This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.mft File: 8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.mft (raw, json) Hash identifier: zNV3XfwJW6bqQaQVUErMOfS5nP47GXWVf7yGaNwtSXE= Subject key identifier: 27:C5:DB:12:5E:71:1F:9E:04:32:60:DE:AD:3E:71:C9:D0:E6:2C:29 Authority key identifier: 8C:12:B4:27:38:32:B4:15:6F:E0:09:2F:6A:E7:E5:B3:CE:23:AD:8B Certificate issuer: /CN=8c12b4273832b4156fe0092f6ae7e5b3ce23ad8b Certificate serial: 023EA8C0456B3CDC30A4E8CD8FA6728A94B93F84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jBK0JzgytBVv4Akvaufls84jrYs.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.mft Manifest number: 031D Signing time: Sat 06 Dec 2025 15:01:18 +0000 Manifest this update: Sat 06 Dec 2025 14:56:18 +0000 Manifest next update: Sun 07 Dec 2025 18:50:18 +0000 Files and hashes: 1: 3138352e3234302e3130342e302f32342d3234203d3e20323130353338.roa (hash: T9Q1VqRTWLWUsHiQ8nGpX/B35ktvbCl8rYqsuD5dV38=) 2: 3138352e3234302e3130372e302f32342d3234203d3e203230343733.roa (hash: JMPMOpLF1bcIvbG82aj+pie4xIbRE8z3aJEr+Ha5GDQ=) 3: 39312e3139302e3135372e302f32342d3234203d3e20323130383330.roa (hash: uxCs+vRLf89Iqe2Vg3VmQVaqgZcbd6t3ZZRDH3hDvaY=) 4: 3231322e3130332e34342e302f32342d3234203d3e20323133393138.roa (hash: F1RkOWECkAmSdkjYg8tjRjwarhccF70PLpA+y3IKrcs=) 5: 3231322e3130332e34352e302f32342d3234203d3e2038303735.roa (hash: /wobizd/N69i3RHzZlBg6v322Hg73ZMnV8Mlgts8jew=) 6: 3231322e3130332e34362e302f32332d3234203d3e20383334.roa (hash: KXdSlEyWgzgk/M6Mp4m4zNoDfJwL8UmNysyOArD47tw=) 7: 8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.crl (hash: v90hpe8fsYgdo2VgSFCSNKucRjvhJTQJJEBop8Aw+zc=) 8: 3138352e3234302e3130362e302f32342d3234203d3e20323134343538.roa (hash: 1BInd1OedKcqXcFEvGswCnCL2u3VREZrv7xXz/oRjOg=) 9: 3138352e3234302e3130352e302f32342d3234203d3e203431353634.roa (hash: TlWGN33+lROz/SyNNq5fptfqzBonbreTLNbM3qDOA4Q=) 10: 34352e39352e38302e302f32332d3234203d3e20383334.roa (hash: KBlnTmJTjtkN7635frU4KVMJE9hjrxjj/MnRirqH9PE=) 11: 3231322e3130332e34342e302f32342d3234203d3e20323131343834.roa (hash: JBx8ym7JHWLmUGZKmy6bIQw3WR5rhPzAi99IbVvWGag=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.crl rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.mft rsync://rpki.ripe.net/repository/DEFAULT/jBK0JzgytBVv4Akvaufls84jrYs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 18:50:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:3e:a8:c0:45:6b:3c:dc:30:a4:e8:cd:8f:a6:72:8a:94:b9:3f:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c12b4273832b4156fe0092f6ae7e5b3ce23ad8b Validity Not Before: Dec 6 14:56:18 2025 GMT Not After : Dec 7 18:50:18 2025 GMT Subject: CN=27C5DB125E711F9E043260DEAD3E71C9D0E62C29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:af:df:b8:1c:51:7d:2a:ac:18:52:5e:7f:1c: 13:90:eb:36:96:4d:cf:6d:60:23:d6:e3:a6:6a:bc: 1a:bd:d3:82:e6:70:1c:fe:8f:73:dd:bf:b0:60:e3: 8a:ca:df:05:43:4e:93:46:2a:db:d2:93:97:e0:c3: f6:86:bd:bb:76:22:4a:d7:7c:ad:8f:55:7d:da:d8: 12:fc:60:c6:5b:98:8e:61:25:1b:12:f7:8b:55:74: 02:98:f0:67:16:17:ff:a6:e3:eb:64:64:9b:c1:f4: f5:95:f4:9b:1a:fd:ea:8e:ee:34:7a:88:24:ea:c7: 02:28:e9:db:64:b0:f9:12:cb:e2:3f:9d:66:d1:61: b2:8f:f5:be:0e:36:2d:03:e8:15:c3:83:fb:dc:8c: 