This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bd7c231e-a33c-4555-b42e-d02093849299/0/2E2674263AECD572673F87614919CA492C79FAEA.mft File: 2E2674263AECD572673F87614919CA492C79FAEA.mft (raw, json) Hash identifier: 3ZCXvM5dQwX6jMDjqlQY0LF0GDA9VyMJrJTV7jMOa/I= Subject key identifier: E2:41:74:C4:0F:93:9A:46:0D:A0:6B:44:6D:1D:80:3D:D3:4C:C8:7F Authority key identifier: 2E:26:74:26:3A:EC:D5:72:67:3F:87:61:49:19:CA:49:2C:79:FA:EA Certificate issuer: /CN=2e2674263aecd572673f87614919ca492c79faea Certificate serial: 4ACDF32A6620CF4CBC7AAF384247C800DD7ABAFB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LiZ0Jjrs1XJnP4dhSRnKSSx5-uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bd7c231e-a33c-4555-b42e-d02093849299/0/2E2674263AECD572673F87614919CA492C79FAEA.mft Manifest number: 01A5 Signing time: Fri 05 Dec 2025 21:46:17 +0000 Manifest this update: Fri 05 Dec 2025 21:41:17 +0000 Manifest next update: Sun 07 Dec 2025 00:15:17 +0000 Files and hashes: 1: 34352e36362e36302e302f32342d3234203d3e20333937363330.roa (hash: m0lx7gp/PL+dNLZxtVb3q5bMr/J2JBCQr1yWWiLZaNg=) 2: 34352e36362e36322e302f32342d3234203d3e20323131323237.roa (hash: imRIoujslgfIw1o5CZvn1r7w9Uct08AIqiMVjfiL8o4=) 3: 34352e36362e36332e302f32342d3234203d3e20323134343332.roa (hash: bZNP+wA40wAyACtbN5qUmpIVm/KoebsR0HiX5BeNfUM=) 4: 2E2674263AECD572673F87614919CA492C79FAEA.crl (hash: 1xcHf84D+UVxHaSPIFNydgAwmRhWmLR+BTAtNDMssN4=) 5: 34352e36362e36302e302f32342d3234203d3e203534323532.roa (hash: 07DX+W8TeroyGa5hcwYk2V3rpVrx11S+EMaM/klvGiM=) 6: 34352e36362e36302e302f32342d3234203d3e203634323637.roa (hash: ZF32PAG53xWynbk01utLLBmDRxOU851zkR0rreW86uY=) 7: 34352e36362e36312e302f32342d3234203d3e20323733323432.roa (hash: tU7tyCca1tIOx1hnSKjuKCDiTN546CQQQvHB6q/i7qk=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bd7c231e-a33c-4555-b42e-d02093849299/0/2E2674263AECD572673F87614919CA492C79FAEA.crl rsync://rsync.paas.rpki.ripe.net/repository/bd7c231e-a33c-4555-b42e-d02093849299/0/2E2674263AECD572673F87614919CA492C79FAEA.mft rsync://rpki.ripe.net/repository/DEFAULT/LiZ0Jjrs1XJnP4dhSRnKSSx5-uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 00:15:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:cd:f3:2a:66:20:cf:4c:bc:7a:af:38:42:47:c8:00:dd:7a:ba:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e2674263aecd572673f87614919ca492c79faea Validity Not Before: Dec 5 21:41:17 2025 GMT Not After : Dec 7 00:15:17 2025 GMT Subject: CN=E24174C40F939A460DA06B446D1D803DD34CC87F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:1f:fe:d3:11:e3:93:4e:3c:83:00:80:b8:6e: 6c:6e:f4:d0:c6:ff:d3:2b:66:79:d6:aa:a9:1b:12: a4:65:34:7a:bb:4b:03:83:ca:09:3b:5e:ea:08:41: 9d:5c:4f:89:0e:7a:25:1c:eb:8f:40:0b:9e:27:28: ac:00:13:5a:72:9c:c6:50:88:ca:e8:dc:c1:a5:fe: be:b6:c5:b6:78:da:7f:27:04:f0:04:c0:98:2d:b0: fc:de:f7:76:6c:3a:5d:41:d7:61:3b:ee:c9:fa:40: 5b:a8:f1:59:46:d6:83:7a:7b:4a:d5:21:00:ca:55: 70:cd:9e:0b:88:52:b8:82:88:ce:4a:1f:d7:f5:c8: 0e:43:10:fd:9e:d4:93:09:ad:85:f6:da:11:d7:a9: 2d:3e:b5:e7:0c:9f:dd:5d:ca:d8:a5:1b:6a:55:6c: 8e:f7:45:5d:5d:14:a3:45:9a:f6:bf:45:e9:57:cd: 98:f3:d0:49:bd:08:c7:82:a9:04:0e:01:56:ef:5f: 9e:6b:6c:66:a2:da:06:aa:1c:fb:50:12:ca:0e:81: 99:62:2b:c9:32:e4:d8:6b:d2:b6:1b:42:15:24:5a: 