This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.mft File: 8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.mft (raw, json) Hash identifier: 2Ge3jUD3eoX+dMjLbuHThrepovwsByq5asRowDzijUE= Subject key identifier: 4A:3E:A4:49:5B:72:E9:BE:20:F1:D9:9A:FD:AC:A3:CE:AE:F3:88:D5 Authority key identifier: 8B:9B:A9:AD:DE:96:35:77:7B:F5:86:FD:49:3E:14:CD:30:F7:C4:CA Certificate issuer: /CN=8b9ba9adde9635777bf586fd493e14cd30f7c4ca Certificate serial: 5F7EB151E47363FBD74CC00543BB1C123B606763 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i5uprd6WNXd79Yb9ST4UzTD3xMo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.mft Manifest number: 0503 Signing time: Fri 05 Dec 2025 18:51:16 +0000 Manifest this update: Fri 05 Dec 2025 18:46:16 +0000 Manifest next update: Sat 06 Dec 2025 19:12:16 +0000 Files and hashes: 1: 3138382e3136342e3135352e302f32342d3234203d3e203631333137.roa (hash: W1I8woHaqJ6kU4xjFwKm1g6uV7UZ51m6Dv8R/7Dp0Oc=) 2: 3138382e3136342e3135342e302f32342d3234203d3e2039333034.roa (hash: Xrl4k2Y1ZQnjBYts0VWEIYeb2G4oTSJ6MhQs1UM8vvM=) 3: 8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.crl (hash: YP/9ZTi731aorMM23Rhhtl0cAzcgz4zFhmDEwerDg+0=) 4: 3138382e3136342e3135332e302f32342d3234203d3e203631333137.roa (hash: pkJz5L9iLZRF+OIvLDh3t2xUInq31L6An4us+3j1eD0=) 5: 3138382e3136342e3135322e302f32342d3234203d3e203631333137.roa (hash: PjHq1CK+fSk+5WuONiKJilG5oXTFh0dZnkKMEZVNP8E=) 6: 3138382e3136342e3135362e302f32342d3234203d3e20383334.roa (hash: sY/xAuh6Mg68YWt7c8TloEoU7TIBsTXsCx6tRGi7xp4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.crl rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.mft rsync://rpki.ripe.net/repository/DEFAULT/i5uprd6WNXd79Yb9ST4UzTD3xMo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 19:12:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:7e:b1:51:e4:73:63:fb:d7:4c:c0:05:43:bb:1c:12:3b:60:67:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b9ba9adde9635777bf586fd493e14cd30f7c4ca Validity Not Before: Dec 5 18:46:16 2025 GMT Not After : Dec 6 19:12:16 2025 GMT Subject: CN=4A3EA4495B72E9BE20F1D99AFDACA3CEAEF388D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:09:3f:36:00:33:31:c7:09:a4:56:72:40:21: 78:45:46:89:2d:23:6a:1d:85:c7:c8:70:18:53:85: 9c:4b:ca:b0:d6:7d:9d:c4:f9:07:1b:f9:ca:c4:2c: af:73:da:26:b9:4f:37:36:28:4e:42:7e:55:da:09: b5:11:98:38:f1:3e:de:99:93:74:e3:89:c6:ad:ab: da:43:2b:8a:c4:66:25:88:fc:b7:ac:66:03:ce:3e: 38:69:91:6f:46:6f:74:8a:d6:71:52:e1:6e:57:9d: 1a:39:47:04:f7:94:c6:90:60:ab:3c:3e:00:de:85: 88:69:43:45:6c:47:96:b0:68:30:56:e3:04:32:f8: fb:c4:f0:e4:20:90:5b:66:52:b7:fb:b2:b8:d9:b6: 8b:fb:cf:64:ff:40:99:21:3f:1e:29:aa:83:10:51: 24:7b:21:22:d9:83:e5:74:6e:29:8d:48:84:ed:01: 19:83:24:fd:8d:a4:19:ce:0c:74:fd:53:4f:43:27: f6:3e:0a:d3:2b:48:10:7d:cd:af:35:b9:6e:d5:97: 4d:f9:c1:08:b6:08:53:52:b0:2c:eb:76:88:69:b3: 32:67:58:f7:e2:2a:5b:31:6e:bf:77:34:4a:e2:d7: b9:61:a7:a8:7b:0b:59:f1:b6:6b:c3:b2:b6:cc:5a: bd:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:3E:A4:49:5B:72:E9:BE:20:F1:D9:9A:FD:AC:A3:CE:AE:F3:88:D5 X509v3 Authority Key Identifier: keyid:8B:9B:A9:AD:DE:96:35:77:7B:F5:86:FD:49:3E:14:CD:30:F7:C4:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i5uprd6WNXd79Yb9ST4UzTD3xMo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:5a:cb:d5:aa:0b:50:8e:c0:c4:7f:76:1b:91:c9:71:f8:36: 3b:53:84:c1:65:3b:98:dc:0c:94:b1:73:c4:f8:cf:dd:d9:b2: 7d:d1:2e:1a:e4:b6:27:00:2b:72:3c:b0:c4:9e:eb:e2:d7:f4: 45:56:71:aa:41:f9:73:cc:5c:33:1e:b1:25:99:f1:ae:1c:bf: ca:26:74:0b:b9:f4:9d:c1:cd:1f:cc:67:8d:66:39:b1:bf:1b: bf:58:9f:a6:21:d4:98:e6:41:35:c3:b9:3a:03:76:c7:d8:43: 32:db:1d:ed:a9:d3:23:c2:2f:3b:be:65:6c:9f:3a:06:a5:fe: ed:ca:c6:6e:10:af:41:b9:6e:7c:30:ed:ae:fb:e6:60:16:3d: 59:e3:07:ef:c3:3c:e9:82:78:41:c2:af:c9:d5:b1:cf:72:3f: 82:86:b5:52:65:e7:c2:79:c0:d1:79:68:9e:9f:07:0c:a5:76: 2a:21:45:f3:88:30:28:0e:4f:5e:0f:41:a6:76:62:4f:0e:77: 8a:6e:88:05:20:4e:16:a5:34:12:dc:e2:87:1f:10:5d:6e:4b: 8e:4c:79:58:ad:83:af:7f:83:4f:75:eb:af:3d:5a:0b:65:c0: e7:a6:1e:d3:9f:0a:e0:69:fe:41:bc:28:04:d3:f4:45:18:73: 3b:81:a8:e4 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUX36xUeRzY/vXTMAFQ7scEjtgZ2MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI5YmE5YWRkZTk2MzU3NzdiZjU4NmZkNDkzZTE0Y2Qz MGY3YzRjYTAeFw0yNTEyMDUxODQ2MTZaFw0yNTEyMDYxOTEyMTZaMDMxMTAvBgNV BAMTKDRBM0VBNDQ5NUI3MkU5QkUyMEYxRDk5QUZEQUNBM0NFQUVGMzg4RDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYCT82ADMxxwmkVnJAIXhFRokt I2odhcfIcBhThZxLyrDWfZ3E+Qcb+crELK9z2ia5Tzc2KE5CflXaCbURmDjxPt6Z k3Tjicatq9pDK4rEZiWI/LesZgPOPjhpkW9Gb3SK1nFS4W5XnRo5RwT3lMaQYKs8 PgDehYhpQ0VsR5awaDBW4wQy+PvE8OQgkFtmUrf7srjZtov7z2T/QJkhPx4pqoMQ USR7ISLZg+V0bimNSITtARmDJP2NpBnODHT9U09DJ/Y+CtMrSBB9za81uW7Vl035 wQi2CFNSsCzrdohpszJnWPfiKlsxbr93NEri17lhp6h7C1nxtmvDsrbMWr3jAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUSj6kSVty6b4g8dma/ayjzq7ziNUwHwYDVR0j BBgwFoAUi5uprd6WNXd79Yb9ST4UzTD3xMowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNmMwMzA4OTAtZjZlMC00MTBjLWJjOTktYWYwOTIxZDFj M2E0LzAvOEI5QkE5QURERTk2MzU3NzdCRjU4NkZENDkzRTE0Q0QzMEY3QzRDQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2k1dXByZDZXTlhkNzlZYjlTVDRVelRE M3hNby5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YzAzMDg5MC1m NmUwLTQxMGMtYmM5OS1hZjA5MjFkMWMzYTQvMC84QjlCQTlBRERFOTYzNTc3N0JG NTg2RkQ0OTNFMTRDRDMwRjdDNENBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKFrL1aoLUI7AxH92G5HJ cfg2O1OEwWU7mNwMlLFzxPjP3dmyfdEuGuS2JwArcjywxJ7r4tf0RVZxqkH5c8xc Mx6xJZnxrhy/yiZ0C7n0ncHNH8xnjWY5sb8bv1ifpiHUmOZBNcO5OgN2x9hDMtsd 7anTI8IvO75lbJ86BqX+7crGbhCvQblufDDtrvvmYBY9WeMH78M86YJ4QcKvydWx z3I/goa1UmXnwnnA0Xlonp8HDKV2KiFF84gwKA5PXg9BpnZiTw53im6IBSBOFqU0 Etzihx8QXW5Ljkx5WK2Dr3+DT3Xrrz1aC2XA56Ye058K4Gn+QbwoBNP0RRhzO4Go 5A== -----END CERTIFICATE-----Generated at Sat Dec 6 12:58:38 2025 by rpki-client