This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.mft File: 25827D84056B8444CC2A7842759035354B8416BC.mft (raw, json) Hash identifier: 8nP3p93yGrwVkJu2d9prCc6xCLuWMmNLuM50FyYQGDs= Subject key identifier: 80:B2:31:4F:4B:F9:01:1B:25:18:3A:E5:C9:29:19:E3:6F:FB:64:9E Authority key identifier: 25:82:7D:84:05:6B:84:44:CC:2A:78:42:75:90:35:35:4B:84:16:BC Certificate issuer: /CN=25827d84056b8444cc2a7842759035354b8416bc Certificate serial: 6E1288445C949FD9AB0DE3A6316D41003354FD60 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JYJ9hAVrhETMKnhCdZA1NUuEFrw.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.mft Manifest number: 02D9 Signing time: Fri 05 Dec 2025 11:52:35 +0000 Manifest this update: Fri 05 Dec 2025 11:47:35 +0000 Manifest next update: Sat 06 Dec 2025 14:59:35 +0000 Files and hashes: 1: 58E92F2C3859C2D0EF322A871688CB22928E2F3E.cer (hash: gYiT3SS0bbmQQSp3p/LPeJzfbx3ujd90DskZO9GZ0PQ=) 2: 25827D84056B8444CC2A7842759035354B8416BC.crl (hash: mQO6czYD1CfIqsIPX30TWOm0wJElqQaLK07HK6cghTw=) 3: 3138352e3133342e3139312e302f32342d3234203d3e20323037343837.roa (hash: wMCy3m1h75GfC2ATV5bYCJD7S6jjiI8Si5ikYie+OUI=) 4: 326131343a313463303a313a3a2f34382d3438203d3e20323037343837.roa (hash: nCuZ5ADJB2e8lGpTQQDYT3/JtyMvU82Myd2okt8I23s=) 5: AS18607.asa (hash: UmRU72jnrIjcrDo/h9XDTnV/XRM8dz+BcjyGexjXWqI=) 6: 326131343a313463303a3a2f34382d3438203d3e20323037343837.roa (hash: MAksePoJ+rnc08XyHZPcbQHx/BhF1iv7lCiKD0GFWxw=) 7: 326131343a313463313a3230303a3a2f34302d3438203d3e203138363037.roa (hash: Pf0WXVKsadiaiJtusSEXuFj/o/oP56mVyLEI27IiyE8=) 8: AS207487.asa (hash: Ha+forEe+xS82UGSV4B7j+UWBj+/I05XFS+Ojajx3y4=) 9: 326131343a313463303a323a3a2f34382d3438203d3e20323037343837.roa (hash: lVUTv9ePxFs76NYMpRch/wm8DFit0p7cLkwe+1lgWxI=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.crl rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.mft rsync://rpki.ripe.net/repository/DEFAULT/JYJ9hAVrhETMKnhCdZA1NUuEFrw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 14:59:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:12:88:44:5c:94:9f:d9:ab:0d:e3:a6:31:6d:41:00:33:54:fd:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25827d84056b8444cc2a7842759035354b8416bc Validity Not Before: Dec 5 11:47:35 2025 GMT Not After : Dec 6 14:59:35 2025 GMT Subject: CN=80B2314F4BF9011B25183AE5C92919E36FFB649E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:b3:2d:49:50:7e:35:41:bb:31:43:04:7e:c2: 5a:ca:96:88:25:1c:ba:1d:8e:04:f8:f8:3a:df:c5: de:8a:49:00:0f:85:f9:d6:7a:49:8c:e2:2b:79:b5: b9:9b:a8:1c:1e:13:6a:9a:4c:68:6f:83:46:9c:6b: dc:4b:92:ef:93:b0:54:a8:f7:3b:d8:47:54:7d:4d: 5c:21:af:39:43:b1:ff:c5:54:27:35:5f:39:75:a0: 22:75:ff:7d:2f:3b:12:a2:a7:68:e6:ca:ad:07:d9: f0:da:b1:c0:72:4e:e1:ca:f3:1d:6f:fe:c7:e4:29: 33:8e:41:30:3c:3c:d7:ab:9f:f0:4b:9e:b6:b0:1b: 35:8f:52:2b:00:13:c0:cd:4b:ef:01:0d:26:8a:a2: a9:78:ea:92:04:f2:d0:48:99:3a:c2:19:29:20:1c: 05:74:dc:24:d0:71:c1:26:df:11:f9:44:fd:63:03: d4:3a:37:8c:3d:3d:4e:10:1f:c9:e2:a5:ea:ba:d8: 44:04:b9:bb:fa:61:22:61:ca:a3:75:1b:18:34:57: 1f:8a:14:6c:b4:d5:b5:c8:20:69:2d:b6:fd:75:d8: 2f:d6:d2:bf:6f:59:91:47:18:67:d8:fc:5c:26:2f: 69:7b:d2:0d:79:6d:5c:7e:66:a8:57:ab:9f:85:41: 00:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:B2:31:4F:4B:F9:01:1B:25:18:3A:E5:C9:29:19:E3:6F:FB:64:9E X509v3 Authority Key Identifier: keyid:25:82:7D:84:05:6B:84:44:CC:2A:78:42:75:90:35:35:4B:84:16:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JYJ9hAVrhETMKnhCdZA1NUuEFrw.