This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.mft File: 4C189E42F35C944D463D9EA6501F093EB62BA785.mft (raw, json) Hash identifier: 0K0gJ6jZS55gqlfQsJwwKW0xPyMH3HYj0M3+c8C7Eug= Subject key identifier: 98:32:6E:08:DB:4D:CA:E3:FA:84:16:66:91:B4:28:66:6A:31:E4:04 Authority key identifier: 4C:18:9E:42:F3:5C:94:4D:46:3D:9E:A6:50:1F:09:3E:B6:2B:A7:85 Certificate issuer: /CN=4c189e42f35c944d463d9ea6501f093eb62ba785 Certificate serial: 4E0106A9C4BE75948F9BA7547C4530BCB3EACB63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.mft Manifest number: 03EC Signing time: Fri 19 Dec 2025 08:02:33 +0000 Manifest this update: Fri 19 Dec 2025 07:57:33 +0000 Manifest next update: Sat 20 Dec 2025 08:25:33 +0000 Files and hashes: 1: 3138352e31332e3232352e302f32342d3234203d3e20323132323338.roa (hash: aEdAeNisTHp0DrhGmu6wes4iqejlgHHMcCeDYK0A3FQ=) 2: 3135392e3235332e302e302f32342d3234203d3e20323036323831.roa (hash: WedmFf2QIQuuVKf/1QK4DuIi+i1j87BtcRZVJGzgY68=) 3: 3135392e3235332e372e302f32342d3234203d3e20323134313433.roa (hash: 8/3XzRXXjmYpSthB/PqRmvioB+R4a98BuFhtWRNYmtk=) 4: 3138352e31332e3232362e302f32342d3234203d3e20313532313739.roa (hash: kbUfx2g7/W6xr6BcRBqigrahrWSKqlZaZ80tT5+SQUk=) 5: 3135392e3235332e352e302f32342d3234203d3e203533333536.roa (hash: 9QDAlicDZU2dKA/slyHao02LhaPY7/2iCnESN6BbiqA=) 6: 3135392e3235332e362e302f32342d3234203d3e20323134313433.roa (hash: ium02BtB+GfbIHn2YGUt7i7of/NJnXnez2EEtYL+duE=) 7: 3138352e31332e3232342e302f32342d3234203d3e20313335333931.roa (hash: Y4VGjNKxdM1kt8f9/kG9Dub6HzXbG7OXpVqySki/RW4=) 8: 3135392e3235332e332e302f32342d3234203d3e203533333536.roa (hash: uV5gP669aq0NtuCXuZBm6wWsNYwP/024H/522nPjCx8=) 9: 3135392e3235332e322e302f32342d3234203d3e20323134313433.roa (hash: qmuf0vkLJtyYNBk6lONse3deUisFPtDCWrL9dDMaewk=) 10: 3138352e31332e3232372e302f32342d3234203d3e2039333034.roa (hash: K2jdp87W7OWk11i68RJYc6WUM+0fdCVTP9+PN22bU6U=) 11: 4C189E42F35C944D463D9EA6501F093EB62BA785.crl (hash: DKFTsxRgbrNz4bP6iF2tnCP8n1BOJwLIHC1wH7fluEs=) 12: 3135392e3235332e342e302f32342d3234203d3e20323134313433.roa (hash: JO9eMRAwPS+hZf1UF8eYFlm1nYrsRkC7Oj1Lhed/bAU=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.crl rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.mft rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 08:25:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:01:06:a9:c4:be:75:94:8f:9b:a7:54:7c:45:30:bc:b3:ea:cb:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c189e42f35c944d463d9ea6501f093eb62ba785 Validity Not Before: Dec 19 07:57:33 2025 GMT Not After : Dec 20 08:25:33 2025 GMT Subject: CN=98326E08DB4DCAE3FA84166691B428666A31E404 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:c4:31:04:07:85:cf:7b:29:b2:74:a3:31:d9: 2b:59:32:d9:53:c2:6d:5c:e6:8d:f7:4b:c2:21:11: b3:85:b7:3b:d1:02:c1:a2:22:6a:7c:ec:42:ec:c5: 2b:a6:59:8c:56:1b:2b:9e:66:63:b7:0f:60:8a:26: 07:48:50:84:2a:7a:2c:0c:4f:28:14:0c:c9:66:da: 6a:37:d1:3d:6e:73:b2:0f:df:e1:d5:4a:d1:9b:e2: 08:ef:a8:cb:0b:e5:ad:e7:95:20:fc:29:c3:35:77: 56:1e:71:81:56:a3:1e:9b:61:7f:7e:5f:a1:22:b5: ea:3d:c1:ef:06:b3:d2:ef:6b:56:0c:b4:cb:7b:da: fd:3f:e8:fd:e3:81:04:af:78:0c:bf:00:8d:ca:03: 