This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ab83a38a-7a39-4397-b588-edb9fbb62817/0/E92D148583A4642D90D4C4BC47B4504E180EA0C3.mft File: E92D148583A4642D90D4C4BC47B4504E180EA0C3.mft (raw, json) Hash identifier: IFDEFTKmbufyGmLtt6xyV4VVHDmrh+CUAYAt+hdjpFU= Subject key identifier: 20:CC:43:BD:C0:05:99:97:A8:1C:0D:B3:0D:81:26:40:B6:4D:7F:CF Authority key identifier: E9:2D:14:85:83:A4:64:2D:90:D4:C4:BC:47:B4:50:4E:18:0E:A0:C3 Certificate issuer: /CN=e92d148583a4642d90d4c4bc47b4504e180ea0c3 Certificate serial: 5403CF22FC2E800D88BD71809DCA2D49E697CB24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6S0UhYOkZC2Q1MS8R7RQThgOoMM.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ab83a38a-7a39-4397-b588-edb9fbb62817/0/E92D148583A4642D90D4C4BC47B4504E180EA0C3.mft Manifest number: 04D1 Signing time: Fri 05 Dec 2025 16:01:16 +0000 Manifest this update: Fri 05 Dec 2025 15:56:16 +0000 Manifest next update: Sat 06 Dec 2025 18:50:16 +0000 Files and hashes: 1: 39312e3233352e3230352e302f32342d3234203d3e203136323736.roa (hash: p/F0OkbT4gUH7RMUTLSzXd9N6M9/tCs2QiOrUFAeaQQ=) 2: E92D148583A4642D90D4C4BC47B4504E180EA0C3.crl (hash: qgogV1vBBRGrifqj8DiZIbDQH5JWnPCRmOKyI8I7Ndo=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ab83a38a-7a39-4397-b588-edb9fbb62817/0/E92D148583A4642D90D4C4BC47B4504E180EA0C3.crl rsync://rsync.paas.rpki.ripe.net/repository/ab83a38a-7a39-4397-b588-edb9fbb62817/0/E92D148583A4642D90D4C4BC47B4504E180EA0C3.mft rsync://rpki.ripe.net/repository/DEFAULT/6S0UhYOkZC2Q1MS8R7RQThgOoMM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 18:50:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:03:cf:22:fc:2e:80:0d:88:bd:71:80:9d:ca:2d:49:e6:97:cb:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e92d148583a4642d90d4c4bc47b4504e180ea0c3 Validity Not Before: Dec 5 15:56:16 2025 GMT Not After : Dec 6 18:50:16 2025 GMT Subject: CN=20CC43BDC0059997A81C0DB30D812640B64D7FCF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:e2:96:74:c7:81:18:9d:57:f8:64:1e:e4:79: 79:71:c1:a1:24:c5:f6:f9:3e:5f:40:e6:25:f9:75: 26:50:40:93:ba:a1:29:16:34:0d:e9:61:f3:c3:3c: 27:22:00:b3:35:9e:0b:db:1d:cc:e7:c0:07:9f:a7: 98:40:fe:e8:2e:53:76:36:f8:1a:66:fd:1d:a6:e7: a8:d2:99:30:e4:0a:e0:f8:af:6f:3c:95:36:eb:18: f0:8c:00:39:15:44:73:4c:9c:23:c5:1d:00:70:d1: cf:fe:1b:3f:56:cb:c4:fd:1d:00:95:ff:1a:f1:68: 8a:54:85:7e:f5:a3:fb:a4:3a:89:92:91:87:5c:8f: e7:aa:55:1d:61:c4:a8:9c:de:db:cf:97:89:21:dc: 3a:d6:b6:67:58:cf:e0:41:84:23:fb:e4:a4:54:8a: ce:78:d5:8f:df:3e:1f:7d:2c:70:31:ee:b7:55:a3: 53:61:8e:64:c0:c9:65:81:ba:25:93:05:bb:2c:51: cb:ca:fc:a5:1b:b9:79:09:e9:09:f3:cf:ea:07:79: 39:7a:05:3b:4c:d4:7e:09:09:b9:97:2f:8c:33:a6: e2:ca:54:7a:7c:96:1f:b6:a3:e7:1b:ef:32:d4:45: 9c:5a:ca:2a:94:65:d2:d6:47:b0:86:50:10:39:d4: 5f:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:CC:43:BD:C0:05:99:97:A8:1C:0D:B3:0D:81:26:40:B6:4D:7F:CF X509v3 Authority Key Identifier: keyid:E9:2D:14:85:83:A4:64:2D:90:D4:C4:BC:47:B4:50:4E:18:0E:A0:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ab83a38a-7a39-4397-b588-edb9fbb62817/0/E92D148583A4642D90D4C4BC47B4504E180EA0C3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6S0UhYOkZC2Q1MS8R7RQThgOoMM.