This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.mft File: F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.mft (raw, json) Hash identifier: 6Qypw61Qe20eJkc2Zpd4di693v55ExT7cSQSLWFPTec= Subject key identifier: B1:76:74:B0:D9:65:7E:E4:06:7F:DE:05:76:BC:5F:C5:32:48:FD:63 Authority key identifier: F9:F7:A2:88:5C:F3:01:2F:A1:39:0D:3B:32:59:FC:78:AE:F7:AD:1A Certificate issuer: /CN=F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A Certificate serial: 30C4C65363DA1AB8119A7E7B4C2F667B453E3DD4 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.mft Manifest number: 033F Signing time: Sat 06 Dec 2025 12:36:09 +0000 Manifest this update: Sat 06 Dec 2025 12:31:09 +0000 Manifest next update: Sun 07 Dec 2025 14:01:09 +0000 Files and hashes: 1: F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.crl (hash: vXxlF1nDMcotrsyrTi7zKIrZMECEBE91WuJSqhjMs1g=) 2: 326131343a373538313a6634303a3a2f34342d3438203d3e20323134363433.roa (hash: jjg3HPw+XVWQVO0XHgF/TKZW97oaDPDZVvcbfhgJX94=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.crl rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:c4:c6:53:63:da:1a:b8:11:9a:7e:7b:4c:2f:66:7b:45:3e:3d:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A Validity Not Before: Dec 6 12:31:09 2025 GMT Not After : Dec 7 14:01:09 2025 GMT Subject: CN=B17674B0D9657EE4067FDE0576BC5FC53248FD63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:e3:0a:79:c7:f6:cb:b8:92:fc:10:49:5a:c8: c3:7a:b6:f1:3b:eb:d3:ff:5a:ab:02:fc:03:fe:f7: 89:2b:c8:d9:02:f7:c3:ee:84:a6:31:f5:9c:82:df: 56:fb:b9:e3:91:3a:82:d9:17:62:30:87:d0:4a:a4: ad:be:41:64:b4:c2:d7:d3:68:16:0d:dd:b4:b3:22: 85:07:fd:ee:ac:37:9a:a1:c8:c4:d2:d5:2e:3d:51: 39:c7:4e:87:b3:32:57:f6:74:8f:2a:c1:fb:24:34: f0:0c:31:c9:c6:65:5d:a6:ed:6b:9a:ad:1b:43:82: 48:d7:3f:39:cb:db:f4:df:26:dd:6f:e5:d1:3c:b4: f9:85:ba:fc:64:db:82:4e:a5:3f:5e:52:07:c7:85: 4c:7c:5b:ad:7f:91:d6:18:3f:1f:41:7e:f8:0f:92: a6:20:75:43:52:c4:2a:90:73:02:c3:3b:6f:3d:86: e2:c4:a9:17:70:7d:91:54:04:13:63:32:3e:1b:b1: 7b:95:b2:52:28:10:f7:72:a2:9a:a2:bd:80:e5:37: 60:cc:08:0f:d2:fe:5b:b3:c0:1b:20:01:47:d4:4c: dc:37:ee:44:79:5f:55:d1:63:85:1e:ec:30:dd:6e: 99:3c:2a:ce:76:1a:e7:15:95:76:73:74:6e:37:ee: 26:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:76:74:B0:D9:65:7E:E4:06:7F:DE:05:76:BC:5F:C5:32:48:FD:63 X509v3 Authority Key Identifier: keyid:F9:F7:A2:88:5C:F3:01:2F:A1:39:0D:3B:32:59:FC:78:AE:F7:AD:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:3f:db:ab:0d:a5:12:a8:56:5f:9c:44:47:c9:13:33:33:fe: 