This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.mft File: 8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.mft (raw, json) Hash identifier: s6YjvQ9A13wwitzoqW0+M/CArUK5sILsBaFix6SkxpQ= Subject key identifier: D2:F8:56:9A:B4:46:82:52:6A:A1:0C:90:A4:F4:62:11:B3:04:44:67 Authority key identifier: 8E:07:D3:1C:64:52:F7:A6:B2:4E:63:CD:DC:49:0E:12:E0:AF:B3:8C Certificate issuer: /CN=8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C Certificate serial: 29534410A053A9C97D1F2ECBC6F80A53FEE2090D Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.mft Manifest number: 02AD Signing time: Sat 06 Dec 2025 03:10:38 +0000 Manifest this update: Sat 06 Dec 2025 03:05:38 +0000 Manifest next update: Sun 07 Dec 2025 06:20:38 +0000 Files and hashes: 1: 326131343a373538313a343836303a3a2f34342d3438203d3e20313531353434.roa (hash: XJo8jS2djpRteJlKSIzBy0GSOcq3Jj/2wBDjV1PmcuQ=) 2: 326131343a373538313a343835633a3a2f34382d3438203d3e20313431303637.roa (hash: 9VIFUmaELJ+SuXK7+C+ONAUKoDB5ufOLiduhS88tcKE=) 3: 326131343a373538313a343835653a3a2f34382d3438203d3e20323134363737.roa (hash: iHR6gaBLhEeuJStOmjFzEe4Moo+lPwxxC1xTUcqx6g4=) 4: 326131343a373538313a343934303a3a2f34342d3438203d3e20313335363539.roa (hash: isp+v1bbWY3zX+eoFLAf4eK3r9/zMrMmocZ2PNCW2Rw=) 5: 326131343a373538313a343835663a3a2f34382d3438203d3e20323135333739.roa (hash: LiQaiw5undZF8O9ZPrbB+SuBZXPDpvcvnNafAQKgteo=) 6: 326131343a373538313a343030303a3a2f33362d3438203d3e203434383137.roa (hash: 06Oq8kkXsOv0rKoRYz/dx2UXUSYf9kyOjrjjxWn2c2o=) 7: 8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.crl (hash: /9qqth5mwrwOgkkR+P4eVTuG2EaBn4rcraPh43S+zgQ=) 8: 326131343a373538313a343535303a3a2f34342d3438203d3e20323136333735.roa (hash: 33Hc4k2qb/SFtHgCtF148ZPS40TPUk0mIWne3Kl1fjs=) 9: 326131343a373538313a343731303a3a2f34342d3438203d3e20313439363930.roa (hash: rLVUcUxyRgJtw6VSAGlKyA8uqmBel4P5gDB+BMhpgCc=) 10: 326131343a373538313a343834303a3a2f34342d3438203d3e20323135323839.roa (hash: IeK6ZG/g9V25xfR3xKZZdyq5xuMwonnHdhMMCLRMWBo=) 11: 326131343a373538313a343835303a3a2f34342d3438203d3e20323135333739.roa (hash: mgbh+id7sfJxNC8FBIA9w2AVClblyfoF7d8LLx0Ph9g=) 12: 326131343a373538313a343331303a3a2f34342d3438203d3e20323135313731.roa (hash: z2fbMMdTRhRUpcDHMD2rvY/J1s4P2i8N3FhzYltODNc=) 13: 326131343a373538313a343536303a3a2f34342d3438203d3e20323135313731.roa (hash: QP4KPs363lKNvbDMC91nWR64EDb9a5wYXaiiUC4k7Hs=) 14: 326131343a373538313a343833303a3a2f34342d3438203d3e20323135323231.roa (hash: j14pv+Fih0N85ic38d12TDY0uRhDLdNY7cvkmnI17jw=) 15: 326131343a373538313a343831303a3a2f34342d3438203d3e20323135363734.roa (hash: HscFYsQcMtvjpDQJk86+k68Lr7MoMlx0VU02QHyOcGk=) 16: 326131343a373538313a343332303a3a2f34342d3438203d3e2039343232.roa (hash: gQv5NI8fa+cTBzk0tpepQG6QGKXWkVIlxityrSNAUjQ=) 17: 326131343a373538313a343832303a3a2f34342d3438203d3e20323135323233.roa (hash: 8fwqZHGyIJyFYdJn0gwpv+qKZFLFFwexw2Z/QOknvfY=) 18: 326131343a373538313a343534303a3a2f34342d3438203d3e203434383137.roa (hash: lL21MUDpM3YDFXY+VNPjMEqMt9/EFafQb01ArsWLAjk=) 19: 326131343a373538313a343635303a3a2f34342d3438203d3e20313335363539.roa (hash: 3t/0qmEuc7HUJ6jbuOuPnmd3ve4/XpcLhj4VdVBS4pk=) 20: 326131343a373538313a343934303a3a2f34342d3434203d3e20323135313731.roa (hash: 7nhFTtPjQhKd1Ac2yjZIA1kYzFwc8dF19rkGkZd+QFk=) 21: 326131343a373538313a343535353a3a2f34382d3438203d3e20323136333735.roa (hash: JVdP0q01IdpmOHNHM/8N7QIeZGO9fY1B0zhs290wioo=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.crl rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:45:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:53:44:10:a0:53:a9:c9:7d:1f:2e:cb:c6:f8:0a:53:fe:e2:09:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C Validity Not Before: Dec 6 03:05:38 2025 GMT Not After : Dec 7 06:20:38 2025 GMT Subject: CN=D2F8569AB44682526AA10C90A4F46211B3044467 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:0e:56:89:96:8b:7d:56:16:e4:1b:ef:d8:2d: 1d:7e:7d:65:05:c3:59:61:88:ad:0b:ab:cd:c3:19: e1:a7:10:0c:0a:9d:fd:d9:e3:17:fd:14:1f:da:3d: d6:f2:9d:09:39:fa:9e:6f:8e:18:2c:ec:0f:32:e1: ed:02:ab:54:b8:6f:89:ea:b3:c1:65:e1:0b:48:ec: 9e:4f:c9:57:43:7f:9a:70:03:6a:3d:36:d2:50:cb: 06:e7:6b:fc:88:53:b4:d2:61:5e:b0:6c:a3:65:bd: 4f:a2:27:7d:e4:e5:1d:5d:c8:c2:8f:aa:bc:f1:71: 22:db:59:11:ea:44:ac:0b:3b:aa:c8:94:fd:74:68: d0:cb:84:3b:66:ee:b0:b2:0d:0b:75:9b:f5:e6:bc: 4e:47:29:35:61:62:04:94:4c:41:ab:70:64:ec:5b: d0:9c:2b:b2:4e:6b:84:32:5f:c7:ae:62:fe:26:c7: 36:22:d7:f4:15:8d:c5:76:bf:d8:6e:88:a0:f1:af: 91:9e:3f:95:83:50:a0:97:44:40:65:31:28:bc:21: 15:63:e8:11:74:ad:57:ef:c2:33:56:c7:81:9f:71: 84:7e:79:65:20:68:ed:54:a1:2c:69:fa:07:3f:fb: 9f:b3:3a:7e:2b:1e:2e:62:4c:33:86:0c:41:ca:b3: 07:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:F8:56:9A:B4:46:82:52:6A:A1:0C:90:A4:F4:62:11:B3:04:44:67 X509v3 Authority Key Identifier: keyid:8E:07:D3:1C:64:52:F7:A6:B2:4E:63:CD:DC:49:0E:12:E0:AF:B3:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:cd:78:42:a4:ae:12:6c:90:a4:b8:9a:f8:62:4b:e3:5c:05: db:ef:3b:20:cc:14:ee:42:56:84:30:95:f3:bd:f0:57:e8:5b: 7f:6c:f6:83:21:1d:d7:3d:35:ad:b1:02:de:63:68:b9:8a:f8: 3a:33:2e:56:43:50:0e:e6:62:9e:49:86:16:25:b6:c0:62:f5: 5a:c4:36:8b:8b:5e:5b:49:3a:8e:12:75:1d:43:7c:84:02:a0: c1:f9:80:96:a4:aa:4b:d5:ea:47:3f:77:58:6f:18:1f:71:df: 6f:a2:27:8c:9f:ce:c7:c7:46:bf:b1:25:a0:38:10:0b:b3:ed: 33:a5:f4:3e:00:a6:6b:73:2d:78:a1:96:c9:4d:cb:11:16:97: b3:3a:ce:1c:8f:4e:e3:6d:79:56:1a:47:9a:70:d6:13:f2:10: 2c:78:8c:60:78:f4:82:77:69:b5:52:ab:8b:9b:08:60:7f:04: 9b:d8:cd:5d:05:d7:50:32:4f:52:ea:1e:fd:41:da:92:fa:40: 19:5e:fb:f1:f4:8b:c1:62:bb:c4:ca:ad:6c:3c:7c:fc:21:3b: 08:d6:78:ce:c8:55:96:3f:42:f1:6a:54:5f:ce:7c:5d:5b:73: b1:b5:a6:b2:f0:8b:b7:66:e4:f0:92:b9:a3:01:96:06:ad:6f: cc:bf:f6:4d -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUKVNEEKBTqcl9Hy7LxvgKU/7iCQ0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEUwN0QzMUM2NDUyRjdBNkIyNEU2M0NEREM0OTBFMTJF MEFGQjM4QzAeFw0yNTEyMDYwMzA1MzhaFw0yNTEyMDcwNjIwMzhaMDMxMTAvBgNV BAMTKEQyRjg1NjlBQjQ0NjgyNTI2QUExMEM5MEE0RjQ2MjExQjMwNDQ0NjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDODlaJlot9VhbkG+/YLR1+fWUF w1lhiK0Lq83DGeGnEAwKnf3Z4xf9FB/aPdbynQk5+p5vjhgs7A8y4e0Cq1S4b4nq s8Fl4QtI7J5PyVdDf5pwA2o9NtJQywbna/yIU7TSYV6wbKNlvU+iJ33k5R1dyMKP qrzxcSLbWRHqRKwLO6rIlP10aNDLhDtm7rCyDQt1m/XmvE5HKTVhYgSUTEGrcGTs W9CcK7JOa4QyX8euYv4mxzYi1/QVjcV2v9huiKDxr5GeP5WDUKCXREBlMSi8IRVj 6BF0rVfvwjNWx4GfcYR+eWUgaO1UoSxp+gc/+5+zOn4rHi5iTDOGDEHKswe5AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU0vhWmrRGglJqoQyQpPRiEbMERGcwHwYDVR0j BBgwFoAUjgfTHGRS96ayTmPN3EkOEuCvs4wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMzExZTQ3YzQtMDJmMC00NjU3LTkwMjItZDJiODNjZmY4 NzU1LzQvOEUwN0QzMUM2NDUyRjdBNkIyNEU2M0NEREM0OTBFMTJFMEFGQjM4Qy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC84RTA3RDMxQzY0NTJGN0E2QjI0RTYzQ0RE QzQ5MEUxMkUwQUZCMzhDLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzMxMWU0N2M0LTAyZjAtNDY1Ny05MDIyLWQyYjgzY2ZmODc1NS80LzhFMDdEMzFD NjQ1MkY3QTZCMjRFNjNDRERDNDkwRTEyRTBBRkIzOEMubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAezXhC pK4SbJCkuJr4YkvjXAXb7zsgzBTuQlaEMJXzvfBX6Ft/bPaDIR3XPTWtsQLeY2i5 ivg6My5WQ1AO5mKeSYYWJbbAYvVaxDaLi15bSTqOEnUdQ3yEAqDB+YCWpKpL1epH P3dYbxgfcd9voieMn87Hx0a/sSWgOBALs+0zpfQ+AKZrcy14oZbJTcsRFpezOs4c j07jbXlWGkeacNYT8hAseIxgePSCd2m1UquLmwhgfwSb2M1dBddQMk9S6h79QdqS +kAZXvvx9IvBYrvEyq1sPHz8ITsI1njOyFWWP0LxalRfznxdW3Oxtaay8Iu3ZuTw krmjAZYGrW/Mv/ZN -----END CERTIFICATE-----Generated at Sat Dec 6 11:23:23 2025 by rpki-client