This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/282b5e00-2ac3-49f1-a29b-26a5fdf0fa41/0/72F3EE169F9BD71F78A42D1A72FE0F2A824822D1.mft File: 72F3EE169F9BD71F78A42D1A72FE0F2A824822D1.mft (raw, json) Hash identifier: eh60+gfOcmyMmIebnntCWRwstkv56UopMYPdZvnAELI= Subject key identifier: 1E:B0:AE:B2:F2:BC:C6:E2:DC:FD:FA:EE:67:7B:28:F7:9B:E0:8A:71 Authority key identifier: 72:F3:EE:16:9F:9B:D7:1F:78:A4:2D:1A:72:FE:0F:2A:82:48:22:D1 Certificate issuer: /CN=72f3ee169f9bd71f78a42d1a72fe0f2a824822d1 Certificate serial: 0A9226B485FF1BE45ECD155014A021A381A56AE7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cvPuFp-b1x94pC0acv4PKoJIItE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/282b5e00-2ac3-49f1-a29b-26a5fdf0fa41/0/72F3EE169F9BD71F78A42D1A72FE0F2A824822D1.mft Manifest number: 013A Signing time: Thu 18 Dec 2025 13:28:54 +0000 Manifest this update: Thu 18 Dec 2025 13:23:54 +0000 Manifest next update: Fri 19 Dec 2025 16:34:54 +0000 Files and hashes: 1: 326131333a363134303a3a2f32392d3332203d3e203331313834.roa (hash: HEAzsbwZSQMPtZWHDUG9J3+dKm/03SetBs7lrO1nkwI=) 2: 3139352e37342e34302e302f32322d3234203d3e203331313834.roa (hash: OWTrG12il6+R+m95Ctsd+LQNgEyVIDW3AMDlydaSO3g=) 3: 3139332e32322e3235332e302f32342d3234203d3e203331313834.roa (hash: WrMYNrMKiwcHb7Layep1L0ANnPM7z3AEErZKMOJmYxg=) 4: 72F3EE169F9BD71F78A42D1A72FE0F2A824822D1.crl (hash: ksuthZyP5AGJqhorvUwYtb28j6AdilNUWbGDoSryEL4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/282b5e00-2ac3-49f1-a29b-26a5fdf0fa41/0/72F3EE169F9BD71F78A42D1A72FE0F2A824822D1.crl rsync://rsync.paas.rpki.ripe.net/repository/282b5e00-2ac3-49f1-a29b-26a5fdf0fa41/0/72F3EE169F9BD71F78A42D1A72FE0F2A824822D1.mft rsync://rpki.ripe.net/repository/DEFAULT/cvPuFp-b1x94pC0acv4PKoJIItE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:92:26:b4:85:ff:1b:e4:5e:cd:15:50:14:a0:21:a3:81:a5:6a:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72f3ee169f9bd71f78a42d1a72fe0f2a824822d1 Validity Not Before: Dec 18 13:23:54 2025 GMT Not After : Dec 19 16:34:54 2025 GMT Subject: CN=1EB0AEB2F2BCC6E2DCFDFAEE677B28F79BE08A71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:eb:a1:6b:b9:03:e3:86:f5:46:9e:cc:96:7c: 13:bd:d8:a3:72:ff:df:50:a1:2e:be:4f:64:43:92: 5d:45:4e:05:e0:99:ab:9d:6e:3f:e4:03:bf:24:ec: e8:e7:7c:50:aa:f4:c1:92:a8:8e:88:fd:6e:6b:63: bb:f5:e3:ad:fb:58:e0:f8:c6:37:19:d1:19:27:21: 5e:dd:80:bf:4c:00:ee:43:95:46:5e:e4:9e:00:d0: c6:d8:c7:f9:9f:bb:d9:0e:6c:23:d3:45:9e:03:8e: 53:08:b9:92:f0:f8:8f:f2:fe:6a:66:e0:f5:cd:79: a8:a7:15:b1:84:5c:d6:96:43:78:e1:21:12:38:c7: 14:87:4d:0d:04:ae:e0:87:c4:2b:3e:69:82:11:cc: 76:8d:2d:e0:30:77:f8:e1:c2:ad:e4:18:2a:15:32: a5:a2:a7:1c:44:ce:be:3e:ae:4c:e0:e1:97:56:a2: 7f:8b:55:54:c5:61:bb:c1:73:da:2a:34:e8:3b:a8: 62:f7:be:a0:de:76:65:34:39:b4:44:c3:ea:d0:26: fe:83:c3:eb:3a:5c:57:de:69:71:0a:9e:2d:e7:7d: 2c:92:c1:cb:a9:2e:1e:d4:2f:a6:3c:3b:79:36:d6: 73:1b:4b:b4:a5:03:da:de:a8:0c:44:30:5f:be:19: 6d:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:B0:AE:B2:F2:BC:C6:E2:DC:FD:FA:EE:67:7B:28:F7:9B:E0:8A:71 X509v3 Authority Key Identifier: keyid:72:F3:EE:16:9F:9B:D7:1F:78:A4:2D:1A:72:FE:0F:2A:82:48:22:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/282b5e00-2ac3-49f1-a29b-26a5fdf0fa41/0/72F3EE169F9BD71F78A42D1A72FE0F2A824822D1.