This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/51917E722DB03952D9056BED2F6BD4BF98B78976.mft File: 51917E722DB03952D9056BED2F6BD4BF98B78976.mft (raw, json) Hash identifier: hYP8F8tZJJBO7BkRpnGP9084hEavLi9E2wxDxFv8FZY= Subject key identifier: 9A:EB:75:2E:74:E3:03:12:22:BA:C9:51:B7:6C:40:D2:E6:C5:83:4D Authority key identifier: 51:91:7E:72:2D:B0:39:52:D9:05:6B:ED:2F:6B:D4:BF:98:B7:89:76 Certificate issuer: /CN=51917E722DB03952D9056BED2F6BD4BF98B78976 Certificate serial: 0CCE89527AB1A10D3F02CC4826CB540F481D49A3 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/51917E722DB03952D9056BED2F6BD4BF98B78976.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/51917E722DB03952D9056BED2F6BD4BF98B78976.mft Manifest number: 0117 Signing time: Sat 06 Dec 2025 05:14:38 +0000 Manifest this update: Sat 06 Dec 2025 05:09:38 +0000 Manifest next update: Sun 07 Dec 2025 06:08:38 +0000 Files and hashes: 1: 326131343a373538303a666635333a3a2f34382d3438203d3e20323039373130.roa (hash: UpFVw7x1NBf/Uix4G0zJEj+QV4riL3tEIjso5GywhOU=) 2: 326131343a373538303a666635303a3a2f34342d3434203d3e20323039373130.roa (hash: SHYewRnAEyfHeIS/ErCy1dNpuo8kVPzhKkgjNNzYVkM=) 3: 326131343a373538303a666635303a3a2f34382d3438203d3e20323039373130.roa (hash: RhrZumuCHn+6y3yZr34sdgh4sb8kS47/Ka9E3B3UluQ=) 4: 326131343a373538303a3530303a3a2f34322d3432203d3e203331383938.roa (hash: 7z5RoyaJRkP9nx99eQ4HknE9KjY7eFLuMQrU4NhLP9s=) 5: 326131343a373538303a3530303a3a2f34302d3430203d3e20323039373130.roa (hash: UtWLjV2JD6X8emwUC9bu8RyXGCD7bzymrTBVIEkaVv8=) 6: 326131343a373538303a666635363a3a2f34382d3438203d3e20323039373130.roa (hash: SwKF9ZgurLBB1Omp9sHNYZoTnYJ/E2ALGPkMC5kD1BA=) 7: 326131343a373538303a666635353a3a2f34382d3438203d3e20323039373130.roa (hash: 5weylF9E+kZUqdJn7nMGLccAIkWjUNuo5MqarqyfkO8=) 8: 326131343a373538303a666635343a3a2f34382d3438203d3e20323039373130.roa (hash: i7VkbN6Rb5CnHlmR8BF2dlC+Uq3PFV4wJTcaolWAu+U=) 9: 326131343a373538303a666635313a3a2f34382d3438203d3e20323039373130.roa (hash: KcfiSDiqDvlLOqfaLqph9s6F4NvpySAcmNFiwDriyms=) 10: 51917E722DB03952D9056BED2F6BD4BF98B78976.crl (hash: uST6y+tJ9dJ3/bmTSCqc+jZ49b0N8dn/1fF8Kdmv1lY=) 11: 326131343a373538303a666635323a3a2f34382d3438203d3e20323039373130.roa (hash: vs66PWFM6L/hirNyhIXTRaz65c001j+IhkCdp8VdfS4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/51917E722DB03952D9056BED2F6BD4BF98B78976.crl rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/51917E722DB03952D9056BED2F6BD4BF98B78976.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/51917E722DB03952D9056BED2F6BD4BF98B78976.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:45:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:ce:89:52:7a:b1:a1:0d:3f:02:cc:48:26:cb:54:0f:48:1d:49:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51917E722DB03952D9056BED2F6BD4BF98B78976 Validity Not Before: Dec 6 05:09:38 2025 GMT Not After : Dec 7 06:08:38 2025 GMT Subject: CN=9AEB752E74E3031222BAC951B76C40D2E6C5834D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:66:dc:48:78:6a:d5:c8:c2:1a:20:1e:bd:1f: b8:13:9d:9a:0d:ba:6b:46:a0:79:ca:39:a0:30:aa: fa:ca:ac:e2:5c:e3:59:ba:a2:be:27:30:34:91:56: 0e:1b:27:f0:f4:ec:9a:51:32:79:c4:b0:1c:fb:32: 6f:c1:46:ca:b8:37:56:3b:41:59:cd:0b:5f:11:2c: 4f:42:42:87:db:be:d1:4f:8d:98:90:8e:26:38:c6: 9c:5a:0b:ac:4b:17:20:08:58:09:b7:24:b2:a7:55: 6d:41:07:94:02:fd:2f:51:88:a1:60:00:a4:24:93: 22:02:53:29:d3:a2:5c:74:33:b3:77:7e:33:2e:c5: 