This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/3/6019C116C8AE318AFD4B822E9F4EEEA0C34BAACA.mft File: 6019C116C8AE318AFD4B822E9F4EEEA0C34BAACA.mft (raw, json) Hash identifier: HFmCd2YmUpZ2TNWGD0ldFcHPVAvqWgvYAJl01HxeYRY= Subject key identifier: 78:C2:F6:F9:E0:A4:4B:1D:8C:30:B5:4F:99:A8:BB:54:AE:24:8F:C8 Authority key identifier: 60:19:C1:16:C8:AE:31:8A:FD:4B:82:2E:9F:4E:EE:A0:C3:4B:AA:CA Certificate issuer: /CN=6019c116c8ae318afd4b822e9f4eeea0c34baaca Certificate serial: 519415130F3DD77BDC271AECDA380FA59B677577 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YBnBFsiuMYr9S4Iun07uoMNLqso.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/3/6019C116C8AE318AFD4B822E9F4EEEA0C34BAACA.mft Manifest number: 02CA Signing time: Sat 06 Dec 2025 02:20:58 +0000 Manifest this update: Sat 06 Dec 2025 02:15:58 +0000 Manifest next update: Sun 07 Dec 2025 04:01:58 +0000 Files and hashes: 1: 3139332e33342e3139392e3132382f32362d3236203d3e2030.roa (hash: 0pbfDMGs5sDe83nTkX1rzBo038yLBduSn3GMgeEi8+E=) 2: 323030313a3766383a3135373a3a2f34382d3438203d3e2030.roa (hash: 0e+W4I6S4YHzwIEKPSVHpa7X+PeCXjdmuYr+EKDU8hY=) 3: 6019C116C8AE318AFD4B822E9F4EEEA0C34BAACA.crl (hash: hdp8F82DYRl5bEoTPFN4SWkk5K11gATcM3UYIdRyvc4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/3/6019C116C8AE318AFD4B822E9F4EEEA0C34BAACA.crl rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/3/6019C116C8AE318AFD4B822E9F4EEEA0C34BAACA.mft rsync://rpki.ripe.net/repository/DEFAULT/YBnBFsiuMYr9S4Iun07uoMNLqso.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:94:15:13:0f:3d:d7:7b:dc:27:1a:ec:da:38:0f:a5:9b:67:75:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6019c116c8ae318afd4b822e9f4eeea0c34baaca Validity Not Before: Dec 6 02:15:58 2025 GMT Not After : Dec 7 04:01:58 2025 GMT Subject: CN=78C2F6F9E0A44B1D8C30B54F99A8BB54AE248FC8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:54:b9:81:ae:4d:31:0e:98:17:db:27:9c:a0: d6:11:98:b5:ee:6c:43:1b:8d:ed:af:92:d4:33:50: f6:1d:c8:ee:95:d1:e7:b1:99:d6:b0:cc:78:32:1a: e5:dc:fa:53:75:b0:ee:d3:76:85:69:b1:e7:2e:fa: 69:8f:96:ad:aa:d9:a2:f2:0e:7d:a7:fe:82:85:29: f5:cc:4b:d0:a7:25:b3:ad:22:b0:9a:fe:5a:f3:04: fe:1d:db:8c:ea:eb:d9:61:e4:fe:29:38:23:2e:78: f9:27:41:b0:05:17:9b:1f:87:e0:d9:ee:a9:d3:86: 90:1b:ce:ef:b5:cb:4f:38:f4:2d:0e:7b:bf:d4:d1: 37:32:19:83:bd:00:91:1e:48:95:bf:ea:51:ff:96: f0:bb:50:7d:ea:f6:6a:67:15:e3:ea:01:f9:d2:82: 6b:a4:6b:7d:91:cd:a7:b8:02:5d:09:4c:4a:17:d0: f2:66:96:f0:fe:37:40:4d:b1:e5:55:bd:35:4a:f4: 79:c5:aa:9e:f0:80:7c:76:26:03:2a:0e:aa:cb:fa: de:ca:c0:bf:51:49:cb:02:ea:d0:3b:c9:42:7f:c4: cb:48:ea:93:40:c9:6f:bd:57:00:16:ce:cc:a9:18: af:4a:9a:b5:0b:a8:4e:bc:0b:8f:72:11:1b:dd:1f: 38:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:C2:F6:F9:E0:A4:4B:1D:8C:30:B5:4F:99:A8:BB:54:AE:24:8F:C8 X509v3 Authority Key Identifier: keyid:60:19:C1:16:C8:AE:31:8A:FD:4B:82:2E:9F:4E:EE:A0:C3:4B:AA:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/3/6019C116C8AE318AFD4B822E9F4EEEA0C34BAACA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YBnBFsiuMYr9S4Iun07uoMNLqso.