This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/2/2F08CECD5E57CBA0E68BCA7F7401BD5EDB387FB8.mft File: 2F08CECD5E57CBA0E68BCA7F7401BD5EDB387FB8.mft (raw, json) Hash identifier: m/Bt7AzMMxSZ/TsjwNCuDz0nRQJHAl/+EAilxPkHBuY= Subject key identifier: 09:71:DC:2E:E3:9C:1A:E2:08:91:DC:3B:12:BF:89:52:54:80:C2:60 Authority key identifier: 2F:08:CE:CD:5E:57:CB:A0:E6:8B:CA:7F:74:01:BD:5E:DB:38:7F:B8 Certificate issuer: /CN=2f08cecd5e57cba0e68bca7f7401bd5edb387fb8 Certificate serial: 4894E7147F680AA4F5675BC3B9A9A4CAFB07CE54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LwjOzV5Xy6Dmi8p_dAG9Xts4f7g.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/2/2F08CECD5E57CBA0E68BCA7F7401BD5EDB387FB8.mft Manifest number: 042C Signing time: Mon 15 Dec 2025 14:02:37 +0000 Manifest this update: Mon 15 Dec 2025 13:57:37 +0000 Manifest next update: Tue 16 Dec 2025 17:07:37 +0000 Files and hashes: 1: 323030313a3637633a323830303a3a2f34382d3438203d3e20323035333239.roa (hash: FrtXdPIEsvn1iYUedtjAO8L9S5GjDxa5ywOB8CuN7A0=) 2: 2F08CECD5E57CBA0E68BCA7F7401BD5EDB387FB8.crl (hash: VOTKK8fNbDSoI8/we1SyRhoPe7+RvQ9pbqhHyzd3+tU=) 3: AS205329.asa (hash: VGL8fNaLY3qFu9mP5r7NvYdgKqN6s2IJxTCOZNeTahk=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/2/2F08CECD5E57CBA0E68BCA7F7401BD5EDB387FB8.crl rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/2/2F08CECD5E57CBA0E68BCA7F7401BD5EDB387FB8.mft rsync://rpki.ripe.net/repository/DEFAULT/LwjOzV5Xy6Dmi8p_dAG9Xts4f7g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 15:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:94:e7:14:7f:68:0a:a4:f5:67:5b:c3:b9:a9:a4:ca:fb:07:ce:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f08cecd5e57cba0e68bca7f7401bd5edb387fb8 Validity Not Before: Dec 15 13:57:37 2025 GMT Not After : Dec 16 17:07:37 2025 GMT Subject: CN=0971DC2EE39C1AE20891DC3B12BF89525480C260 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:6c:8c:90:34:b1:f4:ca:63:86:f2:b6:bd:74: e2:f4:f9:32:2a:1f:f0:34:e9:f4:9d:f8:4e:0d:a6: ad:2c:e8:6e:fd:61:e4:f7:30:ad:40:c0:53:3b:14: ee:ff:ba:a7:3e:ff:72:41:23:bf:49:08:3e:e0:89: 2a:d6:a1:aa:2b:02:44:bd:8e:7c:66:21:fc:9f:8e: 50:84:da:8b:ff:33:5f:3a:12:4a:c0:be:bd:cb:5c: cd:53:d5:7d:3f:18:e1:44:a0:84:e7:f1:5d:98:47: e1:c0:8c:46:b1:89:2a:58:3f:99:22:40:4a:79:80: 4c:c8:5f:5e:c0:b1:b5:23:3b:b1:83:1c:e0:f5:f1: ed:80:3e:f6:8d:6e:b0:c2:3f:5b:ec:67:4e:c8:ed: 52:e2:f0:79:39:25:5e:b7:9c:c9:16:8b:3c:01:d8: b2:6a:a8:02:f1:f4:d0:75:b2:08:3c:29:83:ad:71: 50:7e:bd:8b:b7:19:d0:f9:9b:02:32:05:6b:37:c9: ff:0e:a7:a9:77:c2:fe:cc:22:51:2f:3b:23:c3:93: 92:eb:da:33:f4:37:e6:24:06:2d:de:f7:0a:f3:a1: c0:d8:b4:c5:4b:f5:5d:3a:56:ef:d6:e4:c7:c1:4e: 3d:8d:32:9b:e8:d8:0b:15:62:4d:35:48:71:28:5a: 39:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:71:DC:2E:E3:9C:1A:E2:08:91:DC:3B:12:BF:89:52:54:80:C2:60 X509v3 Authority Key Identifier: keyid:2F:08:CE:CD:5E:57:CB:A0:E6:8B:CA:7F:74:01:BD:5E:DB:38:7F:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/2/2F08CECD5E57CBA0E68BCA7F7401BD5EDB387FB8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LwjOzV5Xy6Dmi8p_dAG9Xts4f7g.