This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.mft File: ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.mft (raw, json) Hash identifier: oN5IkZEravl+byH4mjwgwxNzeltbV0rfipdbsxokxCU= Subject key identifier: 4E:00:C9:50:D2:70:D8:66:1B:74:84:B9:B3:E8:CE:BA:F6:70:65:7B Authority key identifier: ED:9E:DB:2A:15:87:17:85:FB:AE:38:E2:3C:38:82:0D:BF:A2:CC:A4 Certificate issuer: /CN=ed9edb2a15871785fbae38e23c38820dbfa2cca4 Certificate serial: 1B236FF21F6126DCB7670452763F91FCC55E9861 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.mft Manifest number: 04AB Signing time: Fri 19 Dec 2025 20:57:33 +0000 Manifest this update: Fri 19 Dec 2025 20:52:33 +0000 Manifest next update: Sat 20 Dec 2025 22:16:33 +0000 Files and hashes: 1: 39332e3131332e3231322e302f32342d3234203d3e203631333137.roa (hash: Mffmj9tigk0AvK8qUYEb5eCtUKaC20yQi7QyJq/JmDA=) 2: 3139332e3230332e3230352e302f32342d3234203d3e203439343638.roa (hash: miGCXloG7luQuuhAJwRZ+kv5aIjNiE2JcKseZN1V68A=) 3: 3139332e3230332e3230342e302f32332d3233203d3e203439343638.roa (hash: SUmtopgHH8Nww5p/xP0ODKmemVjaFc93EIAThLWzp7U=) 4: 38392e34322e3131312e302f32342d3234203d3e203631333137.roa (hash: T+9QQX64dOYanRzHKI9rhWnUyaZt9GgRQXrvhvIBrgs=) 5: 3139332e3230332e3230342e302f32342d3234203d3e203439343638.roa (hash: QWu7fHTZ3PYuiSQam7CYDAJC5NNcXBc6g5huH6iiI3k=) 6: 34362e3130322e3233332e302f32342d3234203d3e203233383635.roa (hash: e+SnYwDfi/1yFie63JthDdkoXVxOgCTXFxhh6sC9If8=) 7: 37372e38312e3133372e302f32342d3234203d3e20333939363431.roa (hash: xL9s9lGr6Y1GcoWPNRfoiIg5P1LyMl92tRndWKMRxvY=) 8: 37372e38312e3133382e302f32342d3234203d3e203136323736.roa (hash: QSH/lbFqFfB0kjPH8NXF1ssxXFJMA3tQTCmwcMlSfAQ=) 9: 39332e3131332e32352e302f32342d3234203d3e20323134323039.roa (hash: JoDR/IGOmrYGEwu1+N5VZtYwQlvGeImnksk34tLzkIU=) 10: 34362e3130322e3233322e302f32342d3234203d3e203231383539.roa (hash: xmss+X7N7YEJYzsofqDqdmVc6hQlkz4fI2F5jzOV+w0=) 11: 38392e34322e3131302e302f32342d3234203d3e203631333137.roa (hash: VsyHwXGnPa9jTtnErp0xUSN9uxae8b2L7otiSzP7S2M=) 12: ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.crl (hash: 2ka3CTgIiU4+fTolRCXElTpucOehmRo0XaAifwvbt6c=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.crl rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.mft rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 17:13:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:23:6f:f2:1f:61:26:dc:b7:67:04:52:76:3f:91:fc:c5:5e:98:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed9edb2a15871785fbae38e23c38820dbfa2cca4 Validity Not Before: Dec 19 20:52:33 2025 GMT Not After : Dec 20 22:16:33 2025 GMT Subject: CN=4E00C950D270D8661B7484B9B3E8CEBAF670657B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:1d:cc:2e:d1:91:6d:37:62:07:85:eb:6d:26: b7:c6:b0:65:3d:e4:54:f3:b7:89:52:93:3a:35:6f: d4:66:9b:7e:3c:01:4f:9f:e1:e6:ac:66:47:32:e6: 71:13:89:80:21:aa:43:bc:e3:74:c1:e8:cf:ed:73: 8f:2d:65:0b:8b:5e:e3:8d:2d:21:cc:7a:d8:ed:59: ac:97:a8:68:36:61:81:d0:d7:50:6b:f0:b3:6c:30: 87:d2:f1:78:85:92:99:d3:d5:94:93:7e:1c:d4:f5: ab:af:8a:4a:db:b8:05:42:8a:9d:5b:ec:0b:d9:6b: 5b:49:ec:ce:89:dc:c2:67:8a:69:37:0c:0a:3c:68: 