This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.mft File: 98A87CAD5B710890A9528F166F4202393824E6B8.mft (raw, json) Hash identifier: 5KEr0GZH5iLLwaurB+ydQVtAs58JerCMk3qHoUlwe/c= Subject key identifier: 6B:60:B9:17:FC:0D:32:63:78:01:73:53:7A:F5:1A:92:88:EF:00:0A Authority key identifier: 98:A8:7C:AD:5B:71:08:90:A9:52:8F:16:6F:42:02:39:38:24:E6:B8 Certificate issuer: /CN=98a87cad5b710890a9528f166f4202393824e6b8 Certificate serial: 58E204495451B3CB06F561C5E03BF01C06155182 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mKh8rVtxCJCpUo8Wb0ICOTgk5rg.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.mft Manifest number: 04B3 Signing time: Thu 18 Dec 2025 06:29:27 +0000 Manifest this update: Thu 18 Dec 2025 06:24:27 +0000 Manifest next update: Fri 19 Dec 2025 07:56:27 +0000 Files and hashes: 1: 0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.cer (hash: Pc4F216M/oD/fxZDUk8HLynWg8D1IQ0ANHs5N2ZC0VQ=) 2: 39342e3132362e3233322e302f32342d3234203d3e203438303730.roa (hash: VIdYFIOIqW5zJ3T1LDGwWjmJ764XjM+ac+86S8Ja5hk=) 3: 39342e3132362e3233362e302f32342d3234203d3e203438303730.roa (hash: ma+wlMqMsb7J0TC2Gy822cEZS57hTDfS/GzCjZsgQ1k=) 4: 39342e3132362e3233372e302f32342d3234203d3e203438303730.roa (hash: SY6OvQv9R/Ut8R5yFxdy0RVK/9dKsg8ZwmC3iNS9Rpw=) 5: 39342e3132362e3233392e302f32342d3234203d3e203438303730.roa (hash: NDHvIIcUiAk7uX5boyMA8yHxKUGe6BZWK+cptlXNnOA=) 6: 326131313a353730303a3a2f33322d3332203d3e203438303730.roa (hash: Fqs+xGh2wCPoRebx3WWGGz8gG+3wDYrzV+eGaABVra0=) 7: 326131313a353730373a61613a3a2f34382d3438203d3e203438303730.roa (hash: JswRhPyDtXHdt3LcnGr0rU+2WVgkSTrzy91w1+vHXG0=) 8: 39342e3132362e3233382e302f32342d3234203d3e203438303730.roa (hash: EEtfGKQPQ42nFzzdsRfixi4zKQ5tTYPEdAQ1iAcmdE4=) 9: 39342e3132362e3233332e302f32342d3234203d3e203438303730.roa (hash: /8dVa93viKNoM1pCJooeH0rtbsVAVvDJFpjlC3WNZyI=) 10: 326131313a353730373a3a2f33322d3332203d3e203438303730.roa (hash: 242POLRepYH713AUptOGvBkM/JpRNVCsIm5BodQGTyY=) 11: 98A87CAD5B710890A9528F166F4202393824E6B8.crl (hash: YUT/a7ofJpzqt+5m/S6Wj83VmEhORe+ZKWws5ZkvRGA=) 12: 39342e3132362e3233342e302f32342d3234203d3e203438303730.roa (hash: wQ/YXS5V0WqyAz3I38Grxwtf2vC7Tnq0YU0pMolmNpk=) 13: 39342e3132362e3233352e302f32342d3234203d3e203438303730.roa (hash: S5WIAkzllTXfMiWpREUuucFgM0BSw7Pb5gT995rR5+k=) 14: AS48070.asa (hash: 5MT6ORI/F8ffsUlifpuRiZkf4qUWanqmxrgKmyiz55A=) 15: 326131313a353730313a31303a3a2f34342d3434203d3e20323030313938.roa (hash: IiLsd5rWyRAEtPC2BRNztBwgXOWFkCLAq6FHsMnhQxg=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.crl rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.mft rsync://rpki.ripe.net/repository/DEFAULT/mKh8rVtxCJCpUo8Wb0ICOTgk5rg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:e2:04:49:54:51:b3:cb:06:f5:61:c5:e0:3b:f0:1c:06:15:51:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98a87cad5b710890a9528f166f4202393824e6b8 Validity Not Before: Dec 18 06:24:27 2025 GMT Not After : Dec 19 07:56:27 2025 GMT Subject: CN=6B60B917FC0D3263780173537AF51A9288EF000A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:aa:e9:5e:3a:34:e2:06:19:48:56:37:1b:a2: ce:d6:ef:b3:e4:e8:3a:c7:0d:58:b4:8a:25:da:34: 5f:c6:ca:bb:15:4f:2a:2e:87:ee:4a:70:63:c3:90: 44:84:51:ca:19:99:9d:dc:27:dd:f1:c2:ee:61:0e: c0:dc:08:27:47:5b:32:e8:d7:27:b5:e7:67:7a:04: d7:ed:3b:8f:2f:e5:c2:f7:01:24:9e:52:69:99:83: 