This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.mft File: 5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.mft (raw, json) Hash identifier: 6WPHUwjI5blTUfgg1TPexDC16abajS+Q/GUgXxJZJjg= Subject key identifier: 8B:A9:C0:58:6D:11:14:C8:8B:01:E4:4C:22:C2:9B:5E:1C:76:2F:0D Authority key identifier: 5C:DC:04:BB:23:EA:A4:CE:CC:79:1D:FE:04:BB:02:8B:7E:79:7B:68 Certificate issuer: /CN=5cdc04bb23eaa4cecc791dfe04bb028b7e797b68 Certificate serial: 12283D63D007D6BBCD828A3819A3E155B54D573C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XNwEuyPqpM7MeR3-BLsCi355e2g.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.mft Manifest number: 01D1 Signing time: Sat 20 Dec 2025 08:19:45 +0000 Manifest this update: Sat 20 Dec 2025 08:14:45 +0000 Manifest next update: Sun 21 Dec 2025 09:07:45 +0000 Files and hashes: 1: 326131343a333863303a333a3a2f34382d3438203d3e20333936303634.roa (hash: RQOZ0GeuB2hc8N96mezhBhXKeCrh7X17R4TSsdmASyE=) 2: 5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.crl (hash: HmaD7NitTLSZ2qy8aNwI7PAi0G/qN/XNIlFnw1GpD+Y=) 3: 3130332e3134392e3136382e302f32342d3234203d3e20333936303634.roa (hash: +yFHbjFdcl3OkH9bM82B/wbQvRBlEBGqJ0LTOyulC0Q=) 4: 326131343a333863303a333a3a2f34382d3438203d3e20323135323438.roa (hash: rQvL6z8yuqUS7v24/Ra9en3S8KmIgkMtv1rcn8o1sfA=) 5: 326131343a333863303a313a3a2f34382d3438203d3e20333936303634.roa (hash: hT2vS1KxZCIrrbIeX36lXo5PB7z3bFiXrMszQcpSghE=) 6: 326131343a333863303a3a2f32392d3239203d3e20323135323438.roa (hash: aQBGW4UwEpZw1viUGTiicR7R7bF3eHxKluau3FSxHVQ=) 7: 3130332e3134392e3136392e302f32342d3234203d3e203630373831.roa (hash: M972A2zux5bp2vtM/yV/ifXNBlJMRB7g6qDIDzpgNsU=) 8: 326131343a333863303a323a3a2f34382d3438203d3e20323135323438.roa (hash: e6DNGKmUmYh4KhA4h67tF7nM55oym+8oQ84yYdEmy64=) 9: 326131343a333863303a3130343a3a2f34382d3438203d3e20333936303634.roa (hash: uQC+ycpajw6LG1MwmEH2bQGDaDjqft9mY/Ula5mB0Rs=) 10: 3139342e3131372e36392e302f32342d3234203d3e20333936303634.roa (hash: uPzNQdfiTlC1R9B5J33ZDfQAHE+DMHweR/VNt7ogg2k=) 11: 326131343a333863303a323a3a2f34382d3438203d3e20333936303634.roa (hash: b3AvMY9Sl1B0jVsJOJivHhqGlksNlQ/JV9muHKrGSGQ=) 12: 326131343a333863303a3a2f32392d3239203d3e20333936303634.roa (hash: izH2bRAdoHB65ZOfP1RgM/881EkkTABDPPywFSiQ9f4=) 13: AS215248.asa (hash: OBxCaFtmon5RTxGYauxtwJ5Vaj/O+PNWdAKZ74euDqI=) 14: 