This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.mft File: ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.mft (raw, json) Hash identifier: He4giNx6U7Q+mGeWBBiNEhEiB+hbuMVGBh8deZmXbPo= Subject key identifier: 4A:C3:39:08:DA:C3:BF:30:F7:4F:A4:89:C4:A3:3D:8F:FD:A8:14:3A Authority key identifier: ED:9E:DB:2A:15:87:17:85:FB:AE:38:E2:3C:38:82:0D:BF:A2:CC:A4 Certificate issuer: /CN=ed9edb2a15871785fbae38e23c38820dbfa2cca4 Certificate serial: 12225B55B347DCCCCC8434BB102D74A1240AC250 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.mft Manifest number: 0498 Signing time: Fri 05 Dec 2025 20:31:16 +0000 Manifest this update: Fri 05 Dec 2025 20:26:16 +0000 Manifest next update: Sat 06 Dec 2025 22:06:16 +0000 Files and hashes: 1: ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.crl (hash: Z1CzykKZK0/pfVjQjUbwcc0UkpGx0gUwJKUA9YiKMVw=) 2: 37372e38312e3133372e302f32342d3234203d3e20333939363431.roa (hash: xL9s9lGr6Y1GcoWPNRfoiIg5P1LyMl92tRndWKMRxvY=) 3: 38392e34322e3131302e302f32342d3234203d3e203631333137.roa (hash: VsyHwXGnPa9jTtnErp0xUSN9uxae8b2L7otiSzP7S2M=) 4: 38392e34322e3131312e302f32342d3234203d3e203631333137.roa (hash: T+9QQX64dOYanRzHKI9rhWnUyaZt9GgRQXrvhvIBrgs=) 5: 39332e3131332e32352e302f32342d3234203d3e20323134323039.roa (hash: JoDR/IGOmrYGEwu1+N5VZtYwQlvGeImnksk34tLzkIU=) 6: 39332e3131332e3231322e302f32342d3234203d3e203631333137.roa (hash: Mffmj9tigk0AvK8qUYEb5eCtUKaC20yQi7QyJq/JmDA=) 7: 3139332e3230332e3230342e302f32332d3233203d3e203439343638.roa (hash: SUmtopgHH8Nww5p/xP0ODKmemVjaFc93EIAThLWzp7U=) 8: 3139332e3230332e3230352e302f32342d3234203d3e203439343638.roa (hash: miGCXloG7luQuuhAJwRZ+kv5aIjNiE2JcKseZN1V68A=) 9: 37372e38312e3133382e302f32342d3234203d3e203136323736.roa (hash: QSH/lbFqFfB0kjPH8NXF1ssxXFJMA3tQTCmwcMlSfAQ=) 10: 3139332e3230332e3230342e302f32342d3234203d3e203439343638.roa (hash: QWu7fHTZ3PYuiSQam7CYDAJC5NNcXBc6g5huH6iiI3k=) 11: 34362e3130322e3233332e302f32342d3234203d3e203233383635.roa (hash: e+SnYwDfi/1yFie63JthDdkoXVxOgCTXFxhh6sC9If8=) 12: 34362e3130322e3233322e302f32342d3234203d3e203231383539.roa (hash: xmss+X7N7YEJYzsofqDqdmVc6hQlkz4fI2F5jzOV+w0=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.crl rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.mft rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:06:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:22:5b:55:b3:47:dc:cc:cc:84:34:bb:10:2d:74:a1:24:0a:c2:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed9edb2a15871785fbae38e23c38820dbfa2cca4 Validity Not Before: Dec 5 20:26:16 2025 GMT Not After : Dec 6 22:06:16 2025 GMT Subject: CN=4AC33908DAC3BF30F74FA489C4A33D8FFDA8143A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:a7:05:ad:a3:33:e8:e1:e5:b4:a1:e2:25:36: 05:cd:2c:5d:1a:06:f4:65:f9:07:c2:ad:9f:80:cd: 37:f1:c3:81:31:4d:ae:9b:80:5b:56:9f:23:a4:4d: dd:b6:49:9c:54:de:f8:71:83:ae:10:21:f2:d7:ec: df:e0:04:57:d2:e4:64:bc:06:74:ec:c9:b7:1f:a9: 57:c9:91:bf:86:6e:26:ef:67:52:28:77:18:2d:bf: 98:a4:5c:3b:05:2d:d1:78:e6:0b:c9:de:b1:04:3c: 5d:04:f8:47:90:2c:33:65:e2:43:49:4b:a9:9f:91: ad:a7:ac:05:18:56:27:3c:c6:98:1c:c9:59:33:4d: e7:3e:5b:5e:fc:44:1c:43:55:76:fb:4b:44:fc:7c: 30:31:f0:68:24:73:5c:49:d7:2d:fa:96:a7:4c:d9: 31:27:f0:11:30:8a:bc:9d:29:9f:7d:a4:f0:25:97: a2:df:f1:c0:23:42:a7:8d:68:84:dc:95:2d:85:73: 20:98:e2:dd:e9:32:58:36:ca:d5:54:04:42:95:33: 7f:f1:42:ab:d6:75:b4:8e:f3:75:7c:f8:45:9d:82: 3e:d8:c8:06:b9:84:13:6a:c4:4c:c4:2b:ad:ff:0c: 03:80:89:82:1a:23:9b:e4:aa:b1:15:44:90:1b:44: ee:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:C3:39:08:DA:C3:BF:30:F7:4F:A4:89:C4:A3:3D:8F:FD:A8:14:3A X509v3 Authority Key Identifier: keyid:ED:9E:DB:2A:15:87:17:85:FB:AE:38:E2:3C:38:82:0D:BF:A2:CC:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:0d:f2:43:94:9d:23:7e:ca:43:25:46:14:b8:14:ad:73:b9: 99:bf:9d:25:9f:26:5a:91:8a:a5:d7:cc:48:cf:2f:a8:3c:f7: 82:eb:e6:ee:21:c6:8e:f6:1d:fe:17:42:ef:1b:36:df:9b:27: 45:2f:d9:39:d2:87:6f:7c:43:e4:4e:85:b7:7d:59:28:9d:14: 26:36:9a:3f:dd:c7:f4:02:bb:70:32:34:f8:4c:27:05:8a:e3: 21:46:c2:9c:c1:d4:e6:4c:e2:f6:8e:59:ca:a7:6d:84:18:d3: d0:00:1d:15:ec:5e:a8:04:cd:ab:81:a6:23:80:53:08:fc:be: 26:62:75:d1:a6:bc:3f:45:c7:6e:50:ff:cb:d8:a7:86:a4:e5: 38:0e:6c:05:05:2b:57:68:55:94:89:2c:3e:40:22:87:63:37: 2e:3e:d2:b0:28:b8:ef:0f:56:37:9c:42:02:e8:8b:92:c4:9e: da:2e:b1:d7:e3:d4:b6:50:c4:0d:74:41:ad:bb:1f:93:1d:48: 4b:db:ea:5c:cb:16:2f:66:ac:86:8f:2b:52:22:6f:94:8f:68: 97:59:94:85:70:12:01:ca:4d:4d:d0:b6:70:91:3e:8a:50:18: 2e:67:29:17:8c:83:af:5a:2b:2f:24:a0:bc:53:e8:6e:c7:37: 75:21:b5:33 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUEiJbVbNH3MzMhDS7EC10oSQKwlAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZWQ5ZWRiMmExNTg3MTc4NWZiYWUzOGUyM2MzODgyMGRi ZmEyY2NhNDAeFw0yNTEyMDUyMDI2MTZaFw0yNTEyMDYyMjA2MTZaMDMxMTAvBgNV BAMTKDRBQzMzOTA4REFDM0JGMzBGNzRGQTQ4OUM0QTMzRDhGRkRBODE0M0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtpwWtozPo4eW0oeIlNgXNLF0a BvRl+QfCrZ+AzTfxw4ExTa6bgFtWnyOkTd22SZxU3vhxg64QIfLX7N/gBFfS5GS8 BnTsybcfqVfJkb+GbibvZ1Iodxgtv5ikXDsFLdF45gvJ3rEEPF0E+EeQLDNl4kNJ S6mfka2nrAUYVic8xpgcyVkzTec+W178RBxDVXb7S0T8fDAx8Ggkc1xJ1y36lqdM 2TEn8BEwirydKZ99pPAll6Lf8cAjQqeNaITclS2FcyCY4t3pMlg2ytVUBEKVM3/x QqvWdbSO83V8+EWdgj7YyAa5hBNqxEzEK63/DAOAiYIaI5vkqrEVRJAbRO5jAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUSsM5CNrDvzD3T6SJxKM9j/2oFDowHwYDVR0j BBgwFoAU7Z7bKhWHF4X7rjjiPDiCDb+izKQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZWEwZGU5N2YtN2VlOC00Y2UwLWIwNDUtZWZhYzhjMjQz Yzc5LzAvRUQ5RURCMkExNTg3MTc4NUZCQUUzOEUyM0MzODgyMERCRkEyQ0NBNC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdaN2JLaFdIRjRYN3JqamlQRGlDRGIt aXpLUS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lYTBkZTk3Zi03 ZWU4LTRjZTAtYjA0NS1lZmFjOGMyNDNjNzkvMC9FRDlFREIyQTE1ODcxNzg1RkJB RTM4RTIzQzM4ODIwREJGQTJDQ0E0Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMw3yQ5SdI37KQyVGFLgU rXO5mb+dJZ8mWpGKpdfMSM8vqDz3guvm7iHGjvYd/hdC7xs235snRS/ZOdKHb3xD 5E6Ft31ZKJ0UJjaaP93H9AK7cDI0+EwnBYrjIUbCnMHU5kzi9o5ZyqdthBjT0AAd FexeqATNq4GmI4BTCPy+JmJ10aa8P0XHblD/y9inhqTlOA5sBQUrV2hVlIksPkAi h2M3Lj7SsCi47w9WN5xCAuiLksSe2i6x1+PUtlDEDXRBrbsfkx1IS9vqXMsWL2as ho8rUiJvlI9ol1mUhXASAcpNTdC2cJE+ilAYLmcpF4yDr1orLySgvFPobsc3dSG1 Mw== -----END CERTIFICATE-----Generated at Sat Dec 6 11:10:22 2025 by rpki-client