This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.mft File: F768FF6E681858C0EC19F3A93FA1792CD16CEED3.mft (raw, json) Hash identifier: ANJWIRFqm0k3JOKfWN7Y7EvNpuf13IY/memjEnxwmsA= Subject key identifier: 36:F3:13:75:6A:9D:0E:79:01:CB:30:AC:36:AF:85:36:AA:4C:50:9C Authority key identifier: F7:68:FF:6E:68:18:58:C0:EC:19:F3:A9:3F:A1:79:2C:D1:6C:EE:D3 Certificate issuer: /CN=f768ff6e681858c0ec19f3a93fa1792cd16ceed3 Certificate serial: 418E8934B0D355284C66BD2F1BDF027548F60D4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.mft Manifest number: 01E0 Signing time: Tue 09 Dec 2025 22:11:37 +0000 Manifest this update: Tue 09 Dec 2025 22:06:37 +0000 Manifest next update: Wed 10 Dec 2025 23:45:37 +0000 Files and hashes: 1: 3130392e3233342e3230382e302f32342d3234203d3e203331383938.roa (hash: b3VPqm78d32upkRS45HOejDpaZzakM7RvUm8zYxxirQ=) 2: 352e3232362e3138372e302f32342d3234203d3e203331383938.roa (hash: kBpq1LEvwgTf4WM51jxpYydvFyszuazgeravGzXETJo=) 3: 352e3232362e3138352e302f32342d3234203d3e2034363337.roa (hash: xGDSj9rMMdhGkci1rj9QS/c2p6IRznTgPF56svMZjZY=) 4: 352e3232362e3138382e302f32342d3234203d3e20313532313739.roa (hash: nFzeEleWTSIYtIbjgNdPg9c+CwbgHF8u+W2VGtxEBpQ=) 5: 3137382e3133322e3139322e302f32342d3234203d3e203134363138.roa (hash: UgtgsSF4DmUx+FqAs5WV6TWI9fyKhqfkEeJgaHpzYEc=) 6: 3137382e3133322e3139322e302f32342d3234203d3e203136353039.roa (hash: 0XlqzvD5WZeVhzrMIb+ArV6j60KVoqxW88qIB/mg2yk=) 7: 3130392e3233342e3231352e302f32342d3234203d3e20393733.roa (hash: 7XlPdZ+5k5dznfPMoT3Ni5uRfyL41Likgo5fplEaDTA=) 8: 352e3232362e3138342e302f32342d3234203d3e20313534303439.roa (hash: H9hlRxAktpjIeT3DJhaD4nFRiEtoUGveoYH/KllFDKE=) 9: 3137382e3133322e3139382e302f32342d3234203d3e20323133393230.roa (hash: 5LOGXsAFfY8MpN+3dgrjf5uTyIh00nk/J0/MSXxVmy4=) 10: 3137382e3133322e3139362e302f32342d3234203d3e20333933393432.roa (hash: D28ld5kVJceea0qzm5GNZqptmPyuFgFAFujny6boKiE=) 11: 3130392e3233342e3231302e302f32342d3234203d3e203432383331.roa (hash: XdAkV6zbkuI1AZDLksTC73fyYmD1RaBTy+I3AGFuaxA=) 12: 3137382e3133322e3139382e302f32342d3234203d3e203133333335.roa (hash: 6TrR9eiRNzBfJRrubefTFudn86wqW7t6u+0cIxHNR5g=) 13: 3137382e3133322e3139372e302f32342d3234203d3e2033333230.roa (hash: MuzLKtyseOT68ju0FOjjeN3pxilqG43fi3IvFyF1hyA=) 14: 3130392e3233342e3231342e302f32342d3234203d3e203433363431.roa (hash: 6BGcWOFPHM6AYGamfRs+s+1VsWvQIYZ1oxiJHAvfJjg=) 15: 3130392e3233342e3231322e302f32342d3234203d3e20313937353337.roa (hash: Lxa7aR1NsNsgX0Y0Me+SOrl9Sd6ODfPmrUUHY7uRFAg=) 16: 352e3232362e3139312e302f32342d3234203d3e20323135323338.roa (hash: UAeHXbW3QhFNKys+iIRYQQp2rK+CbLJVmAbT44zmQ1k=) 17: 3137382e3133322e3139392e302f32342d3234203d3e203631333137.roa (hash: g03b1IthT7R6emRcKoovUUAfL6xJm+JexZ6oxCLs8E4=) 18: 3137382e3133322e3139342e302f32342d3234203d3e2033333230.roa (hash: fQsEWjsrThcFlJLP0H4ir/IvOeNDAQWZ1RZpyw7wV08=) 19: 3130392e3233342e3231332e302f32342d3234203d3e203434323133.roa (hash: pWCIuSrDYwp+tan25QY6TeO9jMNRWP/W0zj94P0620Y=) 20: 352e3232362e3138392e302f32342d3234203d3e2039333034.roa (hash: KMYDoKnPWH3TUSOlAA/wzDsC66Y3O5PlUt+i9WMB8YA=) 21: 352e3232362e3138362e302f32342d3234203d3e203633303233.roa (hash: kysMqqfL+cxQFiZ9hx+MYhVVLOWVsGxNP3RzuLn0/y4=) 22: 3130392e3233342e3230392e302f32342d3234203d3e20333935373933.roa (hash: o3GE/oY8MCJAGEjtcPLWPVhOZbFRZAMmde/X42j4j+s=) 23: F768FF6E681858C0EC19F3A93FA1792CD16CEED3.crl (hash: qiWQkEsyLECbdP55q9D1F/TcROHwLE+3jUfUlhtplFo=) 24: 3130392e3233342e3230392e302f32342d3234203d3e203235313630.roa (hash: 4qmNKGx6VCIK53hbSqHwJPgKKMACqFJu608tkfoDU90=) 25: 3137382e3133322e3139332e302f32342d3234203d3e2033333230.roa (hash: oI+z5B0JaicbPoA0ktNCShJBGRgRTGuhGcC7A8+Ru9U=) 26: 3137382e3133322e3139382e302f32342d3234203d3e20323635393139.roa (hash: uhM+/0v8HioS/qE+KkDqR673YS11oQr5aznZkyp/yx4=) 27: 3137382e3133322e3139352e302f32342d3234203d3e20313335333931.roa (hash: RVvsf+GbQ+gvRF/WRSFeBmTdyh0atmXnd8DAVmdlYaw=) 28: 3130392e3233342e3231312e302f32342d3234203d3e203133333335.roa (hash: Ej1HuQzuhYe60A2HNErPZLUdfpH5EaYPpZ+PpBEwVxY=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.crl rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.mft rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 10 Dec 2025 23:45:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:8e:89:34:b0:d3:55:28:4c:66:bd:2f:1b:df:02:75:48:f6:0d:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f768ff6e681858c0ec19f3a93fa1792cd16ceed3 Validity Not Before: Dec 9 22:06:37 2025 GMT Not After : Dec 10 23:45:37 2025 GMT Subject: CN=36F313756A9D0E7901CB30AC36AF8536AA4C509C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:6c:92:fd:75:31:88:e9:a3:a0:59:84:ae:ee: 10:b7:0a:63:09:95:24:86:14:bb:b8:75:e7:fa:11: 6f:bb:91:34:9a:75:5a:d3:5a:55:45:04:ff:4c:53: e5:e2:4e:64:d4:d3:d3:e5:5d:e4:21:59:bd:04:b7: ff:ba:e4:71:97:cd:b8:59:15:2f:6c:c4:96:81:a4: 96:8f:57:2e:47:1f:f3:96:a1:dc:ff:ce:82:55:a5: e2:98:10:82:e3:fb:51:22:9b:50:cb:56:fd:0a:f9: 