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:43:18:81:f5:ed:4f:68:57:36:fa:cf:29:86:a2:f8:b9:f2: 71:f2:ed:38:dc:11:24:06:6c:93:e7:38:30:61:32:07:3c:db: 8d:6d:6e:bb:29:2c:3e:71:92:17:19:42:cb:30:62:16:c9:ea: a8:02:e7:21:5d:93:b7:cf:3a:59:92:ba:07:cc:c6:ea:f6:c0: 8e:37:61:f0:f2:a6:94:48:38:a8:d5:3a:27:75:47:42:fd:bc: e7:91:d8:de:0a:df:a7:86:1f:1a:3f:0e:d6:fa:1d:dc:19:5f: d4:9c:2d:d0:62:dc:a5:a4:b9:78:90:8b:e9:0b:28:bc:99:6b: d6:2d:87:8a:b2:6b:f5:f0:68:e5:c9:5b:9e:48:4f:54:6e:f5: 69:09:36:85:0d:43:03:ba:8d:9c:f4:5d:57:aa:bc:24:d5:2c: a9:c0:df:4d:83:37:4b:f9:e8:76:48:24:85:57:48:84:d7:39: 48:71:62:3b:1f:e1:51:7f:a6:59:7e:08:af:87:54:cc:b5:99: 4f:0f:42:13:b9:88:5f:14:3b:be:b6:4c:af:67:d6:68:17:4d: ef:96:3f:9c:9e:c1:b7:ff:71:29:4d:97:37:0d:cd:09:b0:28: ef:09:af:0e:29:65:35:ed:87:f0:f6:d8:d8:3e:24:a5:42:fa: 68:42:ab:db -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUbhKIRFyUn9mrDeOmMW1BADNU/WAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjU4MjdkODQwNTZiODQ0NGNjMmE3ODQyNzU5MDM1MzU0 Yjg0MTZiYzAeFw0yNTEyMDUxMTQ3MzVaFw0yNTEyMDYxNDU5MzVaMDMxMTAvBgNV BAMTKDgwQjIzMTRGNEJGOTAxMUIyNTE4M0FFNUM5MjkxOUUzNkZGQjY0OUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWsy1JUH41QbsxQwR+wlrKlogl HLodjgT4+Drfxd6KSQAPhfnWekmM4it5tbmbqBweE2qaTGhvg0aca9xLku+TsFSo 9zvYR1R9TVwhrzlDsf/FVCc1Xzl1oCJ1/30vOxKip2jmyq0H2fDascByTuHK8x1v /sfkKTOOQTA8PNern/BLnrawGzWPUisAE8DNS+8BDSaKoql46pIE8tBImTrCGSkg HAV03CTQccEm3xH5RP1jA9Q6N4w9PU4QH8nipeq62EQEubv6YSJhyqN1Gxg0Vx+K FGy01bXIIGkttv112C/W0r9vWZFHGGfY/FwmL2l70g15bVx+ZqhXq5+FQQAtAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUgLIxT0v5ARslGDrlySkZ42/7ZJ4wHwYDVR0j BBgwFoAUJYJ9hAVrhETMKnhCdZA1NUuEFrwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjliYmZkY2YtMzVjZC00NTI0LThmZmEtMzAwNWIwYjY5 YTI5LzAvMjU4MjdEODQwNTZCODQ0NENDMkE3ODQyNzU5MDM1MzU0Qjg0MTZCQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0pZSjloQVZyaEVUTUtuaENkWkExTlV1 RUZydy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82OWJiZmRjZi0z NWNkLTQ1MjQtOGZmYS0zMDA1YjBiNjlhMjkvMC8yNTgyN0Q4NDA1NkI4NDQ0Q0My QTc4NDI3NTkwMzUzNTRCODQxNkJDLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh0MYgfXtT2hXNvrPKYai +LnycfLtONwRJAZsk+c4MGEyBzzbjW1uuyksPnGSFxlCyzBiFsnqqALnIV2Tt886 WZK6B8zG6vbAjjdh8PKmlEg4qNU6J3VHQv2855HY3grfp4YfGj8O1vod3Blf1Jwt 0GLcpaS5eJCL6QsovJlr1i2HirJr9fBo5clbnkhPVG71aQk2hQ1DA7qNnPRdV6q8 JNUsqcDfTYM3S/nodkgkhVdIhNc5SHFiOx/hUX+mWX4Ir4dUzLWZTw9CE7mIXxQ7 vrZMr2fWaBdN75Y/nJ7Bt/9xKU2XNw3NCbAo7wmvDillNe2H8PbY2D4kpUL6aEKr 2w== -----END CERTIFICATE-----Generated at Sat Dec 6 08:11:29 2025 by rpki-client