WPtm+HS9AVsakqcLrBjACoAm/NbChhrd4PG4s+X5o=) 6: CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.crl (hash: 3th0pIvJs9LRBn9VeUrEsDdLX5rb0VDQtjiCx0YBRTA=) 7: 3139342e3132342e3233372e302f32342d3234203d3e203539383133.roa (hash: Wt7cVymDfWBwMzR8hqsJLmmyo1G55vHli1MG8ova8P4=) 8: 326130663a336363333a313030303a3a2f33362d3336203d3e203630373335.roa (hash: ad3eCylfdMfYW/Id31ooquQQLvZwumdWGj+lszfaEsA=) 9: 326130663a336363363a3a2f33322d3332203d3e203630373335.roa (hash: Bvg0bczZRvr0hNeXj13n0Q8N1O34FXLeiihKmXvd96c=) 10: 3139342e3132342e3233352e302f32342d3234203d3e20323037393336.roa (hash: MbX2Jo3+qNy9yJ51qumhhpSA5fjjpKXnL9+Ixdd7q/M=) 11: 326130663a336363333a3a2f33362d3336203d3e203630373335.roa (hash: qgpa17rXBGEZyX0zTURKp2TS7HA9WA0LAdj3r9yq+jg=) 12: 326130663a336363373a3a2f33322d3332203d3e203539383133.roa (hash: 0XA7loK9zcLZ4LH8gJRLIhKhFochpbrC40dXD0XEE/8=) 13: 326130663a336363353a3a2f33322d3332203d3e20323037393336.roa (hash: yq+hWHhfyocRCOJbnYGyzdHlkfHxXD4gPxuVgEPCc0g=) 14: 326130663a336363343a3a2f33322d3332203d3e20323037393336.roa (hash: sUFXVk5mJuzGXi+txvF0jHfWX/7COhdmW+wdhnGLLbA=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.crl rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.mft rsync://rpki.ripe.net/repository/DEFAULT/yymndmnfWnpctQbYOe6KpDN8yqw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 00:31:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:16:b8:77:72:b4:28:a2:f1:7f:5a:ab:1b:3d:36:5b:51:75:af:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb29a77669df5a7a5cb506d839ee8aa4337ccaac Validity Not Before: Dec 19 23:58:57 2025 GMT Not After : Dec 21 00:31:57 2025 GMT Subject: CN=1D2C68096592527CA6058209CCA1D047FCE92893 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:80:52:c4:c2:47:6d:ff:e0:e0:ca:28:b9:d7: d1:f8:e9:ed:1d:3d:d6:c1:71:bf:5f:b1:b9:dd:da: c2:09:92:5b:f6:fd:69:c0:78:36:5a:e1:47:3a:6f: f1:52:48:b1:90:c7:e1:63:83:41:bb:59:fd:1e:a1: be:98:5d:73:77:df:91:54:cf:b4:8d:18:87:fe:cd: 15:c7:0a:e0:f0:c2:00:68:0e:39:9a:01:0b:1b:be: 5b:47:3a:46:10:cc:f9:57:a0:2e:d5:08:70:d7:bb: ab:29:4b:0c:c7:27:b2:8b:8a:2a:54:2c:f2:17:61: 29:44:22:2e:42:5b:8e:5a:f5:8c:5b:74:be:3b:76: 66:35:12:21:26:e4:e7:73:e2:4a:4f:60:c1:80:51: 46:60:60:e0:77:0d:bb:1d:88:93:26:c0:e2:1a:42: 1f:ab:d2:ad:b5:06:2e:a0:10:3a:74:39:5c:c1:0e: a9:d8:30:65:2b:2c:fc:a1:43:6a:75:bc:9a:f2:39: 6a:b5:f7:9e:90:d9:16:b4:1e:53:99:c8:6b:4b:8c: ed:55:2b:05:fe:a0:0a:d8:a8:bb:38:fc:ca:82:26: 0b:03:34:11:1d:91:5b:cc:7c:0b:eb:7d:8f:e0:19: 0f:27:dd:34:ca:5a:2b:a3:0f:8d:a7:34:cd:dd:05: 27:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:2C:68:09:65:92:52:7C:A6:05:82:09:CC:A1:D0:47:FC:E9:28:93 X509v3 Authority Key Identifier: keyid:CB:29:A7:76:69:DF:5A:7A:5C:B5:06:D8:39:EE:8A:A4:33:7C:CA:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yymndmnfWnpctQbYOe6KpDN8yqw.