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ab83a38a-7a39-4397-b588-edb9fbb62817/0/E92D148583A4642D90D4C4BC47B4504E180EA0C3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:b1:69:82:d2:7d:1d:53:19:98:a0:81:33:c1:2f:f0:a1:e4: 22:f5:d0:36:9b:c2:4c:b4:e0:79:02:89:36:f6:d4:c1:c8:3e: 45:4e:d9:af:5a:4d:81:bb:e5:04:10:de:0b:2d:57:bb:4a:1d: 05:47:73:78:ab:0e:f6:4c:5d:2b:1d:09:dd:83:2c:68:75:62: 92:06:46:3b:2a:62:71:83:ae:31:42:0c:ae:a3:e2:27:83:b5: 95:b7:86:5a:57:c8:74:42:43:0a:92:f0:47:e4:63:00:75:0d: 9d:e8:4b:2d:73:5e:45:1f:df:e4:e9:b8:ab:b8:62:eb:8b:c2: 8e:3c:a4:df:12:f9:6a:fb:d0:4c:45:cc:33:78:69:85:bc:68: 03:33:c1:2c:09:09:f1:8e:5a:71:6d:f2:ea:84:c8:c2:e6:73: c4:34:5d:af:32:d9:36:0e:62:fc:5c:12:4c:cf:37:12:4d:5c: 0a:61:b2:ab:3b:49:1f:d1:16:24:53:0a:53:d4:ca:4e:35:c7: cc:6f:e5:5e:f3:80:fa:11:ab:d4:a9:e0:15:ef:32:f8:70:67: 6a:8d:f1:20:92:75:90:f1:b3:66:f7:d2:3f:a2:4a:3a:ef:81: f9:c5:21:ed:31:19:8e:15:cf:16:db:2f:68:93:ec:51:a6:0c: a6:44:ed:b1 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUVAPPIvwugA2IvXGAncotSeaXyyQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZTkyZDE0ODU4M2E0NjQyZDkwZDRjNGJjNDdiNDUwNGUx ODBlYTBjMzAeFw0yNTEyMDUxNTU2MTZaFw0yNTEyMDYxODUwMTZaMDMxMTAvBgNV BAMTKDIwQ0M0M0JEQzAwNTk5OTdBODFDMERCMzBEODEyNjQwQjY0RDdGQ0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK4pZ0x4EYnVf4ZB7keXlxwaEk xfb5Pl9A5iX5dSZQQJO6oSkWNA3pYfPDPCciALM1ngvbHcznwAefp5hA/uguU3Y2 +Bpm/R2m56jSmTDkCuD4r288lTbrGPCMADkVRHNMnCPFHQBw0c/+Gz9Wy8T9HQCV /xrxaIpUhX71o/ukOomSkYdcj+eqVR1hxKic3tvPl4kh3DrWtmdYz+BBhCP75KRU is541Y/fPh99LHAx7rdVo1NhjmTAyWWBuiWTBbssUcvK/KUbuXkJ6Qnzz+oHeTl6 BTtM1H4JCbmXL4wzpuLKVHp8lh+2o+cb7zLURZxayiqUZdLWR7CGUBA51F+jAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUIMxDvcAFmZeoHA2zDYEmQLZNf88wHwYDVR0j BBgwFoAU6S0UhYOkZC2Q1MS8R7RQThgOoMMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWI4M2EzOGEtN2EzOS00Mzk3LWI1ODgtZWRiOWZiYjYy ODE3LzAvRTkyRDE0ODU4M0E0NjQyRDkwRDRDNEJDNDdCNDUwNEUxODBFQTBDMy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZTMFVoWU9rWkMyUTFNUzhSN1JRVGhn T29NTS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYjgzYTM4YS03 YTM5LTQzOTctYjU4OC1lZGI5ZmJiNjI4MTcvMC9FOTJEMTQ4NTgzQTQ2NDJEOTBE NEM0QkM0N0I0NTA0RTE4MEVBMEMzLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIrFpgtJ9HVMZmKCBM8Ev 8KHkIvXQNpvCTLTgeQKJNvbUwcg+RU7Zr1pNgbvlBBDeCy1Xu0odBUdzeKsO9kxd Kx0J3YMsaHVikgZGOypicYOuMUIMrqPiJ4O1lbeGWlfIdEJDCpLwR+RjAHUNnehL LXNeRR/f5Om4q7hi64vCjjyk3xL5avvQTEXMM3hphbxoAzPBLAkJ8Y5acW3y6oTI wuZzxDRdrzLZNg5i/FwSTM83Ek1cCmGyqztJH9EWJFMKU9TKTjXHzG/lXvOA+hGr 1KngFe8y+HBnao3xIJJ1kPGzZvfSP6JKOu+B+cUh7TEZjhXPFtsvaJPsUaYMpkTt sQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:08:47 2025 by rpki-client