This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/189/B056811CB944A23C757F57AFFD483C6FCFB80119.mft File: B056811CB944A23C757F57AFFD483C6FCFB80119.mft (raw, json) Hash identifier: tvVeJD3jnims90hj6C1Hv9YpHXKDfkfOPdZLDnpLSig= Subject key identifier: 8B:11:51:B9:8C:92:B3:D8:EC:CA:20:4E:62:19:1E:41:65:F3:A6:48 Authority key identifier: B0:56:81:1C:B9:44:A2:3C:75:7F:57:AF:FD:48:3C:6F:CF:B8:01:19 Certificate issuer: /CN=b056811cb944a23c757f57affd483c6fcfb80119 Certificate serial: 676EA2571AF0678BF383699B7C067D27CDA9C305 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sFaBHLlEojx1f1ev_Ug8b8-4ARk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/189/B056811CB944A23C757F57AFFD483C6FCFB80119.mft Manifest number: 10D7 Signing time: Sat 06 Dec 2025 22:29:10 +0000 Manifest this update: Sat 06 Dec 2025 22:24:10 +0000 Manifest next update: Mon 08 Dec 2025 00:42:10 +0000 Files and hashes: 1: 33372e31362e38392e302f32342d3234203d3e20323035363539.roa (hash: 6QRhHbC8A6tvkoInC0OAQAidq/KLzHjtVgzI9mMUm4k=) 2: B056811CB944A23C757F57AFFD483C6FCFB80119.crl (hash: gfUDEG3wPQyOusD7LNpCwFZD4nLfnToebyP2DO06Ec4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/189/B056811CB944A23C757F57AFFD483C6FCFB80119.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/189/B056811CB944A23C757F57AFFD483C6FCFB80119.mft rsync://rpki.ripe.net/repository/DEFAULT/sFaBHLlEojx1f1ev_Ug8b8-4ARk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:6e:a2:57:1a:f0:67:8b:f3:83:69:9b:7c:06:7d:27:cd:a9:c3:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b056811cb944a23c757f57affd483c6fcfb80119 Validity Not Before: Dec 6 22:24:10 2025 GMT Not After : Dec 8 00:42:10 2025 GMT Subject: CN=8B1151B98C92B3D8ECCA204E62191E4165F3A648 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:a3:0f:88:74:7e:57:b5:18:c3:16:6e:5c:f8: 74:e8:8f:65:71:91:1f:e8:57:5b:da:83:29:3b:8c: d1:f0:08:a6:74:bf:07:e2:ea:d6:c9:18:ee:f9:ff: df:de:4c:52:14:43:ab:03:68:43:0d:ed:d8:9e:88: 80:13:c8:10:d3:fa:52:79:7d:85:a0:3a:50:5f:5c: 88:bf:c5:83:76:52:eb:1f:bf:63:f0:b6:57:15:cb: 8c:12:8e:bc:c5:c8:da:10:1a:5e:39:9c:73:7d:e5: 8c:23:d3:9e:58:7d:bc:1f:1c:7f:e2:ab:0d:66:b3: dd:8b:64:f9:63:02:e1:9a:0e:df:97:d9:cf:b6:c2: fb:73:51:aa:86:79:52:e7:3a:7e:e4:ac:1f:3b:aa: 93:ac:0e:02:45:41:67:4f:7b:0f:d1:26:82:b2:25: d6:39:31:86:7d:94:ee:d5:47:4f:cd:78:ad:8f:9a: a6:fb:0e:51:62:68:22:0f:3c:f9:94:bf:ab:ad:fe: 50:8c:f3:4d:01:75:96:1d:fa:b3:5f:ec:a2:ce:1a: 52:5b:c3:c1:48:fd:3f:1f:8a:fa:b7:08:5d:2b:51: 55:28:92:c9:a2:b5:62:2b:1e:98:6e:0f:25:4c:81: cc:ee:b9:3c:51:4e:89:88:fb:3f:5d:0d:26:ff:34: 1b:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:11:51:B9:8C:92:B3:D8:EC:CA:20:4E:62:19:1E:41:65:F3:A6:48 X509v3 Authority Key Identifier: keyid:B0:56:81:1C:B9:44:A2:3C:75:7F:57:AF:FD:48:3C:6F:CF:B8:01:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/189/B056811CB944A23C757F57AFFD483C6FCFB80119.