This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.mft File: 069FAF47FF48AEF4C98F5097074530A74C111AB9.mft (raw, json) Hash identifier: lseXAzJMlvZEFYNyCLf3hTl7o1C8PVDlndiogq16lVs= Subject key identifier: 93:97:AC:A1:4D:27:85:B3:D0:24:03:7D:C4:56:7B:3F:D7:10:2E:53 Authority key identifier: 06:9F:AF:47:FF:48:AE:F4:C9:8F:50:97:07:45:30:A7:4C:11:1A:B9 Certificate issuer: /CN=069FAF47FF48AEF4C98F5097074530A74C111AB9 Certificate serial: 7F1D8FF20636CE5E7935C629F32F4CC0A2B52712 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/069FAF47FF48AEF4C98F5097074530A74C111AB9.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.mft Manifest number: 040C Signing time: Sat 06 Dec 2025 05:46:45 +0000 Manifest this update: Sat 06 Dec 2025 05:41:45 +0000 Manifest next update: Sun 07 Dec 2025 09:28:45 +0000 Files and hashes: 1: 326130663a383563313a3336333a3a2f34382d3438203d3e20323135363137.roa (hash: G15mowLoM7Eub0vLuxgC+jxtFArNOkVyDHG13blFH8s=) 2: 326130663a383563313a3335373a3a2f34382d3438203d3e20323135363137.roa (hash: 0B/fHqDaAtnHXiIonhpxQ7ujnJI7VSnPxGbabzcBFIA=) 3: 326130663a383563313a3335313a3a2f34382d3438203d3e20343031333836.roa (hash: pdFac+QI0R/UPdzS1q2a9ExUPSLxlAAabS/RPyMDKJ0=) 4: 069FAF47FF48AEF4C98F5097074530A74C111AB9.crl (hash: lNFz7n5jSaLaD7GmRIQJ80Ix952kNOuQvMRxe3qA1/I=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.crl rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.mft rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/069FAF47FF48AEF4C98F5097074530A74C111AB9.cer rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:1d:8f:f2:06:36:ce:5e:79:35:c6:29:f3:2f:4c:c0:a2:b5:27:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=069FAF47FF48AEF4C98F5097074530A74C111AB9 Validity Not Before: Dec 6 05:41:45 2025 GMT Not After : Dec 7 09:28:45 2025 GMT Subject: CN=9397ACA14D2785B3D024037DC4567B3FD7102E53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:6f:cd:e4:4a:09:9d:95:bf:49:ea:95:e0:1c: 88:4f:36:3b:f0:41:bc:9d:38:fe:a6:3c:31:38:25: c6:ed:13:92:08:c8:32:54:b9:bc:49:c0:22:9e:ef: 3b:85:43:d3:92:1a:b8:24:ef:4b:04:9f:97:ec:a3: 98:1d:08:33:e8:09:47:39:8e:e1:4d:92:96:2a:e3: fb:3c:35:a6:ae:b5:fc:5b:2c:86:66:e3:24:76:12: 4e:f6:c8:02:d3:8c:d2:71:95:99:99:fe:8d:d6:95: 01:3b:17:7c:d8:95:1a:ff:d3:20:5b:ca:03:02:34: 09:fe:e5:1a:83:f8:6a:8d:06:e5:4d:6e:ef:e2:6e: 93:88:aa:48:96:b2:c8:ed:66:e6:60:10:fd:32:5b: c4:d3:d9:eb:51:42:88:07:84:9c:50:41:50:6e:35: 51:18:f9:2d:92:d8:35:8c:14:1e:41:52:6e:7c:93: cf:8c:be:95:8a:b5:33:34:7d:b6:e2:de:b1:7b:9e: d1:c2:48:c0:76:5c:35:df:4b:8c:8d:3a:89:cd:30: 9a:44:64:30:2c:5d:53:ce:81:6a:1a:d9:db:0e:3c: cd:96:94:84:2b:d3:ca:bd:71:93:13:3b:bc:d9:81: 32:30:38:f0:17:fd:08:37:bb:65:97:a0:0d:3a:3b: 24:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:97:AC:A1:4D:27:85:B3:D0:24:03:7D:C4:56:7B:3F:D7:10:2E:53 X509v3 Authority Key Identifier: keyid:06:9F:AF:47:FF:48:AE:F4:C9:8F:50:97:07:45:30:A7:4C:11:1A:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/069FAF47FF48AEF4C98F5097074530A74C111AB9.