This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09456214-8d25-4b5e-9e04-35c0a7a26470/0/FB2E043F755DA1329FB66347D17DC2B79A73C3FA.mft File: FB2E043F755DA1329FB66347D17DC2B79A73C3FA.mft (raw, json) Hash identifier: BHw4XY+ASKqfCxyEHXyjzazkMvCT3nxNnZzbZeUk5mQ= Subject key identifier: B1:97:43:47:52:97:94:43:CE:00:0C:F2:40:A3:55:1E:A8:28:98:D6 Authority key identifier: FB:2E:04:3F:75:5D:A1:32:9F:B6:63:47:D1:7D:C2:B7:9A:73:C3:FA Certificate issuer: /CN=FB2E043F755DA1329FB66347D17DC2B79A73C3FA Certificate serial: 2207AF5F7E86F425CA164074F62956C5B57B42EF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/FB2E043F755DA1329FB66347D17DC2B79A73C3FA.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09456214-8d25-4b5e-9e04-35c0a7a26470/0/FB2E043F755DA1329FB66347D17DC2B79A73C3FA.mft Manifest number: A8 Signing time: Sat 13 Dec 2025 13:12:05 +0000 Manifest this update: Sat 13 Dec 2025 13:07:05 +0000 Manifest next update: Sun 14 Dec 2025 13:16:05 +0000 Files and hashes: 1: 326131343a373538343a653361303a3a2f34342d3434203d3e20333937303332.roa (hash: JCyGJNLuGhm2G7yv8F0G1yT21Qa/DAGdxn1vxIgtXH8=) 2: FB2E043F755DA1329FB66347D17DC2B79A73C3FA.crl (hash: 16Pl5s2NIfyslMWXhLeBo8GIEQgpT/9ra146HKC3Y2o=) 3: 326131343a373538343a653339303a3a2f34342d3434203d3e20333937303332.roa (hash: lLg4au3IVvnSiHqBxXRTNckohkijbwJ1gyWVOIjX72Q=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09456214-8d25-4b5e-9e04-35c0a7a26470/0/FB2E043F755DA1329FB66347D17DC2B79A73C3FA.crl rsync://rsync.paas.rpki.ripe.net/repository/09456214-8d25-4b5e-9e04-35c0a7a26470/0/FB2E043F755DA1329FB66347D17DC2B79A73C3FA.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/FB2E043F755DA1329FB66347D17DC2B79A73C3FA.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 11:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:07:af:5f:7e:86:f4:25:ca:16:40:74:f6:29:56:c5:b5:7b:42:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB2E043F755DA1329FB66347D17DC2B79A73C3FA Validity Not Before: Dec 13 13:07:05 2025 GMT Not After : Dec 14 13:16:05 2025 GMT Subject: CN=B197434752979443CE000CF240A3551EA82898D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:62:cf:ad:1a:31:48:45:86:2e:8c:a1:a0:6e: f9:66:47:16:19:3a:be:0f:2c:30:6b:45:94:93:ab: 85:a0:8e:86:4a:11:9a:9f:b0:a7:6f:a2:8c:ba:c9: cf:93:b7:06:34:fd:e5:bb:9e:43:6f:59:5e:10:0a: c8:4c:5a:ed:70:b7:e4:5d:e6:8e:9d:56:ce:cf:20: 88:28:40:f3:4c:02:b8:70:87:61:ad:af:56:f1:cf: c2:8d:5e:04:ae:5c:60:5b:21:89:36:f6:be:c0:cc: 72:70:dc:18:45:10:27:d0:9d:6c:bb:b2:2c:f4:91: f6:fd:2f:a9:83:58:17:4c:26:1b:22:69:36:45:8b: 80:8c:eb:58:d9:f7:1d:5e:81:9a:c5:2b:a9:58:04: 5c:ca:44:d5:92:c9:65:ec:9f:97:4c:c3:3f:2d:e8: 38:48:64:c3:66:82:b6:51:c1:ff:0d:7f:59:74:8b: d0:f9:86:80:22:b8:7b:fd:52:2b:2b:1e:e5:96:60: 06:8d:6a:14:ae:75:54:aa:9c:e7:19:c4:e5:2a:ea: 5f:f8:70:34:18:ae:a2:3d:b1:0f:23:87:c9:b9:76: 34:a4:cd:aa:26:52:e2:54:72:a1:1f:37:08:1a:d7: 92:98:b8:df:d1:7d:d5:e3:ca:42:f8:5b:17:1a:b2: f9:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:97:43:47:52:97:94:43:CE:00:0C:F2:40:A3:55:1E:A8:28:98:D6 X509v3 Authority Key Identifier: keyid:FB:2E:04:3F:75:5D:A1:32:9F:B6:63:47:D1:7D:C2:B7:9A:73:C3:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/09456214-8d25-4b5e-9e04-35c0a7a26470/0/FB2E043F755DA1329FB66347D17DC2B79A73C3FA.