This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/10/E19302BE91C9D4211CDF4AFF091055A173B3593B.mft File: E19302BE91C9D4211CDF4AFF091055A173B3593B.mft (raw, json) Hash identifier: bTKjattxFvuNNm38voDZ3iuKpoLCtc42IyGpv//B7Ro= Subject key identifier: B4:A1:F1:5C:29:1B:5E:29:3C:6A:84:C4:A9:1D:A6:C3:13:67:19:39 Authority key identifier: E1:93:02:BE:91:C9:D4:21:1C:DF:4A:FF:09:10:55:A1:73:B3:59:3B Certificate issuer: /CN=E19302BE91C9D4211CDF4AFF091055A173B3593B Certificate serial: 15C32919BBC3603417DBF98283C471CBBBB2239E Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/E19302BE91C9D4211CDF4AFF091055A173B3593B.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/10/E19302BE91C9D4211CDF4AFF091055A173B3593B.mft Manifest number: D3 Signing time: Fri 05 Dec 2025 15:09:02 +0000 Manifest this update: Fri 05 Dec 2025 15:04:02 +0000 Manifest next update: Sat 06 Dec 2025 18:18:02 +0000 Files and hashes: 1: 326130373a353463313a343236313a3a2f34382d3438203d3e203436373636.roa (hash: 7m4uBl7pjkxamzWCFShzOT8dP3zXIx3Ew/sIEJmrOk4=) 2: 326130373a353463313a343230303a3a2f34302d3430203d3e20313939353138.roa (hash: p0V0EhuR94jsdFZ1UsjzKoR4Va7GATjKkx+PVQ3cRs4=) 3: 326130373a353463313a343234323a3a2f34382d3438203d3e20313939353138.roa (hash: BOG3fQtugkiXpKS/p2fTg16ei6qBO6dg8xuWYfodSgU=) 4: E19302BE91C9D4211CDF4AFF091055A173B3593B.crl (hash: jbYRk3bRASESQ6Umn2JG95q7btnT2bkIm1pjeKUYkN4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/10/E19302BE91C9D4211CDF4AFF091055A173B3593B.crl rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/10/E19302BE91C9D4211CDF4AFF091055A173B3593B.mft rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/E19302BE91C9D4211CDF4AFF091055A173B3593B.cer rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 18:18:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:c3:29:19:bb:c3:60:34:17:db:f9:82:83:c4:71:cb:bb:b2:23:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E19302BE91C9D4211CDF4AFF091055A173B3593B Validity Not Before: Dec 5 15:04:02 2025 GMT Not After : Dec 6 18:18:02 2025 GMT Subject: CN=B4A1F15C291B5E293C6A84C4A91DA6C313671939 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:b2:8e:5d:4e:70:d8:5b:0b:66:54:5f:09:61: 09:04:26:ef:87:fa:9f:bb:78:06:c3:0c:a5:14:39: c7:c5:e6:23:dd:ae:53:b3:95:02:b1:60:6c:c1:5d: f8:18:1b:db:06:56:b8:b9:fb:17:d2:81:76:51:99: 7d:3c:57:b4:24:03:cd:f3:83:f4:15:2e:e4:e7:2c: 01:c6:c0:1c:78:7a:cd:7f:c3:c3:35:19:ca:3d:4f: c0:d3:40:96:cb:c2:fb:93:49:e7:b2:ea:d8:bf:72: d4:35:a4:98:3c:ae:a3:39:2d:2f:05:f7:be:b1:0e: fb:2d:57:99:67:18:d6:ac:07:d1:b6:64:1d:5a:13: 24:4a:a6:bd:f0:52:9e:6f:a8:a5:d5:8f:ae:28:2e: 5a:55:3a:73:49:e7:31:05:55:94:30:39:20:66:be: d1:58:a5:76:f9:8a:b3:ea:82:fb:6e:f9:07:e3:90: d9:6b:ef:8c:e0:bd:12:c8:8e:6c:83:8a:db:b7:62: 86:15:51:84:5d:80:79:e7:55:b3:fb:04:4a:61:89: 6e:91:8e:58:c3:71:25:60:da:65:88:0a:15:9a:96: ab:d2:f3:51:50:bd:4c:7e:c5:17:e8:b7:3d:e9:b1: 43:1f:20:f5:68:52:0b:9a:e1:fa:c3:63:17:a0:8e: 42:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:A1:F1:5C:29:1B:5E:29:3C:6A:84:C4:A9:1D:A6:C3:13:67:19:39 X509v3 Authority Key Identifier: keyid:E1:93:02:BE:91:C9:D4:21:1C:DF:4A:FF:09:10:55:A1:73:B3:59:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/10/E19302BE91C9D4211CDF4AFF091055A173B3593B.