This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.mft File: 4C189E42F35C944D463D9EA6501F093EB62BA785.mft (raw, json) Hash identifier: bmXSYwVy5hcAdccsFVwanvWW38ayg3sywi2b9uLKArg= Subject key identifier: EA:BE:26:6B:B0:C9:93:ED:F0:12:82:A8:09:31:F4:FA:07:61:03:B3 Authority key identifier: 4C:18:9E:42:F3:5C:94:4D:46:3D:9E:A6:50:1F:09:3E:B6:2B:A7:85 Certificate issuer: /CN=4c189e42f35c944d463d9ea6501f093eb62ba785 Certificate serial: 20DEF7436093FBA572696F01D60FBBF949EAE939 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.mft Manifest number: 03DA Signing time: Fri 05 Dec 2025 20:06:16 +0000 Manifest this update: Fri 05 Dec 2025 20:01:16 +0000 Manifest next update: Sat 06 Dec 2025 23:17:16 +0000 Files and hashes: 1: 3138352e31332e3232372e302f32342d3234203d3e2039333034.roa (hash: K2jdp87W7OWk11i68RJYc6WUM+0fdCVTP9+PN22bU6U=) 2: 4C189E42F35C944D463D9EA6501F093EB62BA785.crl (hash: 75cxAK48TjweB54LtBGcG9T+WlP2hL6o3Nz74/ipUmo=) 3: 3135392e3235332e332e302f32342d3234203d3e203533333536.roa (hash: uV5gP669aq0NtuCXuZBm6wWsNYwP/024H/522nPjCx8=) 4: 3135392e3235332e302e302f32342d3234203d3e20323036323831.roa (hash: WedmFf2QIQuuVKf/1QK4DuIi+i1j87BtcRZVJGzgY68=) 5: 3135392e3235332e372e302f32342d3234203d3e20323134313433.roa (hash: 8/3XzRXXjmYpSthB/PqRmvioB+R4a98BuFhtWRNYmtk=) 6: 3135392e3235332e362e302f32342d3234203d3e20323134313433.roa (hash: ium02BtB+GfbIHn2YGUt7i7of/NJnXnez2EEtYL+duE=) 7: 3138352e31332e3232342e302f32342d3234203d3e20313335333931.roa (hash: Y4VGjNKxdM1kt8f9/kG9Dub6HzXbG7OXpVqySki/RW4=) 8: 3138352e31332e3232352e302f32342d3234203d3e20323132323338.roa (hash: aEdAeNisTHp0DrhGmu6wes4iqejlgHHMcCeDYK0A3FQ=) 9: 3138352e31332e3232362e302f32342d3234203d3e20313532313739.roa (hash: kbUfx2g7/W6xr6BcRBqigrahrWSKqlZaZ80tT5+SQUk=) 10: 3135392e3235332e342e302f32342d3234203d3e20323134313433.roa (hash: JO9eMRAwPS+hZf1UF8eYFlm1nYrsRkC7Oj1Lhed/bAU=) 11: 3135392e3235332e352e302f32342d3234203d3e203533333536.roa (hash: 9QDAlicDZU2dKA/slyHao02LhaPY7/2iCnESN6BbiqA=) 12: 3135392e3235332e322e302f32342d3234203d3e20323134313433.roa (hash: qmuf0vkLJtyYNBk6lONse3deUisFPtDCWrL9dDMaewk=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.crl rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.mft rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:17:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:de:f7:43:60:93:fb:a5:72:69:6f:01:d6:0f:bb:f9:49:ea:e9:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c189e42f35c944d463d9ea6501f093eb62ba785 Validity Not Before: Dec 5 20:01:16 2025 GMT Not After : Dec 6 23:17:16 2025 GMT Subject: CN=EABE266BB0C993EDF01282A80931F4FA076103B3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:79:fd:48:f2:de:0d:c1:3d:a3:bd:18:80:ce: 53:e0:78:e9:b0:af:88:0e:a7:c2:b0:ec:1b:bf:e0: e0:86:d8:e1:d6:59:2b:73:08:ba:c5:fe:54:fa:62: fe:f5:e0:67:3d:a5:b2:5a:18:92:89:bf:ef:90:1c: 9b:0d:7e:b3:ec:85:ff:3f:49:33:3b:1a:15:3f:54: 3d:d4:b7:40:6f:02:45:68:34:2c:86:93:51:8d:73: ea:87:0e:87:6b:d9:ce:10:30:45:4a:50:37:4c:5f: b9:d5:d1:39:b1:2a:f1:2e:b2:8b:4c:58:2b:28:93: 2d:d1:09:07:38:05:19:fb:c0:0d:b7:d1:07:6e:da: 6d:60:c8:24:68:eb:d9:5f:0d:4f:bf:04:90:f2:bb: 