This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.mft File: BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.mft (raw, json) Hash identifier: 4QHroksNfmBas2f5M+sIGMTf587DkrSU5Uf7LLoieI4= Subject key identifier: 97:0F:96:22:95:BA:35:05:56:8C:52:8C:61:97:26:E8:44:B7:A5:19 Authority key identifier: BE:0B:B7:88:69:CD:B2:AD:0C:97:1A:6A:85:8A:30:21:3E:AE:C4:7D Certificate issuer: /CN=be0bb78869cdb2ad0c971a6a858a30213eaec47d Certificate serial: 54769827984B4FDC746E7AE66EF767B547C01928 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vgu3iGnNsq0MlxpqhYowIT6uxH0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.mft Manifest number: 018F Signing time: Sat 06 Dec 2025 07:41:17 +0000 Manifest this update: Sat 06 Dec 2025 07:36:17 +0000 Manifest next update: Sun 07 Dec 2025 08:54:17 +0000 Files and hashes: 1: 3139332e3136392e37382e302f32332d3233203d3e203438343335.roa (hash: IDuy7mlGaLMOCgzEdx2/1ouXbZ90tr9UBkMDq0knNXg=) 2: 3137382e3234382e37362e302f32342d3234203d3e20323135333034.roa (hash: XrWwPHt91qxXHQ0/kVWO42vo3gTicR3T1AogX5xX6FY=) 3: 3137382e3234382e37382e302f32342d3234203d3e20323132333834.roa (hash: 55oHxRvhLlFnFgVNA6T2hJ74AYC9yyl40HSKUWc/res=) 4: 3137382e3234382e37342e302f32342d3234203d3e20323039313831.roa (hash: JOjM4S47fNK82HVGI3kzft2889UH/2/CmD3owvdrCqM=) 5: 3139332e3136392e37382e302f32332d3234203d3e203530343334.roa (hash: i+j0/SqL92pXqr/Yt38MmbwZjTIQClt05q1Bhtl74qs=) 6: 3139332e3136392e37382e302f32332d3234203d3e203438343335.roa (hash: 0e4l5EqcD9+SWWVL79QZba03Lu9mdjyR/TfDJr390dA=) 7: 3137382e3234382e37362e302f32342d3234203d3e20323134303234.roa (hash: JikbqnpKajZI2JuxlY+TTYmy6DToKoSov4y2Ga81BQg=) 8: 3137382e3234382e37392e302f32342d3234203d3e20313335333932.roa (hash: nkla74pmgzof6BdGTx/D9Sn3aXq/+fT/xyCtH2Ux1lE=) 9: 3137382e3234382e37362e302f32342d3234203d3e203336353330.roa (hash: h2oY8dMCuUJOV8h2ooYxtJO3njho899x4gMqGa23JNE=) 10: 3137382e3234382e37332e302f32342d3234203d3e20313431393638.roa (hash: zMoHCJaZZ5vI4uszw9fV0p+6ygU9pfTnJ4jfa1DsJEg=) 11: 3139352e34322e3131322e302f32342d3234203d3e203438343335.roa (hash: 0fCZnPcUR/TU0KGeDhdE4rzY8AMOIFMDCEwGzQYi3Zw=) 12: BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.crl (hash: KLP9zqtdzlPplTnykq+8WfTv/EPCyW2oBQxo/2h0TEI=) 13: 3137382e3234382e37372e302f32342d3234203d3e20323133373833.roa (hash: IZUL7zEfrS59nO5eqaFvUNxkfEHC3BRjyZY2ApRcoSg=) 14: 