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/2/2F08CECD5E57CBA0E68BCA7F7401BD5EDB387FB8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:83:8a:cc:68:4d:19:83:1c:48:5e:3f:ce:58:13:91:df:74: 8e:e6:2e:a3:f4:1c:5b:d1:e8:05:99:e9:94:9e:c1:2f:88:d7: 1e:40:e1:5c:0b:0d:82:68:5a:2f:d4:2f:77:40:e2:39:9f:2f: 6d:f0:b1:d3:6b:21:72:ce:eb:5c:c4:38:1b:58:98:29:fa:af: a0:5a:72:b2:e7:71:8f:3f:ae:b2:ae:ed:5a:b5:4d:a6:7b:6a: fb:28:5e:32:1d:4e:77:a6:f6:a6:52:8d:56:c8:9f:dc:9a:6e: a2:b8:64:e4:63:52:bd:92:1d:2a:1b:f6:f7:47:49:d6:2e:05: ef:29:f6:cf:94:7d:95:fc:77:74:bf:69:74:9f:8f:66:86:76: 44:1d:75:22:33:99:0b:c9:41:e8:f9:7c:c2:77:9a:c5:ff:89: 12:40:ce:96:70:6a:37:79:fb:18:08:26:4f:f4:c7:1f:34:e6: 70:2b:2a:7a:ec:3e:85:0c:3d:4d:9c:3c:4e:86:0e:8b:3c:aa: 23:bf:1a:74:1d:ca:eb:07:59:12:88:a8:f0:4c:f1:e8:9c:04: c4:8e:a6:c4:1f:13:bc:10:66:5a:d1:70:a4:a0:c4:ce:50:a7: 9c:bf:40:4e:26:15:29:c0:2a:11:55:72:27:15:03:d2:0c:89: 12:07:6c:88 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUSJTnFH9oCqT1Z1vDuamkyvsHzlQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMmYwOGNlY2Q1ZTU3Y2JhMGU2OGJjYTdmNzQwMWJkNWVk YjM4N2ZiODAeFw0yNTEyMTUxMzU3MzdaFw0yNTEyMTYxNzA3MzdaMDMxMTAvBgNV BAMTKDA5NzFEQzJFRTM5QzFBRTIwODkxREMzQjEyQkY4OTUyNTQ4MEMyNjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGbIyQNLH0ymOG8ra9dOL0+TIq H/A06fSd+E4Npq0s6G79YeT3MK1AwFM7FO7/uqc+/3JBI79JCD7giSrWoaorAkS9 jnxmIfyfjlCE2ov/M186EkrAvr3LXM1T1X0/GOFEoITn8V2YR+HAjEaxiSpYP5ki QEp5gEzIX17AsbUjO7GDHOD18e2APvaNbrDCP1vsZ07I7VLi8Hk5JV63nMkWizwB 2LJqqALx9NB1sgg8KYOtcVB+vYu3GdD5mwIyBWs3yf8Op6l3wv7MIlEvOyPDk5Lr 2jP0N+YkBi3e9wrzocDYtMVL9V06Vu/W5MfBTj2NMpvo2AsVYk01SHEoWjkXAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUCXHcLuOcGuIIkdw7Er+JUlSAwmAwHwYDVR0j BBgwFoAULwjOzV5Xy6Dmi8p/dAG9Xts4f7gwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDY5NzE2MGMtYWNjNS00YjUxLWJmNTUtMTBjN2E2ZTY2 OTgwLzIvMkYwOENFQ0Q1RTU3Q0JBMEU2OEJDQTdGNzQwMUJENUVEQjM4N0ZCOC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0x3ak96VjVYeTZEbWk4cF9kQUc5WHRz NGY3Zy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kNjk3MTYwYy1h Y2M1LTRiNTEtYmY1NS0xMGM3YTZlNjY5ODAvMi8yRjA4Q0VDRDVFNTdDQkEwRTY4 QkNBN0Y3NDAxQkQ1RURCMzg3RkI4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApIOKzGhNGYMcSF4/zlgT kd90juYuo/QcW9HoBZnplJ7BL4jXHkDhXAsNgmhaL9Qvd0DiOZ8vbfCx02shcs7r XMQ4G1iYKfqvoFpysudxjz+usq7tWrVNpntq+yheMh1Od6b2plKNVsif3Jpuorhk 5GNSvZIdKhv290dJ1i4F7yn2z5R9lfx3dL9pdJ+PZoZ2RB11IjOZC8lB6Pl8wnea xf+JEkDOlnBqN3n7GAgmT/THHzTmcCsqeuw+hQw9TZw8ToYOizyqI78adB3K6wdZ Eoio8Ezx6JwExI6mxB8TvBBmWtFwpKDEzlCnnL9ATiYVKcAqEVVyJxUD0gyJEgds iA== -----END CERTIFICATE-----Generated at Mon Dec 15 19:52:19 2025 by rpki-client