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:05:f9:b5:6f:10:26:2e:4f:f2:f9:e3:58:c9:0a:ed:d4:db: 5d:ce:a8:93:81:be:45:8c:06:d2:ed:b3:7f:3a:b0:8c:54:62: c9:86:66:28:65:16:7e:44:c1:5a:8c:58:ed:bd:58:66:db:fa: 0b:ef:73:c7:9f:61:81:d6:0c:f3:a5:11:fe:87:24:ea:31:fd: b9:1a:8b:99:7b:a0:92:39:60:8f:e7:66:3b:04:3d:17:1e:21: aa:7c:e0:02:c8:e2:f4:6f:16:42:06:ee:8f:f6:0d:78:e8:96: 79:8c:5f:f1:5b:fd:9f:0a:6e:ad:7d:62:28:5e:b1:a1:f5:9e: 7b:67:c8:d6:e6:e3:59:61:b0:77:b0:4d:05:2b:4a:0f:4d:02: ac:49:00:e6:c0:82:26:ab:45:e5:22:f2:59:01:e8:1e:a4:6c: f6:19:8e:20:60:e9:5d:6d:19:9d:85:a8:01:7f:e2:b4:7d:54: fc:bd:c2:2b:a0:f4:05:df:7a:55:f8:76:48:35:84:94:98:f0: 06:17:cc:3d:be:c3:82:c2:d0:76:5b:cb:b4:c7:b3:dd:81:6d: 90:cd:02:da:ff:69:5a:40:4c:d9:9d:1a:ea:1b:ac:00:a7:42: 5e:9e:15:13:06:d5:04:ac:8b:39:fc:34:a4:fe:c5:80:a4:de: 45:94:59:a1 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUfx2P8gY2zl55NcYp8y9MwKK1JxIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDY5RkFGNDdGRjQ4QUVGNEM5OEY1MDk3MDc0NTMwQTc0 QzExMUFCOTAeFw0yNTEyMDYwNTQxNDVaFw0yNTEyMDcwOTI4NDVaMDMxMTAvBgNV BAMTKDkzOTdBQ0ExNEQyNzg1QjNEMDI0MDM3REM0NTY3QjNGRDcxMDJFNTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDb83kSgmdlb9J6pXgHIhPNjvw QbydOP6mPDE4JcbtE5IIyDJUubxJwCKe7zuFQ9OSGrgk70sEn5fso5gdCDPoCUc5 juFNkpYq4/s8NaautfxbLIZm4yR2Ek72yALTjNJxlZmZ/o3WlQE7F3zYlRr/0yBb ygMCNAn+5RqD+GqNBuVNbu/ibpOIqkiWssjtZuZgEP0yW8TT2etRQogHhJxQQVBu NVEY+S2S2DWMFB5BUm58k8+MvpWKtTM0fbbi3rF7ntHCSMB2XDXfS4yNOonNMJpE ZDAsXVPOgWoa2dsOPM2WlIQr08q9cZMTO7zZgTIwOPAX/Qg3u2WXoA06OySXAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUk5esoU0nhbPQJAN9xFZ7P9cQLlMwHwYDVR0j BBgwFoAUBp+vR/9IrvTJj1CXB0Uwp0wRGrkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjNkNWY2ODItYjUxYi00ODEyLWI4YjEtNDMwZTM4Njgz NzQ4LzIvMDY5RkFGNDdGRjQ4QUVGNEM5OEY1MDk3MDc0NTMwQTc0QzExMUFCOS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84NGQ1MTgxMC0xOTg3LTQ3 MDEtOGYxZi04NDI1MTExOTY0ZjQvMC8wNjlGQUY0N0ZGNDhBRUY0Qzk4RjUwOTcw NzQ1MzBBNzRDMTExQUI5LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzIzZDVmNjgyLWI1MWItNDgxMi1iOGIxLTQzMGUzODY4Mzc0OC8yLzA2OUZBRjQ3 RkY0OEFFRjRDOThGNTA5NzA3NDUzMEE3NEMxMTFBQjkubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAvBfm1 bxAmLk/y+eNYyQrt1NtdzqiTgb5FjAbS7bN/OrCMVGLJhmYoZRZ+RMFajFjtvVhm 2/oL73PHn2GB1gzzpRH+hyTqMf25GouZe6CSOWCP52Y7BD0XHiGqfOACyOL0bxZC Bu6P9g146JZ5jF/xW/2fCm6tfWIoXrGh9Z57Z8jW5uNZYbB3sE0FK0oPTQKsSQDm wIImq0XlIvJZAegepGz2GY4gYOldbRmdhagBf+K0fVT8vcIroPQF33pV+HZINYSU mPAGF8w9vsOCwtB2W8u0x7PdgW2QzQLa/2laQEzZnRrqG6wAp0JenhUTBtUErIs5 /DSk/sWApN5FlFmh -----END CERTIFICATE-----Generated at Sat Dec 6 09:58:01 2025 by rpki-client