326131343a333863303a3130343a3a2f34382d3438203d3e20323135323438.roa (hash: QZeJi0O4ini6QNF1syA5gZ8HehGzsGo0INWd9T4WodA=) 15: 3130332e3134392e3136382e302f32342d3234203d3e20323135323438.roa (hash: RPFyh+9f4VeLKwhSKFsibkww2V1WrimAJUdSq1OTL10=) 16: 326131343a333863303a313a3a2f34382d3438203d3e20323135323438.roa (hash: hYvWm7RFlZS1l2LX8NsvpkNf0MsxvPiQn7slmgwssck=) 17: 3139342e3131372e36392e302f32342d3234203d3e20323135323438.roa (hash: EqbKHazBpNo/bx4pclFyuqidomfYzdI+MjCRoDSagrM=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.crl rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.mft rsync://rpki.ripe.net/repository/DEFAULT/XNwEuyPqpM7MeR3-BLsCi355e2g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:07:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:28:3d:63:d0:07:d6:bb:cd:82:8a:38:19:a3:e1:55:b5:4d:57:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cdc04bb23eaa4cecc791dfe04bb028b7e797b68 Validity Not Before: Dec 20 08:14:45 2025 GMT Not After : Dec 21 09:07:45 2025 GMT Subject: CN=8BA9C0586D1114C88B01E44C22C29B5E1C762F0D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:a2:ad:d1:67:70:38:2c:14:33:3e:65:9e:2f: d8:a8:94:66:d9:5e:f5:03:11:78:4c:97:3a:6d:98: 8f:85:d8:80:63:04:5c:4e:0f:52:2f:d7:f0:af:2a: 40:5a:1b:35:98:17:98:ec:96:7c:cd:1c:a5:3a:33: fd:d5:4f:c6:a6:dc:a9:be:f4:a0:b1:98:b3:e4:1b: ff:f7:c3:85:d9:08:d6:a3:f8:cb:6f:68:02:da:ac: 82:9d:0d:94:24:ce:0b:c9:9b:74:1a:cd:90:01:3a: e4:8d:c7:e6:4f:3c:15:a1:57:f9:40:81:60:de:e8: 18:4c:9f:63:b0:d9:13:67:06:01:c8:da:b0:a0:1a: 3d:8f:82:60:5f:78:70:e7:32:7f:fc:40:9a:5c:d3: 6d:a1:27:f3:41:2a:96:10:ce:68:24:74:d4:9f:26: 42:5b:ba:16:b8:de:7c:c6:e5:ab:08:84:0c:84:fd: 8d:26:4d:0a:f2:c2:1d:04:d9:6b:73:1c:63:c1:e3: 58:ee:68:47:32:11:ad:d0:74:b4:f8:fe:57:d9:2c: 56:7d:9e:ce:df:fd:c1:bb:5a:6a:85:c0:36:87:fe: 3c:49:83:3d:c4:e1:b7:8d:e3:bd:cb:fa:09:0d:f0: 00:b3:87:ce:fe:d4:6c:38:41:2e:93:22:28:b1:0d: 5e:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:A9:C0:58:6D:11:14:C8:8B:01:E4:4C:22:C2:9B:5E:1C:76:2F:0D X509v3 Authority Key Identifier: keyid:5C:DC:04:BB:23:EA:A4:CE:CC:79:1D:FE:04:BB:02:8B:7E:79:7B:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XNwEuyPqpM7MeR3-BLsCi355e2g.