This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.mft File: 0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.mft (raw, json) Hash identifier: Q1T+mgKyv+oZZcXYk7BUXhck384vORk6FKB6yZvtGm8= Subject key identifier: 9E:02:4C:CF:49:86:68:3C:EC:86:95:A5:A0:99:5C:94:23:CB:8D:82 Authority key identifier: 0A:8B:61:A8:44:D6:C2:C7:AF:38:ED:CB:D1:65:D0:EF:FB:82:3E:45 Certificate issuer: /CN=0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45 Certificate serial: 34E160FBEEF304E76BB9BD37A0492B9FED0537FF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.mft Manifest number: 029B Signing time: Wed 17 Dec 2025 03:00:33 +0000 Manifest this update: Wed 17 Dec 2025 02:55:33 +0000 Manifest next update: Thu 18 Dec 2025 06:43:33 +0000 Files and hashes: 1: 326131343a373538313a6430303a3a2f34302d3438203d3e20323136343532.roa (hash: jAqeRW+G0tj75/HjlTu9upVrXQ/2AvwaP0ubMorKA1Q=) 2: 326131343a373538313a6430303a3a2f34342d3438203d3e203331383938.roa (hash: OYFGGb9dMqAtV18cBeD3NbZ0TuwCvJXmn37LZwaW7zg=) 3: 326131343a373538343a373030303a3a2f33362d3434203d3e20323136343532.roa (hash: bjWKUcdJK3JxiL+GqIgQQNiLJnq1CfKPBgs/UuOHrJA=) 4: 0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.crl (hash: Gp+35jCF+yXhtb91n0qKXOpxcXQ6DatX5JVUQWOuX9o=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.crl rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 06:43:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:e1:60:fb:ee:f3:04:e7:6b:b9:bd:37:a0:49:2b:9f:ed:05:37:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45 Validity Not Before: Dec 17 02:55:33 2025 GMT Not After : Dec 18 06:43:33 2025 GMT Subject: CN=9E024CCF4986683CEC8695A5A0995C9423CB8D82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:26:0a:bd:5b:1a:46:b7:70:e9:4c:2d:0e:0b: 56:c0:f7:0d:6e:4e:1c:40:c7:60:b0:63:65:0f:06: 32:f5:34:3a:ea:bb:17:62:bf:54:58:86:fb:63:5a: b8:57:2a:bd:4e:3e:ac:08:fd:cf:81:3b:c0:e1:c1: 9f:3c:19:e1:4b:49:fa:be:84:9a:f4:04:46:5e:09: 1e:1a:a0:d4:98:ed:bc:c1:ac:99:14:28:35:da:11: 8a:e2:ff:9e:23:5d:58:65:f3:71:42:0d:bd:24:95: 75:f8:14:27:b4:2e:ef:80:c4:f0:a4:17:9f:77:f2: 57:ac:7f:98:5b:0f:8b:cf:16:13:71:4c:26:de:35: a7:6b:c2:4d:ce:16:20:2f:5a:48:0f:7e:20:f2:14: 14:71:1c:89:b7:5d:21:8a:41:f7:37:23:27:dd:cf: fa:13:7b:be:2a:4a:4b:36:f1:25:97:54:ea:66:c1: 98:44:ec:d8:25:20:3b:10:4e:70:a6:a5:06:24:07: 06:24:ca:66:ed:79:b3:e3:ba:29:22:e0:ea:f5:c8: 98:91:a5:96:18:48:37:83:49:6b:a8:31:1f:80:f5: 35:1e:84:1c:6c:20:49:a2:61:f6:b1:cd:bc:57:36: 0e:77:60:55:39:0a:62:3e:f3:73:7c:9e:fd:e2:45: c2:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:02:4C:CF:49:86:68:3C:EC:86:95:A5:A0:99:5C:94:23:CB:8D:82 X509v3 Authority Key Identifier: keyid:0A:8B:61:A8:44:D6:C2:C7:AF:38:ED:CB:D1:65:D0:EF:FB:82:3E:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:d6:f9:92:d1:3a:4d:c6:6b:5d:97:58:f2:b8:ae:41:7d:5a: 91:23:e6:36:bc:04:46:1c:19:af:fd:cb:c2:0c:68:d5:aa:1e: f2:82:b9:c3:22:66:b9:80:8a:d6:ea:88:2c:8c:ea:d2:4f:df: ce:73:06:3b:90:98:1c:e4:15:e9:0f:b9:26:53:f8:74:51:0d: 3d:e2:16:10:98:05:a2:43:de:1d:84:d5:36:21:c5:e5:e1:8c: 38:3b:ef:db:c2:9a:b6:d7:50:13:ae:6c:c7:3d:16:77:d7:3d: f2:10:d5:0f:e1:f4:b8:34:fa:79:d6:72:cf:58:ca:d0:8a:a7: 7b:ec:cd:15:1b:80:a9:e6:fe:87:5e:a2:7a:ed:ad:47:62:fb: 7b:98:f5:56:b2:28:49:15:0c:ef:a7:9f:72:f0:2f:0b:bc:2b: d0:1f:17:5e:a6:62:e8:f2:cd:e8:cf:32:cb:46:a5:40:4c:81: 4e:61:69:f6:4e:a9:7a:ad:55:e5:4d:aa:2d:a6:9e:04:e6:cc: 61:75:d3:db:f5:6e:39:52:33:ab:e7:fc:80:d8:4f:6d:db:0e: d0:9c:51:8c:eb:a0:c2:d0:3a:0f:58:eb:b5:dd:41:c5:6e:15: 97:98:3f:6b:1c:ef:1b:09:d9:2f:82:06:00:1e:42:d4:40:3d: 93:6b:55:fe -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUNOFg++7zBOdrub03oEkrn+0FN/8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEE4QjYxQTg0NEQ2QzJDN0FGMzhFRENCRDE2NUQwRUZG QjgyM0U0NTAeFw0yNTEyMTcwMjU1MzNaFw0yNTEyMTgwNjQzMzNaMDMxMTAvBgNV BAMTKDlFMDI0Q0NGNDk4NjY4M0NFQzg2OTVBNUEwOTk1Qzk0MjNDQjhEODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYJgq9WxpGt3DpTC0OC1bA9w1u ThxAx2CwY2UPBjL1NDrquxdiv1RYhvtjWrhXKr1OPqwI/c+BO8DhwZ88GeFLSfq+ hJr0BEZeCR4aoNSY7bzBrJkUKDXaEYri/54jXVhl83FCDb0klXX4FCe0Lu+AxPCk F5938lesf5hbD4vPFhNxTCbeNadrwk3OFiAvWkgPfiDyFBRxHIm3XSGKQfc3Iyfd z/oTe74qSks28SWXVOpmwZhE7NglIDsQTnCmpQYkBwYkymbtebPjuiki4Or1yJiR pZYYSDeDSWuoMR+A9TUehBxsIEmiYfaxzbxXNg53YFU5CmI+83N8nv3iRcIvAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUngJMz0mGaDzshpWloJlclCPLjYIwHwYDVR0j BBgwFoAUCothqETWwsevOO3L0WXQ7/uCPkUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzJjNDA1ZjEtYzMyZC00N2NlLTg5NDMtMDc1MmVkMTNk OGVmLzEvMEE4QjYxQTg0NEQ2QzJDN0FGMzhFRENCRDE2NUQwRUZGQjgyM0U0NS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8wQThCNjFBODQ0RDZDMkM3QUYzOEVEQ0JE MTY1RDBFRkZCODIzRTQ1LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzcyYzQwNWYxLWMzMmQtNDdjZS04OTQzLTA3NTJlZDEzZDhlZi8xLzBBOEI2MUE4 NDRENkMyQzdBRjM4RURDQkQxNjVEMEVGRkI4MjNFNDUubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB71vmS 0TpNxmtdl1jyuK5BfVqRI+Y2vARGHBmv/cvCDGjVqh7ygrnDIma5gIrW6ogsjOrS T9/OcwY7kJgc5BXpD7kmU/h0UQ094hYQmAWiQ94dhNU2IcXl4Yw4O+/bwpq211AT rmzHPRZ31z3yENUP4fS4NPp51nLPWMrQiqd77M0VG4Cp5v6HXqJ67a1HYvt7mPVW sihJFQzvp59y8C8LvCvQHxdepmLo8s3ozzLLRqVATIFOYWn2Tql6rVXlTaotpp4E 5sxhddPb9W45UjOr5/yA2E9t2w7QnFGM66DC0DoPWOu13UHFbhWXmD9rHO8bCdkv ggYAHkLUQD2Ta1X+ -----END CERTIFICATE-----Generated at Wed Dec 17 22:24:37 2025 by rpki-client