18:1f:de:7a:fd:4d:ba:e7:2d:24:93:50:52:5f:95: f2:30:b7:26:4a:99:d0:de:a2:61:c6:3a:fc:87:e1: d8:96:b5:db:5f:23:44:5c:80:45:85:fe:ce:17:8a: 9a:2b:8d:ad:0e:b6:8c:78:0f:a6:e2:ab:74:1d:4a: 41:96:b5:ee:9f:b0:7f:3d:c6:40:44:23:3c:ec:37: 8f:8c:9a:29:5b:45:95:fa:66:99:1d:9b:b4:12:0d: 80:0e:bb:17:b0:e3:79:aa:4b:20:ce:1d:19:d6:a5: 79:6c:90:b6:6e:38:f8:bf:18:95:94:56:58:78:73: a9:50:91:17:65:b7:02:1b:8d:88:ba:09:32:e6:0d: 7e:2a:51:14:6f:c3:26:c3:e0:c9:2e:d8:27:dc:89: 00:41:91:2c:30:ff:5d:d6:de:5a:8d:ae:55:a8:55: 9b:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:60:B9:17:FC:0D:32:63:78:01:73:53:7A:F5:1A:92:88:EF:00:0A X509v3 Authority Key Identifier: keyid:98:A8:7C:AD:5B:71:08:90:A9:52:8F:16:6F:42:02:39:38:24:E6:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mKh8rVtxCJCpUo8Wb0ICOTgk5rg.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption be:03:fd:6f:12:4a:af:a7:4a:1c:96:3b:6b:0b:30:3b:e8:a2: b2:fd:48:8f:e4:ff:fa:cd:70:c2:53:98:e2:fc:61:a5:52:56: 18:49:34:ee:34:14:0e:f4:04:e2:30:6a:59:0e:47:5f:a4:26: 07:58:91:da:23:16:78:58:c8:45:5e:a6:f9:f7:88:5b:74:9d: 53:42:a7:e5:2f:be:57:80:dd:9f:3d:de:be:c3:1e:65:b8:68: ff:f4:be:54:b1:99:83:da:13:75:30:90:80:a9:aa:28:2f:b8: 60:df:34:a3:83:40:ba:0d:be:bf:7f:da:46:2a:c7:f3:4d:ac: 86:41:b4:bd:2d:39:91:b0:56:6e:af:b2:26:32:9f:f5:48:98: 09:f7:fd:d1:49:70:59:3c:02:c0:51:88:94:be:8a:83:34:c2: de:b2:0f:d7:df:a5:1f:aa:2b:cf:cb:8b:44:66:4e:79:32:d8: 43:3b:3f:a9:39:7d:1e:89:88:46:9c:ba:0f:49:c3:d3:ff:43: 44:6e:e3:84:41:3b:a4:e2:10:9a:d8:05:be:e5:60:58:9d:98: 49:76:e1:d2:47:4e:d8:30:50:54:e0:00:b0:e8:23:9d:e8:1c: ba:c7:a2:45:ad:1e:e5:96:0a:fb:b0:5f:3e:ff:66:58:1e:d9: 78:b0:6a:71 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUWOIESVRRs8sG9WHF4DvwHAYVUYIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOThhODdjYWQ1YjcxMDg5MGE5NTI4ZjE2NmY0MjAyMzkz ODI0ZTZiODAeFw0yNTEyMTgwNjI0MjdaFw0yNTEyMTkwNzU2MjdaMDMxMTAvBgNV BAMTKDZCNjBCOTE3RkMwRDMyNjM3ODAxNzM1MzdBRjUxQTkyODhFRjAwMEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIquleOjTiBhlIVjcbos7W77Pk 6DrHDVi0iiXaNF/GyrsVTyouh+5KcGPDkESEUcoZmZ3cJ93xwu5hDsDcCCdHWzLo 1ye152d6BNftO48v5cL3ASSeUmmZgxgf3nr9TbrnLSSTUFJflfIwtyZKmdDeomHG OvyH4diWtdtfI0RcgEWF/s4Xiporja0Otox4D6biq3QdSkGWte6fsH89xkBEIzzs N4+MmilbRZX6Zpkdm7QSDYAOuxew43mqSyDOHRnWpXlskLZuOPi/GJWUVlh4c6lQ kRdltwIbjYi6CTLmDX4qURRvwybD4Mku2CfciQBBkSww/13W3lqNrlWoVZt9AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUa2C5F/wNMmN4AXNTevUakojvAAowHwYDVR0j BBgwFoAUmKh8rVtxCJCpUo8Wb0ICOTgk5rgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZGNlMTk2ZmUtNGIxYS00NmVhLTljOTUtNGFmMTI5NjRh NDlkLzAvOThBODdDQUQ1QjcxMDg5MEE5NTI4RjE2NkY0MjAyMzkzODI0RTZCOC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL21LaDhyVnR4Q0pDcFVvOFdiMElDT1Rn azVyZy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kY2UxOTZmZS00 YjFhLTQ2ZWEtOWM5NS00YWYxMjk2NGE0OWQvMC85OEE4N0NBRDVCNzEwODkwQTk1 MjhGMTY2RjQyMDIzOTM4MjRFNkI4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvgP9bxJKr6dKHJY7awsw O+iisv1Ij+T/+s1wwlOY4vxhpVJWGEk07jQUDvQE4jBqWQ5HX6QmB1iR2iMWeFjI RV6m+feIW3SdU0Kn5S++V4Ddnz3evsMeZbho//S+VLGZg9oTdTCQgKmqKC+4YN80 o4NAug2+v3/aRirH802shkG0vS05kbBWbq+yJjKf9UiYCff90UlwWTwCwFGIlL6K gzTC3rIP19+lH6orz8uLRGZOeTLYQzs/qTl9HomIRpy6D0nD0/9DRG7jhEE7pOIQ mtgFvuVgWJ2YSXbh0kdO2DBQVOAAsOgjnegcuseiRa0e5ZYK+7BfPv9mWB7ZeLBq cQ== -----END CERTIFICATE-----Generated at Thu Dec 18 10:30:54 2025 by rpki-client