This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/10/E19302BE91C9D4211CDF4AFF091055A173B3593B.mft File: E19302BE91C9D4211CDF4AFF091055A173B3593B.mft (raw, json) Hash identifier: waIj/KrSpMzxoiSfnrHOJ1RCLgOmXN8peZAXoYC4Y3c= Subject key identifier: 45:94:AA:B9:49:52:E2:32:3B:95:97:BF:4E:DE:B6:F1:D4:B0:FC:ED Authority key identifier: E1:93:02:BE:91:C9:D4:21:1C:DF:4A:FF:09:10:55:A1:73:B3:59:3B Certificate issuer: /CN=E19302BE91C9D4211CDF4AFF091055A173B3593B Certificate serial: 0F11FB3AAB93B2556ADC1BE18A7D05815476054D Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/E19302BE91C9D4211CDF4AFF091055A173B3593B.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/10/E19302BE91C9D4211CDF4AFF091055A173B3593B.mft Manifest number: E7 Signing time: Fri 19 Dec 2025 22:59:09 +0000 Manifest this update: Fri 19 Dec 2025 22:54:09 +0000 Manifest next update: Sat 20 Dec 2025 23:12:09 +0000 Files and hashes: 1: E19302BE91C9D4211CDF4AFF091055A173B3593B.crl (hash: EUAABLSs6oRb3A8t7QDuEWKtl247vXS1KL7qxQZMan4=) 2: 326130373a353463313a343230303a3a2f34302d3430203d3e20313939353138.roa (hash: p0V0EhuR94jsdFZ1UsjzKoR4Va7GATjKkx+PVQ3cRs4=) 3: 326130373a353463313a343236313a3a2f34382d3438203d3e203436373636.roa (hash: 7m4uBl7pjkxamzWCFShzOT8dP3zXIx3Ew/sIEJmrOk4=) 4: 326130373a353463313a343234323a3a2f34382d3438203d3e20313939353138.roa (hash: BOG3fQtugkiXpKS/p2fTg16ei6qBO6dg8xuWYfodSgU=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/10/E19302BE91C9D4211CDF4AFF091055A173B3593B.crl rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/10/E19302BE91C9D4211CDF4AFF091055A173B3593B.mft rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/E19302BE91C9D4211CDF4AFF091055A173B3593B.cer rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 20:16:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:11:fb:3a:ab:93:b2:55:6a:dc:1b:e1:8a:7d:05:81:54:76:05:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E19302BE91C9D4211CDF4AFF091055A173B3593B Validity Not Before: Dec 19 22:54:09 2025 GMT Not After : Dec 20 23:12:09 2025 GMT Subject: CN=4594AAB94952E2323B9597BF4EDEB6F1D4B0FCED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:f4:2b:de:91:a9:f6:be:79:ce:21:b6:25:19: 93:36:7a:e8:2f:53:02:2d:20:de:01:cf:b5:fd:28: 07:de:e8:0b:36:49:94:49:66:20:26:ac:80:fc:81: e0:14:a9:75:dc:52:13:4b:d9:e0:28:a4:97:ce:84: 1a:de:e6:c5:77:06:65:ef:26:c1:44:fa:99:12:d1: 03:5c:a7:88:e5:7c:21:50:20:01:1e:f7:86:05:b0: c0:0b:52:b5:f9:ee:50:de:a7:49:a0:c6:21:dc:c8: c0:33:02:04:94:ac:10:88:d4:c0:2b:ab:8a:99:dc: 0e:88:47:55:b7:89:fa:bf:ef:c3:34:34:52:78:d9: e3:a7:90:ff:77:7e:5c:e7:47:c1:6c:1c:02:67:23: 85:5b:79:97:4d:61:60:48:e9:3f:c7:2c:d5:db:1e: 6a:bf:6e:f5:d7:e0:7e:0a:26:aa:dc:08:68:87:e0: e8:37:e8:aa:57:c0:25:d8:24:f6:7f:5c:9b:fa:26: cf:eb:81:f6:e3:aa:be:f7:5c:bd:ad:d7:f8:5a:bc: b6:ee:25:cb:f0:ec:78:8a:5f:cc:ca:73:56:e7:75: 4d:ae:89:44:7f:d3:cb:37:d3:46:d2:e1:34:38:f7: 65:d2:2c:c8:89:90:ec:28:48:9c:f9:17:b2:57:30: a2:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:94:AA:B9:49:52:E2:32:3B:95:97:BF:4E:DE:B6:F1:D4:B0:FC:ED X509v3 Authority Key Identifier: keyid:E1:93:02:BE:91:C9:D4:21:1C:DF:4A:FF:09:10:55:A1:73:B3:59:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/10/E19302BE91C9D4211CDF4AFF091055A173B3593B.