This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.mft
File: CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.mft (raw, json)
Hash identifier: KgDjDVYpSkrOq4EdJ27lEIo5v7isQfUoHsuzI+l6jEM=
Subject key identifier: 6A:75:97:11:B3:71:64:87:5C:11:A3:B2:F9:28:58:1C:64:4E:02:53
Authority key identifier: CB:29:A7:76:69:DF:5A:7A:5C:B5:06:D8:39:EE:8A:A4:33:7C:CA:AC
Certificate issuer: /CN=cb29a77669df5a7a5cb506d839ee8aa4337ccaac
Certificate serial: 13580911773558713CD092A51E7057AB14EE38BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yymndmnfWnpctQbYOe6KpDN8yqw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.mft
Manifest number: 015D
Signing time: Sat 06 Dec 2025 00:16:17 +0000
Manifest this update: Sat 06 Dec 2025 00:11:17 +0000
Manifest next update: Sun 07 Dec 2025 02:53:17 +0000
Files and hashes: 1: 3139342e3132342e3233342e302f32342d3234203d3e20343031383338.roa (hash: dg4srvpWF3uIRgfQMdk/wAV5BokR1veRJ6lDUvN1tY0=)
2: 326130663a336363343a3a2f33322d3332203d3e20323037393336.roa (hash: sUFXVk5mJuzGXi+txvF0jHfWX/7COhdmW+wdhnGLLbA=)
3: 3139342e3132342e3233342e302f32342d3234203d3e203534333339.roa (hash: wdUsagydvVBIUao6PJHWRop4oPMEKXc9pJyNsG4SW9o=)
4: 326130663a336363313a3a2f33322d3332203d3e20323037393336.roa (hash: 4eRihxuyWrFmyrmWNHP+q80BiQuGj/+XTMKJH0kDcVI=)
5: 3139342e3132342e3233372e302f32342d3234203d3e203539383133.roa (hash: Wt7cVymDfWBwMzR8hqsJLmmyo1G55vHli1MG8ova8P4=)
6: 326130663a336363363a3a2f33322d3332203d3e203630373335.roa (hash: Bvg0bczZRvr0hNeXj13n0Q8N1O34FXLeiihKmXvd96c=)
7: 326130663a336363323a3a2f33322d3332203d3e20323037393336.roa (hash: bLMKUTu2LDh7TH4JEFo2TwGKCx3JiqqNy6hRd14etMM=)
8: 326130663a336363333a3a2f33362d3336203d3e203630373335.roa (hash: qgpa17rXBGEZyX0zTURKp2TS7HA9WA0LAdj3r9yq+jg=)
9: 326130663a336363353a3a2f33322d3332203d3e20323037393336.roa (hash: yq+hWHhfyocRCOJbnYGyzdHlkfHxXD4gPxuVgEPCc0g=)
10: 326130663a336363333a323030303a3a2f33362d3336203d3e203630373335.roa (hash: hZUNrJfyUHgUntGAqdSVlBaE4wglKTi9y0zmmly1bMY=)
11: 326130663a336363373a3a2f33322d3332203d3e203539383133.roa (hash: 0XA7loK9zcLZ4LH8gJRLIhKhFochpbrC40dXD0XEE/8=)
12: 326130663a336363303a3a2f33322d3332203d3e20323037393336.roa (hash: E+WPtm+HS9AVsakqcLrBjACoAm/NbChhrd4PG4s+X5o=)
13: 3139342e3132342e3233352e302f32342d3234203d3e20323037393336.roa (hash: MbX2Jo3+qNy9yJ51qumhhpSA5fjjpKXnL9+Ixdd7q/M=)