03:4b:f3:1f:7d:49:8d:a7:51:7e:5c:ec:59:d7:0e: fb:8f:97:ce:cd:64:2a:10:88:59:cd:4a:79:08:eb: dc:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:41:74:C4:0F:93:9A:46:0D:A0:6B:44:6D:1D:80:3D:D3:4C:C8:7F X509v3 Authority Key Identifier: keyid:2E:26:74:26:3A:EC:D5:72:67:3F:87:61:49:19:CA:49:2C:79:FA:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/bd7c231e-a33c-4555-b42e-d02093849299/0/2E2674263AECD572673F87614919CA492C79FAEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LiZ0Jjrs1XJnP4dhSRnKSSx5-uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bd7c231e-a33c-4555-b42e-d02093849299/0/2E2674263AECD572673F87614919CA492C79FAEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cd:d2:e9:d2:36:46:a8:46:e8:97:5c:5a:dc:09:12:43:a4:08: 6f:e4:87:94:42:85:ba:f4:e0:33:8b:23:60:51:41:1d:96:1c: 0b:b9:6d:56:a8:00:56:ff:d0:f5:0c:15:78:55:48:c9:24:7b: 4f:23:d9:92:96:be:be:54:f6:73:3d:b2:b1:b7:68:b1:03:6f: 6d:18:94:38:99:99:e8:b6:96:4e:f5:74:77:e6:b6:48:bf:f6: d2:f2:b7:17:8c:c5:21:c6:af:51:7e:41:4e:a1:27:90:65:f4: d0:9d:88:e6:9b:08:d4:e1:5b:25:85:24:ff:a6:7a:14:fd:c3: ce:d1:36:42:66:ae:83:78:11:f0:e6:87:9b:a1:72:9d:e1:55: d7:de:bb:8b:61:ef:21:6c:de:5f:64:a7:7c:54:f9:b5:07:03: 60:5e:1e:be:67:1f:18:fe:82:a7:f7:f7:cf:05:00:3d:6d:45: e3:f5:d0:ad:6d:14:19:5e:22:f6:6a:34:f4:a0:66:71:22:e1: 2a:1d:b4:07:37:1c:65:0c:82:d5:12:19:46:5d:d7:b6:e2:cb: d7:96:e2:f5:2e:bc:12:d0:80:2c:f5:21:5a:ec:b9:ac:62:26: dd:ea:c7:b5:71:19:ad:98:0a:ec:10:c4:59:90:d1:da:6c:df: 40:e7:aa:fb -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUSs3zKmYgz0y8eq84QkfIAN16uvswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMmUyNjc0MjYzYWVjZDU3MjY3M2Y4NzYxNDkxOWNhNDky Yzc5ZmFlYTAeFw0yNTEyMDUyMTQxMTdaFw0yNTEyMDcwMDE1MTdaMDMxMTAvBgNV BAMTKEUyNDE3NEM0MEY5MzlBNDYwREEwNkI0NDZEMUQ4MDNERDM0Q0M4N0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChH/7TEeOTTjyDAIC4bmxu9NDG /9MrZnnWqqkbEqRlNHq7SwODygk7XuoIQZ1cT4kOeiUc649AC54nKKwAE1pynMZQ iMro3MGl/r62xbZ42n8nBPAEwJgtsPze93ZsOl1B12E77sn6QFuo8VlG1oN6e0rV IQDKVXDNnguIUriCiM5KH9f1yA5DEP2e1JMJrYX22hHXqS0+tecMn91dytilG2pV bI73RV1dFKNFmva/RelXzZjz0Em9CMeCqQQOAVbvX55rbGai2gaqHPtQEsoOgZli K8ky5Nhr0rYbQhUkWgNL8x99SY2nUX5c7FnXDvuPl87NZCoQiFnNSnkI69yvAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU4kF0xA+TmkYNoGtEbR2APdNMyH8wHwYDVR0j BBgwFoAULiZ0Jjrs1XJnP4dhSRnKSSx5+uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYmQ3YzIzMWUtYTMzYy00NTU1LWI0MmUtZDAyMDkzODQ5 Mjk5LzAvMkUyNjc0MjYzQUVDRDU3MjY3M0Y4NzYxNDkxOUNBNDkyQzc5RkFFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0xpWjBKanJzMVhKblA0ZGhTUm5LU1N4 NS11by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iZDdjMjMxZS1h MzNjLTQ1NTUtYjQyZS1kMDIwOTM4NDkyOTkvMC8yRTI2NzQyNjNBRUNENTcyNjcz Rjg3NjE0OTE5Q0E0OTJDNzlGQUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzdLp0jZGqEbol1xa3AkS Q6QIb+SHlEKFuvTgM4sjYFFBHZYcC7ltVqgAVv/Q9QwVeFVIySR7TyPZkpa+vlT2 cz2ysbdosQNvbRiUOJmZ6LaWTvV0d+a2SL/20vK3F4zFIcavUX5BTqEnkGX00J2I 5psI1OFbJYUk/6Z6FP3DztE2Qmaug3gR8OaHm6FyneFV1967i2HvIWzeX2SnfFT5 tQcDYF4evmcfGP6Cp/f3zwUAPW1F4/XQrW0UGV4i9mo09KBmcSLhKh20BzccZQyC 1RIZRl3XtuLL15bi9S68EtCALPUhWuy5rGIm3erHtXEZrZgK7BDEWZDR2mzfQOeq +w== -----END CERTIFICATE-----Generated at Sat Dec 6 16:02:45 2025 by rpki-client