This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/3/D642975F535F45FD9F6D8FEA626BC6D24BC9D8D8.mft File: D642975F535F45FD9F6D8FEA626BC6D24BC9D8D8.mft (raw, json) Hash identifier: +z0lgaF/rGp++oiPZBql7piQ2G928zeVByiv3I6XxOM= Subject key identifier: D2:06:61:B9:55:9F:65:09:0E:8C:E5:69:EB:51:56:BD:30:40:65:D0 Authority key identifier: D6:42:97:5F:53:5F:45:FD:9F:6D:8F:EA:62:6B:C6:D2:4B:C9:D8:D8 Certificate issuer: /CN=d642975f535f45fd9f6d8fea626bc6d24bc9d8d8 Certificate serial: 066003FE3389451E8B9EE8E787BD740F545FFCD4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1kKXX1NfRf2fbY_qYmvG0kvJ2Ng.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/3/D642975F535F45FD9F6D8FEA626BC6D24BC9D8D8.mft Manifest number: 041D Signing time: Sat 06 Dec 2025 05:07:01 +0000 Manifest this update: Sat 06 Dec 2025 05:02:01 +0000 Manifest next update: Sun 07 Dec 2025 07:21:01 +0000 Files and hashes: 1: 323030313a3637633a326265383a3a2f34382d3438203d3e20323032383831.roa (hash: SVc+06+kSTZLFSZYHt+18ILRTqVegdlc2kojDgxmDjY=) 2: 323030313a3637633a326265383a3a2f34382d3438203d3e20323035333239.roa (hash: 3ZFhB/5ygf5t4lpptEoHt4tGKQVifxYsEJPws7ZipKw=) 3: D642975F535F45FD9F6D8FEA626BC6D24BC9D8D8.crl (hash: NvdJZxjEybdZoCCKYOD5N+JAjixfOHz2ROD7f1kZSM4=) 4: AS202881.asa (hash: nU1V64f2UOlswo0H6MWNfigd4IjLYoZXApoQceO/AvU=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/3/D642975F535F45FD9F6D8FEA626BC6D24BC9D8D8.crl rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/3/D642975F535F45FD9F6D8FEA626BC6D24BC9D8D8.mft rsync://rpki.ripe.net/repository/DEFAULT/1kKXX1NfRf2fbY_qYmvG0kvJ2Ng.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:60:03:fe:33:89:45:1e:8b:9e:e8:e7:87:bd:74:0f:54:5f:fc:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d642975f535f45fd9f6d8fea626bc6d24bc9d8d8 Validity Not Before: Dec 6 05:02:01 2025 GMT Not After : Dec 7 07:21:01 2025 GMT Subject: CN=D20661B9559F65090E8CE569EB5156BD304065D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:2f:43:29:2c:83:3d:04:04:d9:f1:72:e5:0c: fd:f0:48:72:f9:82:d4:3e:ef:25:83:33:9e:e7:a3: 8b:da:7c:45:a1:bf:ab:32:80:42:a6:50:51:c5:24: 2b:46:1c:54:60:cf:83:bc:54:c5:af:4b:3f:12:e2: 70:a2:16:dc:68:c0:74:d3:fd:07:10:8f:64:9d:d5: 89:bc:51:c6:a0:e1:b8:07:43:c9:c9:3b:51:a2:26: 2f:03:b9:71:37:c9:b1:4a:5c:e2:55:5c:2a:e4:c6: 97:9e:a1:c5:91:e1:7d:3a:dc:b8:2e:f1:9f:ae:13: 52:da:77:e8:72:01:d7:a9:b8:13:2c:db:10:f8:df: 39:20:e1:d7:91:87:d3:bc:f1:ea:0e:44:06:d5:36: c3:82:dc:3a:75:50:b8:a0:ad:d0:a4:47:3e:ef:3a: 5c:e7:f5:4f:0b:3c:d6:b0:6f:50:0a:a5:83:fe:f6: 3c:2b:f7:cb:72:ec:c8:b7:3b:5d:d4:8d:98:22:3d: 74:82:01:f6:d1:88:e1:d8:6a:01:0c:5d:40:1f:56: e0:e7:0a:d5:80:14:07:4c:d4:05:29:30:99:1b:82: ed:ef:fc:4f:42:ba:b8:e1:b3:b0:64:cd:0d:fb:a2: 11:b0:01:23:6c:ab:15:62:f9:17:d3:e7:10:6e:cc: 61:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:06:61:B9:55:9F:65:09:0E:8C:E5:69:EB:51:56:BD:30:40:65:D0 X509v3 Authority Key Identifier: keyid:D6:42:97:5F:53:5F:45:FD:9F:6D:8F:EA:62:6B:C6:D2:4B:C9:D8:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/3/D642975F535F45FD9F6D8FEA626BC6D24BC9D8D8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1kKXX1NfRf2fbY_qYmvG0kvJ2Ng.