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cvPuFp-b1x94pC0acv4PKoJIItE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/282b5e00-2ac3-49f1-a29b-26a5fdf0fa41/0/72F3EE169F9BD71F78A42D1A72FE0F2A824822D1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:15:9e:90:c0:69:de:ca:9b:b9:38:ae:76:ab:9e:61:1b:00: e3:5c:1d:6e:32:11:f0:92:41:2f:88:f6:2b:24:8e:04:0d:d3: 63:dd:63:0e:d8:50:60:0b:54:3d:38:28:be:c7:75:9a:9f:fd: 2c:a7:92:e7:da:df:76:c3:70:af:e7:74:73:83:7e:f6:5c:d5: dd:75:53:c2:7d:ba:d7:58:a2:b7:97:92:ce:4f:82:f8:34:b6: 66:6e:78:66:82:a8:be:3b:c7:ce:cf:1a:aa:21:35:b5:df:46: 08:1c:c6:9f:3d:61:32:0f:69:b8:08:9f:a2:f8:55:84:e1:bd: 02:27:d1:60:0f:e6:7a:62:a5:08:61:5b:a4:0d:ce:66:74:2c: fd:72:d5:d2:ea:d9:36:81:9d:ad:b5:5a:47:1c:7e:7f:f1:cc: a9:9c:63:64:41:27:4a:74:5d:a8:26:f2:3f:6f:6d:bd:e3:c1: 95:77:88:db:ff:98:0f:b9:5b:fb:71:e5:eb:8a:08:39:c3:b6: 6a:e5:9e:dc:39:bf:2a:9f:24:90:39:f5:63:a8:bb:64:1e:cf: b4:ee:54:79:ac:a3:6c:bc:b7:ec:f6:3b:77:c9:39:f2:11:38: a1:a5:7f:bc:04:e1:8a:21:25:2d:e2:7b:3c:e9:d8:8d:bc:64: e0:da:9d:e4 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUCpImtIX/G+RezRVQFKAho4GlaucwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzJmM2VlMTY5ZjliZDcxZjc4YTQyZDFhNzJmZTBmMmE4 MjQ4MjJkMTAeFw0yNTEyMTgxMzIzNTRaFw0yNTEyMTkxNjM0NTRaMDMxMTAvBgNV BAMTKDFFQjBBRUIyRjJCQ0M2RTJEQ0ZERkFFRTY3N0IyOEY3OUJFMDhBNzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDn66FruQPjhvVGnsyWfBO92KNy /99QoS6+T2RDkl1FTgXgmaudbj/kA78k7OjnfFCq9MGSqI6I/W5rY7v14637WOD4 xjcZ0RknIV7dgL9MAO5DlUZe5J4A0MbYx/mfu9kObCPTRZ4DjlMIuZLw+I/y/mpm 4PXNeainFbGEXNaWQ3jhIRI4xxSHTQ0EruCHxCs+aYIRzHaNLeAwd/jhwq3kGCoV MqWipxxEzr4+rkzg4ZdWon+LVVTFYbvBc9oqNOg7qGL3vqDedmU0ObREw+rQJv6D w+s6XFfeaXEKni3nfSySwcupLh7UL6Y8O3k21nMbS7SlA9reqAxEMF++GW3hAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUHrCusvK8xuLc/fruZ3so95vginEwHwYDVR0j BBgwFoAUcvPuFp+b1x94pC0acv4PKoJIItEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjgyYjVlMDAtMmFjMy00OWYxLWEyOWItMjZhNWZkZjBm YTQxLzAvNzJGM0VFMTY5RjlCRDcxRjc4QTQyRDFBNzJGRTBGMkE4MjQ4MjJEMS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2N2UHVGcC1iMXg5NHBDMGFjdjRQS29K SUl0RS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yODJiNWUwMC0y YWMzLTQ5ZjEtYTI5Yi0yNmE1ZmRmMGZhNDEvMC83MkYzRUUxNjlGOUJENzFGNzhB NDJEMUE3MkZFMEYyQTgyNDgyMkQxLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAixWekMBp3sqbuTiudque YRsA41wdbjIR8JJBL4j2KySOBA3TY91jDthQYAtUPTgovsd1mp/9LKeS59rfdsNw r+d0c4N+9lzV3XVTwn2611iit5eSzk+C+DS2Zm54ZoKovjvHzs8aqiE1td9GCBzG nz1hMg9puAifovhVhOG9AifRYA/memKlCGFbpA3OZnQs/XLV0urZNoGdrbVaRxx+ f/HMqZxjZEEnSnRdqCbyP29tvePBlXeI2/+YD7lb+3Hl64oIOcO2auWe3Dm/Kp8k kDn1Y6i7ZB7PtO5UeayjbLy37PY7d8k58hE4oaV/vAThiiElLeJ7POnYjbxk4Nqd 5A== -----END CERTIFICATE-----Generated at Thu Dec 18 16:15:20 2025 by rpki-client