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sFaBHLlEojx1f1ev_Ug8b8-4ARk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/189/B056811CB944A23C757F57AFFD483C6FCFB80119.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:b6:9e:bd:05:38:1c:65:f3:cc:8c:7e:98:3b:7f:df:2c:40: 3a:b8:56:1e:1f:e1:1b:9f:10:25:97:7c:0f:55:bc:9e:35:2a: 35:c7:05:d8:15:5a:e8:fd:a7:5c:ef:26:f4:24:b9:c8:2d:10: 72:5d:88:b4:29:1d:27:42:2a:2d:20:f5:cf:a6:23:05:ae:10: f8:32:15:45:70:31:e2:3c:0b:56:92:a0:18:74:87:41:de:3e: 2e:b1:cc:cb:24:54:13:eb:f9:ec:ca:05:d6:6d:2c:15:fa:4c: 34:1e:fd:f2:9f:00:14:8a:41:b1:f8:f5:6a:7f:e8:bb:8f:79: 91:63:18:4d:5e:17:b4:09:7e:88:79:a6:4a:ef:e4:bf:52:c5: d1:6d:20:ed:cf:ba:4d:90:64:d3:32:19:bd:da:11:8d:9a:cc: 1f:32:ba:b5:56:45:e2:9e:0f:88:aa:e7:9a:bc:97:38:60:30: 64:b2:38:fd:2e:b1:f2:57:75:55:a9:cc:5a:ad:50:3f:fd:87: 05:0e:b7:df:62:3e:bb:d3:0f:87:af:a8:5b:88:b2:31:db:f0: 42:e7:55:60:64:95:3c:17:30:8b:96:8f:0b:c9:40:85:d5:fd: 0f:94:8b:6f:e1:dc:89:57:53:21:d5:af:1a:51:ed:ae:93:82: 73:6d:e4:19 -----BEGIN CERTIFICATE----- MIIFQzCCBCugAwIBAgIUZ26iVxrwZ4vzg2mbfAZ9J82pwwUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYjA1NjgxMWNiOTQ0YTIzYzc1N2Y1N2FmZmQ0ODNjNmZj ZmI4MDExOTAeFw0yNTEyMDYyMjI0MTBaFw0yNTEyMDgwMDQyMTBaMDMxMTAvBgNV BAMTKDhCMTE1MUI5OEM5MkIzRDhFQ0NBMjA0RTYyMTkxRTQxNjVGM0E2NDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqow+IdH5XtRjDFm5c+HToj2Vx kR/oV1vagyk7jNHwCKZ0vwfi6tbJGO75/9/eTFIUQ6sDaEMN7dieiIATyBDT+lJ5 fYWgOlBfXIi/xYN2Uusfv2PwtlcVy4wSjrzFyNoQGl45nHN95Ywj055YfbwfHH/i qw1ms92LZPljAuGaDt+X2c+2wvtzUaqGeVLnOn7krB87qpOsDgJFQWdPew/RJoKy JdY5MYZ9lO7VR0/NeK2Pmqb7DlFiaCIPPPmUv6ut/lCM800BdZYd+rNf7KLOGlJb w8FI/T8fivq3CF0rUVUoksmitWIrHphuDyVMgczuuTxRTomI+z9dDSb/NBuhAgMB AAGjggJNMIICSTAdBgNVHQ4EFgQUixFRuYySs9jsyiBOYhkeQWXzpkgwHwYDVR0j BBgwFoAUsFaBHLlEojx1f1ev/Ug8b8+4ARkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xODkvQjA1NjgxMUNCOTQ0QTIzQzc1N0Y1N0FGRkQ0ODNDNkZDRkI4MDEx OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3NGYUJITGxFb2p4MWYxZXZfVWc4 YjgtNEFSay5jZXIwgaEGCCsGAQUFBwELBIGUMIGRMIGOBggrBgEFBQcwC4aBgXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE4OS9CMDU2ODExQ0I5NDRB MjNDNzU3RjU3QUZGRDQ4M0M2RkNGQjgwMTE5Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtraevQU4HGXz zIx+mDt/3yxAOrhWHh/hG58QJZd8D1W8njUqNccF2BVa6P2nXO8m9CS5yC0Qcl2I tCkdJ0IqLSD1z6YjBa4Q+DIVRXAx4jwLVpKgGHSHQd4+LrHMyyRUE+v57MoF1m0s FfpMNB798p8AFIpBsfj1an/ou495kWMYTV4XtAl+iHmmSu/kv1LF0W0g7c+6TZBk 0zIZvdoRjZrMHzK6tVZF4p4PiKrnmryXOGAwZLI4/S6x8ld1VanMWq1QP/2HBQ63 32I+u9MPh6+oW4iyMdvwQudVYGSVPBcwi5aPC8lAhdX9D5SLb+HciVdTIdWvGlHt rpOCc23kGQ== -----END CERTIFICATE-----Generated at Sun Dec 7 02:07:48 2025 by rpki-client