This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.mft File: B149F23A3E99C4760297DD7104B400C835D86D19.mft (raw, json) Hash identifier: OqxNgRhFSBVMl426YGHqnjYVN6rtMLOmFxIMX+hYsC8= Subject key identifier: 3A:24:DA:FC:EB:B3:A6:2C:07:57:3F:1C:47:DC:16:39:5A:24:F4:F5 Authority key identifier: B1:49:F2:3A:3E:99:C4:76:02:97:DD:71:04:B4:00:C8:35:D8:6D:19 Certificate issuer: /CN=B149F23A3E99C4760297DD7104B400C835D86D19 Certificate serial: 6B05862D13DE05AFEDAA458DFE7F893A553AF7DA Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B149F23A3E99C4760297DD7104B400C835D86D19.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.mft Manifest number: 91 Signing time: Fri 05 Dec 2025 19:03:18 +0000 Manifest this update: Fri 05 Dec 2025 18:58:18 +0000 Manifest next update: Sat 06 Dec 2025 21:09:18 +0000 Files and hashes: 1: 326131343a373538333a663436303a3a2f34342d3438203d3e20323134373230.roa (hash: 4YEjtMXLVEjj9+5CMQ85BeokEYmpgzJkQtl+GYY10z4=) 2: E2D8063C20C5FF1C1C1ACC3AD4E9D0C0C8648229.cer (hash: ttIHeVow2IErbUXmp4n67KjX2H68UmfVMTfPkOmulDw=) 3: B149F23A3E99C4760297DD7104B400C835D86D19.crl (hash: VP/+aLxGJuwvcta/dX/rmvD5J32w+PEL4s4AQeU6Vnw=) 4: 326131343a373538333a663436303a3a2f34342d3438203d3e20323131353735.roa (hash: LMFmuLJ4IgxIQCv2slhgNeKFDMCx6rSWhmkOn3RblbI=) 5: B11D50A5D47F732F3F808FEAE6A3906CC4509C44.cer (hash: fOEqRqKlaLKUtKYMsGd37ZJXvbw9QPqtaVQY5rFpBpQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.crl rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B149F23A3E99C4760297DD7104B400C835D86D19.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:05:86:2d:13:de:05:af:ed:aa:45:8d:fe:7f:89:3a:55:3a:f7:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B149F23A3E99C4760297DD7104B400C835D86D19 Validity Not Before: Dec 5 18:58:18 2025 GMT Not After : Dec 6 21:09:18 2025 GMT Subject: CN=3A24DAFCEBB3A62C07573F1C47DC16395A24F4F5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:d5:af:a2:58:60:74:b5:20:25:d4:5a:c1:33: 1f:b3:02:a7:c7:71:51:09:f4:a5:c0:6e:4b:6d:2e: 44:81:95:91:76:2b:c2:e5:fb:e3:d7:5c:f5:5d:4f: 35:55:ae:37:0b:3f:d0:a2:8a:5c:02:6e:9a:36:9e: 43:b1:b8:8f:52:37:90:d6:20:15:00:b6:a3:15:21: 7e:ff:49:e2:c2:fd:25:89:3b:17:99:df:b7:7e:76: 4b:33:9d:5b:d2:48:71:73:7f:34:a6:d7:56:da:69: 23:34:ba:07:7e:a7:58:f8:f2:82:c8:5d:03:cf:77: 88:eb:9d:5f:78:06:71:61:90:8e:65:36:a6:72:a6: 4f:18:b3:b2:5f:d3:72:e9:32:9b:91:72:97:40:cc: e3:8d:04:5c:9f:be:56:60:d4:82:b9:fb:7d:70:69: 25:a7:c4:b8:ca:17:d2:57:8b:9f:df:ba:14:49:ce: 3a:73:35:7c:a3:da:c3:16:ce:7a:a9:97:f3:cc:ba: 5b:6b:46:92:fe:64:f1:05:4b:4b:e9:7c:80:f8:c4: 8e:89:fd:e8:d9:f8:bc:28:b8:8c:79:24:fe:5f:70: 4f:66:21:d5:50:c4:7f:bd:4b:39:f5:5b:1b:6d:fe: b9:7c:b8:52:90:ac:5b:fa:a4:7b:dc:01:04:89:55: 8d:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:24:DA:FC:EB:B3:A6:2C:07:57:3F:1C:47:DC:16:39:5A:24:F4:F5 X509v3 Authority Key Identifier: keyid:B1:49:F2:3A:3E:99:C4:76:02:97:DD:71:04:B4:00:C8:35:D8:6D:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B149F23A3E99C4760297DD7104B400C835D86D19.