This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/189/B056811CB944A23C757F57AFFD483C6FCFB80119.mft File: B056811CB944A23C757F57AFFD483C6FCFB80119.mft (raw, json) Hash identifier: FDpsEevuiZ7NXycVbR14pDQPtYP+nCLj7ckg3uR9Wac= Subject key identifier: 19:03:16:F7:23:D7:3A:1D:E9:11:E1:AD:35:C1:D7:86:41:11:58:84 Authority key identifier: B0:56:81:1C:B9:44:A2:3C:75:7F:57:AF:FD:48:3C:6F:CF:B8:01:19 Certificate issuer: /CN=b056811cb944a23c757f57affd483c6fcfb80119 Certificate serial: 435C8CC4A342D3F9976073306A6E04C1791C6A51 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sFaBHLlEojx1f1ev_Ug8b8-4ARk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/189/B056811CB944A23C757F57AFFD483C6FCFB80119.mft Manifest number: 1102 Signing time: Sat 20 Dec 2025 16:14:16 +0000 Manifest this update: Sat 20 Dec 2025 16:09:16 +0000 Manifest next update: Sun 21 Dec 2025 17:13:16 +0000 Files and hashes: 1: B056811CB944A23C757F57AFFD483C6FCFB80119.crl (hash: R6pujGD8tJtA7l4cfStBjBILQUrxmlyFQJAzGdrYMIQ=) 2: 33372e31362e38392e302f32342d3234203d3e20323035363539.roa (hash: 6QRhHbC8A6tvkoInC0OAQAidq/KLzHjtVgzI9mMUm4k=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/189/B056811CB944A23C757F57AFFD483C6FCFB80119.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/189/B056811CB944A23C757F57AFFD483C6FCFB80119.mft rsync://rpki.ripe.net/repository/DEFAULT/sFaBHLlEojx1f1ev_Ug8b8-4ARk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 17:13:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:5c:8c:c4:a3:42:d3:f9:97:60:73:30:6a:6e:04:c1:79:1c:6a:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b056811cb944a23c757f57affd483c6fcfb80119 Validity Not Before: Dec 20 16:09:16 2025 GMT Not After : Dec 21 17:13:16 2025 GMT Subject: CN=190316F723D73A1DE911E1AD35C1D78641115884 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:7f:77:d5:77:f6:b2:9d:fb:66:76:7b:c9:8b: 5a:9d:c1:83:e7:3c:b1:11:69:08:be:4d:e4:23:01: cc:48:0a:be:a6:33:b3:2e:6b:79:c0:9f:c2:06:a0: 59:c2:78:29:ee:9b:ce:2e:83:92:32:74:2e:cb:91: 63:c5:5e:fb:c7:3f:78:a8:00:dd:38:2b:29:96:76: 30:05:67:19:8b:71:2d:9b:6b:8a:c2:5d:7e:5b:a0: c7:0c:c2:b7:1b:8c:80:01:0f:42:e3:d0:51:6c:bb: d0:11:f5:13:60:9b:2d:a1:64:fd:bd:49:13:7a:a2: 2f:1b:ad:e4:6a:1e:16:f5:93:31:36:65:b6:29:31: 4d:96:4b:c7:69:51:72:d9:80:e7:5c:4e:ff:21:8b: 27:20:09:19:66:87:57:85:96:2c:e3:e2:57:69:3a: 8c:7b:0f:ed:96:87:c2:a2:e0:52:9d:9a:d3:82:a2: f0:f6:1f:4b:81:c2:2b:14:75:43:29:ea:d2:9b:7f: 93:ac:0c:e3:50:d6:87:1e:ff:5a:55:e7:2b:29:3c: 2d:4a:06:aa:a0:90:ad:d8:e5:b4:12:e2:a4:67:2d: 03:a1:f5:07:2e:74:b9:53:ca:06:d4:b6:3e:5a:4a: f9:bc:d7:93:f7:ba:f3:f6:7e:56:41:52:4d:e8:17: 2e:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:03:16:F7:23:D7:3A:1D:E9:11:E1:AD:35:C1:D7:86:41:11:58:84 X509v3 Authority Key Identifier: keyid:B0:56:81:1C:B9:44:A2:3C:75:7F:57:AF:FD:48:3C:6F:CF:B8:01:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/189/B056811CB944A23C757F57AFFD483C6FCFB80119.