This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/282b5e00-2ac3-49f1-a29b-26a5fdf0fa41/0/72F3EE169F9BD71F78A42D1A72FE0F2A824822D1.mft File: 72F3EE169F9BD71F78A42D1A72FE0F2A824822D1.mft (raw, json) Hash identifier: 0yhsgzCMuXX9VEMoPfd5Wp08Q5yiFlYOYucmEqv7UkM= Subject key identifier: 10:CA:AD:AE:5C:AC:25:2C:4E:91:00:14:DF:C5:41:1B:56:CE:0B:B6 Authority key identifier: 72:F3:EE:16:9F:9B:D7:1F:78:A4:2D:1A:72:FE:0F:2A:82:48:22:D1 Certificate issuer: /CN=72f3ee169f9bd71f78a42d1a72fe0f2a824822d1 Certificate serial: 52DCAD2E09FA9FB9486D1F74BF27A8ADB5BE278C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cvPuFp-b1x94pC0acv4PKoJIItE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/282b5e00-2ac3-49f1-a29b-26a5fdf0fa41/0/72F3EE169F9BD71F78A42D1A72FE0F2A824822D1.mft Manifest number: 0129 Signing time: Fri 05 Dec 2025 20:38:54 +0000 Manifest this update: Fri 05 Dec 2025 20:33:54 +0000 Manifest next update: Sat 06 Dec 2025 22:42:54 +0000 Files and hashes: 1: 3139332e32322e3235332e302f32342d3234203d3e203331313834.roa (hash: WrMYNrMKiwcHb7Layep1L0ANnPM7z3AEErZKMOJmYxg=) 2: 72F3EE169F9BD71F78A42D1A72FE0F2A824822D1.crl (hash: y5O6uc3ASCSU9UHIHmjVtsxmHDn4UnjHgIKQK7wUMGA=) 3: 326131333a363134303a3a2f32392d3332203d3e203331313834.roa (hash: HEAzsbwZSQMPtZWHDUG9J3+dKm/03SetBs7lrO1nkwI=) 4: 3139352e37342e34302e302f32322d3234203d3e203331313834.roa (hash: OWTrG12il6+R+m95Ctsd+LQNgEyVIDW3AMDlydaSO3g=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/282b5e00-2ac3-49f1-a29b-26a5fdf0fa41/0/72F3EE169F9BD71F78A42D1A72FE0F2A824822D1.crl rsync://rsync.paas.rpki.ripe.net/repository/282b5e00-2ac3-49f1-a29b-26a5fdf0fa41/0/72F3EE169F9BD71F78A42D1A72FE0F2A824822D1.mft rsync://rpki.ripe.net/repository/DEFAULT/cvPuFp-b1x94pC0acv4PKoJIItE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:42:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:dc:ad:2e:09:fa:9f:b9:48:6d:1f:74:bf:27:a8:ad:b5:be:27:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72f3ee169f9bd71f78a42d1a72fe0f2a824822d1 Validity Not Before: Dec 5 20:33:54 2025 GMT Not After : Dec 6 22:42:54 2025 GMT Subject: CN=10CAADAE5CAC252C4E910014DFC5411B56CE0BB6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:c9:cb:f0:61:4e:8b:61:ef:36:a9:c7:2d:7e: 47:d2:c0:6a:27:4e:a5:28:3f:36:79:07:38:ac:b9: 66:8f:2a:69:4b:3c:bd:4a:d8:df:d7:cd:32:8c:05: 32:d9:2c:cb:0c:7d:8b:59:d4:4b:59:c0:3f:7e:2c: ec:1d:ab:cf:55:71:dc:bc:d5:39:1b:c3:62:5f:a9: dc:ed:75:34:bc:ee:40:d8:c9:79:70:fe:41:1d:ca: 27:1a:92:55:9d:76:67:48:d9:fa:92:1b:8e:10:99: 54:fb:8c:dc:df:49:41:83:2e:fe:70:0d:8a:ac:75: 65:1f:d1:17:8d:18:90:e4:c1:71:90:50:d8:38:eb: 6e:1c:c6:93:7a:17:5d:1f:4e:e5:c2:b3:99:a7:d4: e6:61:a7:c1:51:2a:5c:b4:24:78:39:01:a8:a9:b0: 0d:11:61:48:ae:49:65:fc:bf:82:2b:d4:59:07:ab: df:ef:1c:92:25:d9:10:99:cb:63:28:c9:55:2d:e0: fb:aa:79:bb:c2:bd:f9:bd:71:d0:ca:3c:ef:5f:d7: 35:7c:ac:d8:c9:57:d9:64:03:4b:8f:18:c2:84:90: d6:25:76:ce:e6:b1:44:ed:8a:24:78:9b:76:90:e5: 87:a2:44:5e:12:f1:5a:74:44:ac:00:ba:c1:d0:30: fc:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:CA:AD:AE:5C:AC:25:2C:4E:91:00:14:DF:C5:41:1B:56:CE:0B:B6 X509v3 Authority Key Identifier: keyid:72:F3:EE:16:9F:9B:D7:1F:78:A4:2D:1A:72:FE:0F:2A:82:48:22:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/282b5e00-2ac3-49f1-a29b-26a5fdf0fa41/0/72F3EE169F9BD71F78A42D1A72FE0F2A824822D1.