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/FB2E043F755DA1329FB66347D17DC2B79A73C3FA.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09456214-8d25-4b5e-9e04-35c0a7a26470/0/FB2E043F755DA1329FB66347D17DC2B79A73C3FA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:20:30:53:5a:ca:7c:4a:cb:7c:44:8d:96:38:c4:31:fd:ab: fe:cd:0b:18:a5:5c:50:b6:59:f6:a9:18:2a:9d:4d:e6:cb:39: 25:a9:73:35:d3:10:83:6f:b5:61:ab:48:6f:14:43:a8:33:08: 1f:01:68:21:99:53:0b:f7:a7:10:59:90:12:18:65:62:40:80: c8:6a:51:84:47:cc:1c:2a:86:72:c8:00:92:df:3e:e2:17:c2: af:67:a4:e1:2d:7f:65:44:01:7c:7b:df:8a:b6:50:e5:bd:24: 43:bc:38:7c:4e:3b:3a:82:7d:a7:8c:11:f9:4f:f6:55:40:0f: 87:ac:dc:88:d6:97:f3:c8:e6:57:65:df:0a:f3:72:a9:14:78: db:ba:4d:9b:3f:cb:f3:7f:8a:c9:11:72:3d:bc:68:ab:ee:9d: 7c:f1:a3:54:45:dd:e2:5f:fc:ff:74:67:c8:e2:29:74:a6:c3: a6:6d:6c:f9:ce:1f:51:86:f7:f4:52:93:33:ee:a9:2f:bb:54: a2:25:35:b0:94:b9:da:3d:f0:b0:7b:09:c1:d9:7e:8f:80:88: fd:bf:6b:34:87:c8:b4:1d:da:c2:2c:42:65:df:bf:a9:15:f1: 26:27:f8:57:8e:ee:40:56:5a:ef:84:46:59:79:19:a0:02:ef: 84:bd:8e:4d -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUIgevX36G9CXKFkB09ilWxbV7Qu8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkIyRTA0M0Y3NTVEQTEzMjlGQjY2MzQ3RDE3REMyQjc5 QTczQzNGQTAeFw0yNTEyMTMxMzA3MDVaFw0yNTEyMTQxMzE2MDVaMDMxMTAvBgNV BAMTKEIxOTc0MzQ3NTI5Nzk0NDNDRTAwMENGMjQwQTM1NTFFQTgyODk4RDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/Ys+tGjFIRYYujKGgbvlmRxYZ Or4PLDBrRZSTq4WgjoZKEZqfsKdvooy6yc+TtwY0/eW7nkNvWV4QCshMWu1wt+Rd 5o6dVs7PIIgoQPNMArhwh2Gtr1bxz8KNXgSuXGBbIYk29r7AzHJw3BhFECfQnWy7 siz0kfb9L6mDWBdMJhsiaTZFi4CM61jZ9x1egZrFK6lYBFzKRNWSyWXsn5dMwz8t 6DhIZMNmgrZRwf8Nf1l0i9D5hoAiuHv9UisrHuWWYAaNahSudVSqnOcZxOUq6l/4 cDQYrqI9sQ8jh8m5djSkzaomUuJUcqEfNwga15KYuN/RfdXjykL4Wxcasvn3AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUsZdDR1KXlEPOAAzyQKNVHqgomNYwHwYDVR0j BBgwFoAU+y4EP3VdoTKftmNH0X3Ct5pzw/owDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDk0NTYyMTQtOGQyNS00YjVlLTllMDQtMzVjMGE3YTI2 NDcwLzAvRkIyRTA0M0Y3NTVEQTEzMjlGQjY2MzQ3RDE3REMyQjc5QTczQzNGQS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9GQjJFMDQzRjc1NURBMTMyOUZCNjYzNDdE MTdEQzJCNzlBNzNDM0ZBLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzA5NDU2MjE0LThkMjUtNGI1ZS05ZTA0LTM1YzBhN2EyNjQ3MC8wL0ZCMkUwNDNG NzU1REExMzI5RkI2NjM0N0QxN0RDMkI3OUE3M0MzRkEubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA2IDBT Wsp8Sst8RI2WOMQx/av+zQsYpVxQtln2qRgqnU3myzklqXM10xCDb7Vhq0hvFEOo MwgfAWghmVML96cQWZASGGViQIDIalGER8wcKoZyyACS3z7iF8KvZ6ThLX9lRAF8 e9+KtlDlvSRDvDh8Tjs6gn2njBH5T/ZVQA+HrNyI1pfzyOZXZd8K83KpFHjbuk2b P8vzf4rJEXI9vGir7p188aNURd3iX/z/dGfI4il0psOmbWz5zh9Rhvf0UpMz7qkv u1SiJTWwlLnaPfCwewnB2X6PgIj9v2s0h8i0HdrCLEJl37+pFfEmJ/hXju5AVlrv hEZZeRmgAu+EvY5N -----END CERTIFICATE-----Generated at Sat Dec 13 19:15:56 2025 by rpki-client