This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.mft File: 8184669B0189B7FABE05E700325A0D74957BEB27.mft (raw, json) Hash identifier: SN70/rlDjrt3FtM680gQF09peOE09A4xXrjhuanhcno= Subject key identifier: CF:9C:F2:CB:7C:B6:22:C3:AF:F7:21:1B:6F:36:17:FF:82:72:BC:73 Authority key identifier: 81:84:66:9B:01:89:B7:FA:BE:05:E7:00:32:5A:0D:74:95:7B:EB:27 Certificate issuer: /CN=8184669b0189b7fabe05e700325a0d74957beb27 Certificate serial: 5592ABFC9784B7FA43D60A88185C43230C1330D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gYRmmwGJt_q-BecAMloNdJV76yc.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.mft Manifest number: 0157 Signing time: Sat 06 Dec 2025 06:41:17 +0000 Manifest this update: Sat 06 Dec 2025 06:36:17 +0000 Manifest next update: Sun 07 Dec 2025 07:43:17 +0000 Files and hashes: 1: 8184669B0189B7FABE05E700325A0D74957BEB27.crl (hash: 9/Q/jCbFPSBkkOpphqcGb4cWN2OjdqFDjuZW5kBakzE=) 2: 3231332e3135372e3132302e302f32342d3234203d3e203432383331.roa (hash: obPbW0ZKO9rq4yp7c5UqzqijavPW0CV78gaYhHaBReI=) 3: 3231332e3135372e39362e302f32302d3230203d3e203230353130.roa (hash: cK22q6rO6KtktflqsQYlSr1z73xEpoVM/WNGnd6YIEI=) 4: 3231332e3135372e3131362e302f32332d3233203d3e203230353130.roa (hash: u6D0nQIamyf1rwT6EphlkmgpGmdsHhrROhbEzSFSSxQ=) 5: 3231332e3135372e3130372e302f32342d3234203d3e203530323631.roa (hash: fkThFrWbc2SNg5nWL/DjCmp7efO9LKVSLfyHO63Odeo=) 6: 3231332e3135372e3132332e302f32342d3234203d3e20323035383836.roa (hash: 7VQoOdpqpVmjCELFW51uez7QJpyJbjW4JNhtOxfsg8E=) 7: 3231332e3135372e3132312e302f32342d3234203d3e203633313939.roa (hash: dfTQeycU3bCp9xP/UQaKaAmwMbvByiZ/89C4YDPwYlY=) 8: 3231332e3135372e3132332e302f32342d3234203d3e203235313938.roa (hash: V87tDHJfEWPvC2C8BO/oDFyDQW6yLu4jA4a47My2iC0=) 9: 3231332e3135372e3131322e302f32322d3232203d3e203230353130.roa (hash: oXC9Asr9SJ7DSslxSZaWUX9xWnSBbY5iUxbxwvvcFUI=) 10: 3231332e3135372e3131382e302f32332d3233203d3e203230353130.roa (hash: U2rsj2GmpPBYV9RPLITNHzbaDI2Gxelnlov5msxX9eI=) 11: 3231332e3135372e3132322e302f32342d3234203d3e2039333034.roa (hash: aUvc4UTsIU7R0m9dsnmxWesOTPr9WQo6/RshJ5X0hb4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.crl rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.mft rsync://rpki.ripe.net/repository/DEFAULT/gYRmmwGJt_q-BecAMloNdJV76yc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:92:ab:fc:97:84:b7:fa:43:d6:0a:88:18:5c:43:23:0c:13:30:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8184669b0189b7fabe05e700325a0d74957beb27 Validity Not Before: Dec 6 06:36:17 2025 GMT Not After : Dec 7 07:43:17 2025 GMT Subject: CN=CF9CF2CB7CB622C3AFF7211B6F3617FF8272BC73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:a3:e6:4f:73:8c:d7:ef:0b:33:67:d0:71:83: 55:42:a9:4a:b1:f1:f3:14:fd:11:56:cf:e2:1c:cf: 32:4f:ca:ef:35:ed:28:79:ce:81:73:46:47:1a:e1: 46:5e:83:13:e8:8e:51:18:9d:27:f6:9e:e2:a4:56: 87:ad:d3:97:d4:51:c5:78:8f:31:e5:62:14:f7:2d: e0:92:79:72:b0:d0:46:c3:d6:d1:74:8a:9d:3f:32: be:77:c3:75:aa:42:04:67:30:4e:9a:38:78:08:8b: 33:bb:aa:1c:5b:e9:32:f1:ed:62:16:8c:c7:b3:58: 44:08:4a:81:57:76:2a:fe:6c:e0:71:ce:5a:4c:7a: 99:83:cd:7b:f9:05:d0:07:0a:2b:82:3b:5b:b1:6c: 1a:b6:67:52:00:14:e1:14:7c:00:f9:67:23:21:9d: