This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2c26763e-addf-43fd-bf2e-7c7e38923e7c/0/B11D50A5D47F732F3F808FEAE6A3906CC4509C44.mft File: B11D50A5D47F732F3F808FEAE6A3906CC4509C44.mft (raw, json) Hash identifier: xzig8DRLi8f2+VNKO48gOUhsOuArjdnFJOGz9f3gPcM= Subject key identifier: BF:C1:DD:AC:D5:3C:C2:64:78:21:EC:0D:9E:FA:A4:48:1A:B0:F4:F8 Authority key identifier: B1:1D:50:A5:D4:7F:73:2F:3F:80:8F:EA:E6:A3:90:6C:C4:50:9C:44 Certificate issuer: /CN=B11D50A5D47F732F3F808FEAE6A3906CC4509C44 Certificate serial: 04CE81F4AADA3CB7B4028082847B61F86A022854 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B11D50A5D47F732F3F808FEAE6A3906CC4509C44.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2c26763e-addf-43fd-bf2e-7c7e38923e7c/0/B11D50A5D47F732F3F808FEAE6A3906CC4509C44.mft Manifest number: 6B Signing time: Fri 05 Dec 2025 22:45:46 +0000 Manifest this update: Fri 05 Dec 2025 22:40:46 +0000 Manifest next update: Sat 06 Dec 2025 23:59:46 +0000 Files and hashes: 1: B11D50A5D47F732F3F808FEAE6A3906CC4509C44.crl (hash: b/nccXJ3ge9Pt17PJET2tVSWxvzbmHIT6VwrXDfTpzM=) 2: 326131343a373538333a663430303a3a2f34342d3438203d3e20323130333532.roa (hash: vvwHl6BLBwWiKAXvEKkLi0Wv5qZBfvWXONHc86WQ1Rk=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2c26763e-addf-43fd-bf2e-7c7e38923e7c/0/B11D50A5D47F732F3F808FEAE6A3906CC4509C44.crl rsync://rsync.paas.rpki.ripe.net/repository/2c26763e-addf-43fd-bf2e-7c7e38923e7c/0/B11D50A5D47F732F3F808FEAE6A3906CC4509C44.mft rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B11D50A5D47F732F3F808FEAE6A3906CC4509C44.cer rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.crl rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B149F23A3E99C4760297DD7104B400C835D86D19.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 21:09:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:ce:81:f4:aa:da:3c:b7:b4:02:80:82:84:7b:61:f8:6a:02:28:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B11D50A5D47F732F3F808FEAE6A3906CC4509C44 Validity Not Before: Dec 5 22:40:46 2025 GMT Not After : Dec 6 23:59:46 2025 GMT Subject: CN=BFC1DDACD53CC2647821EC0D9EFAA4481AB0F4F8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:69:5d:99:49:e3:5c:5f:67:89:a7:0b:8a:6e: 38:58:0f:98:dd:e5:b0:cb:94:36:8f:59:f6:25:20: 96:de:bd:11:33:32:5b:20:15:2d:d5:45:d7:5b:1e: 16:12:bf:fa:72:a9:1f:0f:3c:54:69:1c:9b:00:d7: c8:71:dc:97:44:b6:24:45:4f:e9:e2:1f:e6:0d:e1: 31:7a:f9:9a:48:99:79:3f:76:5a:3f:14:e7:18:70: b8:43:fe:bb:c9:13:e2:d7:10:6f:5d:33:13:22:0e: 24:e8:f9:cf:5a:b9:7a:9e:f1:1d:bf:2f:d6:bc:96: 92:12:73:ad:65:22:49:cb:35:66:0e:d6:04:2b:b2: 72:2c:b5:93:e0:58:28:12:45:2b:46:8c:69:bd:98: 58:75:73:84:1e:ee:80:af:78:92:b2:f1:46:8a:9c: d7:6e:a0:f9:12:1d:55:08:d2:df:df:22:4f:1f:18: 16:5e:c0:8d:49:22:dd:9e:16:f2:4d:87:27:b8:e6: 2e:e3:b4:e9:53:4a:14:e8:e6:9d:eb:18:62:f1:d6: 99:8a:d5:b2:54:67:12:36:ff:74:99:a8:eb:b3:82: 98:d6:87:57:6f:73:10:76:9d:2c:e1:32:15:1e:a2: ae:c5:12:10:c3:73:92:06:eb:8a:f6:df:86:7d:d4: e1:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:C1:DD:AC:D5:3C:C2:64:78:21:EC:0D:9E:FA:A4:48:1A:B0:F4:F8 X509v3 Authority Key Identifier: keyid:B1:1D:50:A5:D4:7F:73:2F:3F:80:8F:EA:E6:A3:90:6C:C4:50:9C:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2c26763e-addf-43fd-bf2e-7c7e38923e7c/0/B11D50A5D47F732F3F808FEAE6A3906CC4509C44.