This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c5836e60-6a92-47ef-9b9b-92a84d6d35ba/1/E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.mft File: E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.mft (raw, json) Hash identifier: TH5qy1rP3V9RAzSviHU0eSmg+r5Z90Xh/rEqBEtRTdg= Subject key identifier: 35:68:BE:31:02:05:DA:F7:C9:F3:46:E7:18:27:2C:B1:9C:01:41:9C Authority key identifier: E8:9F:91:5D:86:BB:9F:13:D0:F2:29:CA:78:CD:6D:9F:3E:AB:CF:7C Certificate issuer: /CN=E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C Certificate serial: 64C6BC496D34E9BAFC1BCDD0A6B5A9FDFAAE4166 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c5836e60-6a92-47ef-9b9b-92a84d6d35ba/1/E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.mft Manifest number: C4 Signing time: Sun 21 Dec 2025 15:59:39 +0000 Manifest this update: Sun 21 Dec 2025 15:54:39 +0000 Manifest next update: Mon 22 Dec 2025 19:08:39 +0000 Files and hashes: 1: 326131343a373538313a333936323a3a2f34382d3634203d3e20313939373633.roa (hash: oCjl7TQd0xhHJ9B8MSi48PHfMmMZri62JgNd0y5lz+I=) 2: 326131343a373538313a333937373a3a2f34382d3634203d3e20313939373633.roa (hash: 6W8xvuJxWbwP3DdLZ6e8Sa+pGsBO2lzU710UJC28MHg=) 3: 326131343a373538313a333936313a3a2f34382d3634203d3e20313939373633.roa (hash: V25LiWzxXAuXeQVJTbroIsiNYHCj/akr9IIXebvCE7Q=) 4: E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.crl (hash: lPhbv4iAR7gFjl2cimBnzxcSDfaEHbqAWctiZFkbm04=) 5: 326131343a373538313a333936363a3a2f34382d3634203d3e20313939373633.roa (hash: +BDNAKrmKMibTT2xQwMz+K+qOmE3P6UuU3BvjMVQ0iI=) 6: 326131343a373538313a333966663a3a2f34382d3634203d3e20313939373633.roa (hash: aCq/jKA1GGay4DL6ZU284taMNq3/9u17cmIYZEHZP9Y=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c5836e60-6a92-47ef-9b9b-92a84d6d35ba/1/E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.crl rsync://rsync.paas.rpki.ripe.net/repository/c5836e60-6a92-47ef-9b9b-92a84d6d35ba/1/E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 19:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:c6:bc:49:6d:34:e9:ba:fc:1b:cd:d0:a6:b5:a9:fd:fa:ae:41:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C Validity Not Before: Dec 21 15:54:39 2025 GMT Not After : Dec 22 19:08:39 2025 GMT Subject: CN=3568BE310205DAF7C9F346E718272CB19C01419C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:94:b5:e8:77:28:5a:3e:86:49:02:b8:0d:90: 76:6e:39:fc:0e:ce:5f:a7:c6:bc:5f:c3:2f:48:80: d5:52:ea:04:14:8f:5a:91:ef:9a:6f:25:cd:25:7c: 73:ff:12:95:de:02:83:a1:c3:46:c8:c6:c4:e9:45: 34:c7:5f:e4:5f:81:ea:03:1e:fc:78:53:b0:e8:ed: dc:8a:8a:95:06:70:11:8f:ff:5d:8c:37:f4:66:b7: 35:65:fe:ea:77:48:33:46:eb:00:a8:0a:ab:eb:43: d4:42:4e:c0:cc:5f:32:7a:2a:79:15:19:d1:24:e2: 63:c8:e3:98:dc:e9:47:37:2f:51:db:cb:68:1c:82: 38:cb:c4:ce:66:6d:fe:04:50:74:f5:31:fa:4f:6c: 44:0e:5f:52:e1:3b:90:bf:02:ea:8a:79:81:71:11: 4f:97:2a:ec:12:73:44:db:45:71:7b:c8:df:dc:9c: 32:ca:f5:9c:fa:8b:53:8c:d3:3b:50:82:e7:99:9c: ed:8d:43:8c:9a:8d:eb:89:3d:fd:1b:d6:aa:9b:af: 64:33:4f:54:ee:d1:65:dd:d7:3a:ab:61:d6:82:f7: e0:aa:3e:82:ce:34:bb:72:dd:8d:2d:60:cc:29:42: a7:6b:84:1d:94:82:86:af:45:f0:15:79:2d:a3:95: 24:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:68:BE:31:02:05:DA:F7:C9:F3:46:E7:18:27:2C:B1:9C:01:41:9C X509v3 Authority Key Identifier: keyid:E8:9F:91:5D:86:BB:9F:13:D0:F2:29:CA:78:CD:6D:9F:3E:AB:CF:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c5836e60-6a92-47ef-9b9b-92a84d6d35ba/1/E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c5836e60-6a92-47ef-9b9b-92a84d6d35ba/1/E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:96:65:96:52:11:e6:71:94:64:7d:c3:0e:7c:f9:92:48:fe: 6b:32:90:f9:83:bb:f6:a8:3f:0a:9b:02:cb:26:f7:de:63:67: 72:59:91:ad:58:1b:fb:cb:ce:ba:bf:2e:30:94:1a:4b:6c:e6: f4:a4:9b:28:46:24:8a:5f:5b:74:31:b6:1c:a8:f3:83:fd:86: 69:0f:f5:05:65:5e:1d:67:de:33:c4:24:24:a5:82:8a:d2:ba: 11:30:b1:55:fb:8e:c2:14:28:5d:2b:02:6e:0a:0b:89:5a:ee: a5:85:e7:30:d8:7c:0c:d8:41:b1:72:33:0a:27:15:6b:57:4a: 8d:f1:62:6c:ce:0e:56:83:b2:cf:15:59:0b:1a:ce:51:a9:82: e6:e6:04:12:d8:b6:8b:e4:71:21:5a:b1:6d:7c:7b:00:c9:b7: 17:89:63:3d:59:70:13:99:fa:50:40:16:fa:22:af:71:54:ff: bb:32:7b:9e:87:d8:95:34:bf:9f:68:57:09:cd:d0:f1:f6:e9: 6a:78:5e:8b:f5:e2:00:26:ac:2a:63:89:b7:6a:dc:e3:cc:b4: 97:a0:d5:6e:aa:46:3c:4e:f2:76:c5:66:49:50:7b:58:14:e7: f9:84:e4:2b:4d:4b:ba:4b:33:52:2e:8a:9e:60:a3:f8:34:bf: 3a:d6:3a:f8 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUZMa8SW006br8G83QprWp/fquQWYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTg5RjkxNUQ4NkJCOUYxM0QwRjIyOUNBNzhDRDZEOUYz RUFCQ0Y3QzAeFw0yNTEyMjExNTU0MzlaFw0yNTEyMjIxOTA4MzlaMDMxMTAvBgNV BAMTKDM1NjhCRTMxMDIwNURBRjdDOUYzNDZFNzE4MjcyQ0IxOUMwMTQxOUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCulLXodyhaPoZJArgNkHZuOfwO zl+nxrxfwy9IgNVS6gQUj1qR75pvJc0lfHP/EpXeAoOhw0bIxsTpRTTHX+RfgeoD Hvx4U7Do7dyKipUGcBGP/12MN/RmtzVl/up3SDNG6wCoCqvrQ9RCTsDMXzJ6KnkV GdEk4mPI45jc6Uc3L1Hby2gcgjjLxM5mbf4EUHT1MfpPbEQOX1LhO5C/AuqKeYFx EU+XKuwSc0TbRXF7yN/cnDLK9Zz6i1OM0ztQgueZnO2NQ4yajeuJPf0b1qqbr2Qz T1Tu0WXd1zqrYdaC9+CqPoLONLty3Y0tYMwpQqdrhB2UgoavRfAVeS2jlSQHAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUNWi+MQIF2vfJ80bnGCcssZwBQZwwHwYDVR0j BBgwFoAU6J+RXYa7nxPQ8inKeM1tnz6rz3wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzU4MzZlNjAtNmE5Mi00N2VmLTliOWItOTJhODRkNmQz NWJhLzEvRTg5RjkxNUQ4NkJCOUYxM0QwRjIyOUNBNzhDRDZEOUYzRUFCQ0Y3Qy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9FODlGOTE1RDg2QkI5RjEzRDBGMjI5Q0E3 OENENkQ5RjNFQUJDRjdDLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2M1ODM2ZTYwLTZhOTItNDdlZi05YjliLTkyYTg0ZDZkMzViYS8xL0U4OUY5MTVE ODZCQjlGMTNEMEYyMjlDQTc4Q0Q2RDlGM0VBQkNGN0MubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA7lmWW UhHmcZRkfcMOfPmSSP5rMpD5g7v2qD8KmwLLJvfeY2dyWZGtWBv7y866vy4wlBpL bOb0pJsoRiSKX1t0MbYcqPOD/YZpD/UFZV4dZ94zxCQkpYKK0roRMLFV+47CFChd KwJuCguJWu6lhecw2HwM2EGxcjMKJxVrV0qN8WJszg5Wg7LPFVkLGs5RqYLm5gQS 2LaL5HEhWrFtfHsAybcXiWM9WXATmfpQQBb6Iq9xVP+7Mnueh9iVNL+faFcJzdDx 9ulqeF6L9eIAJqwqY4m3atzjzLSXoNVuqkY8TvJ2xWZJUHtYFOf5hOQrTUu6SzNS LoqeYKP4NL861jr4 -----END CERTIFICATE-----Generated at Mon Dec 22 02:36:58 2025 by rpki-client