This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8070615f-d26d-42e3-a145-5c7b67b2b64e/0/2C12F0A080F021F2BA25BC0C6EA7E06B67AAD05E.mft File: 2C12F0A080F021F2BA25BC0C6EA7E06B67AAD05E.mft (raw, json) Hash identifier: M0mYM0o7ynXk0PMuidZgTQnGrWlXqg3XeiO/0bBTDUU= Subject key identifier: ED:EE:E2:EB:40:EA:17:13:76:DC:7F:22:37:42:63:6E:6D:82:17:69 Authority key identifier: 2C:12:F0:A0:80:F0:21:F2:BA:25:BC:0C:6E:A7:E0:6B:67:AA:D0:5E Certificate issuer: /CN=2c12f0a080f021f2ba25bc0c6ea7e06b67aad05e Certificate serial: 0D33A440257FE5DA3FE3E2F9668349EDD2AB80A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LBLwoIDwIfK6JbwMbqfga2eq0F4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8070615f-d26d-42e3-a145-5c7b67b2b64e/0/2C12F0A080F021F2BA25BC0C6EA7E06B67AAD05E.mft Manifest number: 019A Signing time: Fri 05 Dec 2025 14:10:59 +0000 Manifest this update: Fri 05 Dec 2025 14:05:59 +0000 Manifest next update: Sat 06 Dec 2025 18:07:59 +0000 Files and hashes: 1: 323030313a3637383a6434343a3a2f34382d3438203d3e20323133323739.roa (hash: a2d6hAclWrhx6h6+ACHw0iSYteM3AlSblaeDKRH8jzc=) 2: 326131343a623430303a3a2f32392d3438203d3e2030.roa (hash: NhcbptlixcA3mbsPTqMiibAOrNSU1BYwO66fMNiKSfA=) 3: AS213279.asa (hash: nJRzaMfqdZ5AI+sMn9wPdQBE/Wcrkghpk4PHewl3Wz8=) 4: 2C12F0A080F021F2BA25BC0C6EA7E06B67AAD05E.crl (hash: NjPQ8RzPFkzY7GbEkpKTVrE4bglPvbh6cTEBK4FUKfo=) 5: 326131343a623430303a3a2f33322d3332203d3e20323133323739.roa (hash: 5hhgwEfLD9bumu2w7kC2KzlKzBKITTTKNPZHvvEg0u8=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8070615f-d26d-42e3-a145-5c7b67b2b64e/0/2C12F0A080F021F2BA25BC0C6EA7E06B67AAD05E.crl rsync://rsync.paas.rpki.ripe.net/repository/8070615f-d26d-42e3-a145-5c7b67b2b64e/0/2C12F0A080F021F2BA25BC0C6EA7E06B67AAD05E.mft rsync://rpki.ripe.net/repository/DEFAULT/LBLwoIDwIfK6JbwMbqfga2eq0F4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 18:07:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:33:a4:40:25:7f:e5:da:3f:e3:e2:f9:66:83:49:ed:d2:ab:80:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2c12f0a080f021f2ba25bc0c6ea7e06b67aad05e Validity Not Before: Dec 5 14:05:59 2025 GMT Not After : Dec 6 18:07:59 2025 GMT Subject: CN=EDEEE2EB40EA171376DC7F223742636E6D821769 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:9f:12:ee:de:3c:0d:3e:90:8d:d0:bc:f5:e2: 52:47:1f:c8:17:29:a4:d3:fa:29:09:58:13:44:59: 96:31:a6:8c:2a:ab:f6:8b:11:2b:20:e2:61:bd:4c: 4c:45:34:81:1e:ad:c2:a9:4c:88:ea:e4:58:d1:5d: 29:a2:e4:25:b4:e9:44:72:2b:fc:32:0d:65:33:22: df:54:f7:57:d9:68:a5:a8:7f:83:d4:b6:b3:3b:b0: c6:ed:35:a5:9b:86:d5:6e:ba:49:1c:16:c1:5d:ef: 62:f1:fc:f1:52:0b:e5:b3:c4:ca:7c:14:e7:67:18: b5:f7:5a:f7:fa:bf:a3:9d:83:32:62:ce:b4:af:9e: 3e:65:b5:9d:10:93:a6:0d:77:cd:e1:99:7f:10:99: c7:bd:6b:9f:c6:63:11:ff:9e:7e:6a:9e:b1:5a:17: 44:24:89:bd:f4:02:ce:cb:b6:06:59:80:ef:88:4d: cb:95:5c:df:d6:01:53:2b:b9:ff:ba:02:23:95:42: 42:cf:bb:e6:df:68:2a:52:fb:79:ab:de:4f:5f:8c: 15:78:97:13:1b:7c:e6:9e:20:6f:2c:e1:26:07:65: 73:29:15:7d:6a:6e:ff:72:6c:0d:47:63:6b:6f:e4: b1:19:74:5d:ec:7c:28:4b:4c:84:d0:24:97:af:d9: 98:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:EE:E2:EB:40:EA:17:13:76:DC:7F:22:37:42:63:6E:6D:82:17:69 X509v3 Authority Key Identifier: keyid:2C:12:F0:A0:80:F0:21:F2:BA:25:BC:0C:6E:A7:E0:6B:67:AA:D0:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8070615f-d26d-42e3-a145-5c7b67b2b64e/0/2C12F0A080F021F2BA25BC0C6EA7E06B67AAD05E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LBLwoIDwIfK6JbwMbqfga2eq0F4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8070615f-d26d-42e3-a145-5c7b67b2b64e/0/2C12F0A080F021F2BA25BC0C6EA7E06B67AAD05E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:61:cb:50:1b:7e:e8:a3:ed:c5:5d:10:3b:93:29:7c:7d:00: c7:7a:b9:06:16:98:28:12:df:fc:4c:7d:af:5a:40:1a:44:fd: 5a:b8:5f:cc:2b:5d:3e:3c:82:82:c6:23:b8:ab:5a:60:ce:89: 81:9a:ed:c7:e1:59:c1:e0:da:c2:91:ac:07:b6:7c:ac:c9:13: ff:62:d9:fa:63:a3:18:78:d8:ee:24:b3:ed:5d:e6:5b:ad:7c: ba:08:20:5b:49:2d:58:97:86:39:39:86:b4:d5:94:09:df:a2: 4f:49:e5:0f:ed:05:90:ab:e7:1e:01:c9:79:2d:15:b7:d4:a5: 68:bb:e9:bc:8e:d6:a0:b3:19:85:80:df:f6:6e:1b:e8:00:b7: 9f:37:10:67:9c:7f:1d:f7:bb:54:c9:bc:55:5f:af:12:aa:8d: e2:72:c8:90:36:49:6c:06:43:be:fb:51:59:6a:67:84:db:40: 39:cb:62:5e:b0:7f:13:d5:7f:fa:9e:b1:8a:a8:44:b8:35:bd: c5:5a:f1:f2:8c:5d:83:df:0a:15:69:d4:21:11:89:c5:3a:d6: da:35:cd:e4:cd:5f:b1:0a:ae:13:48:86:40:f9:d4:28:6e:9a: ce:b7:89:0e:27:eb:b2:1a:b6:bb:5d:45:08:08:17:fb:1b:62: 28:c5:d6:44 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUDTOkQCV/5do/4+L5ZoNJ7dKrgKkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMmMxMmYwYTA4MGYwMjFmMmJhMjViYzBjNmVhN2UwNmI2 N2FhZDA1ZTAeFw0yNTEyMDUxNDA1NTlaFw0yNTEyMDYxODA3NTlaMDMxMTAvBgNV BAMTKEVERUVFMkVCNDBFQTE3MTM3NkRDN0YyMjM3NDI2MzZFNkQ4MjE3NjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpnxLu3jwNPpCN0Lz14lJHH8gX KaTT+ikJWBNEWZYxpowqq/aLESsg4mG9TExFNIEercKpTIjq5FjRXSmi5CW06URy K/wyDWUzIt9U91fZaKWof4PUtrM7sMbtNaWbhtVuukkcFsFd72Lx/PFSC+WzxMp8 FOdnGLX3Wvf6v6OdgzJizrSvnj5ltZ0Qk6YNd83hmX8Qmce9a5/GYxH/nn5qnrFa F0Qkib30As7LtgZZgO+ITcuVXN/WAVMruf+6AiOVQkLPu+bfaCpS+3mr3k9fjBV4 lxMbfOaeIG8s4SYHZXMpFX1qbv9ybA1HY2tv5LEZdF3sfChLTITQJJev2ZifAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU7e7i60DqFxN23H8iN0Jjbm2CF2kwHwYDVR0j BBgwFoAULBLwoIDwIfK6JbwMbqfga2eq0F4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODA3MDYxNWYtZDI2ZC00MmUzLWExNDUtNWM3YjY3YjJi NjRlLzAvMkMxMkYwQTA4MEYwMjFGMkJBMjVCQzBDNkVBN0UwNkI2N0FBRDA1RS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0xCTHdvSUR3SWZLNkpid01icWZnYTJl cTBGNC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84MDcwNjE1Zi1k MjZkLTQyZTMtYTE0NS01YzdiNjdiMmI2NGUvMC8yQzEyRjBBMDgwRjAyMUYyQkEy NUJDMEM2RUE3RTA2QjY3QUFEMDVFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU2HLUBt+6KPtxV0QO5Mp fH0Ax3q5BhaYKBLf/Ex9r1pAGkT9WrhfzCtdPjyCgsYjuKtaYM6JgZrtx+FZweDa wpGsB7Z8rMkT/2LZ+mOjGHjY7iSz7V3mW618ugggW0ktWJeGOTmGtNWUCd+iT0nl D+0FkKvnHgHJeS0Vt9SlaLvpvI7WoLMZhYDf9m4b6AC3nzcQZ5x/Hfe7VMm8VV+v EqqN4nLIkDZJbAZDvvtRWWpnhNtAOctiXrB/E9V/+p6xiqhEuDW9xVrx8oxdg98K FWnUIRGJxTrW2jXN5M1fsQquE0iGQPnUKG6azreJDifrshq2u11FCAgX+xtiKMXW RA== -----END CERTIFICATE-----Generated at Sat Dec 6 04:58:35 2025 by rpki-client