58:0e:53:a0:c4:15:ce:94:f6:1f:d7:c4:81:82:57: 6c:09:ea:28:34:11:46:f4:c0:39:28:70:9f:e9:5f: ba:e2:dc:05:b9:8d:71:8a:be:36:82:ca:6e:df:3f: c6:90:67:c8:a8:1a:9c:0d:d2:eb:90:bb:a7:3a:78: bc:31:ef:24:d6:8d:70:38:cd:9e:37:24:e9:17:fb: 0e:5a:1b:a2:27:af:db:f9:5b:22:8e:76:51:36:0d: 2e:7b:82:56:30:14:b6:da:5e:51:82:2c:c9:9c:52: 6d:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:32:6E:08:DB:4D:CA:E3:FA:84:16:66:91:B4:28:66:6A:31:E4:04 X509v3 Authority Key Identifier: keyid:4C:18:9E:42:F3:5C:94:4D:46:3D:9E:A6:50:1F:09:3E:B6:2B:A7:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:a2:84:33:21:3c:e8:4d:e8:da:34:2a:77:05:46:95:13:17: 40:e0:9f:a3:2f:d4:88:de:61:62:44:77:3c:5a:97:73:39:e3: 6c:19:e0:7f:60:09:a6:95:17:55:88:d8:d4:6f:57:70:9c:cb: ad:2d:95:08:46:94:56:c4:8f:1c:21:c6:8c:64:6e:5e:c7:db: c1:04:ad:a5:1d:f7:f2:ff:43:7c:5b:79:68:ff:f8:9d:6d:0b: 1e:84:e6:bc:b0:e3:40:4f:c5:96:1d:cd:76:85:1e:a9:7b:3d: fb:3e:b0:ea:3c:4d:96:f8:a8:7c:71:36:48:d0:8e:5b:fc:9b: 8a:f4:73:aa:3b:a5:f7:85:8d:8f:f0:1b:b5:96:be:e9:be:cb: 46:13:6b:6e:e4:9f:36:64:f1:ec:74:db:c5:f4:9e:9c:ec:44: 12:37:18:d2:33:20:7c:ff:54:a9:90:da:30:17:03:e2:bd:0a: 60:0e:5f:13:b3:b8:08:ca:01:84:a5:99:c4:6e:48:da:54:3d: e5:a0:9e:d8:76:e7:b3:51:65:70:46:68:b7:24:19:b1:ca:83: da:7d:5f:2a:61:e8:db:ce:bd:54:a8:c5:c3:d6:d4:c9:49:43: 4d:0e:8f:4b:cc:8f:a4:66:db:35:28:31:23:11:1b:e4:28:23: 2c:b9:e5:06 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUTgEGqcS+dZSPm6dUfEUwvLPqy2MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGMxODllNDJmMzVjOTQ0ZDQ2M2Q5ZWE2NTAxZjA5M2Vi NjJiYTc4NTAeFw0yNTEyMTkwNzU3MzNaFw0yNTEyMjAwODI1MzNaMDMxMTAvBgNV BAMTKDk4MzI2RTA4REI0RENBRTNGQTg0MTY2NjkxQjQyODY2NkEzMUU0MDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8xDEEB4XPeymydKMx2StZMtlT wm1c5o33S8IhEbOFtzvRAsGiImp87ELsxSumWYxWGyueZmO3D2CKJgdIUIQqeiwM TygUDMlm2mo30T1uc7IP3+HVStGb4gjvqMsL5a3nlSD8KcM1d1YecYFWox6bYX9+ X6Eiteo9we8Gs9Lva1YMtMt72v0/6P3jgQSveAy/AI3KA1gOU6DEFc6U9h/XxIGC V2wJ6ig0EUb0wDkocJ/pX7ri3AW5jXGKvjaCym7fP8aQZ8ioGpwN0uuQu6c6eLwx 7yTWjXA4zZ43JOkX+w5aG6Inr9v5WyKOdlE2DS57glYwFLbaXlGCLMmcUm3VAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUmDJuCNtNyuP6hBZmkbQoZmox5AQwHwYDVR0j BBgwFoAUTBieQvNclE1GPZ6mUB8JPrYrp4UwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2U1MTBlMTctMzFmYS00MTRiLTk4OWUtMDI2ZGJiNmZk ZjUxLzAvNEMxODlFNDJGMzVDOTQ0RDQ2M0Q5RUE2NTAxRjA5M0VCNjJCQTc4NS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1RCaWVRdk5jbEUxR1BaNm1VQjhKUHJZ cnA0VS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9jZTUxMGUxNy0z MWZhLTQxNGItOTg5ZS0wMjZkYmI2ZmRmNTEvMC80QzE4OUU0MkYzNUM5NDRENDYz RDlFQTY1MDFGMDkzRUI2MkJBNzg1Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ6KEMyE86E3o2jQqdwVG lRMXQOCfoy/UiN5hYkR3PFqXcznjbBngf2AJppUXVYjY1G9XcJzLrS2VCEaUVsSP HCHGjGRuXsfbwQStpR338v9DfFt5aP/4nW0LHoTmvLDjQE/Flh3NdoUeqXs9+z6w 6jxNlviofHE2SNCOW/ybivRzqjul94WNj/AbtZa+6b7LRhNrbuSfNmTx7HTbxfSe nOxEEjcY0jMgfP9UqZDaMBcD4r0KYA5fE7O4CMoBhKWZxG5I2lQ95aCe2Hbns1Fl cEZotyQZscqD2n1fKmHo2869VKjFw9bUyUlDTQ6PS8yPpGbbNSgxIxEb5CgjLLnl Bg== -----END CERTIFICATE-----Generated at Fri Dec 19 21:49:30 2025 by rpki-client