3137382e3234382e37322e302f32342d3234203d3e20313531383732.roa (hash: 562I7wk8pDZNtdMzcEoC9Q7KQUjR9i2cYfXfdpaRXg8=) 15: 3137382e3234382e37352e302f32342d3234203d3e20313939303538.roa (hash: 0IUSu+qptfP2e6dJnAny9tG4Cb2xcvVtmtBD0i4piak=) 16: 3139352e34322e3131322e302f32332d3233203d3e203438343335.roa (hash: LnJ/05IgVINSSDv4l3ajCKuAD4mr9PXKyWCylRmwux0=) 17: 3139352e34322e3131332e302f32342d3234203d3e203438343335.roa (hash: aYbyRGpjGAy7pzSZSZu9mIeZ8V/FjY5/eUQvPy2nJ/Y=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.crl rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.mft rsync://rpki.ripe.net/repository/DEFAULT/vgu3iGnNsq0MlxpqhYowIT6uxH0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:54:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:76:98:27:98:4b:4f:dc:74:6e:7a:e6:6e:f7:67:b5:47:c0:19:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be0bb78869cdb2ad0c971a6a858a30213eaec47d Validity Not Before: Dec 6 07:36:17 2025 GMT Not After : Dec 7 08:54:17 2025 GMT Subject: CN=970F962295BA3505568C528C619726E844B7A519 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:91:ad:24:76:6a:7a:fb:4c:35:4b:30:3e:37: 44:6d:09:86:bc:14:88:a2:8c:b4:94:b7:32:c8:c8: b9:ce:54:23:9c:57:27:33:6c:1d:06:5b:06:42:ef: ce:5a:8e:25:c0:0a:ef:36:48:3a:04:84:20:1f:c0: 9e:d4:e4:1a:2b:cf:94:58:c0:00:8a:13:15:60:22: d6:ce:ce:26:1d:02:d2:6a:87:6e:4b:d2:58:89:85: f4:71:49:52:68:02:44:f4:81:36:58:0a:93:11:bc: 14:9d:ea:df:de:f6:36:3a:46:58:b2:2d:8d:7d:f4: 46:20:dc:fe:3a:55:0c:2f:b4:b7:aa:ed:19:d1:5d: 21:69:a5:64:3c:55:96:0f:9c:49:6d:d3:83:ab:36: ed:d1:0b:d5:3d:75:0a:1f:e9:05:35:b4:43:bb:67: cd:56:e2:9e:ba:a4:36:58:14:3d:fc:d4:a5:51:de: 72:81:8c:d9:5d:69:81:02:54:c8:8c:cf:53:d6:95: 4b:37:ac:eb:2b:04:c9:e3:5b:8a:63:14:31:d2:77: ad:f0:90:8a:56:72:47:ce:c4:1e:bb:72:ec:88:25: 74:53:80:24:50:46:62:50:ee:cd:1a:b4:de:5e:9e: c3:fa:85:6d:41:80:de:e8:2b:eb:e8:64:35:2f:00: 47:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:0F:96:22:95:BA:35:05:56:8C:52:8C:61:97:26:E8:44:B7:A5:19 X509v3 Authority Key Identifier: keyid:BE:0B:B7:88:69:CD:B2:AD:0C:97:1A:6A:85:8A:30:21:3E:AE:C4:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vgu3iGnNsq0MlxpqhYowIT6uxH0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:e6:ae:77:bb:2c:b9:05:31:84:d6:cd:bf:21:43:16:71:49: 65:32:68:46:83:53:2c:1d:40:df:40:c9:02:da:ed:27:e2:09: 68:e7:70:18:c4:47:5a:1e:9f:e3:9b:57:43:84:ed:fe:2e:dc: 