This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.mft File: 5ECB4CADBBADD500F49CA697D566A2761E017608.mft (raw, json) Hash identifier: kkql3ixqHlNyAnfTuG+jtAwDN6mBdxdinsv18eLafq4= Subject key identifier: AF:09:38:78:1E:3F:5F:CC:AC:00:43:32:12:5E:DC:B9:BF:1D:BE:D9 Authority key identifier: 5E:CB:4C:AD:BB:AD:D5:00:F4:9C:A6:97:D5:66:A2:76:1E:01:76:08 Certificate issuer: /CN=5ecb4cadbbadd500f49ca697d566a2761e017608 Certificate serial: 3B69CCF1F6BF9D9E228DA78DA33AB820877D1CB5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XstMrbut1QD0nKaX1Waidh4Bdgg.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.mft Manifest number: 0211 Signing time: Sat 06 Dec 2025 08:46:17 +0000 Manifest this update: Sat 06 Dec 2025 08:41:17 +0000 Manifest next update: Sun 07 Dec 2025 12:40:17 +0000 Files and hashes: 1: 3134312e3139332e3232382e302f32342d3234203d3e20323134323038.roa (hash: p1kuPenqcy6Et0XPjwxcCLB+vpEy3ekHhe4EodnqolI=) 2: 5ECB4CADBBADD500F49CA697D566A2761E017608.crl (hash: Vby0dBiJrK/5+zdxpv5+rHB00TvDpoeX4RqH9SWsf7E=) 3: 3231332e3235342e3137302e302f32342d3234203d3e20323134393431.roa (hash: WuIyFXGDgkt2cltxoxT/RYao20HHu+r0Sn5rfpjFnHA=) 4: 38362e35342e3137322e302f32342d3234203d3e20323134343332.roa (hash: WVXkrZeMKS19WGWwMJQfqNOjJpC3bIU6zT5pImMreVs=) 5: 3137302e36322e3139302e302f32342d3234203d3e203438393235.roa (hash: 8/++60jg7XtzmZ45FRECeqxUVy5048XlFvcQJYMNUjo=) 6: 3231332e3235342e3137302e302f32342d3234203d3e20323038343833.roa (hash: gjwDheXZBS8eOtwo7Ja5xPFcujfV7TC07EH1z972oQ4=) 7: 38302e37352e3232312e302f32342d3234203d3e203438393235.roa (hash: Q4yUdFFGtrq1xUVDtHn0DoNWjht0ICRHxiUX7p+xRAQ=) 8: 3231332e3235342e3137302e302f32342d3234203d3e203438363738.roa (hash: ttSPLNkVmnmfbB1Jg0U4OFMRv4cZWxzTg6oBluFltrk=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.crl rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.mft rsync://rpki.ripe.net/repository/DEFAULT/XstMrbut1QD0nKaX1Waidh4Bdgg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:69:cc:f1:f6:bf:9d:9e:22:8d:a7:8d:a3:3a:b8:20:87:7d:1c:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ecb4cadbbadd500f49ca697d566a2761e017608 Validity Not Before: Dec 6 08:41:17 2025 GMT Not After : Dec 7 12:40:17 2025 GMT Subject: CN=AF0938781E3F5FCCAC004332125EDCB9BF1DBED9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:c5:1c:98:93:3f:5d:23:9f:37:44:28:62:f5: 8a:83:74:96:d5:b1:e2:11:36:cb:2e:6f:38:60:13: a6:b1:5b:d1:ef:dc:32:bc:ab:0a:8b:ac:80:6c:ef: 5b:58:1d:57:bb:0b:3d:93:1b:86:9e:bc:3e:24:5a: e0:b8:57:28:91:46:1e:f4:98:a1:31:5f:78:2f:4d: 92:2c:df:17:31:d0:41:30:73:be:d1:1b:9f:19:bc: 50:eb:67:eb:95:a3:cb:69:fe:d4:f7:71:83:7c:e3: 8a:9b:27:b6:4b:62:b2:8b:f3:9e:34:95:0d:9b:36: 1e:a3:67:69:5d:d3:4c:34:97:9a:7e:57:64:99:7c: 58:f5:bd:2d:bc:43:17:4c:4f:7b:56:10:f3:7b:78: 0c:8f:2d:3c:ed:8e:3c:58:a4:7f:3e:1e:89:2d:3c: 8a:07:06:76:2b:be:1a:f3:05:89:e4:31:c7:23:4f: 94:70:04:37:e8:43:58:5f:cf:2d:7b:98:d3:32:b0: 13:10:62:c5:50:0b:d2:6c:f3:64:c0:39:4f:84:05: 54:1b:95:09:1f:ec:03:84:b4:a8:b1:cc:23:c2:ac: b3:88:81:a0:17:b7:e9:b2:ff:17:64:6d:81:2e:d0: 74:2b:01:26:b2:5a:31:f7:83:40:40:cf:bc:47:1d: 7d:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:09:38:78:1E:3F:5F:CC:AC:00:43:32:12:5E:DC:B9:BF:1D:BE:D9 X509v3 Authority Key Identifier: keyid:5E:CB:4C:AD:BB:AD:D5:00:F4:9C:A6:97:D5:66:A2:76:1E:01:76:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XstMrbut1QD0nKaX1Waidh4Bdgg.