This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.mft File: 202A82DA6E73CE4262E18BAED60A3FA6C88923F0.mft (raw, json) Hash identifier: R7ihOuWHuRr77jrnbA5OBTFey/s2seD/kIToLmLrsg8= Subject key identifier: C2:85:B2:B6:3D:C5:1F:CC:18:A6:C2:95:88:51:59:06:52:44:AB:11 Authority key identifier: 20:2A:82:DA:6E:73:CE:42:62:E1:8B:AE:D6:0A:3F:A6:C8:89:23:F0 Certificate issuer: /CN=202A82DA6E73CE4262E18BAED60A3FA6C88923F0 Certificate serial: 16CB050B7A54BE4370B6733D0E403FA9B0EE5090 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.mft Manifest number: 8C Signing time: Sat 06 Dec 2025 06:52:42 +0000 Manifest this update: Sat 06 Dec 2025 06:47:42 +0000 Manifest next update: Sun 07 Dec 2025 07:11:42 +0000 Files and hashes: 1: 202A82DA6E73CE4262E18BAED60A3FA6C88923F0.crl (hash: F72BASj9CG/KY25/04EgQoZ0dd0o8pcOupkABQy+7Go=) 2: 326131343a373538313a333062353a3a2f34382d3438203d3e20323131373239.roa (hash: tFUXq6i30FxB1SNNhCRKk78oQl/FXFjJBGghOw722to=) 3: 326131343a373538303a666666353a3a2f34382d3438203d3e20323037353239.roa (hash: 8GEpSwKR5aAKrW7JpZcQNrVUIUKVu8YVCYytf208qTw=) 4: 64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05.cer (hash: Cg46VfMFxkibHVY72VspTJE2BjBtIpE0lG8+Ny9YFKc=) 5: 326131343a373538313a333039303a3a2f34342d3434203d3e20323034323131.roa (hash: an2CTnY48XCjuCGH81CGgjVXZdlCvh7kWv6euA7rsaw=) 6: 326131343a373538313a333030303a3a2f34302d3438203d3e20323037353239.roa (hash: 49tQr1GLN9QvPACiaQcXfaSDsuhRZJax3rEAyqF9fvs=) 7: 326131343a373538313a333062363a3a2f34382d3438203d3e203331383938.roa (hash: EiykYxl+6FaTNBSgNTe5hk8ztAyCkiKmYpqs3J6XV7E=) 8: 326131343a373538313a333062363a3a2f34382d3438203d3e20323037323939.roa (hash: QF7sj3Q22cpFIfftMWFUaaWBXSTUWiNGhFKa4Gm8DjQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.crl rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:45:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:cb:05:0b:7a:54:be:43:70:b6:73:3d:0e:40:3f:a9:b0:ee:50:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=202A82DA6E73CE4262E18BAED60A3FA6C88923F0 Validity Not Before: Dec 6 06:47:42 2025 GMT Not After : Dec 7 07:11:42 2025 GMT Subject: CN=C285B2B63DC51FCC18A6C295885159065244AB11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:83:0a:8d:11:df:65:01:26:3f:21:44:96:46: 5f:cf:79:8d:2e:23:c1:cf:7e:89:fc:f2:31:b2:2a: 88:d6:27:53:a7:c1:bb:cd:2d:dd:52:e2:4a:d6:e2: 5e:cd:52:33:7c:51:1e:93:59:e4:74:91:14:b3:55: e5:fe:bb:7b:2b:44:8b:c0:1e:5f:72:1b:97:c3:d5: cd:05:45:7a:5e:34:b1:97:32:78:2b:3b:9b:47:55: 3e:ed:98:fc:aa:92:5a:87:4b:a3:dd:67:89:06:49: 77:82:5e:e0:5a:ab:0d:d7:b8:8e:0e:ef:98:3b:cf: 1c:e6:34:c8:be:34:5b:32:58:a1:46:50:8c:16:f7: c8:e9:df:16:2d:9a:15:f8:a2:5a:95:39:9c:78:12: 8b:4b:bf:ec:c8:81:f8:af:bd:67:26:65:d4:d0:62: 98:68:5a:47:de:06:0f:d8:08:bb:ce:c3:b1:40:ed: 3e:74:fa:e3:55:ba:5e:57:e0:aa:ba:61:a0:61:2a: 6f:84:22:d1:18:d3:17:91:ee:df:e3:1c:c3:88:07: 38:7a:ee:dd:76:2f:9b:06:66:80:77:a5:9a:7b:fd: 