This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.mft File: F1D0572FE72991BD32854BAC716676EBDAD22ACE.mft (raw, json) Hash identifier: sKvF5tLXxXjudia2/6YzDMia0Ed2uBeO94EcLwVfqEU= Subject key identifier: F1:18:C1:D0:F5:70:67:AF:DB:44:4D:EF:22:B3:09:92:15:89:9A:09 Authority key identifier: F1:D0:57:2F:E7:29:91:BD:32:85:4B:AC:71:66:76:EB:DA:D2:2A:CE Certificate issuer: /CN=f1d0572fe72991bd32854bac716676ebdad22ace Certificate serial: 3CBCEFE693292488A069D6EE0F760E9CA83419F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dBXL-cpkb0yhUuscWZ269rSKs4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.mft Manifest number: 02C5 Signing time: Sun 21 Dec 2025 01:46:40 +0000 Manifest this update: Sun 21 Dec 2025 01:41:40 +0000 Manifest next update: Mon 22 Dec 2025 05:03:40 +0000 Files and hashes: 1: F1D0572FE72991BD32854BAC716676EBDAD22ACE.crl (hash: 5ALdwvxOPh1Xf+8S26NJW2KK0cFzm7q5o4RorSHqAp8=) 2: 326131333a393634343a323232303a3a2f34342d3438203d3e20323134393932.roa (hash: 894RTKAEh4ciZZOdefpuTBSaNDM2TQpQSdGle6pgy08=) 3: 326131333a393634303a3a2f34342d3434203d3e203532313132.roa (hash: DOR1Pt3ct68s+ey18ZghPrs5rAUoZlIbwxjvP68BE+k=) 4: 326131333a393634343a333030303a3a2f34302d3438203d3e20323131343331.roa (hash: e3gM8xBShVESXc8MaKIMDq1iDa8wjJWbHPjdOfhPuFQ=) 5: 8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.cer (hash: nYcdq/fifitjvFyPoNBEJvUP1WGfqAJvzv/Dj2Iivv0=) 6: 326131333a393634343a343030303a3a2f34302d3438203d3e203133333335.roa (hash: HvvXHcb+W+5HBFJKf1QLCy/60NSa6ZDrL0Z//tXBT34=) 7: 39312e3230372e31332e302f32342d3234203d3e203532313132.roa (hash: iHiHYqsWlJeVORCjaRILfNxM4kvwvM5K91j5Ek4sw54=) 8: 326131333a393634343a34303a3a2f34342d3438203d3e20323131343331.roa (hash: UQpEpactphMaN3i4tpyR5s9Tmz685dUuNs8hSuG0cJQ=) 9: 326131333a393634343a31303a3a2f34362d3438203d3e203438313934.roa (hash: WOAaZY65k+/GoeKbXXymPrZVu7CfbDlQvCXqyS0ZjLA=) 10: 326131333a393634343a34303a3a2f34342d3438203d3e20323136333336.roa (hash: lNHaIlVxi/lYCx53I3+MfwePjUfRoiP0WtejKnMjprU=) 11: 326131333a393634323a3130303a3a2f34382d3438203d3e203438323830.roa (hash: j84/Fm1nc/JJrf9h3dAaKkat+XV/si7APTv6iSnl64I=) 12: 5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC.cer (hash: Nz2k0o2IS41o55idTp4HvK3uNxIMYgMNKvrr57G+kIE=) 13: 326131333a393634343a343030303a3a2f34302d3438203d3e20323034323931.roa (hash: OXH7kpuguUKmKnwoouN0IGAOMj3E/W/ffH2kJO7vbOY=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.crl rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.mft rsync://rpki.ripe.net/repository/DEFAULT/8dBXL-cpkb0yhUuscWZ269rSKs4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:bc:ef:e6:93:29:24:88:a0:69:d6:ee:0f:76:0e:9c:a8:34:19:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1d0572fe72991bd32854bac716676ebdad22ace Validity Not Before: Dec 21 01:41:40 2025 GMT Not After : Dec 22 05:03:40 2025 GMT Subject: CN=F118C1D0F57067AFDB444DEF22B3099215899A09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:4b:3a:70:14:c5:ac:a3:48:db:a1:fa:79:e7: 26:50:3d:a8:a2:f8:64:7a:97:de:dc:ae:20:58:1c: af:97:8c:71:a7:68:0d:58:a2:36:f4:ce:40:6f:15: cb:b5:66:b2:fd:3f:4d:35:e4:c3:3b:57:47:8f:50: c0:c9:74:a8:3c:2a:d1:a6:ac:2e:3f:c3:a6:d0:a1: cb:11:7a:a3:c3:f8:08:5b:a5:93:91:50:3c:80:05: 2a:bc:9e:f2:79:90:a8:16:b2:56:af:33:aa:1a:a7: 5c:28:a5:93:5c:4d:70:d2:89:fb:7a:86:e7:bd:a5: 