This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/5a7c956c-22eb-4bb8-a327-ad97161295bc/0/020F7ED217FC36532E6B045CFBCCDA68A6604620.mft File: 020F7ED217FC36532E6B045CFBCCDA68A6604620.mft (raw, json) Hash identifier: RwnLFIUKpeQX36Uh3LLinQdilkAlk2FcNGPG6QE2raM= Subject key identifier: 33:E0:F4:EF:76:2C:66:95:47:55:87:8A:8D:09:D7:6A:55:CC:F1:7A Authority key identifier: 02:0F:7E:D2:17:FC:36:53:2E:6B:04:5C:FB:CC:DA:68:A6:60:46:20 Certificate issuer: /CN=020F7ED217FC36532E6B045CFBCCDA68A6604620 Certificate serial: 624CBDF759137E88807229B0BC3789C4AAA036A8 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/020F7ED217FC36532E6B045CFBCCDA68A6604620.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5a7c956c-22eb-4bb8-a327-ad97161295bc/0/020F7ED217FC36532E6B045CFBCCDA68A6604620.mft Manifest number: 88 Signing time: Fri 05 Dec 2025 22:25:46 +0000 Manifest this update: Fri 05 Dec 2025 22:20:46 +0000 Manifest next update: Sat 06 Dec 2025 23:54:46 +0000 Files and hashes: 1: 326131343a373538313a366663303a3a2f34342d3438203d3e20323037333839.roa (hash: k0slLXQGak8JfXgcycld4UCv11bkqqJyVwy8WgUs0W4=) 2: 326131343a373538313a366662303a3a2f34342d3438203d3e20323136343332.roa (hash: cip9cJqKeyNrJhvNYpxl3IQ3uuVk6x6ccrH22pN5xrA=) 3: 326131343a373538313a366665303a3a2f34342d3438203d3e20323134383431.roa (hash: eJoFXZz3vH/PzqNzkkd4bWX4CpO0e/s0UWWhyH7ohGo=) 4: 020F7ED217FC36532E6B045CFBCCDA68A6604620.crl (hash: Kv3qliJctWb+AyvDDAY4gwDZ1ZPEZcxgR5182gBaDkA=) 5: 326131343a373538313a366664303a3a2f34342d3438203d3e20323135393334.roa (hash: BfxFUd5DTechXRUy4Ex3ytqAtMEr8QPJBcDEM0dDVlg=) 6: 326131343a373538313a366430303a3a2f34302d3438203d3e20323035333239.roa (hash: UAf2blctTo7ZlN86/McI15QZsGre1E35LEt/FhIBXBM=) 7: 326131343a373538313a366330303a3a2f34302d3438203d3e20313938393534.roa (hash: fPBlj/OX226nVSvX0NnbhELuUhpZ2u/Ytd/uYZbhMTA=) 8: 326131343a373538313a366530303a3a2f34302d3438203d3e2039393233.roa (hash: xTMyG8vk7HfhKOphzDUHjsL1N+HXzTu0fnBjhyB6AKQ=) 9: 326131343a373538313a363030303a3a2f33362d3438203d3e20323034383434.roa (hash: 9WwOZQ+czh53N90Wic7WKUZpN9yKrnRBc/mSIwdZviM=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5a7c956c-22eb-4bb8-a327-ad97161295bc/0/020F7ED217FC36532E6B045CFBCCDA68A6604620.crl rsync://rsync.paas.rpki.ripe.net/repository/5a7c956c-22eb-4bb8-a327-ad97161295bc/0/020F7ED217FC36532E6B045CFBCCDA68A6604620.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/020F7ED217FC36532E6B045CFBCCDA68A6604620.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:45:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:4c:bd:f7:59:13:7e:88:80:72:29:b0:bc:37:89:c4:aa:a0:36:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=020F7ED217FC36532E6B045CFBCCDA68A6604620 Validity Not Before: Dec 5 22:20:46 2025 GMT Not After : Dec 6 23:54:46 2025 GMT Subject: CN=33E0F4EF762C66954755878A8D09D76A55CCF17A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:55:a8:0f:6d:2d:b5:20:61:74:30:b9:2f:1a: 17:a0:bc:d3:b7:59:78:aa:5c:1c:21:82:a5:43:41: 4f:b3:d7:1d:26:d5:70:f8:be:09:23:23:cc:b8:f3: 9f:2a:65:0e:d4:57:43:2c:8c:fe:10:1d:3c:f0:45: d6:9b:29:58:f4:12:28:96:49:95:f3:31:74:26:ca: ac:da:a2:0c:fb:14:4b:04:3a:d7:a1:0a:24:5d:97: 1c:14:70:f2:a4:4d:a9:6d:dd:a8:49:9b:a4:dc:69: 8a:54:f5:3c:d6:6c:ae:56:28:07:11:63:b5:87:15: 11:1c:a2:a5:ba:8d:9c:ab:16:0d:1e:cd:f1:65:dd: 20:61:0b:d9:2e:95:cf:fa:ca:1c:23:cf:a0:aa:60: e8:7c:eb:ff:91:0d:64:4c:37:d2:40:e1:e5:39:fc: 