This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/1/A4A082EAE8EF48C7B407C40E742479EADD862089.mft File: A4A082EAE8EF48C7B407C40E742479EADD862089.mft (raw, json) Hash identifier: KV588+J5jHrXSYzvV1eLKTfc8OU0X3Icpk9yYOsotwE= Subject key identifier: F2:D2:0F:C7:8B:A1:E8:E1:A9:E8:2E:2B:3D:92:4F:F2:79:19:B9:D6 Authority key identifier: A4:A0:82:EA:E8:EF:48:C7:B4:07:C4:0E:74:24:79:EA:DD:86:20:89 Certificate issuer: /CN=A4A082EAE8EF48C7B407C40E742479EADD862089 Certificate serial: 7B89DC2F3346676428C07B58B74B35FB1D3BB94D Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/A4A082EAE8EF48C7B407C40E742479EADD862089.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/1/A4A082EAE8EF48C7B407C40E742479EADD862089.mft Manifest number: 019B Signing time: Sat 06 Dec 2025 07:20:57 +0000 Manifest this update: Sat 06 Dec 2025 07:15:57 +0000 Manifest next update: Sun 07 Dec 2025 08:09:57 +0000 Files and hashes: 1: 326130663a383563313a6234643a3a2f34382d3438203d3e20323133343238.roa (hash: MorJ8/zqWP+ENMZ78Dfg8lahRlU/VfcwHwmQyMuE7hc=) 2: 326130663a383563313a3339303a3a2f34382d3438203d3e20323135343730.roa (hash: mky/ldC1XpVEwoLHqIyOpw4wZEQNfx0y97P4Ne2BiJs=) 3: A4A082EAE8EF48C7B407C40E742479EADD862089.crl (hash: TqFHT2wmlGG1mesCNOSIK2T1yNPckGaDjwweWGYUQj8=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/1/A4A082EAE8EF48C7B407C40E742479EADD862089.crl rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/1/A4A082EAE8EF48C7B407C40E742479EADD862089.mft rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/A4A082EAE8EF48C7B407C40E742479EADD862089.cer rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:09:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:89:dc:2f:33:46:67:64:28:c0:7b:58:b7:4b:35:fb:1d:3b:b9:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A4A082EAE8EF48C7B407C40E742479EADD862089 Validity Not Before: Dec 6 07:15:57 2025 GMT Not After : Dec 7 08:09:57 2025 GMT Subject: CN=F2D20FC78BA1E8E1A9E82E2B3D924FF27919B9D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:dc:00:ee:ad:79:13:a5:f9:a5:5a:be:2f:ce: b3:d6:89:db:da:6e:b7:86:21:d1:3e:cf:f9:7d:a7: 57:7b:f1:3c:df:bf:71:96:a2:82:aa:65:f5:13:e2: c4:18:0e:a6:25:f2:69:35:54:1a:e1:ad:f4:81:98: 44:49:c0:23:66:d0:8c:92:67:d3:7b:df:2b:ef:0a: 3a:d8:10:e2:97:aa:82:6c:7e:40:0c:89:ab:6c:f5: 93:3b:65:12:3c:7a:07:7e:0a:ae:bb:cf:3e:43:8f: 88:e5:ae:6e:fa:61:3a:a6:7e:e9:2c:6d:c1:77:2d: 6f:6e:0e:a5:ed:b0:db:ff:51:7e:97:4b:ff:cb:75: 5f:c9:e3:d2:d1:f2:6b:77:49:07:96:34:66:9c:97: f0:ae:ed:a1:d3:b5:c9:5a:06:d2:99:65:7b:6f:c4: b7:94:29:db:00:d0:35:47:ed:79:59:1d:92:1d:49: 51:e3:67:4c:cd:6b:1f:87:82:34:3d:77:18:c9:a2: be:4f:32:9f:9b:17:fd:d0:36:fa:c5:cf:51:f9:a8: fe:0a:41:f7:66:d6:08:c1:ce:5d:21:5b:62:a6:95: bf:fa:14:2e:b7:f4:bb:5d:17:5d:f3:10:c6:aa:a5: 95:71:26:03:48:54:71:8f:b2:06:cf:a9:3f:25:d8: 21:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:D2:0F:C7:8B:A1:E8:E1:A9:E8:2E:2B:3D:92:4F:F2:79:19:B9:D6 X509v3 Authority Key Identifier: keyid:A4:A0:82:EA:E8:EF:48:C7:B4:07:C4:0E:74:24:79:EA:DD:86:20:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/1/A4A082EAE8EF48C7B407C40E742479EADD862089.