This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f812d3ef-c5fc-45b0-954a-8a52210c2e90/0/61D9F4B7CF8D860603082E07FDCA08518E16AAFB.mft File: 61D9F4B7CF8D860603082E07FDCA08518E16AAFB.mft (raw, json) Hash identifier: 9Eruzo+X4UhwAYmN3MCUr857jYY8YeaITSX9NG9P2xA= Subject key identifier: 0A:C3:24:AF:B4:6F:1D:09:DC:6C:72:71:38:CC:54:B8:97:1F:68:CA Authority key identifier: 61:D9:F4:B7:CF:8D:86:06:03:08:2E:07:FD:CA:08:51:8E:16:AA:FB Certificate issuer: /CN=61D9F4B7CF8D860603082E07FDCA08518E16AAFB Certificate serial: 2C0DCD5D5DB8BFC716D750BCEC89441FE223537C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/61D9F4B7CF8D860603082E07FDCA08518E16AAFB.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f812d3ef-c5fc-45b0-954a-8a52210c2e90/0/61D9F4B7CF8D860603082E07FDCA08518E16AAFB.mft Manifest number: 0E Signing time: Fri 19 Dec 2025 18:53:25 +0000 Manifest this update: Fri 19 Dec 2025 18:48:25 +0000 Manifest next update: Sat 20 Dec 2025 20:04:25 +0000 Files and hashes: 1: 326130663a316363353a6330303a3a2f34302d3430203d3e20323038373534.roa (hash: Q5Z/wqUBwWhM8mRyojjN6NpV/xV/IzhUzgKoHX5P1HU=) 2: 61D9F4B7CF8D860603082E07FDCA08518E16AAFB.crl (hash: 9htsiTM3p1NyrCVK7FOLi2nYuJgYksoRj075WrdPSRM=) 3: 326130663a316363353a6330303a3a2f34342d3434203d3e20313337393038.roa (hash: ATZc214+3GX48p6REnIm7Qjen5IkiQYJugGYiQlSRpg=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f812d3ef-c5fc-45b0-954a-8a52210c2e90/0/61D9F4B7CF8D860603082E07FDCA08518E16AAFB.crl rsync://rsync.paas.rpki.ripe.net/repository/f812d3ef-c5fc-45b0-954a-8a52210c2e90/0/61D9F4B7CF8D860603082E07FDCA08518E16AAFB.mft rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/61D9F4B7CF8D860603082E07FDCA08518E16AAFB.cer rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/75A838E02C61800F73D3019DE0A51F567B64BC0E.crl rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/75A838E02C61800F73D3019DE0A51F567B64BC0E.mft rsync://rpki.ripe.net/repository/DEFAULT/dag44CxhgA9z0wGd4KUfVntkvA4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 11:33:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:0d:cd:5d:5d:b8:bf:c7:16:d7:50:bc:ec:89:44:1f:e2:23:53:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61D9F4B7CF8D860603082E07FDCA08518E16AAFB Validity Not Before: Dec 19 18:48:25 2025 GMT Not After : Dec 20 20:04:25 2025 GMT Subject: CN=0AC324AFB46F1D09DC6C727138CC54B8971F68CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:37:99:dc:7d:fd:3a:d1:4d:c5:d7:d1:f2:77: 3b:cb:10:85:64:3a:41:ff:d9:09:a8:ea:93:67:ec: bc:56:28:5a:26:1e:6f:9a:6b:09:fd:fe:f6:d8:dc: c5:b0:87:b9:24:dd:bc:6a:da:98:30:87:ee:2f:7f: 44:8b:62:55:14:f1:27:02:85:1d:ee:61:25:1f:23: 92:f9:77:45:cd:e5:b4:82:64:27:0e:cc:31:19:c6: 4e:92:f9:66:be:ed:f4:01:b1:f1:77:68:fb:e7:8e: a6:54:17:ac:d3:68:60:ac:15:d7:d6:e8:1d:39:23: 7b:73:79:c7:38:25:52:a5:73:70:a0:21:ae:bd:1b: 35:3a:a6:e2:31:5c:04:ed:d6:74:49:c3:92:69:11: 0d:c9:52:3c:e2:bb:d8:cb:75:71:54:96:e9:5f:2a: 69:68:26:19:f2:f8:92:f0:1d:c1:f1:2a:d8:e0:bd: 3f:90:e9:f5:4a:60:ee:46:81:2d:3b:ef:a1:71:7b: 1c:6c:6e:f9:e2:aa:e6:13:06:e0:0b:4f:0c:4d:ae: 47:e6:5d:09:6f:3d:03:3f:1e:12:a8:0c:0f:4f:8c: 6d:9b:f7:89:ee:d7:a7:fa:11:f6:c0:ed:ff:cc:94: eb:e9:f2:76:34:85:16:25:15:bd:6f:35:0f:2f:79: 25:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:C3:24:AF:B4:6F:1D:09:DC:6C:72:71:38:CC:54:B8:97:1F:68:CA X509v3 Authority Key Identifier: keyid:61:D9:F4:B7:CF:8D:86:06:03:08:2E:07:FD:CA:08:51:8E:16:AA:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f812d3ef-c5fc-45b0-954a-8a52210c2e90/0/61D9F4B7CF8D860603082E07FDCA08518E16AAFB.