This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/2/2F08CECD5E57CBA0E68BCA7F7401BD5EDB387FB8.mft File: 2F08CECD5E57CBA0E68BCA7F7401BD5EDB387FB8.mft (raw, json) Hash identifier: UoblnmJiVWnQzxt44CxjtD9Gg7Lk4Q5cTpFj1Nz6aOo= Subject key identifier: D5:D7:46:01:7A:08:5C:95:05:22:E8:D7:2F:C0:61:71:16:A8:3B:F6 Authority key identifier: 2F:08:CE:CD:5E:57:CB:A0:E6:8B:CA:7F:74:01:BD:5E:DB:38:7F:B8 Certificate issuer: /CN=2f08cecd5e57cba0e68bca7f7401bd5edb387fb8 Certificate serial: 585C17BF1C72A3F36236E8D87F9C9966C41A28F3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LwjOzV5Xy6Dmi8p_dAG9Xts4f7g.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/2/2F08CECD5E57CBA0E68BCA7F7401BD5EDB387FB8.mft Manifest number: 041F Signing time: Fri 05 Dec 2025 23:02:01 +0000 Manifest this update: Fri 05 Dec 2025 22:57:01 +0000 Manifest next update: Sat 06 Dec 2025 23:34:01 +0000 Files and hashes: 1: 323030313a3637633a323830303a3a2f34382d3438203d3e20323035333239.roa (hash: FrtXdPIEsvn1iYUedtjAO8L9S5GjDxa5ywOB8CuN7A0=) 2: 2F08CECD5E57CBA0E68BCA7F7401BD5EDB387FB8.crl (hash: NOOZ6Y/l3Jq0UUIWf7V1U5cOz64GP2uC7RnRrt8pvLc=) 3: AS205329.asa (hash: VGL8fNaLY3qFu9mP5r7NvYdgKqN6s2IJxTCOZNeTahk=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/2/2F08CECD5E57CBA0E68BCA7F7401BD5EDB387FB8.crl rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/2/2F08CECD5E57CBA0E68BCA7F7401BD5EDB387FB8.mft rsync://rpki.ripe.net/repository/DEFAULT/LwjOzV5Xy6Dmi8p_dAG9Xts4f7g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:34:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:5c:17:bf:1c:72:a3:f3:62:36:e8:d8:7f:9c:99:66:c4:1a:28:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f08cecd5e57cba0e68bca7f7401bd5edb387fb8 Validity Not Before: Dec 5 22:57:01 2025 GMT Not After : Dec 6 23:34:01 2025 GMT Subject: CN=D5D746017A085C950522E8D72FC0617116A83BF6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:0d:46:79:91:97:a3:33:21:d4:f9:59:4f:c4: 46:70:b7:b3:2f:5f:0a:23:74:d5:5a:e1:88:c7:98: 58:67:d2:95:94:62:90:2f:6a:4b:05:c8:d1:99:88: 48:8f:79:67:44:64:f2:b5:59:d7:c5:bd:b2:bb:2f: eb:8e:6e:fa:b9:f8:54:13:ca:23:d4:74:23:63:70: b8:bc:b4:f9:42:3d:5c:f9:d0:a7:73:75:56:a3:0b: e3:e8:0f:39:2f:df:f1:c6:54:f5:0c:34:10:d2:b2: d2:98:39:9b:b4:43:66:ff:0a:cc:af:6f:e7:3a:08: 3f:ce:00:15:b5:85:f3:f0:b3:11:83:d2:ca:59:0d: 37:05:4d:67:e4:69:d6:b4:86:6a:8d:4c:0e:25:18: a2:d9:a0:04:85:9d:e6:dd:66:53:9e:13:de:e1:8f: ea:0b:9a:87:cf:9b:4d:7d:09:dc:de:f7:9b:be:b1: d4:5c:60:fe:91:e6:76:39:d2:9f:70:e6:7c:7f:43: fd:4a:d1:88:ff:d6:c9:05:7f:5d:d1:db:70:c3:a1: fd:5d:4e:ae:61:c4:b8:5f:dc:90:54:a0:5a:65:9e: 71:e2:cc:27:83:25:8f:16:3d:85:5c:5b:d1:a8:a6: 95:91:d1:60:47:56:58:8c:bd:21:b2:6a:ea:e5:a4: 0b:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:D7:46:01:7A:08:5C:95:05:22:E8:D7:2F:C0:61:71:16:A8:3B:F6 X509v3 Authority Key Identifier: keyid:2F:08:CE:CD:5E:57:CB:A0:E6:8B:CA:7F:74:01:BD:5E:DB:38:7F:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/2/2F08CECD5E57CBA0E68BCA7F7401BD5EDB387FB8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LwjOzV5Xy6Dmi8p_dAG9Xts4f7g.