82:06:6f:46:c1:ed:70:c7:b7:d0:f6:a5:f9:70:89: 10:aa:4b:90:ed:46:25:8c:00:1a:a3:b5:2d:43:28: 6c:42:dc:32:fc:94:49:5f:18:bd:74:00:db:e3:cf: 01:b6:27:70:6e:37:a4:cf:44:c7:83:b7:ba:d5:c1: 8c:f2:d6:c0:89:75:65:1d:fd:ff:26:ce:77:df:e5: 62:4d:3f:cb:cd:b2:91:5d:e6:15:83:95:cf:9c:44: fd:30:63:bc:f6:72:53:ce:31:c0:f7:e5:6f:15:cf: 0f:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:BE:26:6B:B0:C9:93:ED:F0:12:82:A8:09:31:F4:FA:07:61:03:B3 X509v3 Authority Key Identifier: keyid:4C:18:9E:42:F3:5C:94:4D:46:3D:9E:A6:50:1F:09:3E:B6:2B:A7:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:5a:10:8f:4b:f3:48:bd:96:b8:b5:6b:86:21:ba:67:a2:c6: a8:5c:b9:ce:f6:48:6c:04:6e:9c:9c:84:03:37:8d:23:5f:ab: aa:a1:ab:dd:91:cc:bb:d7:a6:e6:11:10:6d:32:ce:11:9e:4a: 44:9f:14:1d:6a:34:40:2c:82:50:18:45:6a:a5:08:d7:2d:78: db:83:63:7b:db:7e:8f:7f:dd:e0:79:0c:59:c4:d4:13:e4:e4: fb:04:3e:60:55:4a:39:a6:4e:a9:3e:ff:95:e6:ae:50:4b:50: d6:1a:45:a6:ab:94:37:72:70:51:cd:f3:a6:75:fd:47:3c:78: bc:ba:32:10:7b:b6:8f:94:5d:4e:d6:43:97:a2:b1:d6:92:ae: d4:67:23:75:68:c1:a4:bc:3d:ce:9e:1e:00:6b:b8:d8:7c:fc: 07:6d:97:e5:e3:f5:4e:81:51:9b:d2:ae:a4:f4:d4:33:d6:52: e2:3d:d7:5e:52:30:39:77:15:7b:65:ee:c9:2f:2f:11:3d:ba: 33:6d:06:e5:a6:26:36:0d:08:4d:66:6f:5a:00:83:73:99:63: bd:66:2d:db:38:1c:70:f8:79:b6:8a:b3:90:b0:52:9c:da:a9: e3:7a:2a:fe:09:d7:1f:ef:5d:a7:93:65:a3:24:76:53:af:85: fe:7c:9e:8f -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUIN73Q2CT+6VyaW8B1g+7+Unq6TkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGMxODllNDJmMzVjOTQ0ZDQ2M2Q5ZWE2NTAxZjA5M2Vi NjJiYTc4NTAeFw0yNTEyMDUyMDAxMTZaFw0yNTEyMDYyMzE3MTZaMDMxMTAvBgNV BAMTKEVBQkUyNjZCQjBDOTkzRURGMDEyODJBODA5MzFGNEZBMDc2MTAzQjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAef1I8t4NwT2jvRiAzlPgeOmw r4gOp8Kw7Bu/4OCG2OHWWStzCLrF/lT6Yv714Gc9pbJaGJKJv++QHJsNfrPshf8/ STM7GhU/VD3Ut0BvAkVoNCyGk1GNc+qHDodr2c4QMEVKUDdMX7nV0TmxKvEusotM WCsoky3RCQc4BRn7wA230Qdu2m1gyCRo69lfDU+/BJDyu4IGb0bB7XDHt9D2pflw iRCqS5DtRiWMABqjtS1DKGxC3DL8lElfGL10ANvjzwG2J3BuN6TPRMeDt7rVwYzy 1sCJdWUd/f8mznff5WJNP8vNspFd5hWDlc+cRP0wY7z2clPOMcD35W8Vzw+fAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU6r4ma7DJk+3wEoKoCTH0+gdhA7MwHwYDVR0j BBgwFoAUTBieQvNclE1GPZ6mUB8JPrYrp4UwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2U1MTBlMTctMzFmYS00MTRiLTk4OWUtMDI2ZGJiNmZk ZjUxLzAvNEMxODlFNDJGMzVDOTQ0RDQ2M0Q5RUE2NTAxRjA5M0VCNjJCQTc4NS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1RCaWVRdk5jbEUxR1BaNm1VQjhKUHJZ cnA0VS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9jZTUxMGUxNy0z MWZhLTQxNGItOTg5ZS0wMjZkYmI2ZmRmNTEvMC80QzE4OUU0MkYzNUM5NDRENDYz RDlFQTY1MDFGMDkzRUI2MkJBNzg1Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlFoQj0vzSL2WuLVrhiG6 Z6LGqFy5zvZIbARunJyEAzeNI1+rqqGr3ZHMu9em5hEQbTLOEZ5KRJ8UHWo0QCyC UBhFaqUI1y1424Nje9t+j3/d4HkMWcTUE+Tk+wQ+YFVKOaZOqT7/leauUEtQ1hpF pquUN3JwUc3zpnX9Rzx4vLoyEHu2j5RdTtZDl6Kx1pKu1GcjdWjBpLw9zp4eAGu4 2Hz8B22X5eP1ToFRm9KupPTUM9ZS4j3XXlIwOXcVe2XuyS8vET26M20G5aYmNg0I TWZvWgCDc5ljvWYt2zgccPh5toqzkLBSnNqp43oq/gnXH+9dp5NloyR2U6+F/nye jw== -----END CERTIFICATE-----Generated at Sat Dec 6 12:31:41 2025 by rpki-client