This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.mft File: ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.mft (raw, json) Hash identifier: 0eMrNE3TOg5a2NUrbejb6DLH4CjRQvx3EeoqDDC8dck= Subject key identifier: A3:6C:C3:67:7F:8F:D4:AD:36:5E:1A:3C:AF:D9:9A:02:F7:08:1B:5C Authority key identifier: ED:8F:9A:7C:71:D9:40:07:39:BB:8F:C9:71:6E:43:42:FF:6D:64:5B Certificate issuer: /CN=ed8f9a7c71d9400739bb8fc9716e4342ff6d645b Certificate serial: 7715A770A4DAA9FA46A5C9D74A7D40974B9BCC68 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Y-afHHZQAc5u4_JcW5DQv9tZFs.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.mft Manifest number: 1D Signing time: Sat 06 Dec 2025 04:16:17 +0000 Manifest this update: Sat 06 Dec 2025 04:11:17 +0000 Manifest next update: Sun 07 Dec 2025 04:18:17 +0000 Files and hashes: 1: 3139342e35302e342e302f32342d3234203d3e20343030303339.roa (hash: 1KQ8U/cyI6RlRLUmJsQ7MnZR4YGCCRfjVSVg2/aEhuA=) 2: 3139342e35302e312e302f32342d3234203d3e20333937363330.roa (hash: TeUJtf1ikY7LLYRPrAz/E+BsfW9QE1+7cNe6Ilv12VI=) 3: 34352e3134392e36312e302f32342d3234203d3e20313335333931.roa (hash: CjBHEb6e8KCFokD4ry4Ct4NNWk9/i3N//pYJT3Rzvpg=) 4: 3139342e35302e312e302f32342d3234203d3e203534323532.roa (hash: ruvdsYTXtE0Ab54FYmgOEkBccmfDScUwXgNFAX7lgcQ=) 5: 34352e3134332e3136332e302f32342d3234203d3e203139343337.roa (hash: M8Y5TaWjTiVOLanqncdwCCTpjaAInXMAJmIU/gVIuL8=) 6: 34352e3134332e3136312e302f32342d3234203d3e203631333137.roa (hash: 8ZjMd6obm3N7HBniZT8uftJQwQbBGvAMihymyaoAi+E=) 7: 34352e3134392e3136352e302f32342d3234203d3e20323039303433.roa (hash: xof4y/WucaiGMtyPzgbTPsOcPFlb9obn6jFW42zp3IM=) 8: 34352e3134392e36322e302f32342d3234203d3e203633313939.roa (hash: vZtUK+cyWn9HqZW47BPiCvcZESw+S9eULE1Gd8jVpHQ=) 9: 34352e3134332e3136322e302f32342d3234203d3e203233343730.roa (hash: OcZ6EMgc6x8+IMfJh9quglLv9DVchqMI90FMfGysZqA=) 10: 3139342e3234372e34352e302f32342d3234203d3e20313337353137.roa (hash: 7Uz0iGXKq5oSbUI44D0T64XUT0jHl47mRLVxjRhD2eU=) 11: 34352e3134392e3136372e302f32342d3234203d3e20323132363639.roa (hash: G5FQ1l+cRk3n7sDIEiJiOqD91u3IjodfdNcjTCN0Zms=) 12: 34352e3134332e3136302e302f32342d3234203d3e203232313638.roa (hash: R01FRlBDr9pZoq05BG3LRHuNkIAJs+FNxUn/NkK9at8=) 13: 3139342e35302e312e302f32342d3234203d3e203634323637.roa (hash: Y111o5heSVgTuvX1afqOIbWwexv6C9e08p+YRNlvpVI=) 14: 34352e3134392e3136342e302f32342d3234203d3e203235333639.roa (hash: a0LqwFPI6pwa1fZnOKWJVr+UvNzZLlo/pfpnRlcnUlw=) 15: 3139342e3234372e34352e302f32342d3234203d3e20343033353034.roa (hash: GJ9H5qMFuesRjGGdPY42j9KwxVYLRdFz1c3FTVKPbZw=) 16: ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.crl (hash: ZWHelQCd8BYc4yQovADJGhTlQG7RC9ToIdMiUDjnmVY=) 17: 3139342e3234372e34342e302f32342d3234203d3e20313432313436.roa (hash: TqX0P9wlnvbZoWAo8DlV20oJQITx6kCNiVhWbz6v/l4=) 18: 34352e3134392e3136362e302f32342d3234203d3e20323132333834.roa (hash: oGRqBKIGwkwo89Qzo8J8QE2XhyVF3R37X5VJTJkYTLY=) 19: 3139342e3234362e33362e302f32342d3234203d3e203235313938.roa (hash: ozV90cqU2WyvLR/pcrjWwicV/oGcsSjYFMa1yOkQ0NQ=) 20: 3139342e3234362e33372e302f32342d3234203d3e20313534303439.roa (hash: qsoqYvzpUXEnewa636Uqf3ZdHju9vYqXC78N1RH7Kt0=) 21: 3139342e3234362e33362e302f32342d3234203d3e20323035383836.roa (hash: ddb+xsyabWT4R1Xj/pgaVmKy1W6jPXhuktKqX52CP3A=) 22: 34352e3134392e36302e302f32342d3234203d3e20383334.roa (hash: HuEEuRf4Jr4z3JTWzq3FSu67ML5pTmz1yPEl7HwtSVY=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.crl rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.mft rsync://rpki.ripe.net/repository/DEFAULT/7Y-afHHZQAc5u4_JcW5DQv9tZFs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:15:a7:70:a4:da:a9:fa:46:a5:c9:d7:4a:7d:40:97:4b:9b:cc:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed8f9a7c71d9400739bb8fc9716e4342ff6d645b Validity Not Before: Dec 6 04:11:17 2025 GMT Not After : Dec 7 04:18:17 2025 GMT Subject: CN=A36CC3677F8FD4AD365E1A3CAFD99A02F7081B5C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:d1:82:65:11:1a:45:ec:2b:e2:de:dd:a7:93: a0:0a:c4:8e:30:60:d0:e3:e9:23:de:ad:2e:9b:f4: ea:98:b0:c7:5a:5d:b1:b1:2b:9f:93:bf:3f:41:49: a1:cc:a2:56:06:ed:68:2b:0c:28:97:ff:34:bb:36: 81:f2:a0:b0:21:09:5c:87:3f:dc:7e:ac:13:7d:37: 13:e3:4f:5b:bb:83:1b:74:17:66:27:aa:f9:65:b9: 41:eb:6f:d0:8b:d2:0e:98:c8:ce:c5:27:25:c4:6a: e7:7e:72:c0:c6:94:07:84:c9:6e:ba:25:4f:8c:c8: aa:f0:aa:43:f1:be:37:a4:d9:a7:5d:d4:08:6e:09: 88:99:6c:c7:f2:b1:c6:18:46:3d:71:7a:78:cf:05: d5:76:a7:ca:99:0c:1b:40:02:c7:0a:66:7c:ac:7e: 06:a5:5a:f5:69:3a:f3:bc:89:fb:e4:c9:89:9d:42: 95:bb:69:7f:48:82:51:35:4b:05:39:6f:8f:05:a1: 78:c3:02:85:e5:4b:16:80:d1:8c:85:11:80:1a:74: 37:f7:0d:06:11:f9:df:62:b3:3a:73:8a:f8:10:7c: 1a:91:20:99:31:1e:43:fb:31:62:94:ff:ee:29:86: e8:e9:da:ee:0c:c8:eb:4c:75:e1:d6:cc:7a:6f:9c: f4:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:6C:C3:67:7F:8F:D4:AD:36:5E:1A:3C:AF:D9:9A:02:F7:08:1B:5C X509v3 Authority Key Identifier: keyid:ED:8F:9A:7C:71:D9:40:07:39:BB:8F:C9:71:6E:43:42:FF:6D:64:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Y-afHHZQAc5u4_JcW5DQv9tZFs.