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:b1:87:3c:4d:c2:ac:fe:9b:79:4d:c3:81:64:8b:30:bd:f5: 17:48:3a:fb:9c:12:67:c7:86:5a:55:d8:26:5c:05:72:e0:48: 35:62:1b:8e:26:c7:f8:87:dd:24:40:d7:37:89:7a:77:12:7a: 9b:f9:cb:e7:5b:a5:b3:f2:d7:7e:d9:8d:76:9f:14:4c:ed:47: 27:49:d9:f8:ae:26:cb:56:5d:d5:e3:6b:24:bf:cc:14:b4:2e: bd:49:cc:4b:2c:3e:11:1e:92:5b:36:e6:d9:6c:81:78:6b:75: 39:81:af:2e:88:6d:95:0a:18:4d:df:e0:96:49:1e:3f:36:70: b3:49:01:26:7d:ec:ed:4d:94:fd:b7:d2:07:04:ec:44:13:d9: 86:14:0c:b8:a6:ae:8f:ab:d8:f8:1e:5f:f5:67:01:77:72:5f: 96:31:a9:6f:e4:8f:c3:5a:37:b4:e4:53:c1:4f:b1:a6:32:96: fc:18:a0:41:3d:24:7e:6c:ea:75:38:d5:1d:02:08:ea:22:98: 8f:0a:3d:d2:24:b6:b8:e1:5f:eb:ea:3c:1c:ab:da:d1:0a:a5: db:35:35:cd:d7:a6:cc:3e:1a:65:4b:6a:c6:3b:81:77:bf:d9: 1a:99:5d:14:d5:70:79:d0:48:15:07:b8:f8:88:93:8a:a8:9f: fe:70:bf:eb -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUO2nM8fa/nZ4ijaeNozq4IId9HLUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNWVjYjRjYWRiYmFkZDUwMGY0OWNhNjk3ZDU2NmEyNzYx ZTAxNzYwODAeFw0yNTEyMDYwODQxMTdaFw0yNTEyMDcxMjQwMTdaMDMxMTAvBgNV BAMTKEFGMDkzODc4MUUzRjVGQ0NBQzAwNDMzMjEyNUVEQ0I5QkYxREJFRDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD5xRyYkz9dI583RChi9YqDdJbV seIRNssubzhgE6axW9Hv3DK8qwqLrIBs71tYHVe7Cz2TG4aevD4kWuC4VyiRRh70 mKExX3gvTZIs3xcx0EEwc77RG58ZvFDrZ+uVo8tp/tT3cYN844qbJ7ZLYrKL8540 lQ2bNh6jZ2ld00w0l5p+V2SZfFj1vS28QxdMT3tWEPN7eAyPLTztjjxYpH8+Hokt PIoHBnYrvhrzBYnkMccjT5RwBDfoQ1hfzy17mNMysBMQYsVQC9Js82TAOU+EBVQb lQkf7AOEtKixzCPCrLOIgaAXt+my/xdkbYEu0HQrASayWjH3g0BAz7xHHX0LAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUrwk4eB4/X8ysAEMyEl7cub8dvtkwHwYDVR0j BBgwFoAUXstMrbut1QD0nKaX1Waidh4BdggwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWMwZTEzZDgtYmZlMC00MjM1LWFmYjQtZDUzZWRmYmFj ZGQyLzAvNUVDQjRDQURCQkFERDUwMEY0OUNBNjk3RDU2NkEyNzYxRTAxNzYwOC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1hzdE1yYnV0MVFEMG5LYVgxV2FpZGg0 QmRnZy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYzBlMTNkOC1i ZmUwLTQyMzUtYWZiNC1kNTNlZGZiYWNkZDIvMC81RUNCNENBREJCQURENTAwRjQ5 Q0E2OTdENTY2QTI3NjFFMDE3NjA4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm7GHPE3CrP6beU3DgWSL ML31F0g6+5wSZ8eGWlXYJlwFcuBINWIbjibH+IfdJEDXN4l6dxJ6m/nL51uls/LX ftmNdp8UTO1HJ0nZ+K4my1Zd1eNrJL/MFLQuvUnMSyw+ER6SWzbm2WyBeGt1OYGv LohtlQoYTd/glkkePzZws0kBJn3s7U2U/bfSBwTsRBPZhhQMuKauj6vY+B5f9WcB d3JfljGpb+SPw1o3tORTwU+xpjKW/BigQT0kfmzqdTjVHQII6iKYjwo90iS2uOFf 6+o8HKva0Qql2zU1zdemzD4aZUtqxjuBd7/ZGpldFNVwedBIFQe4+IiTiqif/nC/ 6w== -----END CERTIFICATE-----Generated at Sat Dec 6 11:06:17 2025 by rpki-client