This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.mft File: B172548FA3C460E26CB519EE524361BCA6C7132E.mft (raw, json) Hash identifier: oHOM21YxU/Mnn5r3Zi122NEcC4p2bLGUmEYRjkGeszA= Subject key identifier: B3:CE:49:61:12:49:D8:A4:F1:76:5C:9D:AD:01:37:5B:62:AE:24:FD Authority key identifier: B1:72:54:8F:A3:C4:60:E2:6C:B5:19:EE:52:43:61:BC:A6:C7:13:2E Certificate issuer: /CN=b172548fa3c460e26cb519ee524361bca6c7132e Certificate serial: 04421728D69821BE553F90256C55F51939B42A05 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.mft Manifest number: 0431 Signing time: Sat 06 Dec 2025 03:46:17 +0000 Manifest this update: Sat 06 Dec 2025 03:41:17 +0000 Manifest next update: Sun 07 Dec 2025 04:56:17 +0000 Files and hashes: 1: 39332e39352e3131392e302f32342d3234203d3e20323135343337.roa (hash: iuam+Y72SFbVuzZ6DMbPvd9+i2O4uNgJ9aW8l1vNV9U=) 2: 39332e39352e3131362e302f32342d3234203d3e203630373831.roa (hash: wiR4lXrHDBacVR9rhY/OZ5EVnNOlMyR8f6ZVRqs7p88=) 3: 39332e39352e3131372e302f32342d3234203d3e203231383539.roa (hash: Un+iljfa6BQzZnEghHopYhiwkN2j6KkmFMitjF4eFLQ=) 4: 39332e39352e3131342e302f32342d3234203d3e20383334.roa (hash: 9slNHWe/rU70bOx5vd9mZUqmB1nBl1QE+Gk0eZLBnt8=) 5: 39332e39352e3131352e302f32342d3234203d3e20313938353834.roa (hash: FutqYRyHBMmN+0PD6TfHd0Z48pzfzxz1hCrgLY7AwAA=) 6: B172548FA3C460E26CB519EE524361BCA6C7132E.crl (hash: f0ot/oJjAE2y0PIOp80gLEODUktkjJIq8P7FnXxIiGI=) 7: 39332e39352e3131382e302f32342d3234203d3e20313336353537.roa (hash: RxEOrEQDuw8FdSr63g/e7GeuRwx0a/xo6StPeRUp3pQ=) 8: 39332e39352e3131322e302f32342d3234203d3e20333937393233.roa (hash: xW60VF00UJ78V2ZgHJcPViZgzWFpqx2V/5GdcswFg/k=) 9: 39332e39352e3131352e302f32342d3234203d3e20313335333932.roa (hash: fGOsLQpuq7w+Mlth5Jlzw6zSul9g+K81meekR3kD4oA=) 10: 39332e39352e3131332e302f32342d3234203d3e203136323736.roa (hash: cS6LWz+NEHJoa0EQVb5z92UR8C9jaztUFOxHHwpRPsY=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.crl rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.mft rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:56:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:42:17:28:d6:98:21:be:55:3f:90:25:6c:55:f5:19:39:b4:2a:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b172548fa3c460e26cb519ee524361bca6c7132e Validity Not Before: Dec 6 03:41:17 2025 GMT Not After : Dec 7 04:56:17 2025 GMT Subject: CN=B3CE49611249D8A4F1765C9DAD01375B62AE24FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:a7:8b:c1:d2:70:b1:93:b8:56:23:29:ff:9e: bb:8e:c6:c2:6d:16:a4:86:87:97:d1:03:98:e4:10: e4:8c:9e:9d:4e:4e:99:0e:da:aa:df:be:45:91:d7: 9b:ef:25:c1:c9:24:29:61:e3:b6:00:0a:72:03:83: ee:70:0a:7c:c3:52:69:37:37:95:a6:88:8b:ba:65: c1:ae:e9:35:33:3c:d9:23:6c:9e:88:bb:67:7f:f1: b6:7a:3c:94:e0:32:7f:b8:6b:05:2f:be:be:a3:a1: 50:28:e5:0f:9b:01:6c:8a:1a:10:97:93:76:f1:d8: f2:e8:42:b2:67:89:d0:1f:3d:09:cf:78:56:5a:9a: 5a:e2:49:77:2b:2d:84:49:05:1f:ed:d5:a9:16:ac: 00:ed:db:b9:b4:90:0d:e9:39:05:de:ae:e2:80:aa: 89:5b:dd:80:25:bb:62:a3:08:c9:17:88:ba:70:e3: df:dc:da:50:4e:88:00:c6:88:6a:69:9d:92:71:89: 73:12:e4:11:4e:30:39:67:9a:9e:67:f3:d4:08:48: dc:a0:b7:cf:1c:44:3a:99:dd:d0:5d:20:f7:63:5b: 53:37:b3:b2:71:d8:0d:37:4b:d3:0b:44:da:53:0a: bd:c9:b6:a9:c4:58:27:5c:c4:57:c4:be:6d:a4:68: a0:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:CE:49:61:12:49:D8:A4:F1:76:5C:9D:AD:01:37:5B:62:AE:24:FD X509v3 Authority Key Identifier: keyid:B1:72:54:8F:A3:C4:60:E2:6C:B5:19:EE:52:43:61:BC:A6:C7:13:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:40:e7:c8:0c:c1:45:76:f8:eb:88:1e:72:c9:fb:78:71:dc: a5:06:59:e4:ba:9b:9c:ec:f5:38:f7:15:7a:50:de:32:09:39: cb:d0:36:0f:57:e9:fd:a5:b5:f2:d1:e8:06:b9:84:7b:f2:9f: e1:2b:62:c0:f6:12:76:14:52:47:e2:eb:28:72:f2:d4:50:c3: a7:41:91:2f:ea:c9:c4:69:c5:8e:a1:3c:4f:25:f2:69:26:08: e9:09:d4:e1:86:73:6b:35:ca:3d:b8:27:f6:9c:26:f3:13:81: b7:2f:ff:bf:26:a8:2c:de:8d:b9:95:1a:83:db:80:cd:af:5f: b9:f8:c2:99:49:11:3d:de:cc:7e:f9:66:82:c5:d1:9f:38:4f: e5:7e:23:37:07:0e:68:f8:29:c7:08:75:9d:f7:8b:00:9a:4d: 0a:78:4e:30:a1:a0:fb:11:d2:cd:f5:95:cb:7e:d3:7b:b1:0d: ef:ae:2a:ec:77:a7:78:24:8b:97:35:bd:5f:fe:5c:f6:59:a5: c8:d2:fe:55:4d:fe:49:c6:8d:11:b8:e0:50:2f:af:56:24:cb: 85:2c:9b:51:dd:00:e8:ab:c4:d0:ea:be:89:bd:62:55:b3:96: dd:3d:62:43:76:a1:e7:8e:2e:09:1f:7d:25:ec:67:ed:ae:dc: 30:82:f3:22 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUBEIXKNaYIb5VP5AlbFX1GTm0KgUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYjE3MjU0OGZhM2M0NjBlMjZjYjUxOWVlNTI0MzYxYmNh NmM3MTMyZTAeFw0yNTEyMDYwMzQxMTdaFw0yNTEyMDcwNDU2MTdaMDMxMTAvBgNV BAMTKEIzQ0U0OTYxMTI0OUQ4QTRGMTc2NUM5REFEMDEzNzVCNjJBRTI0RkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZp4vB0nCxk7hWIyn/nruOxsJt FqSGh5fRA5jkEOSMnp1OTpkO2qrfvkWR15vvJcHJJClh47YACnIDg+5wCnzDUmk3 N5WmiIu6ZcGu6TUzPNkjbJ6Iu2d/8bZ6PJTgMn+4awUvvr6joVAo5Q+bAWyKGhCX k3bx2PLoQrJnidAfPQnPeFZamlriSXcrLYRJBR/t1akWrADt27m0kA3pOQXeruKA qolb3YAlu2KjCMkXiLpw49/c2lBOiADGiGppnZJxiXMS5BFOMDlnmp5n89QISNyg t88cRDqZ3dBdIPdjW1M3s7Jx2A03S9MLRNpTCr3JtqnEWCdcxFfEvm2kaKDrAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUs85JYRJJ2KTxdlydrQE3W2KuJP0wHwYDVR0j BBgwFoAUsXJUj6PEYOJstRnuUkNhvKbHEy4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOTY1NzNlODgtZGFiYS00YWM3LWEyZWQtMzIxYzgyNzdk MjVlLzAvQjE3MjU0OEZBM0M0NjBFMjZDQjUxOUVFNTI0MzYxQkNBNkM3MTMyRS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3NYSlVqNlBFWU9Kc3RSbnVVa05odkti SEV5NC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85NjU3M2U4OC1k YWJhLTRhYzctYTJlZC0zMjFjODI3N2QyNWUvMC9CMTcyNTQ4RkEzQzQ2MEUyNkNC NTE5RUU1MjQzNjFCQ0E2QzcxMzJFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKEDnyAzBRXb464gecsn7 eHHcpQZZ5LqbnOz1OPcVelDeMgk5y9A2D1fp/aW18tHoBrmEe/Kf4StiwPYSdhRS R+LrKHLy1FDDp0GRL+rJxGnFjqE8TyXyaSYI6QnU4YZzazXKPbgn9pwm8xOBty// vyaoLN6NuZUag9uAza9fufjCmUkRPd7MfvlmgsXRnzhP5X4jNwcOaPgpxwh1nfeL AJpNCnhOMKGg+xHSzfWVy37Te7EN764q7HeneCSLlzW9X/5c9lmlyNL+VU3+ScaN EbjgUC+vViTLhSybUd0A6KvE0Oq+ib1iVbOW3T1iQ3ah544uCR99Jexn7a7cMILz Ig== -----END CERTIFICATE-----Generated at Sat Dec 6 11:06:42 2025 by rpki-client