d6:2e:9c:31:f0:65:bc:50:5c:c9:a9:62:47:57:48: bf:5f:f7:45:77:29:6c:6c:c1:64:8a:ec:78:d4:1e: e3:a0:67:39:8c:2e:4a:d6:cd:76:1e:14:83:46:f5: 87:55:0d:45:0c:90:3e:b2:2c:44:6a:b3:c7:5d:0e: 93:39:89:ec:4b:26:6e:4c:ce:9c:12:56:0f:ca:ac: c2:ce:f2:67:b2:22:0f:d4:cb:0c:61:52:de:bf:da: e5:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:9C:F2:CB:7C:B6:22:C3:AF:F7:21:1B:6F:36:17:FF:82:72:BC:73 X509v3 Authority Key Identifier: keyid:81:84:66:9B:01:89:B7:FA:BE:05:E7:00:32:5A:0D:74:95:7B:EB:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gYRmmwGJt_q-BecAMloNdJV76yc.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:6c:aa:dd:94:f1:3d:03:41:70:e5:31:92:53:ef:ba:dc:6f: ed:90:0a:44:8b:07:ab:ac:4f:fc:17:55:04:e7:ff:78:3b:98: 0d:31:a1:cb:3e:44:59:7d:42:c2:76:b5:a6:b9:75:d1:c1:37: 8c:d3:e7:33:6c:88:9e:7e:81:62:1e:44:6d:b3:41:06:50:33: e8:e4:c7:ae:cc:68:09:92:ec:44:9c:62:56:78:62:3f:86:3a: 5e:d9:27:10:87:62:b2:e1:36:cb:2d:c3:d5:56:5e:b8:ac:4e: 7f:24:8e:70:c6:e6:65:6f:49:13:f2:f7:ec:5c:d7:a1:cf:23: a4:b1:82:48:1c:23:80:74:54:df:aa:f9:a5:6a:e7:a7:82:db: 65:14:f2:03:ca:e5:90:d5:9a:9f:78:69:d1:e5:7e:9c:48:55: 7a:2c:7e:44:5c:fe:3a:28:61:25:de:cb:55:b9:a1:6e:0e:8b: c7:5c:3d:31:5a:30:e9:1a:54:da:35:45:4f:28:43:2d:b6:ca: ee:6d:90:42:0f:3f:eb:81:ca:e0:30:b7:33:29:56:5f:14:0d: d0:51:c3:ee:0b:55:03:d0:b4:b8:f8:4f:80:ed:6d:6c:a2:59: f7:6d:d6:76:af:d1:e6:09:14:cc:4d:07:51:90:53:d1:89:8e: 34:17:74:3b -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUVZKr/JeEt/pD1gqIGFxDIwwTMNYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODE4NDY2OWIwMTg5YjdmYWJlMDVlNzAwMzI1YTBkNzQ5 NTdiZWIyNzAeFw0yNTEyMDYwNjM2MTdaFw0yNTEyMDcwNzQzMTdaMDMxMTAvBgNV BAMTKENGOUNGMkNCN0NCNjIyQzNBRkY3MjExQjZGMzYxN0ZGODI3MkJDNzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbo+ZPc4zX7wszZ9Bxg1VCqUqx 8fMU/RFWz+IczzJPyu817Sh5zoFzRkca4UZegxPojlEYnSf2nuKkVoet05fUUcV4 jzHlYhT3LeCSeXKw0EbD1tF0ip0/Mr53w3WqQgRnME6aOHgIizO7qhxb6TLx7WIW jMezWEQISoFXdir+bOBxzlpMepmDzXv5BdAHCiuCO1uxbBq2Z1IAFOEUfAD5ZyMh ndYunDHwZbxQXMmpYkdXSL9f90V3KWxswWSK7HjUHuOgZzmMLkrWzXYeFING9YdV DUUMkD6yLERqs8ddDpM5iexLJm5MzpwSVg/KrMLO8meyIg/UywxhUt6/2uXjAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUz5zyy3y2IsOv9yEbbzYX/4JyvHMwHwYDVR0j BBgwFoAUgYRmmwGJt/q+BecAMloNdJV76ycwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTQzMWU0MmUtMGQ3Zi00NGQwLTgxM2YtYjVlM2EyYWJi ZTI1LzAvODE4NDY2OUIwMTg5QjdGQUJFMDVFNzAwMzI1QTBENzQ5NTdCRUIyNy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2dZUm1td0dKdF9xLUJlY0FNbG9OZEpW NzZ5Yy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hNDMxZTQyZS0w ZDdmLTQ0ZDAtODEzZi1iNWUzYTJhYmJlMjUvMC84MTg0NjY5QjAxODlCN0ZBQkUw NUU3MDAzMjVBMEQ3NDk1N0JFQjI3Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXWyq3ZTxPQNBcOUxklPv utxv7ZAKRIsHq6xP/BdVBOf/eDuYDTGhyz5EWX1Cwna1prl10cE3jNPnM2yInn6B Yh5EbbNBBlAz6OTHrsxoCZLsRJxiVnhiP4Y6XtknEIdisuE2yy3D1VZeuKxOfySO cMbmZW9JE/L37FzXoc8jpLGCSBwjgHRU36r5pWrnp4LbZRTyA8rlkNWan3hp0eV+ nEhVeix+RFz+OihhJd7LVbmhbg6Lx1w9MVow6RpU2jVFTyhDLbbK7m2QQg8/64HK 4DC3MylWXxQN0FHD7gtVA9C0uPhPgO1tbKJZ923Wdq/R5gkUzE0HUZBT0YmONBd0 Ow== -----END CERTIFICATE-----Generated at Sat Dec 6 14:39:51 2025 by rpki-client