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cvPuFp-b1x94pC0acv4PKoJIItE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/282b5e00-2ac3-49f1-a29b-26a5fdf0fa41/0/72F3EE169F9BD71F78A42D1A72FE0F2A824822D1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:3e:56:7d:57:68:f0:ac:86:d6:98:b9:88:38:7d:c7:e9:7c: ea:d7:81:d8:10:fa:b2:58:ee:81:16:37:58:4f:e5:ea:cd:28: 34:32:b4:1e:b0:fc:81:e7:32:25:67:fd:d1:7a:ec:e4:1e:5b: a5:f5:bc:6d:68:f8:7e:6e:4e:99:10:8f:56:3b:54:e9:5d:dd: f5:6d:64:09:29:74:c9:49:22:9b:5f:1f:7a:9c:fa:4b:4d:46: 73:2d:1d:f6:00:bd:7c:c1:dc:2d:96:58:2c:2b:e6:7d:5d:b9: 83:50:0a:8a:c1:11:fc:bf:ed:33:11:77:4b:1e:34:24:2b:99: 7f:05:c3:0b:fe:d9:5a:52:86:49:42:57:a0:05:7f:88:52:aa: 02:cf:ff:33:24:65:22:a4:a3:cc:6d:ef:3b:ae:56:cb:f9:a3: e8:9c:aa:bd:83:f0:e1:95:7f:82:a4:82:40:e7:27:c1:0c:95: 60:fa:f4:cc:4a:35:6d:e8:9c:de:51:f0:29:e1:bd:8a:63:44: 66:f7:25:e5:68:c2:96:4d:43:e7:ae:d3:bc:ed:0f:fe:42:69: 94:fa:71:1f:4c:e1:00:0f:87:78:87:c8:6c:6d:45:a8:98:72: 37:b6:06:5e:04:fb:0c:26:43:27:5d:1f:24:d4:cd:b5:c1:0d: f0:ed:8c:90 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUUtytLgn6n7lIbR90vyeorbW+J4wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzJmM2VlMTY5ZjliZDcxZjc4YTQyZDFhNzJmZTBmMmE4 MjQ4MjJkMTAeFw0yNTEyMDUyMDMzNTRaFw0yNTEyMDYyMjQyNTRaMDMxMTAvBgNV BAMTKDEwQ0FBREFFNUNBQzI1MkM0RTkxMDAxNERGQzU0MTFCNTZDRTBCQjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoycvwYU6LYe82qcctfkfSwGon TqUoPzZ5BzisuWaPKmlLPL1K2N/XzTKMBTLZLMsMfYtZ1EtZwD9+LOwdq89Vcdy8 1Tkbw2JfqdztdTS87kDYyXlw/kEdyicaklWddmdI2fqSG44QmVT7jNzfSUGDLv5w DYqsdWUf0ReNGJDkwXGQUNg4624cxpN6F10fTuXCs5mn1OZhp8FRKly0JHg5Aaip sA0RYUiuSWX8v4Ir1FkHq9/vHJIl2RCZy2MoyVUt4PuqebvCvfm9cdDKPO9f1zV8 rNjJV9lkA0uPGMKEkNYlds7msUTtiiR4m3aQ5YeiRF4S8Vp0RKwAusHQMPxbAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUEMqtrlysJSxOkQAU38VBG1bOC7YwHwYDVR0j BBgwFoAUcvPuFp+b1x94pC0acv4PKoJIItEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjgyYjVlMDAtMmFjMy00OWYxLWEyOWItMjZhNWZkZjBm YTQxLzAvNzJGM0VFMTY5RjlCRDcxRjc4QTQyRDFBNzJGRTBGMkE4MjQ4MjJEMS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2N2UHVGcC1iMXg5NHBDMGFjdjRQS29K SUl0RS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yODJiNWUwMC0y YWMzLTQ5ZjEtYTI5Yi0yNmE1ZmRmMGZhNDEvMC83MkYzRUUxNjlGOUJENzFGNzhB NDJEMUE3MkZFMEYyQTgyNDgyMkQxLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdD5WfVdo8KyG1pi5iDh9 x+l86teB2BD6sljugRY3WE/l6s0oNDK0HrD8gecyJWf90Xrs5B5bpfW8bWj4fm5O mRCPVjtU6V3d9W1kCSl0yUkim18fepz6S01Gcy0d9gC9fMHcLZZYLCvmfV25g1AK isER/L/tMxF3Sx40JCuZfwXDC/7ZWlKGSUJXoAV/iFKqAs//MyRlIqSjzG3vO65W y/mj6JyqvYPw4ZV/gqSCQOcnwQyVYPr0zEo1beic3lHwKeG9imNEZvcl5WjClk1D 567TvO0P/kJplPpxH0zhAA+HeIfIbG1FqJhyN7YGXgT7DCZDJ10fJNTNtcEN8O2M kA== -----END CERTIFICATE-----Generated at Sat Dec 6 12:08:12 2025 by rpki-client