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:f5:9f:37:be:ad:29:27:bf:9f:67:f5:e6:ea:5a:21:57:c4: 8c:1b:02:28:a7:5d:23:e9:f1:24:a3:4e:75:85:98:c8:ee:42: 77:41:a8:63:42:1e:53:15:9e:72:93:5c:d0:85:7b:14:77:11: 52:a4:47:8c:7e:6d:bd:c7:1d:bb:c6:32:c6:be:54:28:b9:ef: 74:bd:c5:71:35:1b:ea:d4:e4:ce:41:44:65:78:b4:64:d9:fa: ab:b8:09:13:7e:a8:e4:19:cf:86:81:f7:98:ad:18:b7:2e:61: 94:05:f1:41:c2:e8:b1:4a:d8:28:4f:8e:d4:5a:41:c3:11:d8: 2c:cb:a5:14:7d:f9:9a:d7:f5:f0:3f:52:b0:32:c9:3c:b7:8e: 44:51:37:37:f6:83:eb:b1:02:7a:5d:7e:c0:c8:9e:27:d7:70: 8e:87:3a:f6:e0:86:1e:74:9b:06:2b:0d:f1:5f:75:63:0c:c0: c0:eb:fa:33:b0:20:ee:b9:7a:01:bc:65:cf:7f:2b:0f:cb:8e: e2:e1:c7:c2:b9:be:7e:26:57:52:03:d5:55:af:66:34:30:a6: 62:d7:50:f7:ca:2e:1f:62:f9:ba:73:ea:66:85:03:bc:26:47: b1:10:79:a8:f1:b3:f7:fc:2b:01:97:e2:6e:46:98:27:37:f6: 0b:8d:11:d7 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUaxa4d3K0KKLxf1qrGz02W1F1r/kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoY2IyOWE3NzY2OWRmNWE3YTVjYjUwNmQ4MzllZThhYTQz MzdjY2FhYzAeFw0yNTEyMTkyMzU4NTdaFw0yNTEyMjEwMDMxNTdaMDMxMTAvBgNV BAMTKDFEMkM2ODA5NjU5MjUyN0NBNjA1ODIwOUNDQTFEMDQ3RkNFOTI4OTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxgFLEwkdt/+Dgyii519H46e0d PdbBcb9fsbnd2sIJklv2/WnAeDZa4Uc6b/FSSLGQx+Fjg0G7Wf0eob6YXXN335FU z7SNGIf+zRXHCuDwwgBoDjmaAQsbvltHOkYQzPlXoC7VCHDXu6spSwzHJ7KLiipU LPIXYSlEIi5CW45a9YxbdL47dmY1EiEm5Odz4kpPYMGAUUZgYOB3DbsdiJMmwOIa Qh+r0q21Bi6gEDp0OVzBDqnYMGUrLPyhQ2p1vJryOWq1956Q2Ra0HlOZyGtLjO1V KwX+oArYqLs4/MqCJgsDNBEdkVvMfAvrfY/gGQ8n3TTKWiujD42nNM3dBSc/AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUHSxoCWWSUnymBYIJzKHQR/zpKJMwHwYDVR0j BBgwFoAUyymndmnfWnpctQbYOe6KpDN8yqwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYmIyNWQwNjgtN2Y5Yy00YjBlLWE2OTUtMTc3OWI3ZDhm MDZlLzAvQ0IyOUE3NzY2OURGNUE3QTVDQjUwNkQ4MzlFRThBQTQzMzdDQ0FBQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3l5bW5kbW5mV25wY3RRYllPZTZLcERO OHlxdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iYjI1ZDA2OC03 ZjljLTRiMGUtYTY5NS0xNzc5YjdkOGYwNmUvMC9DQjI5QTc3NjY5REY1QTdBNUNC NTA2RDgzOUVFOEFBNDMzN0NDQUFDLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOPWfN76tKSe/n2f15upa IVfEjBsCKKddI+nxJKNOdYWYyO5Cd0GoY0IeUxWecpNc0IV7FHcRUqRHjH5tvccd u8Yyxr5UKLnvdL3FcTUb6tTkzkFEZXi0ZNn6q7gJE36o5BnPhoH3mK0Yty5hlAXx QcLosUrYKE+O1FpBwxHYLMulFH35mtf18D9SsDLJPLeORFE3N/aD67ECel1+wMie J9dwjoc69uCGHnSbBisN8V91YwzAwOv6M7Ag7rl6Abxlz38rD8uO4uHHwrm+fiZX UgPVVa9mNDCmYtdQ98ouH2L5unPqZoUDvCZHsRB5qPGz9/wrAZfibkaYJzf2C40R 1w== -----END CERTIFICATE-----Generated at Sat Dec 20 10:35:48 2025 by rpki-client