This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/705b1897-d907-4dfc-b68b-77f485f58d6c/0/FDEE16BDC5420A60A3D6A8A29BD302650937B88C.mft File: FDEE16BDC5420A60A3D6A8A29BD302650937B88C.mft (raw, json) Hash identifier: aCskHrnlALZHYi/GMoie82Z+A7+bEh1zCrNVF+pNPmU= Subject key identifier: 60:EE:59:29:94:C5:99:B0:19:42:60:1F:AE:BD:69:B8:A8:DC:54:CA Authority key identifier: FD:EE:16:BD:C5:42:0A:60:A3:D6:A8:A2:9B:D3:02:65:09:37:B8:8C Certificate issuer: /CN=FDEE16BDC5420A60A3D6A8A29BD302650937B88C Certificate serial: 213B97AFC948281F76D81C5953076929F07EE5AF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/FDEE16BDC5420A60A3D6A8A29BD302650937B88C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/705b1897-d907-4dfc-b68b-77f485f58d6c/0/FDEE16BDC5420A60A3D6A8A29BD302650937B88C.mft Manifest number: D6 Signing time: Sat 06 Dec 2025 06:18:50 +0000 Manifest this update: Sat 06 Dec 2025 06:13:50 +0000 Manifest next update: Sun 07 Dec 2025 08:08:50 +0000 Files and hashes: 1: 326131343a373538333a313030303a3a2f33362d3336203d3e20323135313038.roa (hash: Uc2wuWBne08reeuhGMV9FbwTFk0eKIo5Ei95b36hJuE=) 2: 326131343a373538303a373030303a3a2f33362d3336203d3e20323135313038.roa (hash: bvyg3HtIyqBCxLiPY89KCRG9IWT8nd/t/MqdudiybDI=) 3: FDEE16BDC5420A60A3D6A8A29BD302650937B88C.crl (hash: BjtQeUFG6cc8UR7WwUPbHhBPAwYoWRJt0p209A4BDG0=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/705b1897-d907-4dfc-b68b-77f485f58d6c/0/FDEE16BDC5420A60A3D6A8A29BD302650937B88C.crl rsync://rsync.paas.rpki.ripe.net/repository/705b1897-d907-4dfc-b68b-77f485f58d6c/0/FDEE16BDC5420A60A3D6A8A29BD302650937B88C.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/FDEE16BDC5420A60A3D6A8A29BD302650937B88C.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:45:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:3b:97:af:c9:48:28:1f:76:d8:1c:59:53:07:69:29:f0:7e:e5:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FDEE16BDC5420A60A3D6A8A29BD302650937B88C Validity Not Before: Dec 6 06:13:50 2025 GMT Not After : Dec 7 08:08:50 2025 GMT Subject: CN=60EE592994C599B01942601FAEBD69B8A8DC54CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:9f:02:8c:4b:93:5c:fe:2a:b7:57:86:be:cf: bc:11:67:22:05:6c:2d:84:80:0f:47:8f:07:3a:5d: ca:18:14:42:ac:01:de:57:60:f8:6b:0d:ed:7c:52: f7:29:1b:d0:c5:f2:08:c6:b4:39:42:35:74:4d:15: 1f:ac:dc:02:a1:ef:d5:dd:5d:04:4e:49:dd:fe:f6: 2b:80:ba:fe:71:76:c0:74:e2:5b:b8:22:36:97:8b: 23:a4:ba:72:68:34:88:61:ed:6e:9b:6e:49:4b:a0: bd:1d:05:89:b5:5c:bb:21:f5:50:58:2d:7d:04:0d: 4f:e0:99:0e:7e:dd:f1:95:a8:22:a9:31:d8:d6:08: 12:25:ca:d4:14:7c:4d:b6:4c:07:3f:17:e5:b6:32: a9:9f:17:3e:ce:2d:2c:b1:a2:ce:f2:58:95:f6:ec: b9:77:d8:d0:3d:c1:dc:ad:82:94:d7:f1:21:25:55: 8c:88:cc:f7:25:ad:ec:df:7f:bd:94:1e:14:db:25: 33:57:a7:30:bb:41:39:5e:30:6a:2b:f6:ad:41:36: 49:b4:7e:d4:a9:0c:66:c9:8b:3c:1e:0e:af:13:cf: fc:41:c2:32:56:31:38:a2:e2:7b:93:8c:c3:0a:15: 86:ba:6c:3e:a9:20:95:3f:b6:03:e9:eb:71:01:8d: 2e:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:EE:59:29:94:C5:99:B0:19:42:60:1F:AE:BD:69:B8:A8:DC:54:CA