This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/0/9F7042C3B38A2A4DAB756337122AD2B927DD6DE0.mft File: 9F7042C3B38A2A4DAB756337122AD2B927DD6DE0.mft (raw, json) Hash identifier: hemkhmLS93u+Di9ffwF7qAV/6nlxVTAroTG5s/H9RRg= Subject key identifier: 64:B4:00:D3:C9:2B:02:A3:C2:9F:20:FF:1D:62:5F:96:A4:E1:09:9D Authority key identifier: 9F:70:42:C3:B3:8A:2A:4D:AB:75:63:37:12:2A:D2:B9:27:DD:6D:E0 Certificate issuer: /CN=9F7042C3B38A2A4DAB756337122AD2B927DD6DE0 Certificate serial: 588E2CC07D23834F38930C287ADACBE046DD03DA Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/87d8db71-a5be-464c-a8b9-8b7b374ae3fa/2/9F7042C3B38A2A4DAB756337122AD2B927DD6DE0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/0/9F7042C3B38A2A4DAB756337122AD2B927DD6DE0.mft Manifest number: 37 Signing time: Fri 05 Dec 2025 15:28:21 +0000 Manifest this update: Fri 05 Dec 2025 15:23:21 +0000 Manifest next update: Sat 06 Dec 2025 18:24:21 +0000 Files and hashes: 1: 326130663a316363363a623130333a3a2f34382d3438203d3e20323034323131.roa (hash: l1deJh2xZQ3JA3TbSO/Wo6HX4zpKObbvg59oDSxOzdM=) 2: 326130663a316363363a623130323a3a2f34382d3438203d3e20323034323131.roa (hash: 3TH6eeZIzb01qd47tRG7BB4/stDr7/uQSNohDht2KQk=) 3: 326130663a316363363a623130303a3a2f34382d3438203d3e20323034323131.roa (hash: kcBH+Ogl01nsOgG3HryBqdbGSLDfahkEBR0qTx6CAUE=) 4: 326130663a316363363a623130313a3a2f34382d3438203d3e20323034323131.roa (hash: yR4jIuH1uOto53/FVJqoU4dWw+RXmC+xa4CHfSkTFrE=) 5: 326130663a316363363a623130343a3a2f34382d3438203d3e20323034323131.roa (hash: n97+h27GU7jKCkXTYmO9WYpKNEgEu3SjZGImQi8R+o8=) 6: 9F7042C3B38A2A4DAB756337122AD2B927DD6DE0.crl (hash: ELdzSKqmeOmAm8GWkXOIBP7gXJW8jAfgh13gND53/rg=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/0/9F7042C3B38A2A4DAB756337122AD2B927DD6DE0.crl rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/0/9F7042C3B38A2A4DAB756337122AD2B927DD6DE0.mft rsync://rsync.paas.rpki.ripe.net/repository/87d8db71-a5be-464c-a8b9-8b7b374ae3fa/2/9F7042C3B38A2A4DAB756337122AD2B927DD6DE0.cer rsync://rsync.paas.rpki.ripe.net/repository/87d8db71-a5be-464c-a8b9-8b7b374ae3fa/2/AFF4C2C7543A73C42DFA94F9950C37BDC859D280.crl rsync://rsync.paas.rpki.ripe.net/repository/87d8db71-a5be-464c-a8b9-8b7b374ae3fa/2/AFF4C2C7543A73C42DFA94F9950C37BDC859D280.mft rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/AFF4C2C7543A73C42DFA94F9950C37BDC859D280.cer rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/75A838E02C61800F73D3019DE0A51F567B64BC0E.crl rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/75A838E02C61800F73D3019DE0A51F567B64BC0E.mft rsync://rpki.ripe.net/repository/DEFAULT/dag44CxhgA9z0wGd4KUfVntkvA4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 18:24:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:8e:2c:c0:7d:23:83:4f:38:93:0c:28:7a:da:cb:e0:46:dd:03:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9F7042C3B38A2A4DAB756337122AD2B927DD6DE0 Validity Not Before: Dec 5 15:23:21 2025 GMT Not After : Dec 6 18:24:21 2025 GMT Subject: CN=64B400D3C92B02A3C29F20FF1D625F96A4E1099D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:52:9e:4b:72:37:18:f5:d1:fa:f6:14:8f:f4: ee:da:06:b0:cb:ca:8d:15:e4:7e:ae:0e:4a:8b:41: 49:1a:fb:ad:0c:cc:56:c7:a9:08:cf:7c:06:99:08: 82:df:4f:74:5c:cd:5c:4a:7d:92:18:e7:0b:f0:05: cf:4d:fa:02:15:81:b9:9f:5c:cb:02:e3:63:c0:76: f3:ee:0c:a4:b1:bb:05:64:f2:c2:bb:57:17:cf:cc: 66:b2:9d:1b:eb:62:4a:1d:aa:7c:aa:ac:0f:08:82: 64:af:25:d2:7c:e8:4f:ae:94:5d:ae:61:65:cd:99: 44:f3:a7:bf:bd:0b:2d:cf:47:81:7a:ee:0b:26:dc: 