This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09456214-8d25-4b5e-9e04-35c0a7a26470/0/FB2E043F755DA1329FB66347D17DC2B79A73C3FA.mft File: FB2E043F755DA1329FB66347D17DC2B79A73C3FA.mft (raw, json) Hash identifier: hSr+ZRq6bewNnajHluYcGBDxSmgmDOgrMOVUQXmL5kE= Subject key identifier: B1:31:8F:BC:6C:33:87:93:0A:6B:19:2F:9A:3A:22:31:56:9A:17:AF Authority key identifier: FB:2E:04:3F:75:5D:A1:32:9F:B6:63:47:D1:7D:C2:B7:9A:73:C3:FA Certificate issuer: /CN=FB2E043F755DA1329FB66347D17DC2B79A73C3FA Certificate serial: 6801E4E6D48EF844D7FE03C737258F5E379C1692 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/FB2E043F755DA1329FB66347D17DC2B79A73C3FA.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09456214-8d25-4b5e-9e04-35c0a7a26470/0/FB2E043F755DA1329FB66347D17DC2B79A73C3FA.mft Manifest number: 99 Signing time: Sat 06 Dec 2025 05:24:22 +0000 Manifest this update: Sat 06 Dec 2025 05:19:22 +0000 Manifest next update: Sun 07 Dec 2025 06:07:22 +0000 Files and hashes: 1: 326131343a373538343a653339303a3a2f34342d3434203d3e20333937303332.roa (hash: lLg4au3IVvnSiHqBxXRTNckohkijbwJ1gyWVOIjX72Q=) 2: 326131343a373538343a653361303a3a2f34342d3434203d3e20333937303332.roa (hash: JCyGJNLuGhm2G7yv8F0G1yT21Qa/DAGdxn1vxIgtXH8=) 3: FB2E043F755DA1329FB66347D17DC2B79A73C3FA.crl (hash: G409P09rbpNEIqAJBTtfO+J9EWKZm2Aj2oVwzukFs60=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09456214-8d25-4b5e-9e04-35c0a7a26470/0/FB2E043F755DA1329FB66347D17DC2B79A73C3FA.crl rsync://rsync.paas.rpki.ripe.net/repository/09456214-8d25-4b5e-9e04-35c0a7a26470/0/FB2E043F755DA1329FB66347D17DC2B79A73C3FA.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/FB2E043F755DA1329FB66347D17DC2B79A73C3FA.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:45:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:01:e4:e6:d4:8e:f8:44:d7:fe:03:c7:37:25:8f:5e:37:9c:16:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB2E043F755DA1329FB66347D17DC2B79A73C3FA Validity Not Before: Dec 6 05:19:22 2025 GMT Not After : Dec 7 06:07:22 2025 GMT Subject: CN=B1318FBC6C3387930A6B192F9A3A2231569A17AF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:04:db:07:89:4f:e2:91:39:a5:7f:5f:47:e6: 99:f5:3e:d7:6a:dc:3c:e7:2e:d8:3c:19:43:74:b8: 49:7a:25:0b:b1:a3:41:01:9f:7a:42:35:43:00:85: 81:33:c1:7a:ad:b7:fa:db:68:f1:08:bd:b0:3c:ad: 85:73:80:93:ce:a9:42:41:f9:48:dc:b6:d2:d6:86: f1:e8:18:8c:5b:72:7d:f1:65:bd:71:53:51:ba:b7: 62:e2:30:36:8c:c0:7a:89:6d:ed:ff:0f:bc:66:a4: a2:3c:db:e2:45:5b:34:19:23:86:19:bb:81:b8:a0: 49:0e:be:b2:46:2e:31:0e:86:04:cf:77:0f:5a:a1: d7:55:f3:84:ad:3b:9a:cb:2f:a1:61:96:16:6f:9a: 9e:4b:50:1d:2b:9d:d8:f7:28:1e:38:6b:1a:9e:e5: 44:01:de:4a:f2:b8:21:10:60:a6:6b:56:10:b5:a3: 92:48:f4:92:78:c8:9f:80:01:e5:56:06:54:78:0c: a3:e4:6f:9b:f0:db:bb:c8:f4:0f:f8:4a:51:28:c1: 51:55:cc:36:89:4e:55:51:26:7c:d1:4c:98:90:6e: 2b:36:04:0b:04:a1:8f:b1:3c:d4:f2:7c:07:c5:9c: 04:7f:e1:f0:a2:a6:93:9b:9c:d2:a8:cb:ed:62:5f: 0e:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:31:8F:BC:6C:33:87:93:0A:6B:19:2F:9A:3A:22:31:56:9A:17:AF X509v3 Authority Key Identifier: keyid:FB:2E:04:3F:75:5D:A1:32:9F:B6:63:47:D1:7D:C2:B7:9A:73:C3:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/09456214-8d25-4b5e-9e04-35c0a7a26470/0/FB2E043F755DA1329FB66347D17DC2B79A73C3FA.