This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/29066f5d-ecc1-4927-95c1-e1a8df8f9897/0/1498141819112B8446C2D4A3111F53038F05DBE9.mft File: 1498141819112B8446C2D4A3111F53038F05DBE9.mft (raw, json) Hash identifier: rA0B+sOGBO2gOxCFMgzwOKn6xeVksBsXV++n8S9Q0t4= Subject key identifier: BD:B7:49:85:AD:48:87:D5:7F:04:B8:BD:A8:D1:5F:0A:B3:B0:E3:17 Authority key identifier: 14:98:14:18:19:11:2B:84:46:C2:D4:A3:11:1F:53:03:8F:05:DB:E9 Certificate issuer: /CN=1498141819112b8446c2d4a3111f53038f05dbe9 Certificate serial: 6FBE0BFE6D1DB7C04FF972D1284D8D344741F2F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FJgUGBkRK4RGwtSjER9TA48F2-k.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/29066f5d-ecc1-4927-95c1-e1a8df8f9897/0/1498141819112B8446C2D4A3111F53038F05DBE9.mft Manifest number: 010A Signing time: Sat 06 Dec 2025 05:41:17 +0000 Manifest this update: Sat 06 Dec 2025 05:36:17 +0000 Manifest next update: Sun 07 Dec 2025 05:52:17 +0000 Files and hashes: 1: 1498141819112B8446C2D4A3111F53038F05DBE9.crl (hash: Aw1O5hCwHkBnFUHjSDy3incJvBOLx3evvOa+41bc9tU=) 2: 3138352e39312e3131332e302f32342d3234203d3e20323134323038.roa (hash: qSSu/jTa9CtmAhgZlrJ1s4QldXeKp0EqfLu29FuP5Zs=) 3: 3138352e39312e3131322e302f32342d3234203d3e20383334.roa (hash: XesoIFDmsJmrSdpgdAV0vhyomNLwoypYQnvo40xyQgs=) 4: 3138352e39312e3131352e302f32342d3234203d3e2034363337.roa (hash: ck91ILJJRhGrU5dcx7s2t1suhnGyLbRTekoZlADPXPE=) 5: 3138352e39312e3131342e302f32342d3234203d3e20323132323338.roa (hash: O3+fkuGYHEGuJgzobwksf3BrAnxvmElLOiQKqynfHQQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/29066f5d-ecc1-4927-95c1-e1a8df8f9897/0/1498141819112B8446C2D4A3111F53038F05DBE9.crl rsync://rsync.paas.rpki.ripe.net/repository/29066f5d-ecc1-4927-95c1-e1a8df8f9897/0/1498141819112B8446C2D4A3111F53038F05DBE9.mft rsync://rpki.ripe.net/repository/DEFAULT/FJgUGBkRK4RGwtSjER9TA48F2-k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:be:0b:fe:6d:1d:b7:c0:4f:f9:72:d1:28:4d:8d:34:47:41:f2:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1498141819112b8446c2d4a3111f53038f05dbe9 Validity Not Before: Dec 6 05:36:17 2025 GMT Not After : Dec 7 05:52:17 2025 GMT Subject: CN=BDB74985AD4887D57F04B8BDA8D15F0AB3B0E317 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:70:ce:f1:b0:62:c7:e9:05:cb:f0:2e:7d:bf: da:56:86:54:be:ca:27:69:ea:fe:46:df:bc:72:59: 5a:4e:6a:0b:e6:42:3c:0b:43:e4:7e:e4:9e:90:15: 09:da:7f:b1:bb:b1:b4:e8:f9:f4:69:53:09:13:dc: 09:d7:12:cf:6f:c6:fa:04:18:94:e8:ea:75:49:61: 8f:60:41:13:f7:cb:7c:b8:1b:36:9d:96:77:29:a0: 6e:cb:40:e4:e3:6a:0a:09:c8:13:95:ca:cf:99:7a: 5a:6d:c8:1d:bf:be:43:28:df:9d:33:b1:a8:db:4a: bc:e0:1b:8c:c0:5d:e6:ba:34:b1:db:e7:37:ca:14: be:3f:d2:8f:31:a0:2d:fa:4a:96:f0:eb:ae:ba:a0: 41:61:91:43:53:d9:d7:a3:f7:39:cb:4f:88:51:9b: 1d:3d:2b:e8:a7:76:bb:42:a3:d7:b0:3b:32:9b:30: ce:4b:d3:cb:94:d5:d5:47:3e:59:c9:9e:72:8f:10: 4d:96:41:4a:2e:e8:50:ff:52:56:a7:e5:8c:4c:2b: 30:42:44:a3:40:20:ef:d6:01:37:22:03:75:99:0c: e7:f9:2e:8a:9b:87:1d:69:0d:41:21:94:7a:dd:cd: 73:05:a8:7c:15:5f:85:0d:b8:6b:13:b2:1b:74:6e: e8:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:B7:49:85:AD:48:87:D5:7F:04:B8:BD:A8:D1:5F:0A:B3:B0:E3:17 X509v3 Authority Key Identifier: keyid:14:98:14:18:19:11:2B:84:46:C2:D4:A3:11:1F:53:03:8F:05:DB:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/29066f5d-ecc1-4927-95c1-e1a8df8f9897/0/1498141819112B8446C2D4A3111F53038F05DBE9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FJgUGBkRK4RGwtSjER9TA48F2-k.