28:c5:6e:09:dd:86:21:80:4d:6f:bb:7a:6a:85:71:87:12:4d: b0:83:57:0c:e4:d3:c7:d0:f5:95:76:13:cb:76:28:d2:ab:e3: 75:1e:b5:93:8a:5d:03:31:be:2b:f8:0c:27:e7:7b:4d:8b:f7: 86:81:69:da:e0:0e:75:06:bd:1c:e8:55:3f:a4:8b:1b:d9:f2: 66:96:f6:05:a3:a7:d7:94:72:02:0c:3d:0b:b6:de:50:8e:2b: 2f:b1:cb:c5:60:84:c2:12:7c:7d:31:93:4f:b1:71:6f:6c:bb: dd:70:f6:14:a2:d5:d6:df:5f:3b:8e:6a:62:6e:01:0b:81:6f: 89:b3:aa:1a:39:82:4d:d8:d4:65:82:d4:52:fb:6e:25:ff:a9: 76:cd:f2:c3:28:ea:3b:12:74:f4:62:71:91:a6:3a:fd:a3:66: 13:22:33:66:67:0f:9e:08:cf:05:54:93:3c:b7:5c:84:29:d7: b7:12:a4:92:7e:31:ae:8d:c6:7e:a5:6d:04:be:d3:9d:c0:6b: 3b:d1:9b:56 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUVHaYJ5hLT9x0bnrmbvdntUfAGSgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYmUwYmI3ODg2OWNkYjJhZDBjOTcxYTZhODU4YTMwMjEz ZWFlYzQ3ZDAeFw0yNTEyMDYwNzM2MTdaFw0yNTEyMDcwODU0MTdaMDMxMTAvBgNV BAMTKDk3MEY5NjIyOTVCQTM1MDU1NjhDNTI4QzYxOTcyNkU4NDRCN0E1MTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPka0kdmp6+0w1SzA+N0RtCYa8 FIiijLSUtzLIyLnOVCOcVyczbB0GWwZC785ajiXACu82SDoEhCAfwJ7U5Borz5RY wACKExVgItbOziYdAtJqh25L0liJhfRxSVJoAkT0gTZYCpMRvBSd6t/e9jY6Rliy LY199EYg3P46VQwvtLeq7RnRXSFppWQ8VZYPnElt04OrNu3RC9U9dQof6QU1tEO7 Z81W4p66pDZYFD381KVR3nKBjNldaYECVMiMz1PWlUs3rOsrBMnjW4pjFDHSd63w kIpWckfOxB67cuyIJXRTgCRQRmJQ7s0atN5ensP6hW1BgN7oK+voZDUvAEcvAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUlw+WIpW6NQVWjFKMYZcm6ES3pRkwHwYDVR0j BBgwFoAUvgu3iGnNsq0MlxpqhYowIT6uxH0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWMxNDMzODctZjAxMy00OTIyLTgzOGUtZTE4ODY0YmUx ZTRhLzAvQkUwQkI3ODg2OUNEQjJBRDBDOTcxQTZBODU4QTMwMjEzRUFFQzQ3RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3ZndTNpR25Oc3EwTWx4cHFoWW93SVQ2 dXhIMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYzE0MzM4Ny1m MDEzLTQ5MjItODM4ZS1lMTg4NjRiZTFlNGEvMC9CRTBCQjc4ODY5Q0RCMkFEMEM5 NzFBNkE4NThBMzAyMTNFQUVDNDdELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ+aud7ssuQUxhNbNvyFD FnFJZTJoRoNTLB1A30DJAtrtJ+IJaOdwGMRHWh6f45tXQ4Tt/i7cKMVuCd2GIYBN b7t6aoVxhxJNsINXDOTTx9D1lXYTy3Yo0qvjdR61k4pdAzG+K/gMJ+d7TYv3hoFp 2uAOdQa9HOhVP6SLG9nyZpb2BaOn15RyAgw9C7beUI4rL7HLxWCEwhJ8fTGTT7Fx b2y73XD2FKLV1t9fO45qYm4BC4FvibOqGjmCTdjUZYLUUvtuJf+pds3ywyjqOxJ0 9GJxkaY6/aNmEyIzZmcPngjPBVSTPLdchCnXtxKkkn4xro3GfqVtBL7TncBrO9Gb Vg== -----END CERTIFICATE-----Generated at Sat Dec 6 21:39:52 2025 by rpki-client