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sFaBHLlEojx1f1ev_Ug8b8-4ARk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/189/B056811CB944A23C757F57AFFD483C6FCFB80119.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:fa:58:eb:6a:47:c6:47:e4:89:bc:a9:ce:a3:79:62:56:b2: 28:e2:29:fd:d7:79:55:8d:de:57:4e:f9:26:fa:43:c0:e4:92: 94:4e:14:c9:5b:f1:fd:2e:cd:91:e7:a6:97:90:44:a9:cb:0e: 5e:3d:4c:31:66:98:bf:01:99:61:b8:d7:62:f4:46:f2:4b:2f: d5:dc:cc:46:bb:4d:00:d8:5b:9f:5e:18:e3:c2:7f:b0:78:04: 4c:1f:1b:d6:d8:2e:89:71:bf:ff:1d:41:7c:18:b6:45:db:dc: 09:53:b2:f3:16:53:5c:bb:4a:c0:f6:cb:64:06:28:d7:74:85: 79:13:ed:f2:a2:87:bd:d4:8b:bc:5c:1f:3b:55:16:73:71:78: 35:45:cf:32:42:e3:24:19:61:05:47:6c:7b:b1:b0:ec:54:ee: b2:03:bf:e9:07:90:c5:ec:01:6b:c5:fd:7c:f8:47:b8:d1:df: a8:00:b6:ab:de:cc:8d:a2:ea:45:ed:20:ca:05:fa:7e:d3:13: bf:a8:15:ac:d4:2b:28:3b:28:20:28:e5:bf:5a:21:8a:62:2b: a0:cf:7f:76:9f:81:72:29:50:d2:ea:fa:64:ed:12:c9:13:48: 8b:b5:43:8c:72:05:88:8a:6f:9e:1c:ca:15:18:0d:49:3d:7b: 80:a2:2f:72 -----BEGIN CERTIFICATE----- MIIFQzCCBCugAwIBAgIUQ1yMxKNC0/mXYHMwam4EwXkcalEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYjA1NjgxMWNiOTQ0YTIzYzc1N2Y1N2FmZmQ0ODNjNmZj ZmI4MDExOTAeFw0yNTEyMjAxNjA5MTZaFw0yNTEyMjExNzEzMTZaMDMxMTAvBgNV BAMTKDE5MDMxNkY3MjNENzNBMURFOTExRTFBRDM1QzFENzg2NDExMTU4ODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWf3fVd/aynftmdnvJi1qdwYPn PLERaQi+TeQjAcxICr6mM7Mua3nAn8IGoFnCeCnum84ug5IydC7LkWPFXvvHP3io AN04KymWdjAFZxmLcS2ba4rCXX5boMcMwrcbjIABD0Lj0FFsu9AR9RNgmy2hZP29 SRN6oi8breRqHhb1kzE2ZbYpMU2WS8dpUXLZgOdcTv8hiycgCRlmh1eFlizj4ldp Oox7D+2Wh8Ki4FKdmtOCovD2H0uBwisUdUMp6tKbf5OsDONQ1oce/1pV5yspPC1K BqqgkK3Y5bQS4qRnLQOh9QcudLlTygbUtj5aSvm815P3uvP2flZBUk3oFy79AgMB AAGjggJNMIICSTAdBgNVHQ4EFgQUGQMW9yPXOh3pEeGtNcHXhkERWIQwHwYDVR0j BBgwFoAUsFaBHLlEojx1f1ev/Ug8b8+4ARkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xODkvQjA1NjgxMUNCOTQ0QTIzQzc1N0Y1N0FGRkQ0ODNDNkZDRkI4MDEx OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3NGYUJITGxFb2p4MWYxZXZfVWc4 YjgtNEFSay5jZXIwgaEGCCsGAQUFBwELBIGUMIGRMIGOBggrBgEFBQcwC4aBgXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE4OS9CMDU2ODExQ0I5NDRB MjNDNzU3RjU3QUZGRDQ4M0M2RkNGQjgwMTE5Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiPpY62pHxkfk ibypzqN5YlayKOIp/dd5VY3eV075JvpDwOSSlE4UyVvx/S7Nkeeml5BEqcsOXj1M MWaYvwGZYbjXYvRG8ksv1dzMRrtNANhbn14Y48J/sHgETB8b1tguiXG//x1BfBi2 RdvcCVOy8xZTXLtKwPbLZAYo13SFeRPt8qKHvdSLvFwfO1UWc3F4NUXPMkLjJBlh BUdse7Gw7FTusgO/6QeQxewBa8X9fPhHuNHfqAC2q97MjaLqRe0gygX6ftMTv6gV rNQrKDsoICjlv1ohimIroM9/dp+BcilQ0ur6ZO0SyRNIi7VDjHIFiIpvnhzKFRgN ST17gKIvcg== -----END CERTIFICATE-----Generated at Sun Dec 21 02:57:46 2025 by rpki-client