This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.mft File: 202A82DA6E73CE4262E18BAED60A3FA6C88923F0.mft (raw, json) Hash identifier: ANI7gxv4MwY27XKFBhpAChQzhJWFWBqPmtUMwslaa9M= Subject key identifier: 70:4E:FA:EE:8B:A1:18:3A:CD:49:19:8B:48:48:D4:E3:62:6D:66:CB Authority key identifier: 20:2A:82:DA:6E:73:CE:42:62:E1:8B:AE:D6:0A:3F:A6:C8:89:23:F0 Certificate issuer: /CN=202A82DA6E73CE4262E18BAED60A3FA6C88923F0 Certificate serial: 2D913BA7C656B82FBFAF1F5F21D09740ABD04F0C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.mft Manifest number: 9E Signing time: Fri 19 Dec 2025 18:42:42 +0000 Manifest this update: Fri 19 Dec 2025 18:37:42 +0000 Manifest next update: Sat 20 Dec 2025 19:27:42 +0000 Files and hashes: 1: 326131343a373538313a333039303a3a2f34342d3434203d3e20323034323131.roa (hash: an2CTnY48XCjuCGH81CGgjVXZdlCvh7kWv6euA7rsaw=) 2: 202A82DA6E73CE4262E18BAED60A3FA6C88923F0.crl (hash: NtT1YVJ353BQo4nWmngcMMd/7zKw+pRg+Rg3w2nor04=) 3: 326131343a373538313a333062363a3a2f34382d3438203d3e203331383938.roa (hash: EiykYxl+6FaTNBSgNTe5hk8ztAyCkiKmYpqs3J6XV7E=) 4: 326131343a373538303a666666353a3a2f34382d3438203d3e20323037353239.roa (hash: 8GEpSwKR5aAKrW7JpZcQNrVUIUKVu8YVCYytf208qTw=) 5: 326131343a373538313a333062363a3a2f34382d3438203d3e20323037323939.roa (hash: QF7sj3Q22cpFIfftMWFUaaWBXSTUWiNGhFKa4Gm8DjQ=) 6: 326131343a373538313a333030303a3a2f34302d3438203d3e20323037353239.roa (hash: 49tQr1GLN9QvPACiaQcXfaSDsuhRZJax3rEAyqF9fvs=) 7: 326131343a373538313a333062353a3a2f34382d3438203d3e20323131373239.roa (hash: tFUXq6i30FxB1SNNhCRKk78oQl/FXFjJBGghOw722to=) 8: 64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05.cer (hash: Cg46VfMFxkibHVY72VspTJE2BjBtIpE0lG8+Ny9YFKc=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.crl rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 17:13:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:91:3b:a7:c6:56:b8:2f:bf:af:1f:5f:21:d0:97:40:ab:d0:4f:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=202A82DA6E73CE4262E18BAED60A3FA6C88923F0 Validity Not Before: Dec 19 18:37:42 2025 GMT Not After : Dec 20 19:27:42 2025 GMT Subject: CN=704EFAEE8BA1183ACD49198B4848D4E3626D66CB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:23:2c:cc:ff:0f:d5:1a:b5:c9:ad:cb:23:28: 3a:b1:41:42:ac:80:af:58:05:07:f1:2a:d9:86:96: aa:5c:7e:da:b6:24:18:7b:fd:ae:99:d2:1b:4a:50: 8a:85:66:cc:2d:88:e4:52:6a:5c:d6:f4:0a:23:e9: 76:93:8d:68:20:af:a0:a7:f6:14:28:34:6a:e9:a4: 4a:63:81:9a:07:dd:4b:af:9f:d8:22:0e:52:77:36: 7e:5b:af:6f:8c:c2:84:08:da:af:2e:a5:7f:d9:6e: 35:f1:84:d4:d8:be:4f:cd:36:25:88:df:9e:e3:31: 1f:87:91:58:85:44:f9:cc:cc:44:f2:18:cd:dc:77: 2c:98:52:73:e6:6e:1a:88:62:e2:e5:02:de:8f:e9: fe:06:e6:7c:e2:d7:51:d3:ea:e0:e7:2e:4b:ac:04: 0e:b6:7b:f4:5c:1f:27:0d:1d:68:ec:31:59:43:f1: f6:91:17:e3:c6:9b:58:01:2f:e5:7f:24:9c:28:73: dc:3e:dc:4a:42:6d:a1:49:88:eb:69:3f:8b:ce:7a: b5:40:15:96:2f:31:dd:4d:b4:5c:d3:f5:ac:57:90: 