This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.mft File: 0993289B168A37D449BC0D44B1AD35E532025CF1.mft (raw, json) Hash identifier: PKtt9lkxE3RvCHc78xa2cVmIAnEC5e/dpnznnXZAeZ0= Subject key identifier: 4C:0D:3C:E5:3B:EC:2C:12:5D:2C:A3:32:98:7C:08:33:6D:4E:F8:16 Authority key identifier: 09:93:28:9B:16:8A:37:D4:49:BC:0D:44:B1:AD:35:E5:32:02:5C:F1 Certificate issuer: /CN=0993289b168a37d449bc0d44b1ad35e532025cf1 Certificate serial: 247B543D5EF91CF71CEE693820F3DCC086BAFE3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CZMomxaKN9RJvA1Esa015TICXPE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.mft Manifest number: 02FC Signing time: Fri 05 Dec 2025 20:41:16 +0000 Manifest this update: Fri 05 Dec 2025 20:36:16 +0000 Manifest next update: Sat 06 Dec 2025 21:17:16 +0000 Files and hashes: 1: 3139342e3135362e37362e302f32342d3234203d3e20323132323338.roa (hash: +FUmQfKGqa7l1UgyL4zjqDbJWdoQDDjzi+PS6gpsjlM=) 2: 0993289B168A37D449BC0D44B1AD35E532025CF1.crl (hash: hfxMgsuk/TjQsCJWXqdo8x954ZzQF8Ff/ajWuDNmMYY=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.crl rsync://rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.mft rsync://rpki.ripe.net/repository/DEFAULT/CZMomxaKN9RJvA1Esa015TICXPE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 21:17:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:7b:54:3d:5e:f9:1c:f7:1c:ee:69:38:20:f3:dc:c0:86:ba:fe:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0993289b168a37d449bc0d44b1ad35e532025cf1 Validity Not Before: Dec 5 20:36:16 2025 GMT Not After : Dec 6 21:17:16 2025 GMT Subject: CN=4C0D3CE53BEC2C125D2CA332987C08336D4EF816 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:97:1c:87:6f:af:a9:81:d2:b3:2d:2c:2d:62: 5a:93:e9:78:da:be:9a:08:f6:1c:99:54:54:1e:18: e3:95:e8:a2:97:e5:a3:23:78:36:32:95:61:76:4d: c4:fb:aa:e2:60:22:0c:e5:09:09:37:6a:f9:51:03: 9e:df:b6:06:43:67:cb:4a:a0:e7:ff:44:98:d2:cd: ce:aa:d2:53:bd:d7:dc:cb:c7:1e:34:91:5e:74:7e: e7:2c:76:c5:eb:f5:6f:92:1b:10:7d:da:3e:4d:c9: 29:8e:88:4f:78:51:b0:37:f0:88:b9:d0:d2:c3:8c: ea:1e:10:e2:52:aa:f5:ee:3c:da:0d:41:87:9e:ef: 22:9f:0a:0a:dc:fa:d7:90:36:d6:0c:81:42:da:b6: 38:45:5e:d2:c5:c1:d4:8c:37:73:62:36:a7:0f:d9: 1c:60:e6:c6:23:47:c5:77:35:60:1c:30:69:71:44: e3:6c:88:bb:d3:bc:98:3b:f9:d9:db:76:00:49:84: 9a:40:93:2f:51:60:c6:9b:ca:08:8e:c5:be:33:a1: de:1b:ba:32:30:f4:4f:cb:bb:42:29:4c:87:be:96: 76:c0:88:c0:39:9b:dd:04:e0:f9:3b:38:33:67:35: cf:2d:8a:ce:2a:74:96:61:2e:d9:0d:61:21:3e:ce: 1d:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:0D:3C:E5:3B:EC:2C:12:5D:2C:A3:32:98:7C:08:33:6D:4E:F8:16 X509v3 Authority Key Identifier: keyid:09:93:28:9B:16:8A:37:D4:49:BC:0D:44:B1:AD:35:E5:32:02:5C:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CZMomxaKN9RJvA1Esa015TICXPE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:8e:3f:c2:2f:fa:74:8c:19:2b:10:60:01:83:89:86:49:06: 97:2f:55:12:e1:39:60:dd:38:43:f2:19:eb:26:58:d4:11:e6: fe:5e:2e:b8:b2:d8:f4:64:70:42:82:0d:36:7c:ab:2e:29:f9: c9:71:de:ec:b9:66:6e:b1:5c:ac:58:de:a8:30:8c:47:79:8d: 01:3a:bb:b2:96:a3:56:f8:1e:41:89:b1:60:b5:85:17:b1:7a: f5:d8:28:03:a1:0d:90:d9:1c:5f:70:86:c1:69:f9:fd:30:74: 9e:08:55:78:52:59:59:23:43:cf:34:23:af:c8:19:84:d4:35: cc:78:62:76:0e:03:a5:70:82:61:92:16:33:a1:fb:03:d1:d6: ed:1a:b7:12:f6:48:4e:6a:8f:f8:1a:84:a2:f6:2e:bb:f6:39: 17:5f:26:f9:bd:3f:43:a8:2c:30:ed:9b:35:ea:81:ae:f3:6d: c9:c3:bd:27:af:68:fc:9c:9c:d0:33:60:8c:08:97:f6:5c:fd: 74:ed:23:0a:5a:99:c3:fd:ef:61:19:4b:5e:0d:8d:0f:76:85: 91:86:08:6a:4d:c9:ce:32:51:a9:86:34:f9:f8:4f:e6:8a:e7: a4:f6:31:bf:85:f3:2d:57:a6:0c:3c:28:6f:e2:a4:f8:45:ff: 76:91:d3:8f -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUJHtUPV75HPcc7mk4IPPcwIa6/jwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk5MzI4OWIxNjhhMzdkNDQ5YmMwZDQ0YjFhZDM1ZTUz MjAyNWNmMTAeFw0yNTEyMDUyMDM2MTZaFw0yNTEyMDYyMTE3MTZaMDMxMTAvBgNV BAMTKDRDMEQzQ0U1M0JFQzJDMTI1RDJDQTMzMjk4N0MwODMzNkQ0RUY4MTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCylxyHb6+pgdKzLSwtYlqT6Xja vpoI9hyZVFQeGOOV6KKX5aMjeDYylWF2TcT7quJgIgzlCQk3avlRA57ftgZDZ8tK oOf/RJjSzc6q0lO919zLxx40kV50fucsdsXr9W+SGxB92j5NySmOiE94UbA38Ii5 0NLDjOoeEOJSqvXuPNoNQYee7yKfCgrc+teQNtYMgULatjhFXtLFwdSMN3NiNqcP 2Rxg5sYjR8V3NWAcMGlxRONsiLvTvJg7+dnbdgBJhJpAky9RYMabygiOxb4zod4b ujIw9E/Lu0IpTIe+lnbAiMA5m90E4Pk7ODNnNc8tis4qdJZhLtkNYSE+zh1vAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUTA085TvsLBJdLKMymHwIM21O+BYwHwYDVR0j BBgwFoAUCZMomxaKN9RJvA1Esa015TICXPEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZTNiZDJkMmUtZjQwZS00NzJlLTlmOGYtODk4NGZlYWFh NWM3LzAvMDk5MzI4OUIxNjhBMzdENDQ5QkMwRDQ0QjFBRDM1RTUzMjAyNUNGMS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NaTW9teGFLTjlSSnZBMUVzYTAxNVRJ Q1hQRS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lM2JkMmQyZS1m NDBlLTQ3MmUtOWY4Zi04OTg0ZmVhYWE1YzcvMC8wOTkzMjg5QjE2OEEzN0Q0NDlC QzBENDRCMUFEMzVFNTMyMDI1Q0YxLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs44/wi/6dIwZKxBgAYOJ hkkGly9VEuE5YN04Q/IZ6yZY1BHm/l4uuLLY9GRwQoINNnyrLin5yXHe7LlmbrFc rFjeqDCMR3mNATq7spajVvgeQYmxYLWFF7F69dgoA6ENkNkcX3CGwWn5/TB0nghV eFJZWSNDzzQjr8gZhNQ1zHhidg4DpXCCYZIWM6H7A9HW7Rq3EvZITmqP+BqEovYu u/Y5F18m+b0/Q6gsMO2bNeqBrvNtycO9J69o/Jyc0DNgjAiX9lz9dO0jClqZw/3v YRlLXg2ND3aFkYYIak3JzjJRqYY0+fhP5ornpPYxv4XzLVemDDwob+Kk+EX/dpHT jw== -----END CERTIFICATE-----Generated at Sat Dec 6 13:38:10 2025 by rpki-client