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:c2:d8:e1:cd:79:f4:66:47:8a:1e:7a:a9:b0:53:fa:f3:aa: 43:e9:03:78:2d:3a:80:fa:17:06:61:db:1e:03:dc:71:02:74: 72:b0:c2:2d:55:6a:eb:a3:c5:18:5c:bc:df:5f:f6:dc:6d:4f: 7d:b5:b0:3f:13:4a:7c:99:7f:4b:a3:75:aa:63:94:82:c9:fc: 89:f7:8c:63:5e:4d:51:21:32:a9:88:f9:70:d1:06:f8:a4:a7: 07:85:f2:ee:a0:81:b9:a6:26:2b:7a:a4:45:28:68:d1:e4:5c: a8:ab:93:c9:77:42:11:9f:39:73:df:9f:8b:ac:38:74:c2:dd: 90:73:ea:d0:51:71:22:d8:a1:8d:3a:2d:e7:4a:52:38:3d:b2: de:75:b0:c9:32:95:93:af:19:73:b5:45:e1:58:f1:4f:2f:d1: 42:0b:93:83:3c:51:d2:55:5c:7b:77:90:1a:2c:b7:8a:b8:90: df:71:8d:6e:6f:e0:91:3c:f8:41:5e:e8:31:e8:16:e8:82:37: dc:35:9a:c7:20:b7:8f:6e:5c:da:f0:3a:83:a0:41:57:ac:91: 6e:60:df:17:43:36:b3:14:a1:c1:48:c3:96:08:99:5b:65:cd: 22:3e:fe:e2:86:1c:3f:7f:00:20:4a:f2:bd:bc:6d:4a:6a:3c: dd:df:73:40 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUawWGLRPeBa/tqkWN/n+JOlU699owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjE0OUYyM0EzRTk5QzQ3NjAyOTdERDcxMDRCNDAwQzgz NUQ4NkQxOTAeFw0yNTEyMDUxODU4MThaFw0yNTEyMDYyMTA5MThaMDMxMTAvBgNV BAMTKDNBMjREQUZDRUJCM0E2MkMwNzU3M0YxQzQ3REMxNjM5NUEyNEY0RjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC11a+iWGB0tSAl1FrBMx+zAqfH cVEJ9KXAbkttLkSBlZF2K8Ll++PXXPVdTzVVrjcLP9CiilwCbpo2nkOxuI9SN5DW IBUAtqMVIX7/SeLC/SWJOxeZ37d+dksznVvSSHFzfzSm11baaSM0ugd+p1j48oLI XQPPd4jrnV94BnFhkI5lNqZypk8Ys7Jf03LpMpuRcpdAzOONBFyfvlZg1IK5+31w aSWnxLjKF9JXi5/fuhRJzjpzNXyj2sMWznqpl/PMultrRpL+ZPEFS0vpfID4xI6J /ejZ+LwouIx5JP5fcE9mIdVQxH+9Szn1Wxtt/rl8uFKQrFv6pHvcAQSJVY2vAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUOiTa/OuzpiwHVz8cR9wWOVok9PUwHwYDVR0j BBgwFoAUsUnyOj6ZxHYCl91xBLQAyDXYbRkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOTgxZjk3ODItODk4ZS00YjgzLTk1ZTYtNGZmNGFiNzVj OWRjLzIvQjE0OUYyM0EzRTk5QzQ3NjAyOTdERDcxMDRCNDAwQzgzNUQ4NkQxOS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9CMTQ5RjIzQTNFOTlDNDc2MDI5N0RENzEw NEI0MDBDODM1RDg2RDE5LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 Lzk4MWY5NzgyLTg5OGUtNGI4My05NWU2LTRmZjRhYjc1YzlkYy8yL0IxNDlGMjNB M0U5OUM0NzYwMjk3REQ3MTA0QjQwMEM4MzVEODZEMTkubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBYwtjh zXn0ZkeKHnqpsFP686pD6QN4LTqA+hcGYdseA9xxAnRysMItVWrro8UYXLzfX/bc bU99tbA/E0p8mX9Lo3WqY5SCyfyJ94xjXk1RITKpiPlw0Qb4pKcHhfLuoIG5piYr eqRFKGjR5Fyoq5PJd0IRnzlz35+LrDh0wt2Qc+rQUXEi2KGNOi3nSlI4PbLedbDJ MpWTrxlztUXhWPFPL9FCC5ODPFHSVVx7d5AaLLeKuJDfcY1ub+CRPPhBXugx6Bbo gjfcNZrHILePblza8DqDoEFXrJFuYN8XQzazFKHBSMOWCJlbZc0iPv7ihhw/fwAg SvK9vG1Kajzd33NA -----END CERTIFICATE-----Generated at Sat Dec 6 05:56:53 2025 by rpki-client