X509v3 Authority Key Identifier: keyid:FD:EE:16:BD:C5:42:0A:60:A3:D6:A8:A2:9B:D3:02:65:09:37:B8:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/705b1897-d907-4dfc-b68b-77f485f58d6c/0/FDEE16BDC5420A60A3D6A8A29BD302650937B88C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/FDEE16BDC5420A60A3D6A8A29BD302650937B88C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/705b1897-d907-4dfc-b68b-77f485f58d6c/0/FDEE16BDC5420A60A3D6A8A29BD302650937B88C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:5a:4e:de:f4:da:77:26:84:5d:82:c2:cf:aa:a3:d8:4f:39: af:50:39:e7:a9:1c:53:b3:fb:45:01:60:43:85:de:26:51:97: 8d:28:f6:55:28:e3:ab:bc:7e:70:62:66:e0:12:e7:75:5a:66: 0f:06:f3:60:4a:08:d0:1e:e9:ab:f4:eb:a8:bf:25:55:0b:3b: b1:e8:10:e6:1d:22:a4:d2:b2:db:4f:d2:84:88:d9:3c:fa:a6: 5d:3a:36:f7:ad:4f:67:41:ff:23:91:39:fc:77:7f:08:22:19: bc:bc:6d:61:d3:f7:c2:cf:d8:2a:0a:d8:be:e1:a4:fb:68:56: d2:93:05:4c:2c:95:65:ff:3b:71:3c:df:ae:e6:48:ab:f8:52: 37:03:31:a4:66:99:3c:8a:88:ee:a4:1e:12:9d:ee:c8:4d:34: 18:ff:76:38:5f:87:4d:29:a3:d9:2f:fe:97:39:e7:d0:9f:43: 82:1c:a0:fd:e8:ac:5c:2f:97:15:e2:61:e5:a7:5e:ca:ec:52: 6f:2c:63:c5:99:82:49:28:58:78:59:81:4f:e4:2e:ca:2c:3c: 8d:56:ae:e4:88:c6:ad:1c:ce:b3:eb:ad:4f:0a:91:33:4c:da: e1:c5:0a:24:c7:a5:7e:47:40:cd:6a:f4:af:58:86:3f:aa:69: 95:27:9e:26 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUITuXr8lIKB922BxZUwdpKfB+5a8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkRFRTE2QkRDNTQyMEE2MEEzRDZBOEEyOUJEMzAyNjUw OTM3Qjg4QzAeFw0yNTEyMDYwNjEzNTBaFw0yNTEyMDcwODA4NTBaMDMxMTAvBgNV BAMTKDYwRUU1OTI5OTRDNTk5QjAxOTQyNjAxRkFFQkQ2OUI4QThEQzU0Q0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHnwKMS5Nc/iq3V4a+z7wRZyIF bC2EgA9Hjwc6XcoYFEKsAd5XYPhrDe18UvcpG9DF8gjGtDlCNXRNFR+s3AKh79Xd XQROSd3+9iuAuv5xdsB04lu4IjaXiyOkunJoNIhh7W6bbklLoL0dBYm1XLsh9VBY LX0EDU/gmQ5+3fGVqCKpMdjWCBIlytQUfE22TAc/F+W2MqmfFz7OLSyxos7yWJX2 7Ll32NA9wdytgpTX8SElVYyIzPclrezff72UHhTbJTNXpzC7QTleMGor9q1BNkm0 ftSpDGbJizweDq8Tz/xBwjJWMTii4nuTjMMKFYa6bD6pIJU/tgPp63EBjS7lAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUYO5ZKZTFmbAZQmAfrr1puKjcVMowHwYDVR0j BBgwFoAU/e4WvcVCCmCj1qiim9MCZQk3uIwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzA1YjE4OTctZDkwNy00ZGZjLWI2OGItNzdmNDg1ZjU4 ZDZjLzAvRkRFRTE2QkRDNTQyMEE2MEEzRDZBOEEyOUJEMzAyNjUwOTM3Qjg4Qy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9GREVFMTZCREM1NDIwQTYwQTNENkE4QTI5 QkQzMDI2NTA5MzdCODhDLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzcwNWIxODk3LWQ5MDctNGRmYy1iNjhiLTc3ZjQ4NWY1OGQ2Yy8wL0ZERUUxNkJE QzU0MjBBNjBBM0Q2QThBMjlCRDMwMjY1MDkzN0I4OEMubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBkWk7e 9Np3JoRdgsLPqqPYTzmvUDnnqRxTs/tFAWBDhd4mUZeNKPZVKOOrvH5wYmbgEud1 WmYPBvNgSgjQHumr9OuovyVVCzux6BDmHSKk0rLbT9KEiNk8+qZdOjb3rU9nQf8j kTn8d38IIhm8vG1h0/fCz9gqCti+4aT7aFbSkwVMLJVl/ztxPN+u5kir+FI3AzGk Zpk8iojupB4Sne7ITTQY/3Y4X4dNKaPZL/6XOefQn0OCHKD96KxcL5cV4mHlp17K 7FJvLGPFmYJJKFh4WYFP5C7KLDyNVq7kiMatHM6z661PCpEzTNrhxQokx6V+R0DN avSvWIY/qmmVJ54m -----END CERTIFICATE-----Generated at Sat Dec 6 12:51:22 2025 by rpki-client