32:77:84:ab:42:ee:57:ad:57:eb:85:ea:1f:9b:ff: b6:a4:fa:e0:34:04:1e:29:9e:cf:a4:bf:b0:f4:9b: a3:d2:f3:6d:e8:8d:04:a2:5c:7e:ea:f8:d6:1a:48: d9:b6:09:6e:41:3f:7e:68:f2:a1:aa:3e:73:75:3b: 29:d7:37:85:62:fa:eb:b8:14:77:61:5e:a7:ac:b8: 42:d0:f5:7f:a1:bf:a6:1e:f8:53:ca:ad:ab:47:08: 52:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:E0:F4:EF:76:2C:66:95:47:55:87:8A:8D:09:D7:6A:55:CC:F1:7A X509v3 Authority Key Identifier: keyid:02:0F:7E:D2:17:FC:36:53:2E:6B:04:5C:FB:CC:DA:68:A6:60:46:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/5a7c956c-22eb-4bb8-a327-ad97161295bc/0/020F7ED217FC36532E6B045CFBCCDA68A6604620.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/020F7ED217FC36532E6B045CFBCCDA68A6604620.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5a7c956c-22eb-4bb8-a327-ad97161295bc/0/020F7ED217FC36532E6B045CFBCCDA68A6604620.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:28:1f:4c:c5:12:9c:39:bf:ae:cf:6b:72:e2:60:16:03:a1: 30:94:e0:c2:ba:87:84:1f:d0:e6:85:7f:8b:a0:e4:da:39:3d: 04:0c:9a:5e:cd:38:73:12:49:a7:f7:29:80:59:91:b3:fe:1b: eb:a5:47:12:e0:20:64:b5:b8:f5:d0:32:4f:f1:b4:f0:5b:f5: 41:f7:03:93:5d:33:d5:97:fe:cc:7e:08:14:46:4c:85:36:e6: a0:77:7a:ac:18:d2:6c:7c:46:0c:00:30:c0:59:33:63:f3:a8: b2:2d:b8:33:2d:cd:ed:76:6e:c7:fc:00:82:ef:df:25:0f:36: 05:01:1b:dd:fd:3f:c6:a2:b6:94:e8:c8:73:01:af:3a:16:fb: 16:8f:37:e0:34:24:ba:85:e8:5e:77:64:01:5f:93:b3:e1:a6: 77:b3:32:7b:0e:2f:2b:95:23:1d:12:f1:1c:51:9e:f0:1d:3f: de:4e:87:f1:89:da:35:00:ba:e0:1f:ee:9c:af:cf:a0:90:37: 18:ed:fa:8a:67:3f:c8:fd:9a:0f:c6:25:fc:4e:52:94:d1:d8: 04:52:68:d9:28:ac:cb:ac:2f:58:4d:41:1b:02:3c:97:b9:e4: 77:9a:96:7b:a1:1b:d9:62:8b:84:7d:c8:7e:fe:97:99:88:d2: 7f:f6:a8:76 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUYky991kTfoiAcimwvDeJxKqgNqgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDIwRjdFRDIxN0ZDMzY1MzJFNkIwNDVDRkJDQ0RBNjhB NjYwNDYyMDAeFw0yNTEyMDUyMjIwNDZaFw0yNTEyMDYyMzU0NDZaMDMxMTAvBgNV BAMTKDMzRTBGNEVGNzYyQzY2OTU0NzU1ODc4QThEMDlENzZBNTVDQ0YxN0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5VagPbS21IGF0MLkvGhegvNO3 WXiqXBwhgqVDQU+z1x0m1XD4vgkjI8y4858qZQ7UV0MsjP4QHTzwRdabKVj0EiiW SZXzMXQmyqzaogz7FEsEOtehCiRdlxwUcPKkTalt3ahJm6TcaYpU9TzWbK5WKAcR Y7WHFREcoqW6jZyrFg0ezfFl3SBhC9kulc/6yhwjz6CqYOh86/+RDWRMN9JA4eU5 /DJ3hKtC7letV+uF6h+b/7ak+uA0BB4pns+kv7D0m6PS823ojQSiXH7q+NYaSNm2 CW5BP35o8qGqPnN1OynXN4Vi+uu4FHdhXqesuELQ9X+hv6Ye+FPKratHCFJFAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUM+D073YsZpVHVYeKjQnXalXM8XowHwYDVR0j BBgwFoAUAg9+0hf8NlMuawRc+8zaaKZgRiAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNWE3Yzk1NmMtMjJlYi00YmI4LWEzMjctYWQ5NzE2MTI5 NWJjLzAvMDIwRjdFRDIxN0ZDMzY1MzJFNkIwNDVDRkJDQ0RBNjhBNjYwNDYyMC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8wMjBGN0VEMjE3RkMzNjUzMkU2QjA0NUNG QkNDREE2OEE2NjA0NjIwLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzVhN2M5NTZjLTIyZWItNGJiOC1hMzI3LWFkOTcxNjEyOTViYy8wLzAyMEY3RUQy MTdGQzM2NTMyRTZCMDQ1Q0ZCQ0NEQTY4QTY2MDQ2MjAubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCqKB9M xRKcOb+uz2ty4mAWA6EwlODCuoeEH9DmhX+LoOTaOT0EDJpezThzEkmn9ymAWZGz /hvrpUcS4CBktbj10DJP8bTwW/VB9wOTXTPVl/7MfggURkyFNuagd3qsGNJsfEYM ADDAWTNj86iyLbgzLc3tdm7H/ACC798lDzYFARvd/T/GoraU6MhzAa86FvsWjzfg NCS6hehed2QBX5Oz4aZ3szJ7Di8rlSMdEvEcUZ7wHT/eTofxido1ALrgH+6cr8+g kDcY7fqKZz/I/ZoPxiX8TlKU0dgEUmjZKKzLrC9YTUEbAjyXueR3mpZ7oRvZYouE fch+/peZiNJ/9qh2 -----END CERTIFICATE-----Generated at Sat Dec 6 11:51:02 2025 by rpki-client