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/FB2E043F755DA1329FB66347D17DC2B79A73C3FA.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09456214-8d25-4b5e-9e04-35c0a7a26470/0/FB2E043F755DA1329FB66347D17DC2B79A73C3FA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:b9:4a:91:74:1f:61:80:2f:43:14:66:0e:39:bc:9d:07:08: 9e:1e:04:31:19:0a:ed:07:b3:2d:08:66:10:a5:33:4b:8f:ed: 80:04:78:ee:15:40:5a:b4:6f:4b:54:79:f8:b8:14:35:02:2e: c4:b1:02:e1:c3:62:13:7f:c3:a4:ab:92:7a:48:87:09:d1:49: ab:30:41:48:ea:79:bd:7f:c9:58:d4:cf:0d:ba:90:ab:81:17: 17:be:ff:90:c2:73:a9:67:55:77:9a:97:c7:f1:0e:cf:4c:04: 81:5f:b9:4a:9e:07:73:3d:a7:e4:55:5e:3f:38:57:ab:60:7a: 55:47:fe:b5:df:69:1b:3b:cb:64:3b:3d:e3:a8:10:ed:45:30: 4a:8a:e1:d6:20:d1:af:a4:c7:6c:81:1e:0e:41:20:17:f0:f9: 95:f1:c7:be:da:7a:f9:e7:62:65:e2:2c:08:93:62:1e:af:d9: ad:32:2a:f0:df:42:30:c8:e4:81:75:da:00:67:08:c6:89:fd: 3f:f6:36:3d:22:17:19:76:39:ed:9d:2d:b4:9e:53:e4:f6:a5: 0a:fc:54:cd:c8:e1:56:78:d3:15:cc:1f:31:b9:5a:e1:1f:0d: c3:4a:8a:40:86:b1:94:6f:63:e3:6f:5f:f5:1b:90:e9:ad:6e: 00:c5:db:93 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUaAHk5tSO+ETX/gPHNyWPXjecFpIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkIyRTA0M0Y3NTVEQTEzMjlGQjY2MzQ3RDE3REMyQjc5 QTczQzNGQTAeFw0yNTEyMDYwNTE5MjJaFw0yNTEyMDcwNjA3MjJaMDMxMTAvBgNV BAMTKEIxMzE4RkJDNkMzMzg3OTMwQTZCMTkyRjlBM0EyMjMxNTY5QTE3QUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbBNsHiU/ikTmlf19H5pn1Ptdq 3DznLtg8GUN0uEl6JQuxo0EBn3pCNUMAhYEzwXqtt/rbaPEIvbA8rYVzgJPOqUJB +UjcttLWhvHoGIxbcn3xZb1xU1G6t2LiMDaMwHqJbe3/D7xmpKI82+JFWzQZI4YZ u4G4oEkOvrJGLjEOhgTPdw9aoddV84StO5rLL6FhlhZvmp5LUB0rndj3KB44axqe 5UQB3kryuCEQYKZrVhC1o5JI9JJ4yJ+AAeVWBlR4DKPkb5vw27vI9A/4SlEowVFV zDaJTlVRJnzRTJiQbis2BAsEoY+xPNTyfAfFnAR/4fCippObnNKoy+1iXw7BAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUsTGPvGwzh5MKaxkvmjoiMVaaF68wHwYDVR0j BBgwFoAU+y4EP3VdoTKftmNH0X3Ct5pzw/owDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDk0NTYyMTQtOGQyNS00YjVlLTllMDQtMzVjMGE3YTI2 NDcwLzAvRkIyRTA0M0Y3NTVEQTEzMjlGQjY2MzQ3RDE3REMyQjc5QTczQzNGQS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9GQjJFMDQzRjc1NURBMTMyOUZCNjYzNDdE MTdEQzJCNzlBNzNDM0ZBLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzA5NDU2MjE0LThkMjUtNGI1ZS05ZTA0LTM1YzBhN2EyNjQ3MC8wL0ZCMkUwNDNG NzU1REExMzI5RkI2NjM0N0QxN0RDMkI3OUE3M0MzRkEubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCPuUqR dB9hgC9DFGYOObydBwieHgQxGQrtB7MtCGYQpTNLj+2ABHjuFUBatG9LVHn4uBQ1 Ai7EsQLhw2ITf8Okq5J6SIcJ0UmrMEFI6nm9f8lY1M8NupCrgRcXvv+QwnOpZ1V3 mpfH8Q7PTASBX7lKngdzPafkVV4/OFerYHpVR/6132kbO8tkOz3jqBDtRTBKiuHW INGvpMdsgR4OQSAX8PmV8ce+2nr552Jl4iwIk2Ier9mtMirw30IwyOSBddoAZwjG if0/9jY9IhcZdjntnS20nlPk9qUK/FTNyOFWeNMVzB8xuVrhHw3DSopAhrGUb2Pj b1/1G5DprW4AxduT -----END CERTIFICATE-----Generated at Sat Dec 6 16:01:44 2025 by rpki-client