This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.mft File: 35B52EF20A5730A6261D6D1916C6B747FF3C2852.mft (raw, json) Hash identifier: YwOgKINg0FTqzWQhkb5RZmT2dT9Ha9qDGsZzpbBfSOs= Subject key identifier: FE:DD:68:72:A0:67:48:4E:4A:89:59:06:13:DD:DD:57:CA:A0:B2:3F Authority key identifier: 35:B5:2E:F2:0A:57:30:A6:26:1D:6D:19:16:C6:B7:47:FF:3C:28:52 Certificate issuer: /CN=35B52EF20A5730A6261D6D1916C6B747FF3C2852 Certificate serial: 4AD2DF3DA8DD6F64CFBB1EEA3A1B40CB50CE09B8 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.mft Manifest number: 0191 Signing time: Thu 18 Dec 2025 12:02:36 +0000 Manifest this update: Thu 18 Dec 2025 11:57:36 +0000 Manifest next update: Fri 19 Dec 2025 13:26:36 +0000 Files and hashes: 1: 326131343a373538313a323930303a3a2f34302d3438203d3e20323039313039.roa (hash: ENamU9VlpUh2S5yKvYrAp12SwLl/9Jv38ffU+yHH5Iw=) 2: 326131343a373538313a323530303a3a2f34302d3430203d3e203134343437.roa (hash: 2DfIdT8hQ452p9tTWwGSgv6G5KrCdvIla2RYi0wqius=) 3: 326131343a373538313a323230303a3a2f34302d3430203d3e20343031333836.roa (hash: xASXurrkB21YmULJQ68AjQqXl8iRC/GmjrwM45TRghc=) 4: 326131343a373538313a323030303a3a2f34302d3438203d3e20323039313039.roa (hash: lRerEWAZYVnj4WeC0lksu5JXgu5ks2mpqCgBEDRR0Q0=) 5: 326131343a373538313a323030303a3a2f34302d3438203d3e20343031333836.roa (hash: pi4F6jgMqqwUP1FTiOnfocpEw1DljOaDr1vx1pIBms8=) 6: 326131343a373538313a323330303a3a2f34302d3430203d3e20343031333836.roa (hash: 0cCFPlcOjS3xWnb1dJLZXDYv3McRJuNCq2FLbccHCeQ=) 7: 326131343a373538313a323630303a3a2f34302d3438203d3e20323039313039.roa (hash: Ah/styCnPIoGFWiO0PQ2rB66bvMdDv2NyL9mrkcrCj4=) 8: 326131343a373538313a323030303a3a2f34302d3438203d3e20333936303530.roa (hash: yUvus43IfO0AT/ck5bMQHbMTgP3EN2v06hq4szCBm40=) 9: 326131343a373538313a326630303a3a2f34382d3438203d3e20343031333836.roa (hash: PQEJzzZkaWaRihPz0qFSxn/fBL9FvQBY7Es5NvynDQM=) 10: 326131343a373538313a323830303a3a2f34302d3438203d3e20323039313039.roa (hash: U1r4ZvjM4KXIBEm7hpH6+0Qd/LSsHMlknATpB6yDZ90=) 11: 326131343a373538313a323130303a3a2f34302d3430203d3e20343031333836.roa (hash: T25tbrYVZpBemZDjqgpA9HPrUcZHUwwg3LOVGpsmSZ8=) 12: 326131343a373538313a323730303a3a2f34302d3438203d3e20323039313039.roa (hash: MFKFuWCDL66Zxs5f3hEeRn+2JW7mEBoWjT7f6AJBOhM=) 13: 