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/3/D642975F535F45FD9F6D8FEA626BC6D24BC9D8D8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:fc:7f:5d:a1:93:14:79:e2:58:0a:87:8b:6c:3b:6b:f6:22: 1f:ad:74:31:84:50:8b:a3:8a:ee:cf:52:20:36:e6:bd:48:cc: aa:1b:b8:b3:23:0e:9d:32:ad:11:92:f4:00:0c:2c:04:66:e7: 69:72:ee:19:a6:b1:be:50:6a:91:0c:eb:71:83:b3:99:83:07: 93:d4:01:a0:3d:e9:2e:d5:c7:94:7a:65:bb:52:dc:3c:59:4a: c4:6b:eb:d9:8e:e3:59:e9:7e:7f:14:ee:da:f8:b1:05:76:4d: 9e:76:b3:38:37:d1:b2:47:7d:f9:bc:4b:58:40:62:38:e0:11: 7b:b4:64:9a:ec:71:d0:3d:18:77:d3:d5:2f:70:38:22:1d:9d: aa:71:7a:b4:30:01:38:ce:7d:a8:b2:d7:b5:81:c4:ff:f1:b7: 5e:b7:b3:9e:25:19:d2:c1:27:4c:af:b3:16:f8:d8:1b:9a:e7: c4:24:dd:73:0f:94:6b:5e:0d:09:58:6d:69:1a:1c:e6:51:9c: 95:d1:6c:86:bb:9f:e0:5d:55:3b:d6:8e:e5:b2:aa:fd:f6:c8: d4:11:5e:bb:ca:33:a7:c1:07:01:7e:8f:17:13:0f:d8:9a:46: 37:ae:93:fa:1b:6f:49:87:92:51:9f:de:02:bf:7c:c9:49:59: 23:f7:51:98 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUBmAD/jOJRR6Lnujnh710D1Rf/NQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZDY0Mjk3NWY1MzVmNDVmZDlmNmQ4ZmVhNjI2YmM2ZDI0 YmM5ZDhkODAeFw0yNTEyMDYwNTAyMDFaFw0yNTEyMDcwNzIxMDFaMDMxMTAvBgNV BAMTKEQyMDY2MUI5NTU5RjY1MDkwRThDRTU2OUVCNTE1NkJEMzA0MDY1RDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVL0MpLIM9BATZ8XLlDP3wSHL5 gtQ+7yWDM57no4vafEWhv6sygEKmUFHFJCtGHFRgz4O8VMWvSz8S4nCiFtxowHTT /QcQj2Sd1Ym8Ucag4bgHQ8nJO1GiJi8DuXE3ybFKXOJVXCrkxpeeocWR4X063Lgu 8Z+uE1Lad+hyAdepuBMs2xD43zkg4deRh9O88eoORAbVNsOC3Dp1ULigrdCkRz7v Olzn9U8LPNawb1AKpYP+9jwr98ty7Mi3O13UjZgiPXSCAfbRiOHYagEMXUAfVuDn CtWAFAdM1AUpMJkbgu3v/E9Curjhs7BkzQ37ohGwASNsqxVi+RfT5xBuzGHHAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU0gZhuVWfZQkOjOVp61FWvTBAZdAwHwYDVR0j BBgwFoAU1kKXX1NfRf2fbY/qYmvG0kvJ2NgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDY5NzE2MGMtYWNjNS00YjUxLWJmNTUtMTBjN2E2ZTY2 OTgwLzMvRDY0Mjk3NUY1MzVGNDVGRDlGNkQ4RkVBNjI2QkM2RDI0QkM5RDhEOC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFrS1hYMU5mUmYyZmJZX3FZbXZHMGt2 SjJOZy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kNjk3MTYwYy1h Y2M1LTRiNTEtYmY1NS0xMGM3YTZlNjY5ODAvMy9ENjQyOTc1RjUzNUY0NUZEOUY2 RDhGRUE2MjZCQzZEMjRCQzlEOEQ4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV/x/XaGTFHniWAqHi2w7 a/YiH610MYRQi6OK7s9SIDbmvUjMqhu4syMOnTKtEZL0AAwsBGbnaXLuGaaxvlBq kQzrcYOzmYMHk9QBoD3pLtXHlHplu1LcPFlKxGvr2Y7jWel+fxTu2vixBXZNnnaz ODfRskd9+bxLWEBiOOARe7Rkmuxx0D0Yd9PVL3A4Ih2dqnF6tDABOM59qLLXtYHE //G3XrezniUZ0sEnTK+zFvjYG5rnxCTdcw+Ua14NCVhtaRoc5lGcldFshruf4F1V O9aO5bKq/fbI1BFeu8ozp8EHAX6PFxMP2JpGN66T+htvSYeSUZ/eAr98yUlZI/dR mA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:19:30 2025 by rpki-client