This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/1/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.mft File: 13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.mft (raw, json) Hash identifier: joa26OdFJ2GxTvPN7pG18VjabkjwSqlFjK5Ib00OWrc= Subject key identifier: 84:BF:D5:5D:E6:5F:C1:CF:2E:95:8E:37:89:A2:5C:56:22:54:EA:31 Authority key identifier: 13:E1:A9:98:F7:7D:7C:1F:F2:95:5C:0B:68:8F:EB:FE:0F:81:96:EB Certificate issuer: /CN=13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB Certificate serial: 0B67A4009159BC39209A68B0FB5E7DFDE9F3401C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/1/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.mft Manifest number: 017A Signing time: Tue 09 Dec 2025 14:42:16 +0000 Manifest this update: Tue 09 Dec 2025 14:37:16 +0000 Manifest next update: Wed 10 Dec 2025 16:56:16 +0000 Files and hashes: 1: 326131343a373538303a6432303a3a2f34342d3438203d3e20313939333130.roa (hash: MgcoEmS08l4kBvePsItue5HuyPIuQGylETDDY3NTtWk=) 2: 326131343a373538303a6430303a3a2f34302d3438203d3e20313939333130.roa (hash: jIRO9mS3d6dPjcdQf+OkOGr/dNujGogdrEuPEpLgZJI=) 3: 326131343a373538303a6466303a3a2f34382d3438203d3e20323133373239.roa (hash: u/JR7/M6BcKICssdDR7j/sPwWvJTPX2G+FFLBgXrUyU=) 4: 326131343a373538303a6431303a3a2f34342d3434203d3e20313939333130.roa (hash: d85Du7DNvyLWzCRKR6UAK4BxtZR8aY0O/ltb7NM7kI0=) 5: 326131343a373538303a6430303a3a2f34342d3434203d3e20313939333130.roa (hash: aLNGjeKxhB+lb52UO94MmUGLP8+twH+NGpyj/wZMn3g=) 6: 13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.crl (hash: rC+2qoNupYagmsOWOXgJ8etyj5taJ8l3PQcoZiS0Yqc=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/1/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.crl rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/1/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 10 Dec 2025 16:15:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:67:a4:00:91:59:bc:39:20:9a:68:b0:fb:5e:7d:fd:e9:f3:40:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB Validity Not Before: Dec 9 14:37:16 2025 GMT Not After : Dec 10 16:56:16 2025 GMT Subject: CN=84BFD55DE65FC1CF2E958E3789A25C562254EA31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:b2:19:54:5e:18:02:ee:3d:0d:07:ab:9e:af: 1c:69:66:cf:0d:dd:c1:50:15:a2:95:d3:53:a5:0d: 21:84:69:99:6a:6e:59:43:d6:46:7e:da:66:84:63: ca:d8:63:55:fd:41:36:f5:a4:c4:78:33:bc:d4:ab: 63:ab:45:a4:22:a3:11:3b:62:fd:b9:de:60:14:c9: 51:a0:49:b5:7e:c2:82:45:85:11:7d:6e:81:95:b8: 9a:12:1e:47:cb:d7:82:f6:89:c7:d2:24:a0:55:ac: e7:e9:79:76:2b:64:c2:21:52:bc:eb:61:dd:97:c8: 77:e2:2e:3e:79:3f:ab:b7:d4:89:98:e7:53:73:e4: f5:85:0e:d1:11:49:82:e8:00:31:09:4c:9e:1d:61: 2c:f1:34:e6:28:2e:0e:64:2c:c6:e7:30:85:5b:72: af:4e:08:79:29:16:55:e4:db:37:dc:14:ba:cd:cc: f2:70:d6:ef:3e:ac:3f:3f:57:96:e6:99:4b:2d:31: ce:2f:2f:2d:fc:9f:f1:83:00:f4:1e:5f:e0:c7:d0: c0:6e:cd:54:27:6b:24:b3:0e:ca:f2:07:3d:0e:ed: 9e:61:78:0c:65:81:a4:74:aa:78:84:32:a9:89:92: 