This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c5836e60-6a92-47ef-9b9b-92a84d6d35ba/1/E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.mft File: E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.mft (raw, json) Hash identifier: RhQW5MU5D244g13VsEwNWB+GjRJmocCLbvLVMsyz3Hg= Subject key identifier: 96:6D:C0:CB:B6:34:E0:B2:6D:F1:30:FA:3D:88:BC:61:C7:0E:DE:A4 Authority key identifier: E8:9F:91:5D:86:BB:9F:13:D0:F2:29:CA:78:CD:6D:9F:3E:AB:CF:7C Certificate issuer: /CN=E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C Certificate serial: 70FC14AEBF38CD3BB3AAACE0B00893428759C6B9 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c5836e60-6a92-47ef-9b9b-92a84d6d35ba/1/E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.mft Manifest number: B1 Signing time: Sat 06 Dec 2025 11:35:47 +0000 Manifest this update: Sat 06 Dec 2025 11:30:47 +0000 Manifest next update: Sun 07 Dec 2025 13:37:47 +0000 Files and hashes: 1: E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.crl (hash: 5L5TnC78xxGxCoXPS0oWvtBB4KTJP779C/pa9jQeuOo=) 2: 326131343a373538313a333936323a3a2f34382d3634203d3e20313939373633.roa (hash: oCjl7TQd0xhHJ9B8MSi48PHfMmMZri62JgNd0y5lz+I=) 3: 326131343a373538313a333937373a3a2f34382d3634203d3e20313939373633.roa (hash: 6W8xvuJxWbwP3DdLZ6e8Sa+pGsBO2lzU710UJC28MHg=) 4: 326131343a373538313a333936363a3a2f34382d3634203d3e20313939373633.roa (hash: +BDNAKrmKMibTT2xQwMz+K+qOmE3P6UuU3BvjMVQ0iI=) 5: 326131343a373538313a333966663a3a2f34382d3634203d3e20313939373633.roa (hash: aCq/jKA1GGay4DL6ZU284taMNq3/9u17cmIYZEHZP9Y=) 6: 326131343a373538313a333936313a3a2f34382d3634203d3e20313939373633.roa (hash: V25LiWzxXAuXeQVJTbroIsiNYHCj/akr9IIXebvCE7Q=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c5836e60-6a92-47ef-9b9b-92a84d6d35ba/1/E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.crl rsync://rsync.paas.rpki.ripe.net/repository/c5836e60-6a92-47ef-9b9b-92a84d6d35ba/1/E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:45:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:fc:14:ae:bf:38:cd:3b:b3:aa:ac:e0:b0:08:93:42:87:59:c6:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C Validity Not Before: Dec 6 11:30:47 2025 GMT Not After : Dec 7 13:37:47 2025 GMT Subject: CN=966DC0CBB634E0B26DF130FA3D88BC61C70EDEA4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:8b:05:62:55:0a:d8:29:53:57:51:96:9f:e6: c7:ac:a3:46:74:57:9f:cb:16:64:a8:ae:bc:3d:4c: 2c:0a:09:73:32:1b:b7:39:ce:72:ab:c4:e6:6b:ea: 14:a8:a7:3f:46:f1:bf:3a:aa:8c:3d:20:68:19:fd: 4e:df:77:b8:dd:d9:eb:9f:ba:15:d4:da:98:2e:99: f7:2b:dd:db:4a:2c:3a:6b:1c:c3:ef:4d:db:0d:40: 12:3a:87:bb:9d:25:cb:75:cb:6d:6e:c4:88:2f:cf: 34:d0:af:ab:ce:a3:df:df:48:cb:cd:4a:37:b3:b8: 1a:98:a8:0d:c9:f1:d5:be:28:29:0a:77:a3:39:fc: f5:98:9a:42:40:b3:fd:4c:35:54:2f:05:03:4e:e1: 93:d7:2a:90:e1:54:cc:d5:93:2e:f5:8b:f5:3d:38: 73:fd:f4:f9:f7:bc:79:83:6e:71:63:da:4f:46:16: 81:28:a3:6b:f8:7a:81:7c:0d:2b:fb:84:e9:2a:f6: 8b:a1:d9:49:2a:aa:58:00:7b:23:58:68:94:b6:38: 70:d1:6a:e9:64:d4:cb:ff:d8:3f:7d:75:d1:69:1d: 4e:4a:7c:d9:13:58:fb:b7:53:de:da:0a:80:f4:f7: c5:72:3a:2f:d4:ce:4c:57:5a:2f:5d:64:f0:e4:b2: c1:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:6D:C0:CB:B6:34:E0:B2:6D:F1:30:FA:3D:88:BC:61:C7:0E:DE:A4 X509v3 Authority Key Identifier: keyid:E8:9F:91:5D:86:BB:9F:13:D0:F2:29:CA:78:CD:6D:9F:3E:AB:CF:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c5836e60-6a92-47ef-9b9b-92a84d6d35ba/1/E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c5836e60-6a92-47ef-9b9b-92a84d6d35ba/1/E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:3b:db:95:2d:53:08:78:d4:2f:be:d4:5b:8c:00:be:a5:18: fd:0f:66:a2:34:fa:22:6f:60:01:f7:2e:b0:ed:72:6a:0b:ad: da:5c:53:40:f5:a7:35:7e:54:97:68:30:da:19:9c:c2:4f:09: f6:ad:d1:63:b2:8f:f3:c4:18:bb:7a:99:51:d6:b6:9c:36:dc: 8c:1a:92:31:ee:1c:58:24:a6:3c:52:c6:96:32:88:64:ce:3a: 34:f7:59:48:ee:b1:70:ad:56:35:e7:e5:62:e5:ff:4d:6a:7e: 2b:1b:aa:e9:5a:da:32:01:56:6e:be:10:bb:63:74:ac:21:5a: a6:13:44:65:c5:96:5b:b5:5b:fe:be:f3:0d:0b:0f:46:8f:a1: 4d:34:55:b2:3e:a6:92:9d:6e:a4:51:ee:ad:ff:57:49:cd:be: bd:0c:22:8e:ea:2d:30:5d:0e:8d:96:74:20:d9:72:d4:c9:cc: f9:b5:f2:1e:94:ad:62:e0:8a:73:34:ab:fa:4b:af:48:dd:e9: 97:c7:48:3d:93:4f:ef:44:a0:c3:8e:57:40:45:26:a3:00:78: 60:7e:cd:06:c9:dd:97:d5:24:76:a9:3f:fa:10:b4:fc:de:19: 65:3e:44:98:78:0a:c4:95:c8:62:0d:97:c3:25:ce:65:e9:5b: 15:c4:d4:0d -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUcPwUrr84zTuzqqzgsAiTQodZxrkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTg5RjkxNUQ4NkJCOUYxM0QwRjIyOUNBNzhDRDZEOUYz RUFCQ0Y3QzAeFw0yNTEyMDYxMTMwNDdaFw0yNTEyMDcxMzM3NDdaMDMxMTAvBgNV BAMTKDk2NkRDMENCQjYzNEUwQjI2REYxMzBGQTNEODhCQzYxQzcwRURFQTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6iwViVQrYKVNXUZaf5seso0Z0 V5/LFmSorrw9TCwKCXMyG7c5znKrxOZr6hSopz9G8b86qow9IGgZ/U7fd7jd2euf uhXU2pgumfcr3dtKLDprHMPvTdsNQBI6h7udJct1y21uxIgvzzTQr6vOo9/fSMvN SjezuBqYqA3J8dW+KCkKd6M5/PWYmkJAs/1MNVQvBQNO4ZPXKpDhVMzVky71i/U9 OHP99Pn3vHmDbnFj2k9GFoEoo2v4eoF8DSv7hOkq9ouh2UkqqlgAeyNYaJS2OHDR aulk1Mv/2D99ddFpHU5KfNkTWPu3U97aCoD098VyOi/UzkxXWi9dZPDkssG/AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUlm3Ay7Y04LJt8TD6PYi8YccO3qQwHwYDVR0j BBgwFoAU6J+RXYa7nxPQ8inKeM1tnz6rz3wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzU4MzZlNjAtNmE5Mi00N2VmLTliOWItOTJhODRkNmQz NWJhLzEvRTg5RjkxNUQ4NkJCOUYxM0QwRjIyOUNBNzhDRDZEOUYzRUFCQ0Y3Qy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9FODlGOTE1RDg2QkI5RjEzRDBGMjI5Q0E3 OENENkQ5RjNFQUJDRjdDLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2M1ODM2ZTYwLTZhOTItNDdlZi05YjliLTkyYTg0ZDZkMzViYS8xL0U4OUY5MTVE ODZCQjlGMTNEMEYyMjlDQTc4Q0Q2RDlGM0VBQkNGN0MubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAAO9uV LVMIeNQvvtRbjAC+pRj9D2aiNPoib2AB9y6w7XJqC63aXFNA9ac1flSXaDDaGZzC Twn2rdFjso/zxBi7eplR1racNtyMGpIx7hxYJKY8UsaWMohkzjo091lI7rFwrVY1 5+Vi5f9Nan4rG6rpWtoyAVZuvhC7Y3SsIVqmE0RlxZZbtVv+vvMNCw9Gj6FNNFWy PqaSnW6kUe6t/1dJzb69DCKO6i0wXQ6NlnQg2XLUycz5tfIelK1i4IpzNKv6S69I 3emXx0g9k0/vRKDDjldARSajAHhgfs0Gyd2X1SR2qT/6ELT83hllPkSYeArElchi DZfDJc5l6VsVxNQN -----END CERTIFICATE-----Generated at Sat Dec 6 16:21:42 2025 by rpki-client