This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9bb77c8a-2d69-4325-b4fa-603388c96bb3/0/DF083FC9C36AB37158AD80E5C84E76BE97ADC09F.mft File: DF083FC9C36AB37158AD80E5C84E76BE97ADC09F.mft (raw, json) Hash identifier: hDXQsrKTfPX3ZXvamLxYKSUnbHgYs8nz9nlAjoBoGMg= Subject key identifier: 8B:51:AC:C4:E1:C0:57:02:0A:7D:5C:4F:B3:F9:DB:60:0C:FE:28:F8 Authority key identifier: DF:08:3F:C9:C3:6A:B3:71:58:AD:80:E5:C8:4E:76:BE:97:AD:C0:9F Certificate issuer: /CN=df083fc9c36ab37158ad80e5c84e76be97adc09f Certificate serial: 2060473C7763F6C986C2B10E2A3EA6771D2123D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3wg_ycNqs3FYrYDlyE52vpetwJ8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9bb77c8a-2d69-4325-b4fa-603388c96bb3/0/DF083FC9C36AB37158AD80E5C84E76BE97ADC09F.mft Manifest number: 0D Signing time: Fri 05 Dec 2025 13:53:17 +0000 Manifest this update: Fri 05 Dec 2025 13:48:17 +0000 Manifest next update: Sat 06 Dec 2025 16:31:17 +0000 Files and hashes: 1: 323030313a3637383a313134633a3a2f34382d3438203d3e20323034353335.roa (hash: 9p7lN4fPyJsdHWKsoNbq0ArF1KunMN6fkvMq7UIoE20=) 2: DF083FC9C36AB37158AD80E5C84E76BE97ADC09F.crl (hash: GCnI6qfsk4dHbriDzGFqFB3iNliJA1hZa9zQmXsr7HM=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9bb77c8a-2d69-4325-b4fa-603388c96bb3/0/DF083FC9C36AB37158AD80E5C84E76BE97ADC09F.crl rsync://rsync.paas.rpki.ripe.net/repository/9bb77c8a-2d69-4325-b4fa-603388c96bb3/0/DF083FC9C36AB37158AD80E5C84E76BE97ADC09F.mft rsync://rpki.ripe.net/repository/DEFAULT/3wg_ycNqs3FYrYDlyE52vpetwJ8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 16:31:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:60:47:3c:77:63:f6:c9:86:c2:b1:0e:2a:3e:a6:77:1d:21:23:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df083fc9c36ab37158ad80e5c84e76be97adc09f Validity Not Before: Dec 5 13:48:17 2025 GMT Not After : Dec 6 16:31:17 2025 GMT Subject: CN=8B51ACC4E1C057020A7D5C4FB3F9DB600CFE28F8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:18:b9:d5:64:eb:81:ed:5d:8d:b7:8c:60:94: 51:09:61:3d:d1:0a:22:cd:28:de:6f:6b:3d:5c:8a: 27:a6:34:2f:c1:bf:39:14:97:8d:de:a4:6d:b9:fc: 2d:21:25:95:9a:a1:da:67:ca:f0:b6:07:e5:a8:bf: 7b:b2:8b:bd:c6:37:da:e6:d2:eb:e7:f3:17:bd:37: c8:80:ab:f3:02:d6:37:92:42:7d:54:4f:33:41:ef: 0c:b5:99:cd:a8:bf:8d:78:ca:9f:4c:32:35:14:62: 8c:ba:97:54:dc:ab:1b:93:bf:d2:6c:32:38:2c:d9: 1b:19:4b:fa:ad:06:99:82:bf:a9:c0:ad:5d:29:a4: 6e:32:a7:ee:a6:46:cc:f9:0c:4b:5c:23:a2:cc:86: 50:5e:8a:bd:e3:0a:52:86:74:f4:47:4f:c9:3f:20: 60:ac:c8:14:b1:14:2e:05:7a:74:8a:ec:70:2d:12: b7:5c:ad:ba:14:d5:d5:ea:c0:f6:cc:c7:87:5d:b1: 73:1e:ee:67:ed:17:ed:29:ab:d0:15:a4:62:4f:8e: 75:50:63:f7:60:22:04:0f:c6:3c:c6:81:df:1e:7e: a5:f7:33:38:1a:b4:b3:21:44:0b:27:ab:a2:4d:22: 18:b4:c4:b7:69:fc:25:f4:03:47:48:c6:6e:27:70: 46:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:51:AC:C4:E1:C0:57:02:0A:7D:5C:4F:B3:F9:DB:60:0C:FE:28:F8 X509v3 Authority Key Identifier: keyid:DF:08:3F:C9:C3:6A:B3:71:58:AD:80:E5:C8:4E:76:BE:97:AD:C0:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9bb77c8a-2d69-4325-b4fa-603388c96bb3/0/DF083FC9C36AB37158AD80E5C84E76BE97ADC09F.