49:33:cb:a9:8f:81:11:be:b2:84:ab:ff:fd:21:a0:d5:30:a9: aa:f0:aa:f5:e6:dc:90:5d:bf:db:29:44:d0:92:6b:bd:a3:a8: 6f:c4:65:89:ac:96:d1:a3:17:b7:26:31:9c:3f:f7:06:63:7d: ca:f1:db:22:b9:98:b2:40:3f:29:e5:d5:eb:17:a6:f9:ab:fd: 9b:7e:cf:3a:2c:99:23:e9:a3:dc:2b:d2:37:e7:29:4c:2e:75: 73:0e:55:88:6e:d5:42:e2:c0:f5:63:56:5f:79:98:46:05:06: 2a:a6:ab:e7:47:7e:57:59:b9:8c:3f:45:ab:86:27:81:d5:2b: 86:97:53:35:09:41:8f:6b:6c:69:24:cf:2f:c2:c0:95:a1:30: 49:76:21:7b:f6:6b:06:27:67:12:a7:09:76:0e:c1:99:a6:38: a0:b9:1b:df:09:5c:22:b2:17:e6:ff:08:23:b5:72:89:c6:81: a2:1f:78:e9:59:df:94:38:ca:46:7e:1b:02:1f:be:56:aa:9b: a1:e6:03:f1:12:d0:b7:6c:66:03:92:22:15:b8:57:96:99:e2: b3:1b:30:4e:a8:c9:cf:e3:65:4e:5e:70:08:f4:91:c7:6e:6e: 37:34:88:71 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUMMTGU2PaGrgRmn57TC9me0U+PdQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjlGN0EyODg1Q0YzMDEyRkExMzkwRDNCMzI1OUZDNzhB RUY3QUQxQTAeFw0yNTEyMDYxMjMxMDlaFw0yNTEyMDcxNDAxMDlaMDMxMTAvBgNV BAMTKEIxNzY3NEIwRDk2NTdFRTQwNjdGREUwNTc2QkM1RkM1MzI0OEZENjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCb4wp5x/bLuJL8EElayMN6tvE7 69P/WqsC/AP+94kryNkC98PuhKYx9ZyC31b7ueOROoLZF2Iwh9BKpK2+QWS0wtfT aBYN3bSzIoUH/e6sN5qhyMTS1S49UTnHToezMlf2dI8qwfskNPAMMcnGZV2m7Wua rRtDgkjXPznL2/TfJt1v5dE8tPmFuvxk24JOpT9eUgfHhUx8W61/kdYYPx9BfvgP kqYgdUNSxCqQcwLDO289huLEqRdwfZFUBBNjMj4bsXuVslIoEPdyopqivYDlN2DM CA/S/luzwBsgAUfUTNw37kR5X1XRY4Ue7DDdbpk8Ks52GucVlXZzdG437iapAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUsXZ0sNllfuQGf94FdrxfxTJI/WMwHwYDVR0j BBgwFoAU+feiiFzzAS+hOQ07Mln8eK73rRowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZGI4ZDhiN2QtYzQ4Ni00MjM5LTlkOWYtOGY4ZjVkY2Vk OGQwLzEvRjlGN0EyODg1Q0YzMDEyRkExMzkwRDNCMzI1OUZDNzhBRUY3QUQxQS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9GOUY3QTI4ODVDRjMwMTJGQTEzOTBEM0Iz MjU5RkM3OEFFRjdBRDFBLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2RiOGQ4YjdkLWM0ODYtNDIzOS05ZDlmLThmOGY1ZGNlZDhkMC8xL0Y5RjdBMjg4 NUNGMzAxMkZBMTM5MEQzQjMyNTlGQzc4QUVGN0FEMUEubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAKP9ur DaUSqFZfnERHyRMzM/5JM8upj4ERvrKEq//9IaDVMKmq8Kr15tyQXb/bKUTQkmu9 o6hvxGWJrJbRoxe3JjGcP/cGY33K8dsiuZiyQD8p5dXrF6b5q/2bfs86LJkj6aPc K9I35ylMLnVzDlWIbtVC4sD1Y1ZfeZhGBQYqpqvnR35XWbmMP0WrhieB1SuGl1M1 CUGPa2xpJM8vwsCVoTBJdiF79msGJ2cSpwl2DsGZpjiguRvfCVwishfm/wgjtXKJ xoGiH3jpWd+UOMpGfhsCH75Wqpuh5gPxEtC3bGYDkiIVuFeWmeKzGzBOqMnP42VO XnAI9JHHbm43NIhx -----END CERTIFICATE-----Generated at Sat Dec 6 19:39:14 2025 by rpki-client