This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.mft File: ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.mft (raw, json) Hash identifier: lwn03UcLhui0vwi4xVLiuN26W3Kv9VBAtFkuWz0fkmA= Subject key identifier: 4B:A7:6F:A4:DE:ED:2B:D3:21:88:CB:7C:BE:DD:5B:C8:86:30:DB:3F Authority key identifier: ED:9E:DB:2A:15:87:17:85:FB:AE:38:E2:3C:38:82:0D:BF:A2:CC:A4 Certificate issuer: /CN=ed9edb2a15871785fbae38e23c38820dbfa2cca4 Certificate serial: 6DADB0AD8B09AA6EBBFA1458C007137F2ADA4192 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.mft Manifest number: 04A9 Signing time: Thu 18 Dec 2025 10:07:32 +0000 Manifest this update: Thu 18 Dec 2025 10:02:32 +0000 Manifest next update: Fri 19 Dec 2025 12:48:32 +0000 Files and hashes: 1: 34362e3130322e3233332e302f32342d3234203d3e203233383635.roa (hash: e+SnYwDfi/1yFie63JthDdkoXVxOgCTXFxhh6sC9If8=) 2: 3139332e3230332e3230342e302f32332d3233203d3e203439343638.roa (hash: SUmtopgHH8Nww5p/xP0ODKmemVjaFc93EIAThLWzp7U=) 3: 34362e3130322e3233322e302f32342d3234203d3e203231383539.roa (hash: xmss+X7N7YEJYzsofqDqdmVc6hQlkz4fI2F5jzOV+w0=) 4: 3139332e3230332e3230352e302f32342d3234203d3e203439343638.roa (hash: miGCXloG7luQuuhAJwRZ+kv5aIjNiE2JcKseZN1V68A=) 5: 39332e3131332e32352e302f32342d3234203d3e20323134323039.roa (hash: JoDR/IGOmrYGEwu1+N5VZtYwQlvGeImnksk34tLzkIU=) 6: 39332e3131332e3231322e302f32342d3234203d3e203631333137.roa (hash: Mffmj9tigk0AvK8qUYEb5eCtUKaC20yQi7QyJq/JmDA=) 7: 38392e34322e3131302e302f32342d3234203d3e203631333137.roa (hash: VsyHwXGnPa9jTtnErp0xUSN9uxae8b2L7otiSzP7S2M=) 8: 37372e38312e3133372e302f32342d3234203d3e20333939363431.roa (hash: xL9s9lGr6Y1GcoWPNRfoiIg5P1LyMl92tRndWKMRxvY=) 9: 3139332e3230332e3230342e302f32342d3234203d3e203439343638.roa (hash: QWu7fHTZ3PYuiSQam7CYDAJC5NNcXBc6g5huH6iiI3k=) 10: ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.crl (hash: TTa8ckrZyC4OVFqk4+HwZiAaBpXbYiQapsUk3PF9e0c=) 11: 38392e34322e3131312e302f32342d3234203d3e203631333137.roa (hash: T+9QQX64dOYanRzHKI9rhWnUyaZt9GgRQXrvhvIBrgs=) 12: 37372e38312e3133382e302f32342d3234203d3e203136323736.roa (hash: QSH/lbFqFfB0kjPH8NXF1ssxXFJMA3tQTCmwcMlSfAQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.crl rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.mft rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 12:48:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:ad:b0:ad:8b:09:aa:6e:bb:fa:14:58:c0:07:13:7f:2a:da:41:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed9edb2a15871785fbae38e23c38820dbfa2cca4 Validity Not Before: Dec 18 10:02:32 2025 GMT Not After : Dec 19 12:48:32 2025 GMT Subject: CN=4BA76FA4DEED2BD32188CB7CBEDD5BC88630DB3F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:54:f6:1d:65:a5:9c:00:bd:85:69:9d:b7:86: 66:b6:1e:fa:a8:0a:7c:b4:06:19:53:6b:a2:b4:96: 23:10:cc:e9:5c:e4:ff:e8:68:db:1f:10:06:56:95: 89:ae:7e:e9:42:1f:d2:7c:cb:df:59:b6:22:dc:1d: 30:36:86:d3:37:92:87:67:ff:bd:5b:fc:8e:8d:5f: 30:c9:87:ce:4d:6d:24:fa:55:2b:ff:9f:ed:40:14: b7:08:19:ba:14:7a:ad:74:f5:75:bb:87:19:ce:de: bd:03:83:1f:8e:28:cf:cc:82:ed:ca:58:22:3e:83: 2f:4c:a3:25:6d:2d:5c:21:dd:8a:14:d9:e9:ef:e2: c6:38:ed:a7:bb:a3:4b:33:4a:f9:7a:b1:d6:91:c3: 09:72:bd:3f:5f:61:db:c7:e6:b4:c3:c4:06:e9:00: 86:de:ac:23:62:03:31:8d:04:6f:36:b7:be:9f:3b: 57:31:8c:05:59:4d:ee:88:0a:95:54:66:92:8d:5f: 65:e0:df:d4:0e:64:41:cb:aa:d8:29:a1:15:16:ae: 0e:14:69:d4:78:ee:12:e3:85:f0:15:88:e8:57:a7: dc:96:d5:74:58:34:f7:d5:a7:e7:cc:b8:d7:8c:34: b3:af:8c:73:9d:87:3c:b6:b6:91:27:90:e6:2a:c3: be:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:A7:6F:A4:DE:ED:2B:D3:21:88:CB:7C:BE:DD:5B:C8:86:30:DB:3F X509v3 Authority Key Identifier: keyid:ED:9E:DB:2A:15:87:17:85:FB:AE:38:E2:3C:38:82:0D:BF:A2:CC:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:8f:68:77:3d:71:be:aa:f0:a7:8c:e5:61:af:1c:86:44:ec: 4a:18:9e:b3:db:64:c6:6d:31:98:59:71:a3:66:d9:77:f6:27: 97:1e:0c:bf:25:ed:ec:97:b9:ba:eb:12:79:57:75:bb:40:a1: ef:89:5a:d3:ae:7b:84:de:5a:88:39:24:0c:f8:3c:d0:9d:a9: 37:e9:cd:aa:e6:36:72:95:c4:40:4b:21:da:46:9a:92:84:8a: 96:5d:2d:b6:2d:da:17:a7:fb:1e:e3:fe:ea:07:71:cf:8e:31: 9d:4e:39:a9:5c:df:f5:51:f5:d7:22:06:13:83:32:e5:3e:3e: 71:2d:db:b1:45:55:fb:bf:87:26:ad:fc:f6:e3:b4:76:f2:8c: e2:c2:d2:8e:ad:9f:f3:27:c8:be:bf:71:48:18:b4:5d:bb:66: d3:d3:f1:a2:a9:f3:d4:df:12:5c:fb:41:ae:2b:0d:c4:bf:46: dd:e7:c1:1d:8d:a6:33:ea:71:d8:c1:a6:69:45:2d:e0:f1:0a: ca:c2:bb:d2:7f:40:e3:57:61:53:aa:61:5b:9b:d3:bf:5a:78: 9a:0a:a8:d8:e4:c6:b0:53:2a:32:8f:6b:54:87:e5:d5:41:eb: 7c:78:eb:71:5c:84:6f:af:9f:46:71:5f:18:91:91:68:68:60: b6:00:04:f1 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUba2wrYsJqm67+hRYwAcTfyraQZIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZWQ5ZWRiMmExNTg3MTc4NWZiYWUzOGUyM2MzODgyMGRi ZmEyY2NhNDAeFw0yNTEyMTgxMDAyMzJaFw0yNTEyMTkxMjQ4MzJaMDMxMTAvBgNV BAMTKDRCQTc2RkE0REVFRDJCRDMyMTg4Q0I3Q0JFREQ1QkM4ODYzMERCM0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcVPYdZaWcAL2FaZ23hma2Hvqo Cny0BhlTa6K0liMQzOlc5P/oaNsfEAZWlYmufulCH9J8y99ZtiLcHTA2htM3kodn /71b/I6NXzDJh85NbST6VSv/n+1AFLcIGboUeq109XW7hxnO3r0Dgx+OKM/Mgu3K WCI+gy9MoyVtLVwh3YoU2env4sY47ae7o0szSvl6sdaRwwlyvT9fYdvH5rTDxAbp AIberCNiAzGNBG82t76fO1cxjAVZTe6ICpVUZpKNX2Xg39QOZEHLqtgpoRUWrg4U adR47hLjhfAViOhXp9yW1XRYNPfVp+fMuNeMNLOvjHOdhzy2tpEnkOYqw76PAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUS6dvpN7tK9MhiMt8vt1byIYw2z8wHwYDVR0j BBgwFoAU7Z7bKhWHF4X7rjjiPDiCDb+izKQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZWEwZGU5N2YtN2VlOC00Y2UwLWIwNDUtZWZhYzhjMjQz Yzc5LzAvRUQ5RURCMkExNTg3MTc4NUZCQUUzOEUyM0MzODgyMERCRkEyQ0NBNC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdaN2JLaFdIRjRYN3JqamlQRGlDRGIt aXpLUS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lYTBkZTk3Zi03 ZWU4LTRjZTAtYjA0NS1lZmFjOGMyNDNjNzkvMC9FRDlFREIyQTE1ODcxNzg1RkJB RTM4RTIzQzM4ODIwREJGQTJDQ0E0Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADI9odz1xvqrwp4zlYa8c hkTsShies9tkxm0xmFlxo2bZd/Ynlx4MvyXt7Je5uusSeVd1u0Ch74la0657hN5a iDkkDPg80J2pN+nNquY2cpXEQEsh2kaakoSKll0tti3aF6f7HuP+6gdxz44xnU45 qVzf9VH11yIGE4My5T4+cS3bsUVV+7+HJq389uO0dvKM4sLSjq2f8yfIvr9xSBi0 Xbtm09Pxoqnz1N8SXPtBrisNxL9G3efBHY2mM+px2MGmaUUt4PEKysK70n9A41dh U6phW5vTv1p4mgqo2OTGsFMqMo9rVIfl1UHrfHjrcVyEb6+fRnFfGJGRaGhgtgAE 8Q== -----END CERTIFICATE-----Generated at Fri Dec 19 01:21:31 2025 by rpki-client