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B11D50A5D47F732F3F808FEAE6A3906CC4509C44.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2c26763e-addf-43fd-bf2e-7c7e38923e7c/0/B11D50A5D47F732F3F808FEAE6A3906CC4509C44.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:77:16:d4:04:79:c0:b7:90:10:39:db:9e:ef:e3:77:6a:a2: 41:27:ce:69:50:20:cb:27:87:4e:f1:6c:a3:9d:7d:91:4d:65: 5b:7e:33:15:28:07:8e:62:7f:23:ad:04:04:ac:82:21:a5:75: 91:74:c2:6b:fd:3b:0c:64:c0:d7:65:63:f9:3a:39:3b:84:61: 90:bd:6d:c9:a2:52:21:f9:85:59:20:fc:68:96:ce:dc:24:3e: ca:36:f9:fe:ec:6f:28:87:0d:eb:70:2a:83:13:61:22:7b:70: cf:7d:33:20:fd:2d:c0:3a:6d:a2:32:07:cb:8b:1c:bb:58:ff: 7a:4a:2e:92:a0:53:87:a2:d1:41:a2:b7:66:bb:8a:85:ac:34: 11:63:b3:e1:05:01:28:de:bc:85:7f:3b:5f:47:7f:61:38:5b: f1:55:69:5e:19:91:dc:ad:5b:0e:c9:de:5f:b1:65:67:85:0f: 7d:3e:c6:7f:fd:ea:a8:fe:de:78:d8:6d:78:e1:e3:e2:57:24: c1:c0:dd:b9:59:10:5e:9c:7b:bb:4c:e9:7e:05:a2:8d:48:00: 16:a3:c4:fa:8c:5e:17:70:39:90:29:cb:9f:d4:c6:ca:16:cc: 34:9f:2d:f8:5c:8d:49:f5:d8:f9:72:6b:07:6e:b3:d3:5c:29: 4d:f4:77:41 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUBM6B9KraPLe0AoCChHth+GoCKFQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjExRDUwQTVENDdGNzMyRjNGODA4RkVBRTZBMzkwNkND NDUwOUM0NDAeFw0yNTEyMDUyMjQwNDZaFw0yNTEyMDYyMzU5NDZaMDMxMTAvBgNV BAMTKEJGQzFEREFDRDUzQ0MyNjQ3ODIxRUMwRDlFRkFBNDQ4MUFCMEY0RjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWaV2ZSeNcX2eJpwuKbjhYD5jd 5bDLlDaPWfYlIJbevREzMlsgFS3VRddbHhYSv/pyqR8PPFRpHJsA18hx3JdEtiRF T+niH+YN4TF6+ZpImXk/dlo/FOcYcLhD/rvJE+LXEG9dMxMiDiTo+c9auXqe8R2/ L9a8lpISc61lIknLNWYO1gQrsnIstZPgWCgSRStGjGm9mFh1c4Qe7oCveJKy8UaK nNduoPkSHVUI0t/fIk8fGBZewI1JIt2eFvJNhye45i7jtOlTShTo5p3rGGLx1pmK 1bJUZxI2/3SZqOuzgpjWh1dvcxB2nSzhMhUeoq7FEhDDc5IG64r234Z91OHvAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUv8HdrNU8wmR4IewNnvqkSBqw9PgwHwYDVR0j BBgwFoAUsR1QpdR/cy8/gI/q5qOQbMRQnEQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMmMyNjc2M2UtYWRkZi00M2ZkLWJmMmUtN2M3ZTM4OTIz ZTdjLzAvQjExRDUwQTVENDdGNzMyRjNGODA4RkVBRTZBMzkwNkNDNDUwOUM0NC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ODFmOTc4Mi04OThlLTRi ODMtOTVlNi00ZmY0YWI3NWM5ZGMvMi9CMTFENTBBNUQ0N0Y3MzJGM0Y4MDhGRUFF NkEzOTA2Q0M0NTA5QzQ0LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzJjMjY3NjNlLWFkZGYtNDNmZC1iZjJlLTdjN2UzODkyM2U3Yy8wL0IxMUQ1MEE1 RDQ3RjczMkYzRjgwOEZFQUU2QTM5MDZDQzQ1MDlDNDQubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCTdxbU BHnAt5AQOdue7+N3aqJBJ85pUCDLJ4dO8WyjnX2RTWVbfjMVKAeOYn8jrQQErIIh pXWRdMJr/TsMZMDXZWP5Ojk7hGGQvW3JolIh+YVZIPxols7cJD7KNvn+7G8ohw3r cCqDE2Eie3DPfTMg/S3AOm2iMgfLixy7WP96Si6SoFOHotFBordmu4qFrDQRY7Ph BQEo3ryFfztfR39hOFvxVWleGZHcrVsOyd5fsWVnhQ99PsZ//eqo/t542G144ePi VyTBwN25WRBenHu7TOl+BaKNSAAWo8T6jF4XcDmQKcuf1MbKFsw0ny34XI1J9dj5 cmsHbrPTXClN9HdB -----END CERTIFICATE-----Generated at Sat Dec 6 11:51:11 2025 by rpki-client