This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft File: 9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft (raw, json) Hash identifier: hCt7CFYn7W7eSdzYJuQKnOMpDRKT4ojuIiUIv65RXDo= Subject key identifier: 4C:A3:C1:F1:6B:71:2F:4B:95:22:3C:A2:73:76:FC:D6:1E:7D:CA:3C Authority key identifier: 9F:0D:24:C8:55:EE:E0:0F:E4:AB:F3:90:3C:6E:8F:CC:70:83:ED:4D Certificate issuer: /CN=9f0d24c855eee00fe4abf3903c6e8fcc7083ed4d Certificate serial: 2D7A984FC02271972E5F887B52EE09A50F427940 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nw0kyFXu4A_kq_OQPG6PzHCD7U0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft Manifest number: 04DF Signing time: Sat 06 Dec 2025 11:01:17 +0000 Manifest this update: Sat 06 Dec 2025 10:56:17 +0000 Manifest next update: Sun 07 Dec 2025 11:09:17 +0000 Files and hashes: 1: 3139352e3138342e39322e302f32332d3234203d3e203631333137.roa (hash: qGNft1uCzkGwuPJH7iDQ4xUhWrhNnduWexIhT+DgvI8=) 2: 36322e3131322e3132382e302f32302d3234203d3e20313532313739.roa (hash: GCjCQc0vdu8E+NZi5emgx2vW0PKbTzGL5UYc+2R4voE=) 3: 3139332e33372e3233362e302f32342d3234203d3e203239383032.roa (hash: NPxcG44HSvUhEjS0S2kkms3rMNVlot0JsRdIfylKbjg=) 4: 326130303a316466303a3a2f33322d3332203d3e2035343634.roa (hash: hY/iIpaGanxmxatebFYi3ijTkZjHjUc/Iwjsijc0S+E=) 5: 3139332e33372e3233362e302f32342d3234203d3e203631333137.roa (hash: qxlkfW/nLMV9I5WoI6HQ89q00naILT20Rguml63Zf0A=) 6: 3139342e302e3232392e302f32342d3234203d3e2035343634.roa (hash: oQj2no095+LyjZGzWOfw+sSJOW/7fRxpgUOPswu5nqM=) 7: 36322e3131322e3134342e302f32302d3230203d3e203539363432.roa (hash: hNXCqst3dZC+Dp3skkO26cOwh1zWEwx2n+JeuoU1IgU=) 8: 9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.crl (hash: bkZMplv9HIh5dJ8uyDU+JT+aWVaOD7oSGJVTPnKU+TI=) 9: 323030313a3637633a3333633a3a2f34382d3438203d3e2035343634.roa (hash: DuCHe81tO8TVOKBTNFQCS5fRuYDjbGZfxshPpJZXNzc=) 10: 36322e3131322e3132382e302f32302d3234203d3e20323130353432.roa (hash: W95e9h2ypKBcN51G9gRI82wozQL8rXCLvGb2mHpv6bk=) 11: 36322e3131322e3132382e302f32302d3234203d3e20313338393937.roa (hash: X+PLwzsRRQMgaM/TWKrSkseThdECGWKV7QbjrMlPn80=) 12: 3138352e322e3136322e302f32332d3234203d3e203531383437.roa (hash: breC5Ek41qDRBKS2wQZurpJCqHLgY68sHvSK/et8bfI=) 13: 3138352e322e3136322e302f32332d3234203d3e20323135323639.roa (hash: sEO5Q+LtE+juFIMx1yqrmSkIjuvpVFxY8R1aiQqtGzs=) 14: 3138352e322e3136322e302f32332d3234203d3e20323136303433.roa (hash: GiYpmPsNeJIM+tOFpoqBAp0iPcUDNpER8nLACmla4d4=) 15: 36322e3131322e3134342e302f32302d3234203d3e203230333236.roa (hash: PvFG9BZ+YdbKPRfUC/0dM3w7V209DRWmI/bk8VoBnFU=) 16: 3139352e3138342e39322e302f32332d3233203d3e2035343634.roa (hash: OKc3uZvr3kmY38TGv/j5cCd/d8TD6IBU2hGWJY9u+K0=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.crl rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft rsync://rpki.ripe.net/repository/DEFAULT/nw0kyFXu4A_kq_OQPG6PzHCD7U0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:09:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:7a:98:4f:c0:22:71:97:2e:5f:88:7b:52:ee:09:a5:0f:42:79:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f0d24c855eee00fe4abf3903c6e8fcc7083ed4d Validity Not Before: Dec 6 10:56:17 2025 GMT Not After : Dec 7 11:09:17 2025 GMT Subject: CN=4CA3C1F16B712F4B95223CA27376FCD61E7DCA3C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:5a:88:9f:31:5f:fb:f3:e1:33:18:fa:47:57: de:d8:13:ee:fe:8d:66:78:0e:b0:4b:b3:64:91:52: 49:96:c5:48:2d:00:3e:a3:9c:62:f1:bc:df:60:33: bd:e2:b8:27:bc:35:a7:72:18:c2:7d:cb:4c:a5:1a: d4:fe:a0:f2:36:fb:bc:d8:4c:0a:46:22:b0:2c:57: d9:97:18:36:8e:2d:d2:8c:11:e0:8d:d8:be:ac:53: 1e:ea:60:05:e1:2f:b4:8c:2c:47:7d:56:f7:0b:25: c7:bd:ca:c3:db:9d:be:8e:30:e0:31:7f:01:22:97: 2d:6c:2e:d3:cb:fc:9f:e4:23:91:ba:b2:f5:ad:7c: 7f:00:b3:d6:b6:68:a7:64:b9:34:d6:85:a3:d9:d2: 8f:f8:01:03:37:b9:48:f2:83:9a:af:08:6d:59:29: df:1b:43:e7:bf:16:2b:15:f2:aa:97:79:1d:0a:ad: d6:2a:a8:2e:89:7a:ed:be:f1:91:d3:0d:e7:2a:ac: 38:d8:34:e6:90:72:62:64:51:c1:58:84:80:c7:13: c4:6a:6d:ba:6a:18:1e:52:aa:07:f6:ec:2c:c4:ba: cc:17:fc:88:18:15:f4:73:88:df:83:6c:79:70:b9: 15:fe:73:a6:6a:b2:02:01:b6:9e:95:99:99:8d:3b: 4d:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:A3:C1:F1:6B:71:2F:4B:95:22:3C:A2:73:76:FC:D6:1E:7D:CA:3C X509v3 Authority Key Identifier: keyid:9F:0D:24:C8:55:EE:E0:0F:E4:AB:F3:90:3C:6E:8F:CC:70:83:ED:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nw0kyFXu4A_kq_OQPG6PzHCD7U0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:49:53:15:0d:9e:34:d9:57:4f:99:ad:df:b3:91:aa:cd:6a: cd:8f:5d:bd:d8:49:a3:ea:3e:63:03:53:65:41:83:a9:bd:42: bb:4d:17:c1:09:f9:f0:8b:b2:b1:7a:72:03:f3:01:f0:62:c7: 8b:b2:cd:d0:ca:c4:4b:0b:16:b4:7a:46:5d:85:78:cc:57:a7: 75:58:4c:c8:e7:e5:f8:d3:0a:3f:e4:84:fa:32:38:25:df:57: 65:9e:69:a5:58:31:d9:b9:30:06:c2:0e:b8:e2:9c:af:0b:e3: f4:35:41:e2:fe:e2:46:e7:8a:ff:f4:d9:9c:2e:f0:a0:36:6a: 9f:7b:a4:0c:c6:66:08:9d:16:98:08:b4:24:1d:52:03:82:90: c9:90:83:13:0c:79:74:67:c1:03:06:92:a8:54:bc:6f:7c:09: fd:db:9a:a3:a8:20:4f:48:2d:75:85:9e:d2:06:4f:94:d0:c7: ad:8d:a9:de:e7:b2:37:3f:6b:c2:e2:b6:c5:7f:a8:42:b1:d0: 41:17:44:14:fc:a2:01:9a:52:a1:4b:a6:e8:13:93:8d:84:5f: 56:7e:e6:fe:7d:75:89:fd:41:08:6b:14:3d:64:6d:ce:78:47: fa:f7:d7:b5:91:88:62:ca:b8:10:64:b9:5f:f5:97:d8:e8:f9: 14:ef:aa:44 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIULXqYT8AicZcuX4h7Uu4JpQ9CeUAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOWYwZDI0Yzg1NWVlZTAwZmU0YWJmMzkwM2M2ZThmY2M3 MDgzZWQ0ZDAeFw0yNTEyMDYxMDU2MTdaFw0yNTEyMDcxMTA5MTdaMDMxMTAvBgNV BAMTKDRDQTNDMUYxNkI3MTJGNEI5NTIyM0NBMjczNzZGQ0Q2MUU3RENBM0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCWoifMV/78+EzGPpHV97YE+7+ jWZ4DrBLs2SRUkmWxUgtAD6jnGLxvN9gM73iuCe8NadyGMJ9y0ylGtT+oPI2+7zY TApGIrAsV9mXGDaOLdKMEeCN2L6sUx7qYAXhL7SMLEd9VvcLJce9ysPbnb6OMOAx fwEily1sLtPL/J/kI5G6svWtfH8As9a2aKdkuTTWhaPZ0o/4AQM3uUjyg5qvCG1Z Kd8bQ+e/FisV8qqXeR0KrdYqqC6Jeu2+8ZHTDecqrDjYNOaQcmJkUcFYhIDHE8Rq bbpqGB5Sqgf27CzEuswX/IgYFfRziN+DbHlwuRX+c6ZqsgIBtp6VmZmNO03RAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUTKPB8WtxL0uVIjyic3b81h59yjwwHwYDVR0j BBgwFoAUnw0kyFXu4A/kq/OQPG6PzHCD7U0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWYzMTc2OGQtNDJiMS00ZTkyLWI4M2YtYmVmN2VlMDE3 ODEzLzAvOUYwRDI0Qzg1NUVFRTAwRkU0QUJGMzkwM0M2RThGQ0M3MDgzRUQ0RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL253MGt5Rlh1NEFfa3FfT1FQRzZQekhD RDdVMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hZjMxNzY4ZC00 MmIxLTRlOTItYjgzZi1iZWY3ZWUwMTc4MTMvMC85RjBEMjRDODU1RUVFMDBGRTRB QkYzOTAzQzZFOEZDQzcwODNFRDRELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcElTFQ2eNNlXT5mt37OR qs1qzY9dvdhJo+o+YwNTZUGDqb1Cu00XwQn58IuysXpyA/MB8GLHi7LN0MrESwsW tHpGXYV4zFendVhMyOfl+NMKP+SE+jI4Jd9XZZ5ppVgx2bkwBsIOuOKcrwvj9DVB 4v7iRueK//TZnC7woDZqn3ukDMZmCJ0WmAi0JB1SA4KQyZCDEwx5dGfBAwaSqFS8 b3wJ/duao6ggT0gtdYWe0gZPlNDHrY2p3ueyNz9rwuK2xX+oQrHQQRdEFPyiAZpS oUum6BOTjYRfVn7m/n11if1BCGsUPWRtznhH+vfXtZGIYsq4EGS5X/WX2Oj5FO+q RA== -----END CERTIFICATE-----Generated at Sat Dec 6 18:35:30 2025 by rpki-client