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/E19302BE91C9D4211CDF4AFF091055A173B3593B.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/10/E19302BE91C9D4211CDF4AFF091055A173B3593B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:56:2c:4a:9f:43:65:e1:41:f3:e8:a3:6b:57:d4:ea:7e:35: 1d:6d:ce:c3:46:69:b7:b6:a5:20:42:ac:fa:f3:c7:c7:7f:bb: b6:91:ca:a3:df:6d:8d:ef:b7:c9:d3:1d:f6:be:4b:30:7c:de: 85:67:e4:06:87:68:e2:5f:32:5e:3f:1b:b5:c2:15:fe:40:51: 26:4b:76:f5:6d:a5:9c:12:18:1e:02:a6:a0:93:a7:aa:0d:5d: 13:11:94:4c:f2:75:6c:b1:d3:0c:96:6a:d0:80:06:47:e9:3f: 5b:52:89:6f:d1:a5:5e:1a:26:ae:1a:39:3f:44:4c:f4:ce:03: 3d:42:43:7e:d9:bb:0a:99:01:fd:ad:e9:d5:f1:97:9d:8d:c9: d8:2b:82:e7:a4:21:5b:ac:dc:57:df:b2:4b:fa:23:27:8f:35: 6f:55:9c:83:b5:de:32:32:c7:03:b4:e6:db:a3:95:65:67:63: 7a:9c:7c:23:62:03:bd:a4:91:e3:66:49:3d:4a:86:97:9c:57: 0d:47:19:dd:40:29:24:da:00:43:ba:55:e8:a1:ef:c3:91:fa: 7d:76:4c:98:22:82:f5:41:a3:04:17:82:87:7d:3f:37:52:01: c9:2b:ee:13:78:2d:8a:7c:e5:cb:7a:40:0f:83:e5:60:46:b1: 06:52:f7:ba -----BEGIN CERTIFICATE----- MIIFfDCCBGSgAwIBAgIUFcMpGbvDYDQX2/mCg8Rxy7uyI54wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTE5MzAyQkU5MUM5RDQyMTFDREY0QUZGMDkxMDU1QTE3 M0IzNTkzQjAeFw0yNTEyMDUxNTA0MDJaFw0yNTEyMDYxODE4MDJaMDMxMTAvBgNV BAMTKEI0QTFGMTVDMjkxQjVFMjkzQzZBODRDNEE5MURBNkMzMTM2NzE5MzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgso5dTnDYWwtmVF8JYQkEJu+H +p+7eAbDDKUUOcfF5iPdrlOzlQKxYGzBXfgYG9sGVri5+xfSgXZRmX08V7QkA83z g/QVLuTnLAHGwBx4es1/w8M1Gco9T8DTQJbLwvuTSeey6ti/ctQ1pJg8rqM5LS8F 976xDvstV5lnGNasB9G2ZB1aEyRKpr3wUp5vqKXVj64oLlpVOnNJ5zEFVZQwOSBm vtFYpXb5irPqgvtu+QfjkNlr74zgvRLIjmyDitu3YoYVUYRdgHnnVbP7BEphiW6R jljDcSVg2mWIChWalqvS81FQvUx+xRfotz3psUMfIPVoUgua4frDYxegjkJZAgMB AAGjggKGMIICgjAdBgNVHQ4EFgQUtKHxXCkbXik8aoTEqR2mwxNnGTkwHwYDVR0j BBgwFoAU4ZMCvpHJ1CEc30r/CRBVoXOzWTswDgYDVR0PAQH/BAQDAgeAMIGXBgNV HR8EgY8wgYwwgYmggYaggYOGgYByc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2RlN2Q1NWY3LWVlNjAtNDAwNS1iYWQ3LWI0MjgxOGNm NTBlOC8xMC9FMTkzMDJCRTkxQzlENDIxMUNERjRBRkYwOTEwNTVBMTczQjM1OTNC LmNybDCBngYIKwYBBQUHAQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FhMDA0YmExLTQxOWIt NGRiNS1iYmQzLTVjY2E2MzNjYWUzZi80L0UxOTMwMkJFOTFDOUQ0MjExQ0RGNEFG RjA5MTA1NUExNzNCMzU5M0IuY2VyMIGgBggrBgEFBQcBCwSBkzCBkDCBjQYIKwYB BQUHMAuGgYByc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L2RlN2Q1NWY3LWVlNjAtNDAwNS1iYWQ3LWI0MjgxOGNmNTBlOC8xMC9FMTkz MDJCRTkxQzlENDIxMUNERjRBRkYwOTEwNTVBMTczQjM1OTNCLm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA S1YsSp9DZeFB8+ija1fU6n41HW3Ow0Zpt7alIEKs+vPHx3+7tpHKo99tje+3ydMd 9r5LMHzehWfkBodo4l8yXj8btcIV/kBRJkt29W2lnBIYHgKmoJOnqg1dExGUTPJ1 bLHTDJZq0IAGR+k/W1KJb9GlXhomrho5P0RM9M4DPUJDftm7CpkB/a3p1fGXnY3J 2CuC56QhW6zcV9+yS/ojJ481b1Wcg7XeMjLHA7Tm26OVZWdjepx8I2IDvaSR42ZJ PUqGl5xXDUcZ3UApJNoAQ7pV6KHvw5H6fXZMmCKC9UGjBBeCh30/N1IBySvuE3gt inzly3pAD4PlYEaxBlL3ug== -----END CERTIFICATE-----Generated at Sat Dec 6 09:22:08 2025 by rpki-client