5a:61:8a:cc:bc:6d:1a:08:7e:6c:1d:8b:ba:4e:67: 50:31:1e:92:ff:dc:9f:00:14:06:77:95:c4:ac:cc: 28:99:99:a2:a1:00:ac:82:83:f6:50:5e:84:d3:12: 2f:39:85:03:37:7f:0e:4a:bf:20:ef:2c:a6:7a:5b: 25:43:40:2e:31:8a:1d:2d:14:68:9e:3a:d9:08:f7: e9:0c:d1:aa:1f:c8:fb:63:61:c2:bc:36:31:fc:65: 59:1d:70:70:9f:1b:86:8c:4a:71:51:ae:fd:ed:b6: e8:6a:2a:6b:4f:30:1f:3e:f5:98:f9:c3:8e:d2:d5: af:13:3d:b6:89:d4:e8:b2:38:d2:ad:23:ac:3c:98: fd:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:18:C1:D0:F5:70:67:AF:DB:44:4D:EF:22:B3:09:92:15:89:9A:09 X509v3 Authority Key Identifier: keyid:F1:D0:57:2F:E7:29:91:BD:32:85:4B:AC:71:66:76:EB:DA:D2:2A:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dBXL-cpkb0yhUuscWZ269rSKs4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:0c:1d:a1:fe:0a:73:49:f8:06:a0:e7:65:e8:cb:e5:ae:76: 4d:43:e0:d4:a2:e6:68:1f:ff:48:df:45:75:48:81:ce:75:51: c3:06:2c:4b:c4:0c:48:55:97:f5:ae:e9:57:dd:d4:a1:e8:fc: e6:68:cc:0c:f3:56:05:2e:0e:18:b7:a2:64:58:26:e7:66:84: 8e:17:df:e6:18:56:c2:a0:25:1a:bf:55:91:b5:46:4d:8e:f7: d2:62:ec:68:e7:ea:bb:a1:8b:48:35:28:9d:15:aa:ff:43:ca: a6:7a:b5:b6:3d:23:be:ec:c5:97:3d:20:38:54:58:c2:ba:f3: e3:0d:02:26:58:b7:36:2d:8d:f4:9f:de:89:24:d2:96:5d:fd: e3:47:f5:d7:a0:21:7b:a4:c0:03:45:53:23:e9:02:6f:04:93: 33:00:86:d5:41:e9:1f:0a:d6:fc:38:2c:26:85:81:58:a1:14: e7:dd:8e:9e:98:0b:73:c5:ee:09:d4:f7:25:f0:b6:27:0a:73: a7:03:0e:ee:3b:88:1d:24:d3:ed:46:cc:87:44:ad:e6:f0:e8: e2:44:b3:5e:79:04:34:7e:a5:4e:bc:91:76:a2:9f:a7:d6:a5: f8:ad:d0:27:1f:02:c4:5c:af:37:f2:88:db:5a:9e:1e:6e:ec: f2:bd:8d:85 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUPLzv5pMpJIigadbuD3YOnKg0GfkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZjFkMDU3MmZlNzI5OTFiZDMyODU0YmFjNzE2Njc2ZWJk YWQyMmFjZTAeFw0yNTEyMjEwMTQxNDBaFw0yNTEyMjIwNTAzNDBaMDMxMTAvBgNV BAMTKEYxMThDMUQwRjU3MDY3QUZEQjQ0NERFRjIyQjMwOTkyMTU4OTlBMDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxSzpwFMWso0jbofp55yZQPaii +GR6l97criBYHK+XjHGnaA1Yojb0zkBvFcu1ZrL9P0015MM7V0ePUMDJdKg8KtGm rC4/w6bQocsReqPD+AhbpZORUDyABSq8nvJ5kKgWslavM6oap1wopZNcTXDSift6 hue9pVphisy8bRoIfmwdi7pOZ1AxHpL/3J8AFAZ3lcSszCiZmaKhAKyCg/ZQXoTT Ei85hQM3fw5KvyDvLKZ6WyVDQC4xih0tFGieOtkI9+kM0aofyPtjYcK8NjH8ZVkd cHCfG4aMSnFRrv3ttuhqKmtPMB8+9Zj5w47S1a8TPbaJ1OiyONKtI6w8mP0JAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU8RjB0PVwZ6/bRE3vIrMJkhWJmgkwHwYDVR0j BBgwFoAU8dBXL+cpkb0yhUuscWZ269rSKs4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZTMwZGU4NGItNDAwYS00ZmQxLWFiOGEtZTc2MTZlMjQ1 YjQ5LzAvRjFEMDU3MkZFNzI5OTFCRDMyODU0QkFDNzE2Njc2RUJEQUQyMkFDRS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhkQlhMLWNwa2IweWhVdXNjV1oyNjly U0tzNC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lMzBkZTg0Yi00 MDBhLTRmZDEtYWI4YS1lNzYxNmUyNDViNDkvMC9GMUQwNTcyRkU3Mjk5MUJEMzI4 NTRCQUM3MTY2NzZFQkRBRDIyQUNFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlwwdof4Kc0n4BqDnZejL 5a52TUPg1KLmaB//SN9FdUiBznVRwwYsS8QMSFWX9a7pV93Uoej85mjMDPNWBS4O GLeiZFgm52aEjhff5hhWwqAlGr9VkbVGTY730mLsaOfqu6GLSDUonRWq/0PKpnq1 tj0jvuzFlz0gOFRYwrrz4w0CJli3Ni2N9J/eiSTSll3940f116Ahe6TAA0VTI+kC bwSTMwCG1UHpHwrW/DgsJoWBWKEU592OnpgLc8XuCdT3JfC2JwpzpwMO7juIHSTT 7UbMh0St5vDo4kSzXnkENH6lTryRdqKfp9al+K3QJx8CxFyvN/KI21qeHm7s8r2N hQ== -----END CERTIFICATE-----Generated at Sun Dec 21 12:03:54 2025 by rpki-client