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/3/6019C116C8AE318AFD4B822E9F4EEEA0C34BAACA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:c6:53:24:c7:91:50:06:5f:9d:f4:fe:0e:ae:74:71:bf:0f: 0c:50:43:c0:30:d2:d4:6d:1e:46:64:6b:ab:db:38:d9:a0:76: f1:25:3c:14:1e:e0:ff:db:97:8e:86:8d:a9:e6:42:18:16:29: 2d:ef:f6:96:0b:3e:b8:fd:b9:b5:36:dc:78:1c:c9:80:79:fd: 87:fe:d4:a7:06:4c:5b:70:1e:47:ef:60:94:ed:cc:86:ee:03: a3:c8:0d:5f:e0:c5:56:9d:a7:ea:3a:fa:c9:92:30:46:ad:5b: 55:81:25:2f:74:fb:c6:5b:49:73:4f:b7:e0:a4:db:81:69:ad: 69:3f:06:24:67:37:fb:60:8b:64:dc:c0:93:69:48:a3:39:66: 86:da:2b:71:3b:9e:1c:19:09:11:0f:fe:67:d9:89:f0:b7:c0: f5:ef:77:fb:2e:48:51:ed:0a:fe:9b:df:09:b4:08:1a:4b:50: 71:98:47:b0:d0:5a:c0:5a:11:30:00:59:d0:d0:d3:21:df:4f: 43:79:98:46:24:bd:d9:c2:92:6a:69:a0:9f:8d:09:22:24:fa: 22:30:5c:27:80:46:68:55:a2:26:2e:90:8d:3d:a4:a4:6b:aa: 58:5d:48:e2:e5:17:01:bc:b8:7c:4d:f5:b4:33:7d:e7:a2:50: 59:97:39:d8 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUUZQVEw8913vcJxrs2jgPpZtndXcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjAxOWMxMTZjOGFlMzE4YWZkNGI4MjJlOWY0ZWVlYTBj MzRiYWFjYTAeFw0yNTEyMDYwMjE1NThaFw0yNTEyMDcwNDAxNThaMDMxMTAvBgNV BAMTKDc4QzJGNkY5RTBBNDRCMUQ4QzMwQjU0Rjk5QThCQjU0QUUyNDhGQzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkVLmBrk0xDpgX2yecoNYRmLXu bEMbje2vktQzUPYdyO6V0eexmdawzHgyGuXc+lN1sO7TdoVpsecu+mmPlq2q2aLy Dn2n/oKFKfXMS9CnJbOtIrCa/lrzBP4d24zq69lh5P4pOCMuePknQbAFF5sfh+DZ 7qnThpAbzu+1y0849C0Oe7/U0TcyGYO9AJEeSJW/6lH/lvC7UH3q9mpnFePqAfnS gmuka32Rzae4Al0JTEoX0PJmlvD+N0BNseVVvTVK9HnFqp7wgHx2JgMqDqrL+t7K wL9RScsC6tA7yUJ/xMtI6pNAyW+9VwAWzsypGK9KmrULqE68C49yERvdHzjRAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUeML2+eCkSx2MMLVPmai7VK4kj8gwHwYDVR0j BBgwFoAUYBnBFsiuMYr9S4Iun07uoMNLqsowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMmFmNzNhOWMtMjA1OC00M2JiLTlhYzYtNWFiNDJkZmJm NDA5LzMvNjAxOUMxMTZDOEFFMzE4QUZENEI4MjJFOUY0RUVFQTBDMzRCQUFDQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1lCbkJGc2l1TVlyOVM0SXVuMDd1b01O THFzby5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yYWY3M2E5Yy0y MDU4LTQzYmItOWFjNi01YWI0MmRmYmY0MDkvMy82MDE5QzExNkM4QUUzMThBRkQ0 QjgyMkU5RjRFRUVBMEMzNEJBQUNBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjcZTJMeRUAZfnfT+Dq50 cb8PDFBDwDDS1G0eRmRrq9s42aB28SU8FB7g/9uXjoaNqeZCGBYpLe/2lgs+uP25 tTbceBzJgHn9h/7UpwZMW3AeR+9glO3Mhu4Do8gNX+DFVp2n6jr6yZIwRq1bVYEl L3T7xltJc0+34KTbgWmtaT8GJGc3+2CLZNzAk2lIozlmhtorcTueHBkJEQ/+Z9mJ 8LfA9e93+y5IUe0K/pvfCbQIGktQcZhHsNBawFoRMABZ0NDTId9PQ3mYRiS92cKS ammgn40JIiT6IjBcJ4BGaFWiJi6QjT2kpGuqWF1I4uUXAby4fE31tDN956JQWZc5 2A== -----END CERTIFICATE-----Generated at Sat Dec 6 06:59:17 2025 by rpki-client