9c:63:4a:1e:fa:fa:4a:dd:29:bc:54:5e:04:fa:38: 83:54:f5:52:61:fe:d1:95:b6:1f:ad:48:45:2b:cc: 88:33:39:76:8c:2c:29:cb:3a:9d:52:82:a7:25:b9: 8c:59:b1:bd:07:ba:9b:9c:6f:28:49:e5:5f:fa:f9: b4:a5:4a:73:e5:f2:a2:ac:84:80:1a:ae:bb:db:7c: 72:35:36:10:d0:00:a5:f9:d6:1d:17:85:01:74:31: 5d:f6:6a:e9:f1:66:a7:2c:cb:8d:3f:5a:70:45:0c: 7e:a0:a2:f4:f0:2a:e8:ff:6e:c8:2d:ce:5a:a2:17: e1:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:EB:75:2E:74:E3:03:12:22:BA:C9:51:B7:6C:40:D2:E6:C5:83:4D X509v3 Authority Key Identifier: keyid:51:91:7E:72:2D:B0:39:52:D9:05:6B:ED:2F:6B:D4:BF:98:B7:89:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/51917E722DB03952D9056BED2F6BD4BF98B78976.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/51917E722DB03952D9056BED2F6BD4BF98B78976.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/51917E722DB03952D9056BED2F6BD4BF98B78976.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:25:62:5d:0a:40:09:f0:c1:b0:03:9d:b9:bb:be:4c:a7:8a: be:5b:23:9a:9f:83:e0:1a:71:97:5e:8d:45:21:a6:c7:5d:e7: 33:fd:b1:28:4f:d1:d7:01:1f:1d:ac:e7:26:f0:3b:d1:52:cf: 29:cb:d1:da:96:03:55:ca:7b:6f:02:da:d0:7f:ac:65:77:de: 44:d7:c9:e0:fd:0a:6d:8b:12:3a:97:17:71:49:c5:3c:5a:39: 99:c3:33:e1:8b:02:a4:4e:d0:46:30:4f:37:44:6b:d5:07:4b: e1:5f:38:1b:c5:ee:a2:0f:35:f2:57:6f:a9:e2:e0:d8:ef:11: 16:f0:28:51:9f:c3:e2:5b:e0:ea:43:db:bb:d2:26:a7:b0:bd: a4:2e:5b:ea:54:05:ce:67:02:fd:44:f5:53:d1:3a:b8:99:62: de:21:b3:d5:9a:67:0a:af:f6:be:d5:e3:25:0f:75:17:d6:e3: 70:de:c9:84:71:f7:b2:77:0a:2e:92:4c:72:13:71:45:ed:23: a5:7f:61:e3:e8:d7:0b:b1:b4:bf:53:32:91:5a:00:76:31:b6: ec:2c:3b:84:8d:f4:34:58:79:e2:9c:5d:47:1c:88:a5:e1:62: 6a:ca:4f:d2:aa:f6:3d:32:8b:19:5c:77:89:4c:29:3f:57:9f: 4a:da:54:f5 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUDM6JUnqxoQ0/AsxIJstUD0gdSaMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTE5MTdFNzIyREIwMzk1MkQ5MDU2QkVEMkY2QkQ0QkY5 OEI3ODk3NjAeFw0yNTEyMDYwNTA5MzhaFw0yNTEyMDcwNjA4MzhaMDMxMTAvBgNV BAMTKDlBRUI3NTJFNzRFMzAzMTIyMkJBQzk1MUI3NkM0MEQyRTZDNTgzNEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRZtxIeGrVyMIaIB69H7gTnZoN umtGoHnKOaAwqvrKrOJc41m6or4nMDSRVg4bJ/D07JpRMnnEsBz7Mm/BRsq4N1Y7 QVnNC18RLE9CQofbvtFPjZiQjiY4xpxaC6xLFyAIWAm3JLKnVW1BB5QC/S9RiKFg AKQkkyICUynTolx0M7N3fjMuxZxjSh76+krdKbxUXgT6OINU9VJh/tGVth+tSEUr zIgzOXaMLCnLOp1SgqcluYxZsb0HupucbyhJ5V/6+bSlSnPl8qKshIAarrvbfHI1 NhDQAKX51h0XhQF0MV32aunxZqcsy40/WnBFDH6govTwKuj/bsgtzlqiF+GPAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUmut1LnTjAxIiuslRt2xA0ubFg00wHwYDVR0j BBgwFoAUUZF+ci2wOVLZBWvtL2vUv5i3iXYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWVjYWM0MTMtNGNkMi00NzJjLWIwMWUtNzQ0NThjZWEz ODZjLzAvNTE5MTdFNzIyREIwMzk1MkQ5MDU2QkVEMkY2QkQ0QkY5OEI3ODk3Ni5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC81MTkxN0U3MjJEQjAzOTUyRDkwNTZCRUQy RjZCRDRCRjk4Qjc4OTc2LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzllY2FjNDEzLTRjZDItNDcyYy1iMDFlLTc0NDU4Y2VhMzg2Yy8wLzUxOTE3RTcy MkRCMDM5NTJEOTA1NkJFRDJGNkJENEJGOThCNzg5NzYubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB+JWJd CkAJ8MGwA525u75Mp4q+WyOan4PgGnGXXo1FIabHXecz/bEoT9HXAR8drOcm8DvR Us8py9HalgNVyntvAtrQf6xld95E18ng/QptixI6lxdxScU8WjmZwzPhiwKkTtBG ME83RGvVB0vhXzgbxe6iDzXyV2+p4uDY7xEW8ChRn8PiW+DqQ9u70iansL2kLlvq VAXOZwL9RPVT0Tq4mWLeIbPVmmcKr/a+1eMlD3UX1uNw3smEcfeydwoukkxyE3FF 7SOlf2Hj6NcLsbS/UzKRWgB2MbbsLDuEjfQ0WHninF1HHIil4WJqyk/SqvY9MosZ XHeJTCk/V59K2lT1 -----END CERTIFICATE-----Generated at Sat Dec 6 14:23:45 2025 by rpki-client