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:a0:3d:87:35:dd:c9:d7:83:18:d2:29:7e:b9:3f:ad:35:56: 2b:2b:b5:93:e4:ba:50:9b:e3:d3:84:11:66:ee:f5:a1:21:b9: bd:aa:ed:23:e2:26:5a:95:12:fc:33:64:8f:aa:de:54:1e:fa: 64:e0:16:e9:06:cc:02:0d:52:0f:ea:d7:f0:eb:a6:df:49:46: ef:5b:dc:85:3e:2f:ac:64:fd:de:65:c6:51:c8:bf:1c:1b:f9: 39:a2:12:13:03:72:2b:95:71:5c:d7:c7:08:a3:df:79:5c:46: 4b:49:41:d4:34:bd:77:c4:93:47:19:21:85:19:38:2d:b8:11: 8c:e6:35:1e:70:2c:db:f4:8f:8f:5a:de:05:0c:39:52:e5:ed: 9d:9a:fd:cb:23:65:fe:5d:94:46:59:59:c0:31:c6:eb:0b:38: c3:f5:79:e7:28:9d:98:67:9d:46:bf:5d:1d:bf:bc:c3:51:f1: 68:cb:e5:90:36:de:17:17:13:d6:cc:d1:73:cf:49:46:07:6e: 93:6f:e2:54:ca:3f:9c:b3:b4:7e:91:8e:13:83:2a:94:e1:b9: b6:eb:82:2e:49:7f:bd:7f:23:8a:22:3e:94:c4:d2:3c:12:b5: a7:d8:e7:b9:58:09:0f:75:fc:0c:c4:e2:9a:f7:19:84:de:0c: e9:5f:3b:4b -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUEig9Y9AH1rvNgoo4GaPhVbVNVzwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNWNkYzA0YmIyM2VhYTRjZWNjNzkxZGZlMDRiYjAyOGI3 ZTc5N2I2ODAeFw0yNTEyMjAwODE0NDVaFw0yNTEyMjEwOTA3NDVaMDMxMTAvBgNV BAMTKDhCQTlDMDU4NkQxMTE0Qzg4QjAxRTQ0QzIyQzI5QjVFMUM3NjJGMEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5oq3RZ3A4LBQzPmWeL9iolGbZ XvUDEXhMlzptmI+F2IBjBFxOD1Iv1/CvKkBaGzWYF5jslnzNHKU6M/3VT8am3Km+ 9KCxmLPkG//3w4XZCNaj+MtvaALarIKdDZQkzgvJm3QazZABOuSNx+ZPPBWhV/lA gWDe6BhMn2Ow2RNnBgHI2rCgGj2PgmBfeHDnMn/8QJpc022hJ/NBKpYQzmgkdNSf JkJbuha43nzG5asIhAyE/Y0mTQrywh0E2WtzHGPB41juaEcyEa3QdLT4/lfZLFZ9 ns7f/cG7WmqFwDaH/jxJgz3E4beN473L+gkN8ACzh87+1Gw4QS6TIiixDV4zAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUi6nAWG0RFMiLAeRMIsKbXhx2Lw0wHwYDVR0j BBgwFoAUXNwEuyPqpM7MeR3+BLsCi355e2gwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2QxOWRiMjAtNDY1My00OGQ0LThmYzQtNTgwZDEzNjli N2M0LzAvNUNEQzA0QkIyM0VBQTRDRUNDNzkxREZFMDRCQjAyOEI3RTc5N0I2OC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1hOd0V1eVBxcE03TWVSMy1CTHNDaTM1 NWUyZy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9jZDE5ZGIyMC00 NjUzLTQ4ZDQtOGZjNC01ODBkMTM2OWI3YzQvMC81Q0RDMDRCQjIzRUFBNENFQ0M3 OTFERkUwNEJCMDI4QjdFNzk3QjY4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaKA9hzXdydeDGNIpfrk/ rTVWKyu1k+S6UJvj04QRZu71oSG5vartI+ImWpUS/DNkj6reVB76ZOAW6QbMAg1S D+rX8Oum30lG71vchT4vrGT93mXGUci/HBv5OaISEwNyK5VxXNfHCKPfeVxGS0lB 1DS9d8STRxkhhRk4LbgRjOY1HnAs2/SPj1reBQw5UuXtnZr9yyNl/l2URllZwDHG 6ws4w/V55yidmGedRr9dHb+8w1HxaMvlkDbeFxcT1szRc89JRgduk2/iVMo/nLO0 fpGOE4MqlOG5tuuCLkl/vX8jiiI+lMTSPBK1p9jnuVgJD3X8DMTimvcZhN4M6V87 Sw== -----END CERTIFICATE-----Generated at Sat Dec 20 21:17:33 2025 by rpki-client