This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/87d8db71-a5be-464c-a8b9-8b7b374ae3fa/1/8BD4F7EBFF9763C061D537B8A1D0872D70697632.mft File: 8BD4F7EBFF9763C061D537B8A1D0872D70697632.mft (raw, json) Hash identifier: 4Vjcpq5tPYyfaSRVHjTGzJOO5bza5w16aRH+t9jGS1M= Subject key identifier: F0:C4:B6:22:32:92:E1:CF:AA:3B:6D:34:C2:6D:E5:2B:7F:01:99:32 Authority key identifier: 8B:D4:F7:EB:FF:97:63:C0:61:D5:37:B8:A1:D0:87:2D:70:69:76:32 Certificate issuer: /CN=8BD4F7EBFF9763C061D537B8A1D0872D70697632 Certificate serial: 7B506B2C7B9D8AD8B84B27C35B20809B312464FE Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/8BD4F7EBFF9763C061D537B8A1D0872D70697632.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/87d8db71-a5be-464c-a8b9-8b7b374ae3fa/1/8BD4F7EBFF9763C061D537B8A1D0872D70697632.mft Manifest number: 85 Signing time: Fri 05 Dec 2025 16:18:27 +0000 Manifest this update: Fri 05 Dec 2025 16:13:27 +0000 Manifest next update: Sat 06 Dec 2025 19:06:27 +0000 Files and hashes: 1: 326131343a373538333a663530303a3a2f34382d3438203d3e20323133363035.roa (hash: 9/oPKwR86cNPm2ExAL4kDJvYHegTDwwsjfTcMTofdOY=) 2: 326131343a373538333a663532613a3a2f34382d3438203d3e20323133363035.roa (hash: aV7gG9d5Jm1xL7quU3kvraReedZSPl0atIf2oiaL4bI=) 3: 326131343a373538333a663532613a3a2f34382d3438203d3e20323130343430.roa (hash: ZdNC5XbbwwexZ9fJQgyFujAFE+pNtA0LnoesNkwLRvA=) 4: 8BD4F7EBFF9763C061D537B8A1D0872D70697632.crl (hash: yQHWIJOdIHBye1GNM5RsSriNji7vCOwA+Pnn1L6GdmM=) 5: 326131343a373538333a663566303a3a2f34342d3438203d3e20323135373532.roa (hash: CQeQBv1si6HjY/pqPKCiw+E43BXtrCR5FS8uJNoFCsQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/87d8db71-a5be-464c-a8b9-8b7b374ae3fa/1/8BD4F7EBFF9763C061D537B8A1D0872D70697632.crl rsync://rsync.paas.rpki.ripe.net/repository/87d8db71-a5be-464c-a8b9-8b7b374ae3fa/1/8BD4F7EBFF9763C061D537B8A1D0872D70697632.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/8BD4F7EBFF9763C061D537B8A1D0872D70697632.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 19:06:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:50:6b:2c:7b:9d:8a:d8:b8:4b:27:c3:5b:20:80:9b:31:24:64:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8BD4F7EBFF9763C061D537B8A1D0872D70697632 Validity Not Before: Dec 5 16:13:27 2025 GMT Not After : Dec 6 19:06:27 2025 GMT Subject: CN=F0C4B6223292E1CFAA3B6D34C26DE52B7F019932 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:81:6e:8d:c3:56:c9:45:85:dc:a9:2c:98:77: 34:ce:63:e4:cb:df:e9:7b:7f:8d:0c:4d:8c:4f:96: b5:a9:b2:9c:7b:4c:11:34:7f:05:a6:6c:89:ca:f0: 71:83:98:78:cd:84:49:65:13:4b:01:a6:42:f6:9c: 26:55:e4:e9:b3:95:99:cf:17:17:6c:92:9b:3f:34: 7a:b8:35:f7:39:e8:f9:8c:84:3b:b3:64:d4:26:8d: dd:86:66:44:7f:a8:6a:76:7e:d3:41:78:33:ed:d2: e4:51:27:ee:76:a3:63:01:21:66:4b:d6:fa:ee:b3: 91:fb:34:dc:61:65:99:4b:62:f6:e6:c0:90:31:3d: 42:00:12:12:02:40:07:d5:c3:f1:47:32:83:be:bf: 41:e0:0b:3a:6c:c8:e8:05:87:be:51:85:c1:c4:2c: 53:b8:f8:45:0d:e3:1d:5c:59:7b:86:45:91:e9:ec: 02:ad:7c:9b:e9:8a:48:4a:cb:94:20:b3:21:ed:bc: 27:b4:44:a1:63:05:d6:0a:16:b1:f3:1e:f9:34:d7: 86:9e:61:6e:7a:be:a6:91:39:b5:67:c1:18:a3:22: cd:66:4f:f8:c5:e5:3c:4b:89:5d:58:d2:d5:ab:07: f0:73:b0:1a:25:68:c4:e9:56:ef:0c:18:15:0f:ce: ea:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:C4:B6:22:32:92:E1:CF:AA:3B:6D:34:C2:6D:E5:2B:7F:01:99:32 X509v3 Authority Key Identifier: keyid:8B:D4:F7:EB:FF:97:63:C0:61:D5:37:B8:A1:D0:87:2D:70:69:76:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/87d8db71-a5be-464c-a8b9-8b7b374ae3fa/1/8BD4F7EBFF9763C061D537B8A1D0872D70697632.