9f:61:a9:a8:39:c9:47:12:fb:3a:d6:6c:e7:e6:df: 75:0f:8e:fd:e4:41:8f:01:bf:04:03:4d:f7:72:2a: 2b:86:52:ad:93:0c:31:1c:ff:66:a4:42:87:16:63: 81:1c:13:14:06:99:90:39:36:0b:55:61:e3:dd:a8: 01:dd:91:f5:9a:05:62:53:25:a8:8e:83:60:0d:d6: ac:4d:e2:e6:d1:e2:63:23:13:70:df:87:ef:bf:9b: 54:67:43:19:95:1b:c4:d9:ab:4c:f0:81:f6:9a:27: 32:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:C5:DB:12:5E:71:1F:9E:04:32:60:DE:AD:3E:71:C9:D0:E6:2C:29 X509v3 Authority Key Identifier: keyid:8C:12:B4:27:38:32:B4:15:6F:E0:09:2F:6A:E7:E5:B3:CE:23:AD:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jBK0JzgytBVv4Akvaufls84jrYs.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:58:f4:fb:9b:dd:bd:ce:d0:11:4b:96:d9:e6:a2:3e:00:f3: bc:11:63:e2:07:06:7d:13:04:bc:31:18:6d:66:ca:bf:73:65: ca:73:01:9f:e7:d8:67:8a:41:b6:5b:0e:54:d6:87:a0:1d:f7: ba:cd:fc:d6:5b:d7:9b:7e:33:4e:2c:d8:10:e1:f3:be:d0:68: 90:5f:4a:4c:7e:fa:4a:02:18:f5:ef:4f:05:9d:2f:5b:02:d2: aa:74:5e:01:eb:0d:de:be:67:d5:43:8d:0a:1a:84:ad:78:d7: 34:77:fc:30:f5:28:48:45:66:f2:27:07:e0:4d:52:bd:70:31: 62:9d:a9:5c:17:58:3b:22:10:d5:5a:f1:87:ba:da:c1:44:7d: 64:d3:c0:ae:95:79:ea:ee:1a:ca:c7:25:f2:0d:14:16:98:d3: d1:2d:76:0c:32:dd:5c:be:8c:1e:16:e0:c1:de:05:88:9b:0d: f6:eb:a3:77:93:37:2a:0b:96:3f:6f:44:8d:04:6e:a5:36:80: 1e:70:11:fc:6c:bc:77:f9:eb:d9:96:2f:34:6a:f4:ca:32:e7: 95:38:c5:c9:71:d7:c9:7c:8b:63:48:2b:9b:ce:c5:00:e8:01: 70:73:09:6d:eb:bb:c5:48:23:9f:56:95:2e:ba:fe:ee:a5:17: af:94:0c:f5 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUAj6owEVrPNwwpOjNj6ZyipS5P4QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGMxMmI0MjczODMyYjQxNTZmZTAwOTJmNmFlN2U1YjNj ZTIzYWQ4YjAeFw0yNTEyMDYxNDU2MThaFw0yNTEyMDcxODUwMThaMDMxMTAvBgNV BAMTKDI3QzVEQjEyNUU3MTFGOUUwNDMyNjBERUFEM0U3MUM5RDBFNjJDMjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvr9+4HFF9KqwYUl5/HBOQ6zaW Tc9tYCPW46ZqvBq904LmcBz+j3Pdv7Bg44rK3wVDTpNGKtvSk5fgw/aGvbt2IkrX fK2PVX3a2BL8YMZbmI5hJRsS94tVdAKY8GcWF/+m4+tkZJvB9PWV9Jsa/eqO7jR6 iCTqxwIo6dtksPkSy+I/nWbRYbKP9b4ONi0D6BXDg/vcjJ9hqag5yUcS+zrWbOfm 33UPjv3kQY8BvwQDTfdyKiuGUq2TDDEc/2akQocWY4EcExQGmZA5NgtVYePdqAHd kfWaBWJTJaiOg2AN1qxN4ubR4mMjE3Dfh++/m1RnQxmVG8TZq0zwgfaaJzIxAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUJ8XbEl5xH54EMmDerT5xydDmLCkwHwYDVR0j BBgwFoAUjBK0JzgytBVv4Akvaufls84jrYswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOGJmZDY4ODItZDZiMy00YWE4LWJjMGEtNzExZDY4YmQx OThiLzAvOEMxMkI0MjczODMyQjQxNTZGRTAwOTJGNkFFN0U1QjNDRTIzQUQ4Qi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2pCSzBKemd5dEJWdjRBa3ZhdWZsczg0 anJZcy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84YmZkNjg4Mi1k NmIzLTRhYTgtYmMwYS03MTFkNjhiZDE5OGIvMC84QzEyQjQyNzM4MzJCNDE1NkZF MDA5MkY2QUU3RTVCM0NFMjNBRDhCLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHlj0+5vdvc7QEUuW2eai PgDzvBFj4gcGfRMEvDEYbWbKv3NlynMBn+fYZ4pBtlsOVNaHoB33us381lvXm34z TizYEOHzvtBokF9KTH76SgIY9e9PBZ0vWwLSqnReAesN3r5n1UONChqErXjXNHf8 MPUoSEVm8icH4E1SvXAxYp2pXBdYOyIQ1Vrxh7rawUR9ZNPArpV56u4ayscl8g0U FpjT0S12DDLdXL6MHhbgwd4FiJsN9uujd5M3KguWP29EjQRupTaAHnAR/Gy8d/nr 2ZYvNGr0yjLnlTjFyXHXyXyLY0grm87FAOgBcHMJbeu7xUgjn1aVLrr+7qUXr5QM 9Q== -----END CERTIFICATE-----Generated at Sun Dec 7 01:21:57 2025 by rpki-client