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/29066f5d-ecc1-4927-95c1-e1a8df8f9897/0/1498141819112B8446C2D4A3111F53038F05DBE9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:83:52:c3:90:52:87:98:43:43:63:50:c7:9f:a7:e1:80:26: fa:7f:60:49:49:cb:22:02:4f:21:bb:72:f8:da:ed:ac:3b:11: 31:ce:ef:cf:6e:5e:0b:fb:2c:4b:c9:f2:1a:49:7e:8d:7e:83: 2f:aa:c9:bb:01:49:4c:d0:fb:77:0e:93:ce:d8:f1:5e:23:b5: 23:70:85:6a:d5:ea:a1:57:d2:56:7a:ba:6a:bf:14:a2:a8:d5: 7a:fe:26:91:aa:c8:52:38:bb:ae:1f:2a:18:7b:f3:9b:b9:6b: 88:2f:bc:40:40:dd:b0:84:08:34:ba:76:33:01:4a:a5:5f:39: db:4d:a6:a7:a5:f4:6a:2e:07:a0:bd:28:6b:43:dd:e3:a1:b9: 1e:ee:43:3d:16:b0:e3:07:6c:f5:8e:d3:7a:41:b5:7b:1a:94: 33:ac:37:fa:81:ce:cc:90:f4:5a:af:41:c3:ca:41:22:5c:c9: 93:53:61:a8:e3:78:37:c0:93:11:d4:1c:1a:d6:eb:e8:e0:80: d5:ae:83:26:1e:17:1f:93:b2:3a:53:5c:33:11:04:68:fd:bb: fa:b4:0c:64:32:1e:b2:41:08:aa:c9:6f:d8:1d:e7:12:d8:f1: 14:7e:88:0c:22:8f:c9:f5:6a:22:9d:73:55:bd:20:66:63:5a: 8a:2a:c1:e9 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUb74L/m0dt8BP+XLRKE2NNEdB8vAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTQ5ODE0MTgxOTExMmI4NDQ2YzJkNGEzMTExZjUzMDM4 ZjA1ZGJlOTAeFw0yNTEyMDYwNTM2MTdaFw0yNTEyMDcwNTUyMTdaMDMxMTAvBgNV BAMTKEJEQjc0OTg1QUQ0ODg3RDU3RjA0QjhCREE4RDE1RjBBQjNCMEUzMTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZcM7xsGLH6QXL8C59v9pWhlS+ yidp6v5G37xyWVpOagvmQjwLQ+R+5J6QFQnaf7G7sbTo+fRpUwkT3AnXEs9vxvoE GJTo6nVJYY9gQRP3y3y4GzadlncpoG7LQOTjagoJyBOVys+ZelptyB2/vkMo350z sajbSrzgG4zAXea6NLHb5zfKFL4/0o8xoC36Spbw6666oEFhkUNT2dej9znLT4hR mx09K+indrtCo9ewOzKbMM5L08uU1dVHPlnJnnKPEE2WQUou6FD/Ulan5YxMKzBC RKNAIO/WATciA3WZDOf5Loqbhx1pDUEhlHrdzXMFqHwVX4UNuGsTsht0buirAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUvbdJha1Ih9V/BLi9qNFfCrOw4xcwHwYDVR0j BBgwFoAUFJgUGBkRK4RGwtSjER9TA48F2+kwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjkwNjZmNWQtZWNjMS00OTI3LTk1YzEtZTFhOGRmOGY5 ODk3LzAvMTQ5ODE0MTgxOTExMkI4NDQ2QzJENEEzMTExRjUzMDM4RjA1REJFOS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0ZKZ1VHQmtSSzRSR3d0U2pFUjlUQTQ4 RjItay5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yOTA2NmY1ZC1l Y2MxLTQ5MjctOTVjMS1lMWE4ZGY4Zjk4OTcvMC8xNDk4MTQxODE5MTEyQjg0NDZD MkQ0QTMxMTFGNTMwMzhGMDVEQkU5Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoINSw5BSh5hDQ2NQx5+n 4YAm+n9gSUnLIgJPIbty+NrtrDsRMc7vz25eC/ssS8nyGkl+jX6DL6rJuwFJTND7 dw6TztjxXiO1I3CFatXqoVfSVnq6ar8UoqjVev4mkarIUji7rh8qGHvzm7lriC+8 QEDdsIQINLp2MwFKpV85202mp6X0ai4HoL0oa0Pd46G5Hu5DPRaw4wds9Y7TekG1 exqUM6w3+oHOzJD0Wq9Bw8pBIlzJk1NhqON4N8CTEdQcGtbr6OCA1a6DJh4XH5Oy OlNcMxEEaP27+rQMZDIeskEIqslv2B3nEtjxFH6IDCKPyfVqIp1zVb0gZmNaiirB 6Q== -----END CERTIFICATE-----Generated at Sat Dec 6 08:20:55 2025 by rpki-client