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/61D9F4B7CF8D860603082E07FDCA08518E16AAFB.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f812d3ef-c5fc-45b0-954a-8a52210c2e90/0/61D9F4B7CF8D860603082E07FDCA08518E16AAFB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:30:b2:b5:df:ae:19:ec:b9:cd:ff:c7:87:af:19:af:24:ea: 2a:a5:d3:33:2d:24:83:5b:a6:c4:36:a5:1b:ba:bd:17:d5:86: ef:08:bd:34:5d:8e:af:2f:43:db:49:c2:d4:a6:cb:ef:3a:10: a0:8e:7e:eb:8e:90:6a:86:2d:ff:1c:bc:53:78:73:77:66:fe: 23:11:e1:03:e1:a2:4d:07:ed:aa:d0:6d:76:e9:c5:07:db:0b: 2c:3b:88:32:aa:8b:69:8e:0d:cf:27:c1:ba:12:f2:60:aa:8c: fd:94:7d:32:52:53:cf:72:1a:66:4d:81:8a:08:20:6a:d1:8d: 32:04:97:4e:50:8b:13:56:7e:2a:e9:5c:97:01:6d:e2:0f:a1: 69:5f:07:31:d4:cd:ad:60:b0:b4:a2:32:61:18:a0:2a:55:2b: 79:bf:df:4c:7e:89:bd:7f:d8:23:5b:1f:e9:ac:a0:ae:0b:8c: b8:a7:0f:d4:25:44:7d:c8:4b:32:82:10:e5:56:8b:fa:15:f0: ba:a3:fc:43:b1:13:83:3f:45:85:8a:79:a1:c1:ea:44:3d:b1: 55:36:cb:db:2a:0a:a4:88:bb:a3:59:43:14:eb:0b:d2:c1:e3: 6b:2b:85:1d:81:0e:8c:be:23:eb:e6:62:23:aa:31:ab:f0:75: 53:ce:4c:79 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIULA3NXV24v8cW11C87IlEH+IjU3wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjFEOUY0QjdDRjhEODYwNjAzMDgyRTA3RkRDQTA4NTE4 RTE2QUFGQjAeFw0yNTEyMTkxODQ4MjVaFw0yNTEyMjAyMDA0MjVaMDMxMTAvBgNV BAMTKDBBQzMyNEFGQjQ2RjFEMDlEQzZDNzI3MTM4Q0M1NEI4OTcxRjY4Q0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSN5ncff060U3F19HydzvLEIVk OkH/2Qmo6pNn7LxWKFomHm+aawn9/vbY3MWwh7kk3bxq2pgwh+4vf0SLYlUU8ScC hR3uYSUfI5L5d0XN5bSCZCcOzDEZxk6S+Wa+7fQBsfF3aPvnjqZUF6zTaGCsFdfW 6B05I3tzecc4JVKlc3CgIa69GzU6puIxXATt1nRJw5JpEQ3JUjziu9jLdXFUlulf KmloJhny+JLwHcHxKtjgvT+Q6fVKYO5GgS0776FxexxsbvniquYTBuALTwxNrkfm XQlvPQM/HhKoDA9PjG2b94nu16f6EfbA7f/MlOvp8nY0hRYlFb1vNQ8veSX1AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUCsMkr7RvHQncbHJxOMxUuJcfaMowHwYDVR0j BBgwFoAUYdn0t8+NhgYDCC4H/coIUY4WqvswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZjgxMmQzZWYtYzVmYy00NWIwLTk1NGEtOGE1MjIxMGMy ZTkwLzAvNjFEOUY0QjdDRjhEODYwNjAzMDgyRTA3RkRDQTA4NTE4RTE2QUFGQi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lMjZlYjEzNi00ZmU1LTRl NjEtYTRkOC1mMzQ1ZjUyYmMyNWQvMC82MUQ5RjRCN0NGOEQ4NjA2MDMwODJFMDdG RENBMDg1MThFMTZBQUZCLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2Y4MTJkM2VmLWM1ZmMtNDViMC05NTRhLThhNTIyMTBjMmU5MC8wLzYxRDlGNEI3 Q0Y4RDg2MDYwMzA4MkUwN0ZEQ0EwODUxOEUxNkFBRkIubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQC8MLK1 364Z7LnN/8eHrxmvJOoqpdMzLSSDW6bENqUbur0X1YbvCL00XY6vL0PbScLUpsvv OhCgjn7rjpBqhi3/HLxTeHN3Zv4jEeED4aJNB+2q0G126cUH2wssO4gyqotpjg3P J8G6EvJgqoz9lH0yUlPPchpmTYGKCCBq0Y0yBJdOUIsTVn4q6VyXAW3iD6FpXwcx 1M2tYLC0ojJhGKAqVSt5v99Mfom9f9gjWx/prKCuC4y4pw/UJUR9yEsyghDlVov6 FfC6o/xDsRODP0WFinmhwepEPbFVNsvbKgqkiLujWUMU6wvSweNrK4UdgQ6MviPr 5mIjqjGr8HVTzkx5 -----END CERTIFICATE-----Generated at Sat Dec 20 00:48:53 2025 by rpki-client