14: 3139342e3132342e3233362e302f32342d3234203d3e203630373335.roa (hash: lmVh0tkdqz2ZaktlfIJzzJLuyL6wItEcUEPI+PVNqdo=)
15: 3139342e3132342e3233342e302f32342d3234203d3e20393936.roa (hash: ZoxbCHQMtNZPfbUxrxLpOcXkuKUfw+Blft69mSm2oZk=)
16: 326130663a336363333a313030303a3a2f33362d3336203d3e203630373335.roa (hash: ad3eCylfdMfYW/Id31ooquQQLvZwumdWGj+lszfaEsA=)
17: CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.crl (hash: jcb+c27PX0HSncVE36Dj1KGf/ellJrKVK2mpgPo/nXg=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.crl
rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.mft
rsync://rpki.ripe.net/repository/DEFAULT/yymndmnfWnpctQbYOe6KpDN8yqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 02:53:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:58:09:11:77:35:58:71:3c:d0:92:a5:1e:70:57:ab:14:ee:38:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb29a77669df5a7a5cb506d839ee8aa4337ccaac
Validity
Not Before: Dec 6 00:11:17 2025 GMT
Not After : Dec 7 02:53:17 2025 GMT
Subject: CN=6A759711B37164875C11A3B2F928581C644E0253
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ea:61:f0:82:0b:bc:70:65:1c:82:3e:65:40:
57:fb:22:b4:8f:1a:72:2e:0e:b2:43:81:71:52:90:
bf:35:dd:b2:fb:42:18:ea:4a:ff:55:3d:28:77:e8:
42:5c:9b:5e:8c:83:10:aa:b1:da:f0:bb:9f:bc:12:
e0:41:7e:9b:a8:71:9e:77:ac:84:3d:ed:dd:70:13:
04:93:e5:2c:f5:cf:d9:ff:0b:db:75:d5:d0:db:69:
fc:85:5a:49:c9:d6:c0:90:fc:7d:d5:a3:f8:85:17:
3d:de:1b:bd:11:63:85:32:87:1f:b7:f3:76:44:de:
8d:7b:2c:e6:af:62:24:00:5c:29:f2:01:0c:a2:65:
9e:3c:55:06:98:db:d6:fc:f4:e7:11:f6:ac:28:58:
cf:af:78:2b:45:b3:57:3e:cd:65:81:de:eb:37:a4:
0f:fe:a1:d9:83:3e:74:8e:da:59:cc:20:93:02:e0:
8c:02:02:e5:b7:39:e4:e8:61:d9:8d:78:e9:5b:8b:
32:b2:96:cb:f4:67:7b:cd:0d:d9:a6:ad:b4:09:79:
58:22:4b:c6:58:42:2d:75:e0:b1:b6:37:c3:c6:e1:
ac:93:f2:f7:ab:91:8f:ee:4d:cf:ed:e1:dd:d6:eb:
29:75:a4:f8:f3:c0:0a:e1:f8:51:22:6c:ca:d5:cc:
49:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:75:97:11:B3:71:64:87:5C:11:A3:B2:F9:28:58:1C:64:4E:02:53
X509v3 Authority Key Identifier:
keyid:CB:29:A7:76:69:DF:5A:7A:5C:B5:06:D8:39:EE:8A:A4:33:7C:CA:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yymndmnfWnpctQbYOe6KpDN8yqw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:b7:57:5f:76:2b:33:e1:c8:7a:72:5a:45:0a:c9:7d:58:bb:
79:6e:df:88:7d:24:b2:d5:0a:fd:1a:11:77:ed:f7:19:f0:61:
e8:c9:6c:e6:6b:4e:43:2e:a8:33:ef:ab:b2:4c:5e:26:9a:ba:
1e:0f:4c:44:36:8d:19:08:f0:8e:21:f1:e6:ce:87:1d:85:2f:
65:9c:a6:a2:ff:02:ae:69:cd:f4:4d:21:41:bf:82:5b:e0:6f:
c5:9f:4e:67:75:d1:05:c4:cb:7d:38:fb:54:1e:96:96:fe:b4:
00:82:03:2d:e9:19:8c:05:e7:5a:7d:5f:f2:b1:cd:f9:8e:b3:
1a:6e:80:0f:3c:6d:b6:dc:4a:c8:5b:6f:a8:d0:c2:72:db:a7:
92:f6:a3:a6:65:75:a5:4c:92:53:de:b1:50:b7:3c:2f:93:6c:
71:de:64:b5:23:19:ad:8c:ad:f3:29:66:4f:18:dd:0f:7b:d1:
a9:ed:43:ac:66:54:37:02:3d:93:ab:a0:2b:84:00:51:ed:89:
c8:63:80:09:b4:1a:8b:31:25:e0:bc:b1:5e:34:20:05:a0:7a:
d8:96:ee:8f:f7:86:2a:4a:b7:92:61:17:9c:41:09:3b:63:35:
73:5a:dc:53:f4:49:59:08:7a:2c:d2:bb:30:b1:52:5f:29:ee:
e7:bf:aa:c5
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUE1gJEXc1WHE80JKlHnBXqxTuOLwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoY2IyOWE3NzY2OWRmNWE3YTVjYjUwNmQ4MzllZThhYTQz
MzdjY2FhYzAeFw0yNTEyMDYwMDExMTdaFw0yNTEyMDcwMjUzMTdaMDMxMTAvBgNV
BAMTKDZBNzU5NzExQjM3MTY0ODc1QzExQTNCMkY5Mjg1ODFDNjQ0RTAyNTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDT6mHwggu8cGUcgj5lQFf7IrSP
GnIuDrJDgXFSkL813bL7QhjqSv9VPSh36EJcm16MgxCqsdrwu5+8EuBBfpuocZ53
rIQ97d1wEwST5Sz1z9n/C9t11dDbafyFWknJ1sCQ/H3Vo/iFFz3eG70RY4Uyhx+3
83ZE3o17LOavYiQAXCnyAQyiZZ48VQaY29b89OcR9qwoWM+veCtFs1c+zWWB3us3
pA/+odmDPnSO2lnMIJMC4IwCAuW3OeToYdmNeOlbizKylsv0Z3vNDdmmrbQJeVgi
S8ZYQi114LG2N8PG4ayT8verkY/uTc/t4d3W6yl1pPjzwArh+FEibMrVzEmtAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUanWXEbNxZIdcEaOy+ShYHGROAlMwHwYDVR0j
BBgwFoAUyymndmnfWnpctQbYOe6KpDN8yqwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYmIyNWQwNjgtN2Y5Yy00YjBlLWE2OTUtMTc3OWI3ZDhm
MDZlLzAvQ0IyOUE3NzY2OURGNUE3QTVDQjUwNkQ4MzlFRThBQTQzMzdDQ0FBQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3l5bW5kbW5mV25wY3RRYllPZTZLcERO
OHlxdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iYjI1ZDA2OC03
ZjljLTRiMGUtYTY5NS0xNzc5YjdkOGYwNmUvMC9DQjI5QTc3NjY5REY1QTdBNUNC
NTA2RDgzOUVFOEFBNDMzN0NDQUFDLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVbdXX3YrM+HIenJaRQrJ
fVi7eW7fiH0kstUK/RoRd+33GfBh6Mls5mtOQy6oM++rskxeJpq6Hg9MRDaNGQjw
jiHx5s6HHYUvZZymov8CrmnN9E0hQb+CW+BvxZ9OZ3XRBcTLfTj7VB6Wlv60AIID
LekZjAXnWn1f8rHN+Y6zGm6ADzxtttxKyFtvqNDCctunkvajpmV1pUySU96xULc8
L5Nscd5ktSMZrYyt8ylmTxjdD3vRqe1DrGZUNwI9k6ugK4QAUe2JyGOACbQaizEl
4LyxXjQgBaB62Jbuj/eGKkq3kmEXnEEJO2M1c1rcU/RJWQh6LNK7MLFSXynu57+q
xQ==
-----END CERTIFICATE-----
Generated at Sat Dec 6 19:48:47 2025 by rpki-client