7c:7e:f9:f2:29:0f:57:96:9f:1f:9c:58:66:eb:13: f8:42:9b:89:70:7d:3a:79:db:eb:ba:fb:59:65:a0: 2d:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:85:B2:B6:3D:C5:1F:CC:18:A6:C2:95:88:51:59:06:52:44:AB:11 X509v3 Authority Key Identifier: keyid:20:2A:82:DA:6E:73:CE:42:62:E1:8B:AE:D6:0A:3F:A6:C8:89:23:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:bc:5e:1c:ad:99:3a:6b:cb:69:1c:0d:b1:54:d1:a0:32:f7: 20:89:3b:33:d0:96:2d:fe:9d:fb:c6:15:ae:c6:11:5c:90:f3: 98:62:ce:bf:b7:ae:a3:1e:dc:11:ee:71:e0:50:04:fc:b3:3e: 2e:8a:a5:20:e4:8d:e2:8e:82:8d:19:8f:f1:04:9b:80:1c:00: c9:04:7c:bb:62:07:7f:bc:83:48:4b:a4:88:f0:da:78:69:7f: 34:ab:ce:77:01:2c:be:27:68:ef:2e:5e:54:de:18:bc:ea:6c: 9f:35:9f:5b:d8:cb:67:6a:d9:70:f5:a9:1d:9f:63:2e:7a:bb: 2f:57:e8:3a:60:0f:7d:52:40:85:f9:92:f3:7c:d0:de:a8:05: 65:f4:ac:eb:4e:e3:9b:aa:62:56:53:6e:fc:c0:b7:26:45:1c: 3c:a0:df:41:ef:e2:f2:ea:ef:7c:b4:17:1c:71:55:9d:07:2a: 13:8a:22:13:0d:80:39:eb:02:bd:d9:9f:68:6d:d1:8e:f7:43: 64:37:03:50:fd:6c:88:63:80:f2:77:78:60:71:5a:a1:ea:7c: b9:cc:ee:48:92:d4:c6:89:07:2b:d5:1a:5b:df:44:0c:9a:19: e5:53:7b:df:ca:2b:8c:0e:f4:5d:76:16:8b:53:63:6a:80:cc: 17:8c:3b:18 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUFssFC3pUvkNwtnM9DkA/qbDuUJAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjAyQTgyREE2RTczQ0U0MjYyRTE4QkFFRDYwQTNGQTZD ODg5MjNGMDAeFw0yNTEyMDYwNjQ3NDJaFw0yNTEyMDcwNzExNDJaMDMxMTAvBgNV BAMTKEMyODVCMkI2M0RDNTFGQ0MxOEE2QzI5NTg4NTE1OTA2NTI0NEFCMTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSgwqNEd9lASY/IUSWRl/PeY0u I8HPfon88jGyKojWJ1OnwbvNLd1S4krW4l7NUjN8UR6TWeR0kRSzVeX+u3srRIvA Hl9yG5fD1c0FRXpeNLGXMngrO5tHVT7tmPyqklqHS6PdZ4kGSXeCXuBaqw3XuI4O 75g7zxzmNMi+NFsyWKFGUIwW98jp3xYtmhX4olqVOZx4EotLv+zIgfivvWcmZdTQ YphoWkfeBg/YCLvOw7FA7T50+uNVul5X4Kq6YaBhKm+EItEY0xeR7t/jHMOIBzh6 7t12L5sGZoB3pZp7/Xx++fIpD1eWnx+cWGbrE/hCm4lwfTp52+u6+1lloC1BAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUwoWytj3FH8wYpsKViFFZBlJEqxEwHwYDVR0j BBgwFoAUICqC2m5zzkJi4Yuu1go/psiJI/AwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDliZDM4ODgtOTMwMi00YjZmLWEwMTctMmI0YmJhNWU1 N2JiLzEvMjAyQTgyREE2RTczQ0U0MjYyRTE4QkFFRDYwQTNGQTZDODg5MjNGMC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8yMDJBODJEQTZFNzNDRTQyNjJFMThCQUVE NjBBM0ZBNkM4ODkyM0YwLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2Q5YmQzODg4LTkzMDItNGI2Zi1hMDE3LTJiNGJiYTVlNTdiYi8xLzIwMkE4MkRB NkU3M0NFNDI2MkUxOEJBRUQ2MEEzRkE2Qzg4OTIzRjAubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBpvF4c rZk6a8tpHA2xVNGgMvcgiTsz0JYt/p37xhWuxhFckPOYYs6/t66jHtwR7nHgUAT8 sz4uiqUg5I3ijoKNGY/xBJuAHADJBHy7Ygd/vINIS6SI8Np4aX80q853ASy+J2jv Ll5U3hi86myfNZ9b2Mtnatlw9akdn2MuersvV+g6YA99UkCF+ZLzfNDeqAVl9Kzr TuObqmJWU278wLcmRRw8oN9B7+Ly6u98tBcccVWdByoTiiITDYA56wK92Z9obdGO 90NkNwNQ/WyIY4Dyd3hgcVqh6ny5zO5IktTGiQcr1Rpb30QMmhnlU3vfyiuMDvRd dhaLU2NqgMwXjDsY -----END CERTIFICATE-----Generated at Sat Dec 6 08:37:09 2025 by rpki-client