This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft File: C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft (raw, json) Hash identifier: yGwOBJhi2tjU9hFIibqBVuJ0hahhv0sCu4eI9LUTPOE= Subject key identifier: 61:60:FD:85:E6:90:2B:BF:BA:11:20:96:CE:C4:B2:0D:6D:37:36:83 Authority key identifier: C7:70:F4:33:58:B9:7B:A0:AA:9B:DC:62:BB:D5:11:E9:0A:EA:B2:9D Certificate issuer: /CN=c770f43358b97ba0aa9bdc62bbd511e90aeab29d Certificate serial: 4E9A97CF7B9F2CF280CF06CFFE9882C4ED546B5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft Manifest number: 0222 Signing time: Fri 05 Dec 2025 16:46:16 +0000 Manifest this update: Fri 05 Dec 2025 16:41:16 +0000 Manifest next update: Sat 06 Dec 2025 18:26:16 +0000 Files and hashes: 1: 33312e32322e3130352e302f32342d3234203d3e20323135303236.roa (hash: CEnX1eNlwK6zTbdiivvYtvATObcHBs1ojc6GAmrJxmA=) 2: 3130332e34392e3132392e302f32342d3234203d3e20313533373836.roa (hash: 8ciOgQf/5f2kkiTl0Q7pGFYfq76YJlE+KlbE9/JeEuM=) 3: 3130332e34392e3133312e302f32342d3234203d3e20313437323631.roa (hash: gI3QMk1nxnVJ3ar9nDADeDjafrF5rxSYgoW75rlLkBk=) 4: 33312e32322e3130392e302f32342d3234203d3e203432383331.roa (hash: uRUTbbdZ8AYVGvK3CKTe3KYxaaV1m1bGyvfgh/rstUI=) 5: 33312e32322e3130372e302f32342d3234203d3e20313337353137.roa (hash: zucU5bamNfYRw/esvivyzaXHMAl8N0xQ+Q3coI+3JvA=) 6: 3130332e34392e3133312e302f32342d3234203d3e20323133373131.roa (hash: 0KQImRtVxQSlo2IkiWEm4Ta1ecdBVyx0gErMixeusbs=) 7: 34332e3233302e38362e302f32332d3234203d3e2033343931.roa (hash: BqbUmbythNNYP4WqssroNY2sOPvoyuRgXIRAVuIytpA=) 8: 33312e32322e3130362e302f32342d3234203d3e20323133353032.roa (hash: jNzQvK975k0nFSky/OYcsFfueNL1XvYeIp3mtR/7WPY=) 9: 34332e3233302e38352e302f32342d3234203d3e20323131343430.roa (hash: hoZQSGqkvoyh+Fwe28UicpO6RAJD80P7rklT/Di/mQU=) 10: 33312e32322e3131312e302f32342d3234203d3e20323135333535.roa (hash: brok2XUOzC0OAQs7efh1lP/TIOrHW70pJohRfs3tgEM=) 11: 34332e3233302e38342e302f32342d3234203d3e203633313939.roa (hash: mN7VhJyGfS7zh6TYiLbpihJCInKpBaTwITIrbKnSr78=) 12: 33312e32322e3130382e302f32342d3234203d3e203432383331.roa (hash: 8yRIzyX7kSL5wlZucsqrW2Cnq9iyHa3XujSoVf8z1CY=) 13: 34332e3233302e38342e302f32342d3234203d3e203235313938.roa (hash: D5rxpe/mz9cZbwkoouLs3Io8a9VjYwAhmSHGosd1BJQ=) 14: 34332e3233302e38352e302f32342d3234203d3e20323132363639.roa (hash: vgObUGnSREXD+ZGKD48TBidzsDD4bb41p0YUFbXX2ak=) 15: 3130332e34392e3133302e302f32342d3234203d3e20323036303333.roa (hash: v7D054EN2gERBe7aLvFn0V17UtLvh1fmGSVfmRoK+KQ=) 16: 3130332e34392e3132382e302f32342d3234203d3e20313534303439.roa (hash: RP7fF4ljaFnG1QBw6wHJTYmQiSzsC+UtOPXQULgrH/c=) 17: C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl (hash: ffKEbrLpQjFJRzim3CjQ8VttWsIBuQl53m3ULMpuNLw=) 18: 33312e32322e3130342e302f32342d3234203d3e20313938303230.roa (hash: 2c/Q6mL57WPxOvD74dnFYEhVwjt0QpjY04YbOcxeQJ8=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 18:26:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:9a:97:cf:7b:9f:2c:f2:80:cf:06:cf:fe:98:82:c4:ed:54:6b:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c770f43358b97ba0aa9bdc62bbd511e90aeab29d Validity Not Before: Dec 5 16:41:16 2025 GMT Not After : Dec 6 18:26:16 2025 GMT Subject: CN=6160FD85E6902BBFBA112096CEC4B20D6D373683 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:e1:8d:76:f7:d7:c6:69:b5:52:8c:de:7e:c4: 99:4d:6b:54:20:1b:ea:4a:2b:c6:a8:e3:15:5b:fe: e9:b6:e8:03:02:77:13:50:5a:ee:66:47:3c:65:36: da:2c:34:95:5c:0d:9c:fb:b6:7b:4f:e8:25:ac:22: 31:02:77:d3:6b:08:a3:6c:c2:aa:72:cd:ee:aa:92: 75:54:51:3e:92:07:45:ac:94:ae:08:ef:14:1e:1d: 3d:0f:5e:45:cc:84:6d:8d:08:31:aa:af:b6:ee:8d: 45:cf:34:8c:32:e6:93:35:15:d4:22:be:93:8d:39: 2a:51:f4:f6:bb:09:17:48:1d:7e:fe:03:a8:be:34: a7:21:45:48:04:18:d3:97:da:d3:74:93:78:d1:06: b3:b9:1d:4b:70:a4:56:b5:06:d1:04:54:95:09:dc: cf:42:d5:19:22:9d:ed:3d:5f:af:c7:2e:50:21:8c: ad:65:1c:ec:4b:b2:27:e1:65:a0:0d:61:cc:2d:ef: 28:84:55:d6:50:90:5c:e0:52:5c:7b:11:0b:9b:5f: 45:84:87:37:f4:21:5d:4f:f6:d9:9c:10:77:1a:1e: 3b:84:61:6a:d6:e0:d4:b3:24:69:6a:90:8d:5b:ac: eb:97:52:a4:95:bc:6f:f8:58:d6:95:8a:41:60:ee: f8:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:60:FD:85:E6:90:2B:BF:BA:11:20:96:CE:C4:B2:0D:6D:37:36:83 X509v3 Authority Key Identifier: keyid:C7:70:F4:33:58:B9:7B:A0:AA:9B:DC:62:BB:D5:11:E9:0A:EA:B2:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:74:dd:59:7d:30:d4:ad:fa:ab:5a:bc:c2:27:72:da:ea:b3: ae:78:93:ea:47:aa:30:21:e8:65:4b:77:00:f6:32:0e:ae:ab: 9f:77:3e:ad:65:b3:40:64:06:3a:06:6f:c1:3a:d8:5e:aa:60: db:60:ff:7f:d0:cb:0b:5f:96:f2:a1:56:23:dc:4d:96:6c:2c: 