77:bd:82:40:87:55:44:c4:25:da:09:51:24:2c:62: 05:b0:e6:f4:c5:99:22:4f:2e:be:aa:3f:12:de:84: 9e:54:09:1e:54:08:7a:4f:d3:fb:38:ed:6c:21:b2: 76:ee:68:a7:ec:07:30:7b:4e:f4:63:a7:15:12:17: 8c:9d:32:c2:6b:eb:72:2c:87:29:50:42:1f:dc:1e: 2c:e9:e5:32:f7:80:88:81:48:a0:5f:88:11:8c:c7: 39:8e:a5:1c:a0:01:48:2d:72:2e:8e:ae:3d:39:a8: 47:e3:54:99:db:f0:5d:8e:f4:a0:e4:7f:21:85:1c: be:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:00:C9:50:D2:70:D8:66:1B:74:84:B9:B3:E8:CE:BA:F6:70:65:7B X509v3 Authority Key Identifier: keyid:ED:9E:DB:2A:15:87:17:85:FB:AE:38:E2:3C:38:82:0D:BF:A2:CC:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:94:20:88:92:c7:0b:c5:94:6e:0e:e4:da:b8:1f:f2:65:9c: f3:84:36:a3:2a:70:3f:33:55:9b:4e:8e:c7:4f:8d:7a:00:f0: 41:65:9e:e8:06:84:cb:24:50:da:8a:e2:5a:2c:8a:68:30:1c: 36:b0:71:10:06:d8:32:85:e6:f0:62:59:08:9b:fb:cd:01:70: 26:ad:97:98:2e:86:62:67:35:fa:a0:b5:5b:6d:8c:14:40:99: 78:d4:fa:49:8a:e3:fd:16:b5:dc:a1:98:f3:04:18:60:c9:6c: a7:57:8c:f9:bf:f4:79:75:57:67:81:68:b6:9d:5f:eb:5f:1e: 1c:51:82:b3:74:33:83:54:c6:2a:86:40:b2:07:43:cf:1f:fb: af:19:ad:2f:20:d3:0b:06:a7:2c:b3:f9:b2:95:ba:0a:61:15: b9:dc:92:c5:c7:c3:d2:2e:78:46:cb:d6:a3:d1:f1:50:62:f2: 6c:62:c9:ce:82:eb:33:aa:1e:79:7e:91:40:9e:ed:50:80:7a: ba:4e:5a:89:25:ee:02:54:fb:97:f8:78:c9:47:3f:57:f3:95: 10:14:a0:af:c7:43:88:27:de:ab:a6:b1:65:1f:ef:af:26:27: 30:85:ad:64:82:8b:e2:ab:2f:9e:0a:27:63:91:94:2a:f9:22: 8a:bb:63:b7 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUGyNv8h9hJty3ZwRSdj+R/MVemGEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZWQ5ZWRiMmExNTg3MTc4NWZiYWUzOGUyM2MzODgyMGRi ZmEyY2NhNDAeFw0yNTEyMTkyMDUyMzNaFw0yNTEyMjAyMjE2MzNaMDMxMTAvBgNV BAMTKDRFMDBDOTUwRDI3MEQ4NjYxQjc0ODRCOUIzRThDRUJBRjY3MDY1N0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD5Hcwu0ZFtN2IHhettJrfGsGU9 5FTzt4lSkzo1b9Rmm348AU+f4easZkcy5nETiYAhqkO843TB6M/tc48tZQuLXuON LSHMetjtWayXqGg2YYHQ11Br8LNsMIfS8XiFkpnT1ZSTfhzU9auvikrbuAVCip1b 7AvZa1tJ7M6J3MJnimk3DAo8aHe9gkCHVUTEJdoJUSQsYgWw5vTFmSJPLr6qPxLe hJ5UCR5UCHpP0/s47WwhsnbuaKfsBzB7TvRjpxUSF4ydMsJr63IshylQQh/cHizp 5TL3gIiBSKBfiBGMxzmOpRygAUgtci6Orj05qEfjVJnb8F2O9KDkfyGFHL6xAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUTgDJUNJw2GYbdIS5s+jOuvZwZXswHwYDVR0j BBgwFoAU7Z7bKhWHF4X7rjjiPDiCDb+izKQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZWEwZGU5N2YtN2VlOC00Y2UwLWIwNDUtZWZhYzhjMjQz Yzc5LzAvRUQ5RURCMkExNTg3MTc4NUZCQUUzOEUyM0MzODgyMERCRkEyQ0NBNC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdaN2JLaFdIRjRYN3JqamlQRGlDRGIt aXpLUS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lYTBkZTk3Zi03 ZWU4LTRjZTAtYjA0NS1lZmFjOGMyNDNjNzkvMC9FRDlFREIyQTE1ODcxNzg1RkJB RTM4RTIzQzM4ODIwREJGQTJDQ0E0Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATZQgiJLHC8WUbg7k2rgf 8mWc84Q2oypwPzNVm06Ox0+NegDwQWWe6AaEyyRQ2oriWiyKaDAcNrBxEAbYMoXm 8GJZCJv7zQFwJq2XmC6GYmc1+qC1W22MFECZeNT6SYrj/Ra13KGY8wQYYMlsp1eM +b/0eXVXZ4Fotp1f618eHFGCs3Qzg1TGKoZAsgdDzx/7rxmtLyDTCwanLLP5spW6 CmEVudySxcfD0i54RsvWo9HxUGLybGLJzoLrM6oeeX6RQJ7tUIB6uk5aiSXuAlT7 l/h4yUc/V/OVEBSgr8dDiCfeq6axZR/vryYnMIWtZIKL4qsvngonY5GUKvkiirtj tw== -----END CERTIFICATE-----Generated at Sat Dec 20 02:59:36 2025 by rpki-client