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/8BD4F7EBFF9763C061D537B8A1D0872D70697632.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/87d8db71-a5be-464c-a8b9-8b7b374ae3fa/1/8BD4F7EBFF9763C061D537B8A1D0872D70697632.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:9f:5e:32:db:e0:46:7b:e3:50:e7:71:26:ff:4c:ec:37:96: c1:56:90:1b:ee:54:92:99:5e:4b:fa:76:f8:d0:d8:39:ed:af: 6f:3a:57:08:ba:7d:ff:b2:84:26:79:ad:f1:24:6c:00:e4:30: 7f:f9:2e:48:40:79:a7:57:9a:64:40:90:d4:e5:06:c6:73:61: 2a:2d:05:2f:03:a1:44:d6:e3:ac:dc:4e:e6:75:76:12:91:61: 5d:b3:51:1a:61:bf:76:59:01:44:c7:c2:52:7a:1a:4a:6d:13: 2b:12:80:22:6e:bd:79:ac:9f:64:31:db:ad:cd:88:fc:76:60: a8:8d:49:6b:f3:fa:4f:13:0a:e3:e9:71:fd:8d:16:d2:fa:08: 46:f6:99:ea:58:6a:e1:68:43:78:9b:f3:8b:8b:dc:7d:d1:ea: 05:9e:9e:e8:02:ec:23:2f:6a:4d:3b:3e:ee:c4:66:e0:6b:6c: ff:6f:1a:58:90:c0:fb:b9:00:9e:f1:1c:8b:85:d3:4e:b0:5d: d3:2b:d5:d8:92:dd:4a:e8:e7:a5:e1:57:68:2a:05:c4:ef:08: 87:a1:23:19:61:9e:9b:7d:9d:fb:2a:7c:4a:6b:f3:75:f9:7b: 03:e2:37:3e:61:ca:bb:bc:3a:15:6f:78:cf:4f:c6:0a:31:7b: 32:76:e2:33 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUe1BrLHuditi4SyfDWyCAmzEkZP4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEJENEY3RUJGRjk3NjNDMDYxRDUzN0I4QTFEMDg3MkQ3 MDY5NzYzMjAeFw0yNTEyMDUxNjEzMjdaFw0yNTEyMDYxOTA2MjdaMDMxMTAvBgNV BAMTKEYwQzRCNjIyMzI5MkUxQ0ZBQTNCNkQzNEMyNkRFNTJCN0YwMTk5MzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5gW6Nw1bJRYXcqSyYdzTOY+TL 3+l7f40MTYxPlrWpspx7TBE0fwWmbInK8HGDmHjNhEllE0sBpkL2nCZV5OmzlZnP Fxdskps/NHq4Nfc56PmMhDuzZNQmjd2GZkR/qGp2ftNBeDPt0uRRJ+52o2MBIWZL 1vrus5H7NNxhZZlLYvbmwJAxPUIAEhICQAfVw/FHMoO+v0HgCzpsyOgFh75RhcHE LFO4+EUN4x1cWXuGRZHp7AKtfJvpikhKy5QgsyHtvCe0RKFjBdYKFrHzHvk014ae YW56vqaRObVnwRijIs1mT/jF5TxLiV1Y0tWrB/BzsBolaMTpVu8MGBUPzuoPAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU8MS2IjKS4c+qO200wm3lK38BmTIwHwYDVR0j BBgwFoAUi9T36/+XY8Bh1Te4odCHLXBpdjIwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODdkOGRiNzEtYTViZS00NjRjLWE4YjktOGI3YjM3NGFl M2ZhLzEvOEJENEY3RUJGRjk3NjNDMDYxRDUzN0I4QTFEMDg3MkQ3MDY5NzYzMi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC84QkQ0RjdFQkZGOTc2M0MwNjFENTM3QjhB MUQwODcyRDcwNjk3NjMyLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 Lzg3ZDhkYjcxLWE1YmUtNDY0Yy1hOGI5LThiN2IzNzRhZTNmYS8xLzhCRDRGN0VC RkY5NzYzQzA2MUQ1MzdCOEExRDA4NzJENzA2OTc2MzIubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCsn14y 2+BGe+NQ53Em/0zsN5bBVpAb7lSSmV5L+nb40Ng57a9vOlcIun3/soQmea3xJGwA 5DB/+S5IQHmnV5pkQJDU5QbGc2EqLQUvA6FE1uOs3E7mdXYSkWFds1EaYb92WQFE x8JSehpKbRMrEoAibr15rJ9kMdutzYj8dmCojUlr8/pPEwrj6XH9jRbS+ghG9pnq WGrhaEN4m/OLi9x90eoFnp7oAuwjL2pNOz7uxGbga2z/bxpYkMD7uQCe8RyLhdNO sF3TK9XYkt1K6Oel4VdoKgXE7wiHoSMZYZ6bfZ37KnxKa/N1+XsD4jc+Ycq7vDoV b3jPT8YKMXsyduIz -----END CERTIFICATE-----Generated at Sat Dec 6 07:45:08 2025 by rpki-client