9d:ec:cb:78:4b:3b:f0:48:de:ab:cc:95:a0:96:8a:45:9f:9a: 87:c5:95:2b:46:ed:00:4f:fd:44:f0:92:1b:36:da:78:20:d6: a2:6c:e2:e2:74:2c:1a:b6:36:5e:81:59:87:b1:33:57:15:d8: a6:94:69:40:f6:7b:08:d9:32:f5:df:91:bb:e3:fc:ef:fb:ba: 2a:69:48:8e:79:a0:d0:bd:a5:12:41:fd:d5:ab:46:1a:5c:48: 7d:81:de:fb:10:4b:d4:f2:73:73:16:06:04:11:82:ce:53:11: e5:2f:08:b6:01:00:1c:6b:a5:1b:a6:37:a5:d4:7c:9a:90:23: 45:83:0e:dc:ec:66:8d:22:81:8b:69:b1:52:df:f3:b8:79:0d: ef:5f:4e:f4:5e:3d:3c:5b:93:7c:72:f2:f4:a1:ba:41:52:de: ee:76:1b:82:7d:79:4f:31:f3:3d:9f:0a:f3:67:3a:58:57:a4: 2c:4f:6d:ce -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUTpqXz3ufLPKAzwbP/piCxO1Ua1swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYzc3MGY0MzM1OGI5N2JhMGFhOWJkYzYyYmJkNTExZTkw YWVhYjI5ZDAeFw0yNTEyMDUxNjQxMTZaFw0yNTEyMDYxODI2MTZaMDMxMTAvBgNV BAMTKDYxNjBGRDg1RTY5MDJCQkZCQTExMjA5NkNFQzRCMjBENkQzNzM2ODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO4Y1299fGabVSjN5+xJlNa1Qg G+pKK8ao4xVb/um26AMCdxNQWu5mRzxlNtosNJVcDZz7tntP6CWsIjECd9NrCKNs wqpyze6qknVUUT6SB0WslK4I7xQeHT0PXkXMhG2NCDGqr7bujUXPNIwy5pM1FdQi vpONOSpR9Pa7CRdIHX7+A6i+NKchRUgEGNOX2tN0k3jRBrO5HUtwpFa1BtEEVJUJ 3M9C1Rkine09X6/HLlAhjK1lHOxLsifhZaANYcwt7yiEVdZQkFzgUlx7EQubX0WE hzf0IV1P9tmcEHcaHjuEYWrW4NSzJGlqkI1brOuXUqSVvG/4WNaVikFg7vg/AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUYWD9heaQK7+6ESCWzsSyDW03NoMwHwYDVR0j BBgwFoAUx3D0M1i5e6Cqm9xiu9UR6Qrqsp0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZWFmZWJkYjQtNmYwYi00MDRiLTk4ZTItYTI2YmU5NGE2 NjIwLzAvQzc3MEY0MzM1OEI5N0JBMEFBOUJEQzYyQkJENTExRTkwQUVBQjI5RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3gzRDBNMWk1ZTZDcW05eGl1OVVSNlFy cXNwMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lYWZlYmRiNC02 ZjBiLTQwNGItOThlMi1hMjZiZTk0YTY2MjAvMC9DNzcwRjQzMzU4Qjk3QkEwQUE5 QkRDNjJCQkQ1MTFFOTBBRUFCMjlELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAknTdWX0w1K36q1q8widy 2uqzrniT6keqMCHoZUt3APYyDq6rn3c+rWWzQGQGOgZvwTrYXqpg22D/f9DLC1+W 8qFWI9xNlmwsnezLeEs78Ejeq8yVoJaKRZ+ah8WVK0btAE/9RPCSGzbaeCDWomzi 4nQsGrY2XoFZh7EzVxXYppRpQPZ7CNky9d+Ru+P87/u6KmlIjnmg0L2lEkH91atG GlxIfYHe+xBL1PJzcxYGBBGCzlMR5S8ItgEAHGulG6Y3pdR8mpAjRYMO3OxmjSKB i2mxUt/zuHkN719O9F49PFuTfHLy9KG6QVLe7nYbgn15TzHzPZ8K82c6WFekLE9t zg== -----END CERTIFICATE-----Generated at Sat Dec 6 10:03:38 2025 by rpki-client