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3wg_ycNqs3FYrYDlyE52vpetwJ8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9bb77c8a-2d69-4325-b4fa-603388c96bb3/0/DF083FC9C36AB37158AD80E5C84E76BE97ADC09F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:56:f4:c1:3f:9b:24:d9:76:31:45:2e:f7:6e:43:f6:9e:b4: 38:86:7f:e5:5a:d9:0a:db:59:b8:2f:c9:62:3d:91:90:9d:29: 88:9f:63:60:e5:0b:01:8a:f9:8e:39:eb:51:af:a2:7e:1f:c6: 1b:7f:eb:07:15:8d:f4:02:3e:1c:b7:17:2d:56:28:7e:1b:5d: d8:d7:ab:c2:bf:dd:98:14:92:82:5f:57:8b:ea:b3:32:69:23: d0:1e:10:e7:04:52:28:aa:71:86:64:0a:94:5f:ef:5a:55:45: 4d:e8:d2:31:d0:96:d6:03:ee:88:2a:7f:ca:28:79:0e:33:78: 03:ae:5e:02:36:c1:6d:41:57:55:dc:34:78:2a:db:10:6b:6e: e5:f8:14:9e:7d:da:b2:dc:81:68:50:52:c8:20:88:95:8f:d4: e2:10:13:74:46:c4:77:be:b5:9a:92:86:29:05:f5:a2:8b:36: 1f:81:4b:bd:ed:d8:01:f7:58:57:45:e0:f3:28:43:56:fe:2f: 25:b6:05:ad:de:c6:f1:1a:39:39:0f:33:88:de:0b:75:7c:4c: 15:eb:37:48:29:3a:bc:6e:eb:7f:82:4e:ed:b3:2e:3f:c4:ea: 06:65:da:63:5e:5c:47:33:70:e7:4c:9e:66:12:5a:99:48:2b: 58:cd:30:0b -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUIGBHPHdj9smGwrEOKj6mdx0hI9cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZGYwODNmYzljMzZhYjM3MTU4YWQ4MGU1Yzg0ZTc2YmU5 N2FkYzA5ZjAeFw0yNTEyMDUxMzQ4MTdaFw0yNTEyMDYxNjMxMTdaMDMxMTAvBgNV BAMTKDhCNTFBQ0M0RTFDMDU3MDIwQTdENUM0RkIzRjlEQjYwMENGRTI4RjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2GLnVZOuB7V2Nt4xglFEJYT3R CiLNKN5vaz1ciiemNC/BvzkUl43epG25/C0hJZWaodpnyvC2B+Wov3uyi73GN9rm 0uvn8xe9N8iAq/MC1jeSQn1UTzNB7wy1mc2ov414yp9MMjUUYoy6l1TcqxuTv9Js Mjgs2RsZS/qtBpmCv6nArV0ppG4yp+6mRsz5DEtcI6LMhlBeir3jClKGdPRHT8k/ IGCsyBSxFC4FenSK7HAtErdcrboU1dXqwPbMx4ddsXMe7mftF+0pq9AVpGJPjnVQ Y/dgIgQPxjzGgd8efqX3MzgatLMhRAsnq6JNIhi0xLdp/CX0A0dIxm4ncEalAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUi1GsxOHAVwIKfVxPs/nbYAz+KPgwHwYDVR0j BBgwFoAU3wg/ycNqs3FYrYDlyE52vpetwJ8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWJiNzdjOGEtMmQ2OS00MzI1LWI0ZmEtNjAzMzg4Yzk2 YmIzLzAvREYwODNGQzlDMzZBQjM3MTU4QUQ4MEU1Qzg0RTc2QkU5N0FEQzA5Ri5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzN3Z195Y05xczNGWXJZRGx5RTUydnBl dHdKOC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85YmI3N2M4YS0y ZDY5LTQzMjUtYjRmYS02MDMzODhjOTZiYjMvMC9ERjA4M0ZDOUMzNkFCMzcxNThB RDgwRTVDODRFNzZCRTk3QURDMDlGLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANVb0wT+bJNl2MUUu925D 9p60OIZ/5VrZCttZuC/JYj2RkJ0piJ9jYOULAYr5jjnrUa+ifh/GG3/rBxWN9AI+ HLcXLVYofhtd2Nerwr/dmBSSgl9Xi+qzMmkj0B4Q5wRSKKpxhmQKlF/vWlVFTejS MdCW1gPuiCp/yih5DjN4A65eAjbBbUFXVdw0eCrbEGtu5fgUnn3astyBaFBSyCCI lY/U4hATdEbEd761mpKGKQX1oos2H4FLve3YAfdYV0Xg8yhDVv4vJbYFrd7G8Ro5 OQ8ziN4LdXxMFes3SCk6vG7rf4JO7bMuP8TqBmXaY15cRzNw50yeZhJamUgrWM0w Cw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:42:14 2025 by rpki-client