This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.mft File: 0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.mft (raw, json) Hash identifier: Ctww7B3tTTC93BFr3QJvDBC2rB7YydESJqMLloarDDk= Subject key identifier: 44:FC:60:81:30:E9:E8:1D:46:D2:22:53:0D:7F:AB:12:45:5F:E8:79 Authority key identifier: 0A:8B:61:A8:44:D6:C2:C7:AF:38:ED:CB:D1:65:D0:EF:FB:82:3E:45 Certificate issuer: /CN=0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45 Certificate serial: 51E169558EA2020AF888AE4EF16683A8477CCCCD Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.mft Manifest number: 028C Signing time: Fri 05 Dec 2025 20:00:32 +0000 Manifest this update: Fri 05 Dec 2025 19:55:32 +0000 Manifest next update: Sat 06 Dec 2025 21:22:32 +0000 Files and hashes: 1: 0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.crl (hash: uef7SBwQRMrLJOyVGxJ3OH8TJvm6sJ73vrVah1QoKEU=) 2: 326131343a373538343a373030303a3a2f33362d3434203d3e20323136343532.roa (hash: bjWKUcdJK3JxiL+GqIgQQNiLJnq1CfKPBgs/UuOHrJA=) 3: 326131343a373538313a6430303a3a2f34302d3438203d3e20323136343532.roa (hash: jAqeRW+G0tj75/HjlTu9upVrXQ/2AvwaP0ubMorKA1Q=) 4: 326131343a373538313a6430303a3a2f34342d3438203d3e203331383938.roa (hash: OYFGGb9dMqAtV18cBeD3NbZ0TuwCvJXmn37LZwaW7zg=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.crl rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 21:22:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:e1:69:55:8e:a2:02:0a:f8:88:ae:4e:f1:66:83:a8:47:7c:cc:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45 Validity Not Before: Dec 5 19:55:32 2025 GMT Not After : Dec 6 21:22:32 2025 GMT Subject: CN=44FC608130E9E81D46D222530D7FAB12455FE879 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:a0:8c:6a:fe:05:35:19:b1:f5:f0:99:de:f7: 3c:2b:14:45:0a:70:27:27:ff:08:48:c0:a7:0b:cd: 5e:5c:7f:c3:1a:67:89:6f:53:05:59:c7:b4:89:20: 50:7e:88:96:cd:3a:ff:18:35:64:09:f8:5a:9b:94: de:40:7a:c4:f3:67:52:d9:49:ad:79:44:e9:47:4a: ee:cb:ff:db:51:26:4a:4e:24:1f:5e:1c:a0:20:cc: f8:85:5b:d8:87:8c:1c:d6:0b:8e:aa:a6:b1:fb:ef: 33:fb:fc:47:9d:c1:d2:bb:0f:0b:ea:d6:a2:25:3d: 79:68:57:ed:69:79:6b:20:ab:f4:48:45:1d:e5:c2: a0:2b:a4:f4:6b:c7:a6:b7:d5:f5:36:3c:16:2d:5b: 8c:7d:6d:19:ef:62:4b:b6:d0:53:2d:25:1c:35:e5: da:dd:6a:48:f5:cc:44:eb:ca:3c:c1:58:7d:41:d1: 99:8f:4f:e1:0b:d3:c0:f6:00:e6:0a:2f:06:cc:5e: e3:af:cf:ad:9c:bd:d8:e0:2e:2c:5a:f8:bf:a5:bc: ae:35:a0:92:52:4f:da:47:ef:36:f3:34:4f:1d:4c: 6c:ae:bc:df:2e:85:0f:3d:2f:b0:cd:f8:94:a3:6d: df:38:09:48:33:c7:d5:d3:d7:c4:49:80:d4:b8:3d: 8a:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:FC:60:81:30:E9:E8:1D:46:D2:22:53:0D:7F:AB:12:45:5F:E8:79 X509v3 Authority Key Identifier: keyid:0A:8B:61:A8:44:D6:C2:C7:AF:38:ED:CB:D1:65:D0:EF:FB:82:3E:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:b4:7f:c1:b9:15:fb:20:54:a3:a6:82:30:a2:c4:c0:ca:19: 82:69:b9:b8:1f:36:b4:ed:15:42:8f:34:2e:0f:85:93:a5:a6: 04:6d:3c:c5:b8:b3:7b:4f:eb:70:73:66:3d:18:ca:67:f1:31: b9:eb:2c:0b:0e:73:94:f8:bd:ff:2c:e6:99:9d:53:22:ad:40: fb:a3:18:1a:28:78:1f:ad:be:51:52:83:f2:b7:e6:19:63:1b: 76:5b:77:62:66:a8:03:c9:3e:30:f7:f9:92:ad:3b:ea:83:d3: e5:e7:b8:64:9c:52:e3:e1:8e:55:d3:cc:d3:f9:a1:18:e4:91: c1:de:ed:e7:c5:cf:c2:18:ea:34:03:aa:bb:15:d3:e8:30:05: bd:87:e1:5f:21:9a:89:db:88:68:f1:20:99:e4:ea:f8:74:f9: 3c:a8:be:cf:8a:f5:bc:d0:e0:05:09:d2:a8:31:8f:98:06:2e: e2:f3:86:dd:ed:fa:d3:bc:5d:c5:83:33:df:32:01:0d:79:c8: d1:2b:64:8e:77:04:af:92:3b:b4:d3:34:a3:81:30:fe:31:32: cb:2a:83:94:e8:fc:4e:00:69:2e:d3:5e:23:0b:f1:8e:64:f2: 35:ca:ee:a3:e1:c3:e4:f0:75:49:74:6d:81:8f:b8:8c:d6:db: bf:31:37:1b -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUUeFpVY6iAgr4iK5O8WaDqEd8zM0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEE4QjYxQTg0NEQ2QzJDN0FGMzhFRENCRDE2NUQwRUZG QjgyM0U0NTAeFw0yNTEyMDUxOTU1MzJaFw0yNTEyMDYyMTIyMzJaMDMxMTAvBgNV BAMTKDQ0RkM2MDgxMzBFOUU4MUQ0NkQyMjI1MzBEN0ZBQjEyNDU1RkU4NzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvoIxq/gU1GbH18Jne9zwrFEUK cCcn/whIwKcLzV5cf8MaZ4lvUwVZx7SJIFB+iJbNOv8YNWQJ+FqblN5AesTzZ1LZ Sa15ROlHSu7L/9tRJkpOJB9eHKAgzPiFW9iHjBzWC46qprH77zP7/EedwdK7Dwvq 1qIlPXloV+1peWsgq/RIRR3lwqArpPRrx6a31fU2PBYtW4x9bRnvYku20FMtJRw1 5drdakj1zETryjzBWH1B0ZmPT+EL08D2AOYKLwbMXuOvz62cvdjgLixa+L+lvK41 oJJST9pH7zbzNE8dTGyuvN8uhQ89L7DN+JSjbd84CUgzx9XT18RJgNS4PYpVAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQURPxggTDp6B1G0iJTDX+rEkVf6HkwHwYDVR0j BBgwFoAUCothqETWwsevOO3L0WXQ7/uCPkUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzJjNDA1ZjEtYzMyZC00N2NlLTg5NDMtMDc1MmVkMTNk OGVmLzEvMEE4QjYxQTg0NEQ2QzJDN0FGMzhFRENCRDE2NUQwRUZGQjgyM0U0NS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8wQThCNjFBODQ0RDZDMkM3QUYzOEVEQ0JE MTY1RDBFRkZCODIzRTQ1LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzcyYzQwNWYxLWMzMmQtNDdjZS04OTQzLTA3NTJlZDEzZDhlZi8xLzBBOEI2MUE4 NDRENkMyQzdBRjM4RURDQkQxNjVEMEVGRkI4MjNFNDUubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBytH/B uRX7IFSjpoIwosTAyhmCabm4Hza07RVCjzQuD4WTpaYEbTzFuLN7T+twc2Y9GMpn 8TG56ywLDnOU+L3/LOaZnVMirUD7oxgaKHgfrb5RUoPyt+YZYxt2W3diZqgDyT4w 9/mSrTvqg9Pl57hknFLj4Y5V08zT+aEY5JHB3u3nxc/CGOo0A6q7FdPoMAW9h+Ff IZqJ24ho8SCZ5Or4dPk8qL7PivW80OAFCdKoMY+YBi7i84bd7frTvF3FgzPfMgEN ecjRK2SOdwSvkju00zSjgTD+MTLLKoOU6PxOAGku014jC/GOZPI1yu6j4cPk8HVJ dG2Bj7iM1tu/MTcb -----END CERTIFICATE-----Generated at Sat Dec 6 14:58:10 2025 by rpki-client