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/E19302BE91C9D4211CDF4AFF091055A173B3593B.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/10/E19302BE91C9D4211CDF4AFF091055A173B3593B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:ec:72:2a:55:e0:73:96:83:88:26:d9:c4:4f:9d:8e:7c:6d: bc:d2:53:80:5b:d5:c8:9f:0f:5a:11:5a:69:41:14:ce:c8:b8: cc:3b:0d:83:38:bf:1b:6d:24:c0:26:4f:35:10:38:89:74:07: 42:dd:6d:11:b4:7d:85:1e:1e:52:85:a2:96:dc:cd:fc:35:44: 65:56:8b:93:ed:f4:08:3b:d5:8a:e2:3d:39:2a:82:a2:f7:73: 08:f6:4c:fe:59:31:dc:46:de:d9:f3:2d:16:bd:2e:c9:9c:3a: 15:14:a9:be:72:23:66:0d:49:d1:4e:24:96:7a:e0:5e:bd:02: dd:3f:89:a8:09:d5:e3:47:aa:cb:1a:a7:69:ac:0c:b6:f0:64: 36:39:e6:1d:c8:77:7e:4a:79:5a:5e:81:f5:63:d1:2a:21:97: e0:6c:24:ba:af:c7:d3:47:79:01:0a:69:f8:f6:94:98:a5:68: c2:c6:a3:89:b0:22:d3:1d:8e:5a:7f:a1:9a:bf:c5:44:03:5c: d5:ea:75:c6:62:ca:bc:fc:c0:ab:78:09:00:f9:43:1a:f0:a8: 46:22:fd:ff:26:a9:cc:39:dc:93:bc:04:03:d0:5b:f0:e4:fd: 29:f0:db:f6:c1:fd:c0:e6:1f:c7:6d:34:60:60:cd:81:e9:a4: ca:8f:f4:27 -----BEGIN CERTIFICATE----- MIIFfDCCBGSgAwIBAgIUDxH7OquTslVq3Bvhin0FgVR2BU0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTE5MzAyQkU5MUM5RDQyMTFDREY0QUZGMDkxMDU1QTE3 M0IzNTkzQjAeFw0yNTEyMTkyMjU0MDlaFw0yNTEyMjAyMzEyMDlaMDMxMTAvBgNV BAMTKDQ1OTRBQUI5NDk1MkUyMzIzQjk1OTdCRjRFREVCNkYxRDRCMEZDRUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE9Cvekan2vnnOIbYlGZM2eugv UwItIN4Bz7X9KAfe6As2SZRJZiAmrID8geAUqXXcUhNL2eAopJfOhBre5sV3BmXv JsFE+pkS0QNcp4jlfCFQIAEe94YFsMALUrX57lDep0mgxiHcyMAzAgSUrBCI1MAr q4qZ3A6IR1W3ifq/78M0NFJ42eOnkP93flznR8FsHAJnI4VbeZdNYWBI6T/HLNXb Hmq/bvXX4H4KJqrcCGiH4Og36KpXwCXYJPZ/XJv6Js/rgfbjqr73XL2t1/havLbu Jcvw7HiKX8zKc1bndU2uiUR/08s300bS4TQ492XSLMiJkOwoSJz5F7JXMKKBAgMB AAGjggKGMIICgjAdBgNVHQ4EFgQURZSquUlS4jI7lZe/Tt628dSw/O0wHwYDVR0j BBgwFoAU4ZMCvpHJ1CEc30r/CRBVoXOzWTswDgYDVR0PAQH/BAQDAgeAMIGXBgNV HR8EgY8wgYwwgYmggYaggYOGgYByc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2RlN2Q1NWY3LWVlNjAtNDAwNS1iYWQ3LWI0MjgxOGNm NTBlOC8xMC9FMTkzMDJCRTkxQzlENDIxMUNERjRBRkYwOTEwNTVBMTczQjM1OTNC LmNybDCBngYIKwYBBQUHAQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FhMDA0YmExLTQxOWIt NGRiNS1iYmQzLTVjY2E2MzNjYWUzZi80L0UxOTMwMkJFOTFDOUQ0MjExQ0RGNEFG RjA5MTA1NUExNzNCMzU5M0IuY2VyMIGgBggrBgEFBQcBCwSBkzCBkDCBjQYIKwYB BQUHMAuGgYByc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L2RlN2Q1NWY3LWVlNjAtNDAwNS1iYWQ3LWI0MjgxOGNmNTBlOC8xMC9FMTkz MDJCRTkxQzlENDIxMUNERjRBRkYwOTEwNTVBMTczQjM1OTNCLm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA LexyKlXgc5aDiCbZxE+djnxtvNJTgFvVyJ8PWhFaaUEUzsi4zDsNgzi/G20kwCZP NRA4iXQHQt1tEbR9hR4eUoWiltzN/DVEZVaLk+30CDvViuI9OSqCovdzCPZM/lkx 3Ebe2fMtFr0uyZw6FRSpvnIjZg1J0U4klnrgXr0C3T+JqAnV40eqyxqnaawMtvBk NjnmHch3fkp5Wl6B9WPRKiGX4Gwkuq/H00d5AQpp+PaUmKVowsajibAi0x2OWn+h mr/FRANc1ep1xmLKvPzAq3gJAPlDGvCoRiL9/yapzDnck7wEA9Bb8OT9KfDb9sH9 wOYfx200YGDNgemkyo/0Jw== -----END CERTIFICATE-----Generated at Sat Dec 20 12:27:13 2025 by rpki-client