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/2/2F08CECD5E57CBA0E68BCA7F7401BD5EDB387FB8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:26:08:05:85:38:1a:c4:c4:ce:8c:2a:37:f0:fe:60:d5:75: 23:68:1c:52:58:be:65:cd:51:aa:c0:b8:e7:a3:90:bf:7f:6a: bc:01:28:3e:af:8a:d5:69:4e:bf:ec:5a:63:a7:8f:4b:ce:c0: 17:8d:19:e1:cb:e1:8a:db:68:9a:d8:a7:ca:5c:42:89:ff:db: 28:6d:e0:02:28:1e:be:ff:42:11:e1:89:e5:aa:7a:84:97:e7: 54:3a:51:23:b0:f8:47:b3:11:19:c2:e4:d2:20:c5:82:33:82: e5:d8:ed:18:62:f3:b8:5b:54:da:ab:a0:0b:db:57:98:ae:54: e2:4a:7e:eb:61:c6:2f:15:c9:7e:64:46:77:c3:bc:79:c3:ac: ca:0c:78:64:79:74:23:45:f1:ab:d2:7a:40:b9:77:ba:6c:e0: 1f:91:cc:60:35:fb:55:4a:cf:c5:da:71:24:ba:ac:4a:2d:98: 6a:b0:f3:9c:2e:9d:e7:36:d3:8d:9e:fc:a2:16:3b:9a:7a:86: 53:ba:fb:51:a8:38:d7:0a:23:db:37:93:90:fd:11:de:20:02: 22:d1:da:61:a9:be:97:cb:0f:34:e5:70:dc:97:0b:af:ae:58: a2:2d:4b:50:82:43:c1:4a:28:b7:ca:78:03:d5:e1:b8:85:13: 32:45:4f:29 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUWFwXvxxyo/NiNujYf5yZZsQaKPMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMmYwOGNlY2Q1ZTU3Y2JhMGU2OGJjYTdmNzQwMWJkNWVk YjM4N2ZiODAeFw0yNTEyMDUyMjU3MDFaFw0yNTEyMDYyMzM0MDFaMDMxMTAvBgNV BAMTKEQ1RDc0NjAxN0EwODVDOTUwNTIyRThENzJGQzA2MTcxMTZBODNCRjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSDUZ5kZejMyHU+VlPxEZwt7Mv XwojdNVa4YjHmFhn0pWUYpAvaksFyNGZiEiPeWdEZPK1WdfFvbK7L+uObvq5+FQT yiPUdCNjcLi8tPlCPVz50KdzdVajC+PoDzkv3/HGVPUMNBDSstKYOZu0Q2b/Csyv b+c6CD/OABW1hfPwsxGD0spZDTcFTWfkada0hmqNTA4lGKLZoASFnebdZlOeE97h j+oLmofPm019Cdze95u+sdRcYP6R5nY50p9w5nx/Q/1K0Yj/1skFf13R23DDof1d Tq5hxLhf3JBUoFplnnHizCeDJY8WPYVcW9GoppWR0WBHVliMvSGyaurlpAtlAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU1ddGAXoIXJUFIujXL8BhcRaoO/YwHwYDVR0j BBgwFoAULwjOzV5Xy6Dmi8p/dAG9Xts4f7gwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDY5NzE2MGMtYWNjNS00YjUxLWJmNTUtMTBjN2E2ZTY2 OTgwLzIvMkYwOENFQ0Q1RTU3Q0JBMEU2OEJDQTdGNzQwMUJENUVEQjM4N0ZCOC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0x3ak96VjVYeTZEbWk4cF9kQUc5WHRz NGY3Zy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kNjk3MTYwYy1h Y2M1LTRiNTEtYmY1NS0xMGM3YTZlNjY5ODAvMi8yRjA4Q0VDRDVFNTdDQkEwRTY4 QkNBN0Y3NDAxQkQ1RURCMzg3RkI4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApyYIBYU4GsTEzowqN/D+ YNV1I2gcUli+Zc1RqsC456OQv39qvAEoPq+K1WlOv+xaY6ePS87AF40Z4cvhitto mtinylxCif/bKG3gAigevv9CEeGJ5ap6hJfnVDpRI7D4R7MRGcLk0iDFgjOC5djt GGLzuFtU2qugC9tXmK5U4kp+62HGLxXJfmRGd8O8ecOsygx4ZHl0I0Xxq9J6QLl3 umzgH5HMYDX7VUrPxdpxJLqsSi2YarDznC6d5zbTjZ78ohY7mnqGU7r7Uag41woj 2zeTkP0R3iACItHaYam+l8sPNOVw3JcLr65Yoi1LUIJDwUoot8p4A9XhuIUTMkVP KQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:59:26 2025 by rpki-client