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/A4A082EAE8EF48C7B407C40E742479EADD862089.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/1/A4A082EAE8EF48C7B407C40E742479EADD862089.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:f8:dc:36:bd:04:dd:97:ed:00:2a:ce:6b:ce:23:19:bd:78: 7c:c8:5c:fe:c1:c0:59:a5:63:e4:70:03:d0:4a:4d:14:fc:95: f6:2e:31:0f:14:47:3c:93:07:3c:db:1a:2e:7d:6c:3c:ee:ec: e9:d4:1c:02:16:3d:c2:99:85:98:a9:eb:31:5c:83:7b:85:de: a5:2f:cd:15:10:8c:1d:9c:eb:fb:3c:42:38:0a:31:09:60:98: ef:fa:ec:ec:e8:81:11:f0:a4:63:24:1b:72:d3:a5:4f:26:3d: 0a:b3:90:f1:c5:6d:83:5a:6d:78:fa:40:1d:85:9d:a3:e7:a2: 5c:95:56:01:9e:5e:3f:b2:ab:ef:04:21:54:8c:17:95:43:54: e6:cb:d5:b5:0d:43:a1:5c:8f:56:a2:03:59:66:41:7a:a2:fb: 6a:c8:5d:ee:eb:77:b4:f9:0c:38:95:8f:3b:09:20:01:cc:72: a7:90:e2:55:95:86:a0:92:9d:d4:b4:f2:11:78:69:fb:b6:0b: 64:64:f7:f9:ad:e5:74:af:94:7b:f9:42:c6:98:7d:2e:56:a0: 9d:a3:35:77:1e:52:17:98:74:88:8e:fd:65:7f:60:c3:8a:ea: 06:ce:89:20:b0:d1:e1:09:62:9f:ce:29:6d:64:c7:ca:dc:2d: 47:27:cf:b5 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUe4ncLzNGZ2QowHtYt0s1+x07uU0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTRBMDgyRUFFOEVGNDhDN0I0MDdDNDBFNzQyNDc5RUFE RDg2MjA4OTAeFw0yNTEyMDYwNzE1NTdaFw0yNTEyMDcwODA5NTdaMDMxMTAvBgNV BAMTKEYyRDIwRkM3OEJBMUU4RTFBOUU4MkUyQjNEOTI0RkYyNzkxOUI5RDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCX3ADurXkTpfmlWr4vzrPWidva breGIdE+z/l9p1d78Tzfv3GWooKqZfUT4sQYDqYl8mk1VBrhrfSBmERJwCNm0IyS Z9N73yvvCjrYEOKXqoJsfkAMiats9ZM7ZRI8egd+Cq67zz5Dj4jlrm76YTqmfuks bcF3LW9uDqXtsNv/UX6XS//LdV/J49LR8mt3SQeWNGacl/Cu7aHTtclaBtKZZXtv xLeUKdsA0DVH7XlZHZIdSVHjZ0zNax+HgjQ9dxjJor5PMp+bF/3QNvrFz1H5qP4K Qfdm1gjBzl0hW2Kmlb/6FC639LtdF13zEMaqpZVxJgNIVHGPsgbPqT8l2CFdAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU8tIPx4uh6OGp6C4rPZJP8nkZudYwHwYDVR0j BBgwFoAUpKCC6ujvSMe0B8QOdCR56t2GIIkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTlhYTlkYTctZjFlNC00ZDk4LWJmOTUtOWZkZmNmNDQ4 Zjc3LzEvQTRBMDgyRUFFOEVGNDhDN0I0MDdDNDBFNzQyNDc5RUFERDg2MjA4OS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84NGQ1MTgxMC0xOTg3LTQ3 MDEtOGYxZi04NDI1MTExOTY0ZjQvMC9BNEEwODJFQUU4RUY0OEM3QjQwN0M0MEU3 NDI0NzlFQUREODYyMDg5LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzE5YWE5ZGE3LWYxZTQtNGQ5OC1iZjk1LTlmZGZjZjQ0OGY3Ny8xL0E0QTA4MkVB RThFRjQ4QzdCNDA3QzQwRTc0MjQ3OUVBREQ4NjIwODkubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAq+Nw2 vQTdl+0AKs5rziMZvXh8yFz+wcBZpWPkcAPQSk0U/JX2LjEPFEc8kwc82xoufWw8 7uzp1BwCFj3CmYWYqesxXIN7hd6lL80VEIwdnOv7PEI4CjEJYJjv+uzs6IER8KRj JBty06VPJj0Ks5DxxW2DWm14+kAdhZ2j56JclVYBnl4/sqvvBCFUjBeVQ1Tmy9W1 DUOhXI9WogNZZkF6ovtqyF3u63e0+Qw4lY87CSABzHKnkOJVlYagkp3UtPIReGn7 tgtkZPf5reV0r5R7+ULGmH0uVqCdozV3HlIXmHSIjv1lf2DDiuoGzokgsNHhCWKf ziltZMfK3C1HJ8+1 -----END CERTIFICATE-----Generated at Sat Dec 6 23:35:29 2025 by rpki-client