15:6d:e0:7a:6f:1a:ac:57:e3:23:04:62:9f:30:47: c6:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:BF:D5:5D:E6:5F:C1:CF:2E:95:8E:37:89:A2:5C:56:22:54:EA:31 X509v3 Authority Key Identifier: keyid:13:E1:A9:98:F7:7D:7C:1F:F2:95:5C:0B:68:8F:EB:FE:0F:81:96:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/1/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/1/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:0e:6c:12:83:f7:04:be:da:fc:5f:a5:42:ce:40:a7:10:30: b4:49:75:7b:e4:87:dc:2b:1c:c9:1b:50:1c:5e:4a:1f:b3:d7: 52:4c:ad:fb:d3:da:cc:8e:e0:0e:32:e7:9c:a9:c1:28:72:95: 91:6e:e8:47:26:58:7a:f2:db:59:ec:60:bb:2e:ed:ac:fe:86: f6:36:8e:9d:fe:d8:5c:14:eb:f5:a3:a9:16:79:4f:ee:49:f7: 48:1f:e5:99:f7:ac:a8:93:e2:8b:e1:b6:1d:23:1e:63:da:2a: e0:28:72:58:c0:99:2f:11:af:6f:16:c4:39:94:7b:ae:29:33: d7:1a:a4:1b:68:e5:3e:f2:e4:d6:c2:99:43:80:fa:3b:61:03: 0d:04:69:86:49:6b:2e:77:82:6d:e9:c9:2e:68:c9:0f:63:66: d4:5d:83:84:f3:e1:09:ad:db:2e:3e:ea:b8:4f:dd:b9:7a:cd: 8a:db:81:53:b4:28:21:7b:9c:cd:f7:b2:b8:dd:31:6e:44:64: 20:2e:04:a6:24:dd:44:a7:93:02:13:9e:57:45:b5:2b:20:ab: fa:49:a9:93:94:99:22:dc:91:93:94:79:53:de:37:0c:7c:07: df:21:16:eb:3b:21:29:8a:41:51:62:8b:c9:f6:95:da:f7:50: cc:26:79:35 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUC2ekAJFZvDkgmmiw+159/enzQBwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTNFMUE5OThGNzdEN0MxRkYyOTU1QzBCNjg4RkVCRkUw RjgxOTZFQjAeFw0yNTEyMDkxNDM3MTZaFw0yNTEyMTAxNjU2MTZaMDMxMTAvBgNV BAMTKDg0QkZENTVERTY1RkMxQ0YyRTk1OEUzNzg5QTI1QzU2MjI1NEVBMzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbshlUXhgC7j0NB6uerxxpZs8N 3cFQFaKV01OlDSGEaZlqbllD1kZ+2maEY8rYY1X9QTb1pMR4M7zUq2OrRaQioxE7 Yv253mAUyVGgSbV+woJFhRF9boGVuJoSHkfL14L2icfSJKBVrOfpeXYrZMIhUrzr Yd2XyHfiLj55P6u31ImY51Nz5PWFDtERSYLoADEJTJ4dYSzxNOYoLg5kLMbnMIVb cq9OCHkpFlXk2zfcFLrNzPJw1u8+rD8/V5bmmUstMc4vLy38n/GDAPQeX+DH0MBu zVQnaySzDsryBz0O7Z5heAxlgaR0qniEMqmJkhVt4HpvGqxX4yMEYp8wR8btAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUhL/VXeZfwc8ulY43iaJcViJU6jEwHwYDVR0j BBgwFoAUE+GpmPd9fB/ylVwLaI/r/g+BluswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDE1NzY0N2MtOTFkNi00YTA0LThhOTEtZDE1Mzg1ZDFm YWIyLzEvMTNFMUE5OThGNzdEN0MxRkYyOTU1QzBCNjg4RkVCRkUwRjgxOTZFQi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8xM0UxQTk5OEY3N0Q3QzFGRjI5NTVDMEI2 ODhGRUJGRTBGODE5NkVCLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzAxNTc2NDdjLTkxZDYtNGEwNC04YTkxLWQxNTM4NWQxZmFiMi8xLzEzRTFBOTk4 Rjc3RDdDMUZGMjk1NUMwQjY4OEZFQkZFMEY4MTk2RUIubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBZDmwS g/cEvtr8X6VCzkCnEDC0SXV75IfcKxzJG1AcXkofs9dSTK3709rMjuAOMuecqcEo cpWRbuhHJlh68ttZ7GC7Lu2s/ob2No6d/thcFOv1o6kWeU/uSfdIH+WZ96yok+KL 4bYdIx5j2irgKHJYwJkvEa9vFsQ5lHuuKTPXGqQbaOU+8uTWwplDgPo7YQMNBGmG SWsud4Jt6ckuaMkPY2bUXYOE8+EJrdsuPuq4T925es2K24FTtCghe5zN97K43TFu RGQgLgSmJN1Ep5MCE55XRbUrIKv6SamTlJki3JGTlHlT3jcMfAffIRbrOyEpikFR YovJ9pXa91DMJnk1 -----END CERTIFICATE-----Generated at Wed Dec 10 01:25:15 2025 by rpki-client