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:41:c6:e3:1a:09:f0:21:fa:d0:37:e2:d3:5b:2d:77:19:bc: 34:02:46:4a:00:52:28:17:4b:62:69:2e:ce:5d:ed:b3:25:2c: e4:ce:69:9c:54:c4:fa:48:d1:82:e7:56:ad:98:fb:a0:bf:27: 9c:ac:08:99:85:7f:b3:ff:76:87:f9:b5:61:6a:fd:fd:e5:73: f9:ea:b3:fd:70:e3:5f:d6:f2:02:53:a1:6d:e4:a9:0c:64:ea: 78:57:1c:08:41:7e:53:0c:a6:3b:70:7d:63:85:e8:1f:f6:b5: ec:f3:45:d7:9a:c4:c5:0d:67:b7:f0:ee:26:6d:0e:dd:b8:1e: 72:4a:41:97:67:ce:9b:5d:88:c5:10:b5:79:90:da:09:bd:ba: a5:1f:bd:2b:87:f7:12:d3:0e:19:c1:a3:e1:9f:6e:86:ae:2e: bd:c7:46:cd:f3:da:f6:66:d5:2d:0e:7f:25:f9:37:03:5c:97: f4:20:6f:54:77:80:d2:64:1c:b5:af:57:1a:b1:e6:99:37:c5: 29:c5:cc:fb:39:a1:6d:46:60:6c:8d:fd:7e:02:3d:6d:26:b1: f0:12:e9:73:cb:a0:06:a5:af:da:57:c2:af:53:4b:7a:b1:2f: 9e:25:91:60:3a:f3:a4:70:65:08:75:8c:8e:cc:a1:c3:3d:82: 19:c1:2e:25 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUdxWncKTaqfpGpcnXSn1Al0ubzGgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZWQ4ZjlhN2M3MWQ5NDAwNzM5YmI4ZmM5NzE2ZTQzNDJm ZjZkNjQ1YjAeFw0yNTEyMDYwNDExMTdaFw0yNTEyMDcwNDE4MTdaMDMxMTAvBgNV BAMTKEEzNkNDMzY3N0Y4RkQ0QUQzNjVFMUEzQ0FGRDk5QTAyRjcwODFCNUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDY0YJlERpF7Cvi3t2nk6AKxI4w YNDj6SPerS6b9OqYsMdaXbGxK5+Tvz9BSaHMolYG7WgrDCiX/zS7NoHyoLAhCVyH P9x+rBN9NxPjT1u7gxt0F2YnqvlluUHrb9CL0g6YyM7FJyXEaud+csDGlAeEyW66 JU+MyKrwqkPxvjek2add1AhuCYiZbMfyscYYRj1xenjPBdV2p8qZDBtAAscKZnys fgalWvVpOvO8ifvkyYmdQpW7aX9IglE1SwU5b48FoXjDAoXlSxaA0YyFEYAadDf3 DQYR+d9iszpzivgQfBqRIJkxHkP7MWKU/+4phujp2u4MyOtMdeHWzHpvnPRJAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUo2zDZ3+P1K02Xho8r9maAvcIG1wwHwYDVR0j BBgwFoAU7Y+afHHZQAc5u4/JcW5DQv9tZFswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzAzMDc5ZGUtMzhhNy00NWYzLWFhODItNTQyZWFmMzcz NzYwLzAvRUQ4RjlBN0M3MUQ5NDAwNzM5QkI4RkM5NzE2RTQzNDJGRjZENjQ1Qi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdZLWFmSEhaUUFjNXU0X0pjVzVEUXY5 dFpGcy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS83MDMwNzlkZS0z OGE3LTQ1ZjMtYWE4Mi01NDJlYWYzNzM3NjAvMC9FRDhGOUE3QzcxRDk0MDA3MzlC QjhGQzk3MTZFNDM0MkZGNkQ2NDVCLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl0HG4xoJ8CH60Dfi01st dxm8NAJGSgBSKBdLYmkuzl3tsyUs5M5pnFTE+kjRgudWrZj7oL8nnKwImYV/s/92 h/m1YWr9/eVz+eqz/XDjX9byAlOhbeSpDGTqeFccCEF+UwymO3B9Y4XoH/a17PNF 15rExQ1nt/DuJm0O3bgeckpBl2fOm12IxRC1eZDaCb26pR+9K4f3EtMOGcGj4Z9u hq4uvcdGzfPa9mbVLQ5/Jfk3A1yX9CBvVHeA0mQcta9XGrHmmTfFKcXM+zmhbUZg bI39fgI9bSax8BLpc8ugBqWv2lfCr1NLerEvniWRYDrzpHBlCHWMjsyhwz2CGcEu JQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:41:35 2025 by rpki-client