1f:65:c4:2f:c3:a1:26:62:53:7b:3b:70:fb:f8:35: 77:5e:6e:94:d2:33:7c:76:cc:20:bf:c8:e4:35:fd: 24:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:4E:FA:EE:8B:A1:18:3A:CD:49:19:8B:48:48:D4:E3:62:6D:66:CB X509v3 Authority Key Identifier: keyid:20:2A:82:DA:6E:73:CE:42:62:E1:8B:AE:D6:0A:3F:A6:C8:89:23:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:5c:a9:44:b7:52:a1:fd:6a:51:91:06:ec:15:da:52:7f:1d: 5b:22:58:53:5b:d1:6e:c4:97:57:9f:62:eb:b5:64:93:dd:b2: 1d:61:aa:75:97:8e:c3:c4:84:8e:ef:e1:ce:a2:f7:39:40:c5: fc:2d:49:74:4f:db:3a:02:9a:20:33:d2:3c:de:11:34:97:c2: 0a:d4:d2:6e:33:49:5e:3a:cd:28:9f:ed:d4:d2:d0:3b:dc:96: 38:c3:da:fb:e4:e7:e0:30:6b:37:af:94:b7:13:ad:43:c1:ba: 98:b5:4e:88:a6:8b:aa:5e:6e:ac:e3:66:3e:5b:26:c3:01:01: 84:a4:c8:a2:29:cf:ef:44:d0:42:b9:e4:41:26:36:d3:7b:9b: 79:f6:30:d6:4c:ce:ce:c2:64:0b:44:6d:3f:61:27:ed:99:d4: 75:34:1b:b5:2f:8d:ad:5b:ef:40:ff:7a:34:69:ce:5b:38:aa: c1:04:ff:cb:a5:66:c0:46:82:a1:32:90:b1:2e:62:bf:9d:a2: 23:2a:a3:d0:43:d9:9f:19:b9:71:c9:6b:56:08:bf:4d:45:81: 3a:9a:b7:6b:99:d7:0e:ac:61:1b:e9:08:c0:c3:58:06:c0:be: ad:50:b6:1f:b7:09:91:25:70:83:ec:0a:42:1f:fe:4b:00:a9: 93:65:bc:b5 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIULZE7p8ZWuC+/rx9fIdCXQKvQTwwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjAyQTgyREE2RTczQ0U0MjYyRTE4QkFFRDYwQTNGQTZD ODg5MjNGMDAeFw0yNTEyMTkxODM3NDJaFw0yNTEyMjAxOTI3NDJaMDMxMTAvBgNV BAMTKDcwNEVGQUVFOEJBMTE4M0FDRDQ5MTk4QjQ4NDhENEUzNjI2RDY2Q0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCNIyzM/w/VGrXJrcsjKDqxQUKs gK9YBQfxKtmGlqpcftq2JBh7/a6Z0htKUIqFZswtiORSalzW9Aoj6XaTjWggr6Cn 9hQoNGrppEpjgZoH3Uuvn9giDlJ3Nn5br2+MwoQI2q8upX/ZbjXxhNTYvk/NNiWI 357jMR+HkViFRPnMzETyGM3cdyyYUnPmbhqIYuLlAt6P6f4G5nzi11HT6uDnLkus BA62e/RcHycNHWjsMVlD8faRF+PGm1gBL+V/JJwoc9w+3EpCbaFJiOtpP4vOerVA FZYvMd1NtFzT9axXkB9lxC/DoSZiU3s7cPv4NXdebpTSM3x2zCC/yOQ1/SSJAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUcE767ouhGDrNSRmLSEjU42JtZsswHwYDVR0j BBgwFoAUICqC2m5zzkJi4Yuu1go/psiJI/AwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDliZDM4ODgtOTMwMi00YjZmLWEwMTctMmI0YmJhNWU1 N2JiLzEvMjAyQTgyREE2RTczQ0U0MjYyRTE4QkFFRDYwQTNGQTZDODg5MjNGMC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8yMDJBODJEQTZFNzNDRTQyNjJFMThCQUVE NjBBM0ZBNkM4ODkyM0YwLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2Q5YmQzODg4LTkzMDItNGI2Zi1hMDE3LTJiNGJiYTVlNTdiYi8xLzIwMkE4MkRB NkU3M0NFNDI2MkUxOEJBRUQ2MEEzRkE2Qzg4OTIzRjAubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQALXKlE t1Kh/WpRkQbsFdpSfx1bIlhTW9FuxJdXn2LrtWST3bIdYap1l47DxISO7+HOovc5 QMX8LUl0T9s6ApogM9I83hE0l8IK1NJuM0leOs0on+3U0tA73JY4w9r75OfgMGs3 r5S3E61DwbqYtU6IpouqXm6s42Y+WybDAQGEpMiiKc/vRNBCueRBJjbTe5t59jDW TM7OwmQLRG0/YSftmdR1NBu1L42tW+9A/3o0ac5bOKrBBP/LpWbARoKhMpCxLmK/ naIjKqPQQ9mfGblxyWtWCL9NRYE6mrdrmdcOrGEb6QjAw1gGwL6tULYftwmRJXCD 7ApCH/5LAKmTZby1 -----END CERTIFICATE-----Generated at Sat Dec 20 03:01:43 2025 by rpki-client