326131343a373538313a323030303a3a2f34302d3438203d3e20323136333234.roa (hash: bje5aLLUqgAL8DyPjKPS1MwDhANSqShDo64yB6sarZo=) 14: 326131343a373538313a326630313a3a2f34382d3438203d3e20343031333836.roa (hash: SLj141CGncsBb5vfud/Xh4MbUscTfgukNtFTpVVNYzk=) 15: 35B52EF20A5730A6261D6D1916C6B747FF3C2852.crl (hash: S7ETIttzsjvZWMtADb3znFPsX/Ee6VqYisE0KVM9R7A=) 16: 326131343a373538313a323030303a3a2f34302d3438203d3e20323135333634.roa (hash: iPZr810Wf3G2BF1Yx0TXVCnIMBYWmzqlqsIx/XIB/Cc=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.crl rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:d2:df:3d:a8:dd:6f:64:cf:bb:1e:ea:3a:1b:40:cb:50:ce:09:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35B52EF20A5730A6261D6D1916C6B747FF3C2852 Validity Not Before: Dec 18 11:57:36 2025 GMT Not After : Dec 19 13:26:36 2025 GMT Subject: CN=FEDD6872A067484E4A89590613DDDD57CAA0B23F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:0d:dc:89:bb:d9:d6:cd:ec:72:4e:0b:2d:d8: 40:ef:6f:66:a3:d9:4c:e5:d7:8c:0f:5b:d3:ac:bb: cb:a7:00:47:b6:61:0d:dc:3f:b0:d4:b9:dc:be:4a: 6d:d9:c1:4f:19:2e:42:43:ce:35:24:30:a1:cb:e1: f3:b9:e0:32:05:35:bb:ab:d4:ba:3f:44:1e:a5:34: 76:89:7d:a5:48:b5:21:0c:f9:f8:b1:bf:ca:79:97: 3b:bf:91:ca:df:2d:a4:21:53:0e:cd:b0:f6:ce:6b: db:44:66:a4:c3:de:15:ff:03:3e:6a:e1:0b:6d:2e: 77:e6:cc:12:a1:ac:c1:f1:8f:df:d9:c9:e5:dc:f0: 69:b5:e1:25:cc:8f:e2:8f:90:c8:7d:ab:b8:9f:c3: 54:c9:a9:76:bf:f2:31:6e:0a:72:82:d7:54:6e:d6: a8:cc:73:c1:31:d6:c5:9e:a9:be:ba:7f:d7:bd:27: 3e:0d:f2:20:47:d3:93:99:11:1f:4e:1c:b8:80:db: f7:27:de:18:dc:9c:23:23:ac:e6:f9:b3:da:4c:4a: 8f:58:d4:12:d2:ed:87:1a:df:09:17:fd:6e:e0:4b: 95:5a:20:0a:ba:c9:3e:dd:8a:79:21:9a:8a:9f:03: f9:b5:70:79:d9:c6:1b:f7:cf:b8:26:ac:30:b3:7a: 93:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:DD:68:72:A0:67:48:4E:4A:89:59:06:13:DD:DD:57:CA:A0:B2:3F X509v3 Authority Key Identifier: keyid:35:B5:2E:F2:0A:57:30:A6:26:1D:6D:19:16:C6:B7:47:FF:3C:28:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:24:d0:20:4a:fc:28:b9:50:d0:25:f9:e4:6c:31:56:e1:89: f9:3a:0d:76:eb:26:fa:6f:f4:4c:fe:75:2b:90:33:84:97:a9: 22:f8:f8:b7:de:50:69:0d:66:8c:c2:9a:46:6d:1d:ac:05:32: a1:cb:42:22:26:58:f5:20:d4:f3:88:7b:4c:63:76:34:fe:d1: 59:fe:a3:9a:3f:4c:a6:53:b3:a1:7a:43:2b:52:77:7f:a0:00: a8:92:62:34:b8:88:1d:14:91:7e:71:a9:2e:46:01:db:01:62: 83:63:c4:9a:d1:5a:2f:84:6e:d8:68:71:85:6e:59:35:9b:25: d1:4c:2a:ce:00:9b:5d:7e:86:85:77:76:06:c5:ce:3a:5a:49: 47:6d:37:d4:34:1a:c5:64:bf:a8:dd:0f:a4:34:bd:51:e9:41: 25:35:b3:36:6d:e4:c3:c6:1f:0e:4f:d2:84:29:a6:bf:29:0a: de:06:dd:7b:1b:7d:16:22:87:ce:57:49:d3:af:ff:29:22:7f: a2:0f:cb:ab:dc:92:c7:1e:56:55:0d:26:3b:15:c3:28:24:3e: 02:af:b9:1e:09:e1:a6:a2:ab:ad:a7:ff:a9:c9:7d:57:61:d7: 7c:34:cf:16:a5:21:57:85:a1:b5:a9:d4:a9:46:c2:f4:57:db: cc:aa:7b:66 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUStLfPajdb2TPux7qOhtAy1DOCbgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzVCNTJFRjIwQTU3MzBBNjI2MUQ2RDE5MTZDNkI3NDdG RjNDMjg1MjAeFw0yNTEyMTgxMTU3MzZaFw0yNTEyMTkxMzI2MzZaMDMxMTAvBgNV BAMTKEZFREQ2ODcyQTA2NzQ4NEU0QTg5NTkwNjEzRERERDU3Q0FBMEIyM0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCDdyJu9nWzexyTgst2EDvb2aj 2Uzl14wPW9Osu8unAEe2YQ3cP7DUudy+Sm3ZwU8ZLkJDzjUkMKHL4fO54DIFNbur 1Lo/RB6lNHaJfaVItSEM+fixv8p5lzu/kcrfLaQhUw7NsPbOa9tEZqTD3hX/Az5q 4QttLnfmzBKhrMHxj9/ZyeXc8Gm14SXMj+KPkMh9q7ifw1TJqXa/8jFuCnKC11Ru 1qjMc8Ex1sWeqb66f9e9Jz4N8iBH05OZER9OHLiA2/cn3hjcnCMjrOb5s9pMSo9Y 1BLS7Yca3wkX/W7gS5VaIAq6yT7dinkhmoqfA/m1cHnZxhv3z7gmrDCzepOZAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU/t1ocqBnSE5KiVkGE93dV8qgsj8wHwYDVR0j BBgwFoAUNbUu8gpXMKYmHW0ZFsa3R/88KFIwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmFkZWJiOWQtMzNjYy00MjliLWFhMzUtMTA2MzRhOGIx ZGQ0LzAvMzVCNTJFRjIwQTU3MzBBNjI2MUQ2RDE5MTZDNkI3NDdGRjNDMjg1Mi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8zNUI1MkVGMjBBNTczMEE2MjYxRDZEMTkx NkM2Qjc0N0ZGM0MyODUyLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2ZhZGViYjlkLTMzY2MtNDI5Yi1hYTM1LTEwNjM0YThiMWRkNC8wLzM1QjUyRUYy MEE1NzMwQTYyNjFENkQxOTE2QzZCNzQ3RkYzQzI4NTIubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCAJNAg SvwouVDQJfnkbDFW4Yn5Og126yb6b/RM/nUrkDOEl6ki+Pi33lBpDWaMwppGbR2s BTKhy0IiJlj1INTziHtMY3Y0/tFZ/qOaP0ymU7OhekMrUnd/oACokmI0uIgdFJF+ cakuRgHbAWKDY8Sa0VovhG7YaHGFblk1myXRTCrOAJtdfoaFd3YGxc46WklHbTfU NBrFZL+o3Q+kNL1R6UElNbM2beTDxh8OT9KEKaa/KQreBt17G30WIofOV0nTr/8p In+iD8ur3JLHHlZVDSY7FcMoJD4Cr7keCeGmoqutp/+pyX1XYdd8NM8WpSFXhaG1 qdSpRsL0V9vMqntm -----END CERTIFICATE-----Generated at Thu Dec 18 16:17:04 2025 by rpki-client