11:80:f7:e9:06:c7:e1:79:b9:97:0d:92:2c:8b:34: f8:0a:53:78:81:c9:04:43:11:3a:e3:3f:75:9c:23: 44:9f:b9:21:63:91:d8:05:57:90:fd:5a:ff:fc:5a: c4:22:0d:25:27:42:79:ed:a4:7e:98:d3:7f:e3:89: a8:f5:42:06:f3:05:e8:93:cf:ca:89:b9:ab:96:0a: 04:27:fc:0f:85:db:e6:a0:8f:b5:9e:ef:3e:01:a9: 7f:93:4b:52:20:86:64:3e:d0:8a:f4:a4:9c:81:1c: 68:bc:2a:57:3f:a6:61:6b:97:51:9a:aa:22:05:91: 9e:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:B4:00:D3:C9:2B:02:A3:C2:9F:20:FF:1D:62:5F:96:A4:E1:09:9D X509v3 Authority Key Identifier: keyid:9F:70:42:C3:B3:8A:2A:4D:AB:75:63:37:12:2A:D2:B9:27:DD:6D:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/0/9F7042C3B38A2A4DAB756337122AD2B927DD6DE0.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/87d8db71-a5be-464c-a8b9-8b7b374ae3fa/2/9F7042C3B38A2A4DAB756337122AD2B927DD6DE0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/0/9F7042C3B38A2A4DAB756337122AD2B927DD6DE0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:f7:f9:bc:e1:31:6f:6e:94:e9:f9:ed:22:1d:50:6b:80:f0: 24:bd:7b:a1:35:b9:fc:0f:17:88:e8:69:93:31:dc:3d:8e:8a: 7b:7c:08:6b:05:4e:16:8e:dc:7c:5a:0d:0f:ca:9e:40:95:be: 21:ad:42:0e:34:0c:a6:2f:48:3a:7d:88:1d:19:64:ae:ae:cd: b0:bc:4a:ba:4a:11:c7:f9:e3:be:ea:70:ed:56:0d:02:7d:fa: b8:d1:5d:80:d9:1d:e0:5c:46:1c:19:96:b4:8e:0c:88:9f:b5: ca:7a:8a:9d:38:da:19:a8:fd:48:4d:1f:62:79:39:65:03:de: e9:93:dc:4f:aa:78:5b:fb:6b:53:fe:1a:ca:d9:1b:d5:37:7d: 43:78:fb:c4:2d:03:42:91:10:a6:f4:ea:fd:32:e6:ab:70:b5: de:15:4e:b5:24:36:bc:21:aa:b3:94:aa:98:79:79:71:7c:31: 6b:7a:d2:23:26:74:38:31:be:2d:18:8c:13:47:af:07:11:c3: 06:bd:76:37:86:b7:09:db:16:9e:55:54:8f:74:1f:72:3c:7e: de:46:06:09:b6:0f:10:d7:9a:ee:f7:7d:96:80:f5:b0:63:3a: 60:08:e1:78:37:08:77:c8:f3:ce:82:96:da:96:c5:4a:96:85: d8:5a:97:17 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUWI4swH0jg084kwwoetrL4EbdA9owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUY3MDQyQzNCMzhBMkE0REFCNzU2MzM3MTIyQUQyQjky N0RENkRFMDAeFw0yNTEyMDUxNTIzMjFaFw0yNTEyMDYxODI0MjFaMDMxMTAvBgNV BAMTKDY0QjQwMEQzQzkyQjAyQTNDMjlGMjBGRjFENjI1Rjk2QTRFMTA5OUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnUp5LcjcY9dH69hSP9O7aBrDL yo0V5H6uDkqLQUka+60MzFbHqQjPfAaZCILfT3RczVxKfZIY5wvwBc9N+gIVgbmf XMsC42PAdvPuDKSxuwVk8sK7VxfPzGaynRvrYkodqnyqrA8IgmSvJdJ86E+ulF2u YWXNmUTzp7+9Cy3PR4F67gsm3BGA9+kGx+F5uZcNkiyLNPgKU3iByQRDETrjP3Wc I0SfuSFjkdgFV5D9Wv/8WsQiDSUnQnntpH6Y03/jiaj1QgbzBeiTz8qJuauWCgQn /A+F2+agj7We7z4BqX+TS1IghmQ+0Ir0pJyBHGi8Klc/pmFrl1GaqiIFkZ5PAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUZLQA08krAqPCnyD/HWJflqThCZ0wHwYDVR0j BBgwFoAUn3BCw7OKKk2rdWM3EirSuSfdbeAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZjUzMmI5ZWItMmZhZS00OGE4LTk3OTMtMzNlZWMwNjdj ZTM5LzAvOUY3MDQyQzNCMzhBMkE0REFCNzU2MzM3MTIyQUQyQjkyN0RENkRFMC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84N2Q4ZGI3MS1hNWJlLTQ2 NGMtYThiOS04YjdiMzc0YWUzZmEvMi85RjcwNDJDM0IzOEEyQTREQUI3NTYzMzcx MjJBRDJCOTI3REQ2REUwLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2Y1MzJiOWViLTJmYWUtNDhhOC05NzkzLTMzZWVjMDY3Y2UzOS8wLzlGNzA0MkMz QjM4QTJBNERBQjc1NjMzNzEyMkFEMkI5MjdERDZERTAubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAA9/m8 4TFvbpTp+e0iHVBrgPAkvXuhNbn8DxeI6GmTMdw9jop7fAhrBU4Wjtx8Wg0Pyp5A lb4hrUIONAymL0g6fYgdGWSurs2wvEq6ShHH+eO+6nDtVg0Cffq40V2A2R3gXEYc GZa0jgyIn7XKeoqdONoZqP1ITR9ieTllA97pk9xPqnhb+2tT/hrK2RvVN31DePvE LQNCkRCm9Or9MuarcLXeFU61JDa8IaqzlKqYeXlxfDFretIjJnQ4Mb4tGIwTR68H EcMGvXY3hrcJ2xaeVVSPdB9yPH7eRgYJtg8Q15ru932WgPWwYzpgCOF4Nwh3yPPO gpbalsVKloXYWpcX -----END CERTIFICATE-----Generated at Sat Dec 6 09:42:07 2025 by rpki-client