This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft File: 88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft (raw, json) Hash identifier: VxN6IIqC9uGuBgk/lqXJsUktfaBilIrKEDtRiPPHrhg= Subject key identifier: F2:E6:7F:D5:C0:2A:AE:72:1B:8F:17:4F:DC:7F:88:51:57:91:C7:DB Authority key identifier: 88:CD:D9:C1:93:DA:91:85:A4:AC:15:B2:AD:E8:75:FE:97:B6:F4:91 Certificate issuer: /CN=88cdd9c193da9185a4ac15b2ade875fe97b6f491 Certificate serial: 12B87570C0DC2AC276FF12C8A50CF77FF9859F7B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iM3ZwZPakYWkrBWyreh1_pe29JE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft Manifest number: 027B Signing time: Fri 05 Dec 2025 10:05:12 +0000 Manifest this update: Fri 05 Dec 2025 10:00:12 +0000 Manifest next update: Sat 06 Dec 2025 11:41:12 +0000 Files and hashes: 1: 88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.crl (hash: 2NRBKnmwtL+vqNEHEKnuBWC0i4sxTY1uCYX5eMbdQiw=) 2: 326130643a623238373a646164303a3a2f34342d3434203d3e20323038343337.roa (hash: Lh+NThTArglnDdFNJgAbksxydedvZ3VhoYilxW6dgHQ=) 3: 326130643a623238303a3a2f32392d3239203d3e203431373230.roa (hash: UtcmwgPmmxIsh/ra+btug0leCQZCVTQekME41LiPWtU=) 4: 326130643a623238373a646430303a3a2f34302d3430203d3e20323136333039.roa (hash: mpzPSr1CBW6Ka5Te0DE52rLBHWk7ArDQlInbkbsiPzA=) 5: 326130643a623238373a646130303a3a2f34382d3438203d3e20323135313436.roa (hash: BOfTSY7wWayFslIYZyC++f09YnW0ZvOoQVsy6AzQanA=) 6: 326130643a623238373a653930303a3a2f34302d3430203d3e203437313532.roa (hash: YeBU5ew7EbaM3M5c2zGWzk0Q7RzGkO4TGKp/4byQ64k=) 7: 3138352e3234322e3138312e302f32342d3234203d3e203431373230.roa (hash: BJe1bO6YYCEXeriSlULaZwS25Q4hRdnweRF5hyXEuDY=) 8: 326130643a623238373a656230303a3a2f34302d3430203d3e20323133373039.roa (hash: Nk6ANHp8DkJz6kDCL9bvYoWgqeyO4UOw/aVOiTsobgk=) 9: 326130643a623238373a653966663a3a2f34382d3438203d3e20323038373533.roa (hash: kmFg1Ubyi8msuCXkZq9wTUwo9VmgSHMiCqLO0oSubS4=) 10: 3138352e3234322e3138322e302f32342d3234203d3e203431373230.roa (hash: gAYzs7DeTkU9g1RDUiQKlOcpyqQALQV1LLqH3P6H/bU=) 11: 326130643a623238373a656330303a3a2f34302d3430203d3e20323038333238.roa (hash: eT5l/HEUwKyeWtm/1X7rr0MrwygNo9k95lPs1zLe884=) 12: 326130643a623238373a646130313a3a2f34382d3438203d3e20323132353339.roa (hash: U56VGJcjuLrEYPpG7oABc/1/udX8BKChn+eBmuJZDts=) 13: 3138352e3234322e3138302e302f32342d3234203d3e203431373230.roa (hash: m2CiuFBjrlRavusUidV8mkbKXKHzyUUUhDYGNFwtBAs=) 14: 326130643a623238373a656530303a3a2f34302d3430203d3e20323038333238.roa (hash: Q6Io7mv8dNkJZap1oGvqDaJWxZcBIoRNlU5W1SfkDVo=) 15: 326130643a623238373a656334323a3a2f34382d3438203d3e20323134393235.roa (hash: JAmgJM2VGcbQzWkOuFvV1aRU7IhMtvcEw/0vm9hTp3I=) 16: AS41720.asa (hash: R9jFblFZaPwUK6Huk1SWnasBO6ka9sffBE6ldnurUoM=) 17: 326130643a623238373a656130303a3a2f34302d3430203d3e20323032373034.roa (hash: JNRd26hu5UclLm2ralvA5Swgz/zS0HyqV27DJFHZj6c=) 18: 3138352e3234322e3138332e302f32342d3234203d3e203431373230.roa (hash: V4bF3gDy6FE6zlNg9r0xUvpdAXLZEuLnN1FQtQz0KTM=) 19: 326130643a623238303a383130303a3a2f34382d3438203d3e203431373230.roa (hash: ItyIHbG/IJlKjOf6vhLnjpZ9k/lt97Z65upW37DdGzA=) 20: 326130643a623238373a656334313a3a2f34382d3438203d3e20323132353136.roa (hash: S10o6lJcne+SfvZMZmd0ndSNpfqn8OsjAJw8rNDdBSw=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.crl rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft rsync://rpki.ripe.net/repository/DEFAULT/iM3ZwZPakYWkrBWyreh1_pe29JE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:41:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:b8:75:70:c0:dc:2a:c2:76:ff:12:c8:a5:0c:f7:7f:f9:85:9f:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88cdd9c193da9185a4ac15b2ade875fe97b6f491 Validity Not Before: Dec 5 10:00:12 2025 GMT Not After : Dec 6 11:41:12 2025 GMT Subject: CN=F2E67FD5C02AAE721B8F174FDC7F88515791C7DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:93:6e:a3:33:43:8f:f5:e3:9e:3d:cc:92:9f: a0:08:64:a0:38:da:62:4b:89:9c:35:6e:29:d5:24: 9b:aa:39:67:ed:dd:77:bd:dc:b5:95:78:c3:25:41: aa:f0:70:39:cf:d3:b4:ba:8a:8b:70:96:22:0d:95: 19:32:8b:13:2a:c9:e8:81:0e:48:6a:b9:a3:1e:9b: 12:b3:fe:1d:c8:48:a1:5b:6d:b5:88:db:0a:bc:35: 32:90:3b:ad:ef:80:f0:49:24:38:cc:26:61:c4:2a: 10:b3:e9:f9:fd:bb:3d:01:e0:e0:73:85:09:41:ab: 31:07:70:da:9d:b1:13:53:55:20:40:27:2b:f2:6c: 62:3d:65:03:a7:c8:af:c5:d5:e5:a2:46:a3:e0:bb: 95:82:e0:2d:d5:34:66:6d:bc:9e:8a:e0:4c:4a:83: 46:8b:78:c5:9c:36:d6:f7:13:a2:47:aa:a1:5a:30: 4d:d0:36:32:e0:a2:55:60:8d:d6:2f:42:d5:0a:cb: 31:52:aa:8a:7b:71:a8:b8:83:bc:cc:92:a8:e9:a1: f3:1b:57:2d:a5:1f:62:14:86:1b:e3:b3:2c:0e:29: df:02:9a:43:68:e7:1b:31:fc:93:10:9c:70:af:f8: 5f:d9:a8:bb:25:60:01:72:f0:6a:b1:8b:57:e2:a7: 8b:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:E6:7F:D5:C0:2A:AE:72:1B:8F:17:4F:DC:7F:88:51:57:91:C7:DB X509v3 Authority Key Identifier: keyid:88:CD:D9:C1:93:DA:91:85:A4:AC:15:B2:AD:E8:75:FE:97:B6:F4:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iM3ZwZPakYWkrBWyreh1_pe29JE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:22:d2:e6:13:6a:c9:83:77:0b:ce:93:72:0d:92:be:2a:cb: b7:58:43:fc:ca:44:74:74:56:6b:59:f2:64:41:07:50:5d:79: d6:8f:a0:c9:39:67:96:1b:7c:44:8f:59:76:5f:5e:fb:eb:b3: 1a:f7:f0:ca:ce:18:ed:5f:7b:ba:4e:ef:af:ec:cf:fd:e5:f8: f2:9a:a8:3a:ca:30:5f:b9:4a:e5:2b:94:c5:f1:03:3b:71:de: 38:ae:28:10:7d:2c:e4:f7:c9:04:d5:c7:02:af:ec:3d:59:cb: 6f:85:90:2c:d6:da:84:a1:61:aa:30:dd:3e:fc:13:8f:0e:a0: 32:9b:f8:c3:db:b6:f1:35:06:7a:6b:8e:d9:e5:3f:b1:d0:39: 7a:3f:04:3e:c6:8c:6d:6f:a8:9f:02:7e:0f:b3:04:4f:ad:8b: a1:68:db:c8:9b:f0:52:bd:fe:17:6f:b0:af:47:56:1c:15:83: 43:77:14:e2:40:dd:81:a1:e9:79:39:a2:64:36:08:05:49:eb: 9b:64:77:46:76:c7:16:ab:f6:c1:b5:06:82:46:9e:da:f0:12: 83:98:01:15:e2:73:9f:34:5f:a2:fb:75:03:71:20:5a:38:00: 68:11:2b:44:5c:e7:0a:fc:b0:b2:a6:35:c1:6c:ea:44:dd:90: 90:bc:0e:94 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUErh1cMDcKsJ2/xLIpQz3f/mFn3swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODhjZGQ5YzE5M2RhOTE4NWE0YWMxNWIyYWRlODc1ZmU5 N2I2ZjQ5MTAeFw0yNTEyMDUxMDAwMTJaFw0yNTEyMDYxMTQxMTJaMDMxMTAvBgNV BAMTKEYyRTY3RkQ1QzAyQUFFNzIxQjhGMTc0RkRDN0Y4ODUxNTc5MUM3REIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwk26jM0OP9eOePcySn6AIZKA4 2mJLiZw1binVJJuqOWft3Xe93LWVeMMlQarwcDnP07S6iotwliINlRkyixMqyeiB DkhquaMemxKz/h3ISKFbbbWI2wq8NTKQO63vgPBJJDjMJmHEKhCz6fn9uz0B4OBz hQlBqzEHcNqdsRNTVSBAJyvybGI9ZQOnyK/F1eWiRqPgu5WC4C3VNGZtvJ6K4ExK g0aLeMWcNtb3E6JHqqFaME3QNjLgolVgjdYvQtUKyzFSqop7cai4g7zMkqjpofMb Vy2lH2IUhhvjsywOKd8CmkNo5xsx/JMQnHCv+F/ZqLslYAFy8Gqxi1fip4u7AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU8uZ/1cAqrnIbjxdP3H+IUVeRx9swHwYDVR0j BBgwFoAUiM3ZwZPakYWkrBWyreh1/pe29JEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZTZhZmYyMzQtNjFjNS00MjkwLThhNmQtNWYyYjkwMjcz MjJmLzAvODhDREQ5QzE5M0RBOTE4NUE0QUMxNUIyQURFODc1RkU5N0I2RjQ5MS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2lNM1p3WlBha1lXa3JCV3lyZWgxX3Bl MjlKRS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lNmFmZjIzNC02 MWM1LTQyOTAtOGE2ZC01ZjJiOTAyNzMyMmYvMC84OENERDlDMTkzREE5MTg1QTRB QzE1QjJBREU4NzVGRTk3QjZGNDkxLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACiLS5hNqyYN3C86Tcg2S virLt1hD/MpEdHRWa1nyZEEHUF151o+gyTlnlht8RI9Zdl9e++uzGvfwys4Y7V97 uk7vr+zP/eX48pqoOsowX7lK5SuUxfEDO3HeOK4oEH0s5PfJBNXHAq/sPVnLb4WQ LNbahKFhqjDdPvwTjw6gMpv4w9u28TUGemuO2eU/sdA5ej8EPsaMbW+onwJ+D7ME T62LoWjbyJvwUr3+F2+wr0dWHBWDQ3cU4kDdgaHpeTmiZDYIBUnrm2R3RnbHFqv2 wbUGgkae2vASg5gBFeJznzRfovt1A3EgWjgAaBErRFznCvywsqY1wWzqRN2QkLwO lA== -----END CERTIFICATE-----Generated at Sat Dec 6 05:05:30 2025 by rpki-client