1b:1d:56:ab:ef:f1:47:c9:ec:f0:70:b1:26:82:bf: bc:9a:22:99:20:5c:67:4f:a2:5d:66:83:79:b1:98: 8d:64:a7:da:72:36:95:b2:d1:4a:cc:b7:9e:e1:f1: 9a:dd:f7:c2:25:a9:ed:52:f1:31:d6:6d:bd:89:c1: 4a:60:89:6d:c9:d2:53:d1:e6:5f:31:eb:ce:b3:32: 6c:f2:38:cb:ef:5d:b4:87:44:75:97:f4:8c:92:21: 00:51:5d:ce:dd:d9:2d:15:4c:94:e7:ba:22:c4:49: d8:f4:07:d8:17:48:27:11:e8:a3:06:c2:74:9a:54: 19:02:59:cd:c2:44:01:67:22:df:c8:d5:ae:26:87: 3a:75:df:57:e2:7a:c5:ab:e2:1a:0e:a2:22:71:7a: 01:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:F3:13:75:6A:9D:0E:79:01:CB:30:AC:36:AF:85:36:AA:4C:50:9C X509v3 Authority Key Identifier: keyid:F7:68:FF:6E:68:18:58:C0:EC:19:F3:A9:3F:A1:79:2C:D1:6C:EE:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:86:59:42:df:77:ec:a1:a2:5c:7c:ab:99:c2:0c:73:f5:93: e0:d9:01:d9:0e:42:e4:9d:18:95:49:39:04:6c:d3:ab:ad:ab: c5:05:86:ff:b1:27:64:c2:60:3b:21:4f:1a:6f:3e:75:cf:6e: 01:ea:df:0e:e8:55:a7:97:9e:e1:79:7d:c2:1b:c1:13:f2:48: ba:5e:21:e0:9c:6c:92:76:7a:95:4c:55:e9:ee:a8:e6:06:eb: fe:92:8a:fe:e7:1a:53:07:a1:1f:89:f6:02:08:c2:ab:23:26: ed:98:fe:4d:1e:03:87:a6:e5:06:4d:4b:8e:5e:53:53:90:14: d6:61:72:c7:8f:29:2e:eb:81:22:82:20:a2:73:71:56:2d:6c: 1a:41:90:ea:c4:0d:95:2a:6a:df:da:f9:b7:9c:0f:e7:d3:02: 06:ef:b6:c8:04:ea:2f:32:52:e4:27:a9:c2:e8:45:6f:32:fc: b5:e4:25:f0:91:b1:6b:6d:13:f2:c4:25:2b:20:35:01:00:97: 54:ca:8a:b1:fb:89:30:ef:7b:c1:26:c9:ba:64:d2:f2:fd:86: d0:fd:03:9d:10:ec:bc:89:fa:01:62:76:80:39:b4:d6:34:62: 80:28:92:91:9d:03:16:7c:e9:a0:05:45:e5:57:1c:8c:ab:11: e5:cc:1f:63 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUQY6JNLDTVShMZr0vG98CdUj2DUwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZjc2OGZmNmU2ODE4NThjMGVjMTlmM2E5M2ZhMTc5MmNk MTZjZWVkMzAeFw0yNTEyMDkyMjA2MzdaFw0yNTEyMTAyMzQ1MzdaMDMxMTAvBgNV BAMTKDM2RjMxMzc1NkE5RDBFNzkwMUNCMzBBQzM2QUY4NTM2QUE0QzUwOUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7bJL9dTGI6aOgWYSu7hC3CmMJ lSSGFLu4def6EW+7kTSadVrTWlVFBP9MU+XiTmTU09PlXeQhWb0Et/+65HGXzbhZ FS9sxJaBpJaPVy5HH/OWodz/zoJVpeKYEILj+1Eim1DLVv0K+RsdVqvv8UfJ7PBw sSaCv7yaIpkgXGdPol1mg3mxmI1kp9pyNpWy0UrMt57h8Zrd98Ilqe1S8THWbb2J wUpgiW3J0lPR5l8x686zMmzyOMvvXbSHRHWX9IySIQBRXc7d2S0VTJTnuiLESdj0 B9gXSCcR6KMGwnSaVBkCWc3CRAFnIt/I1a4mhzp131fiesWr4hoOoiJxegEvAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUNvMTdWqdDnkByzCsNq+FNqpMUJwwHwYDVR0j BBgwFoAU92j/bmgYWMDsGfOpP6F5LNFs7tMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMGNjMDg3MzctOTI2Ny00MDJhLTk5ZDQtN2FhYWZlYTQ0 NGVkLzAvRjc2OEZGNkU2ODE4NThDMEVDMTlGM0E5M0ZBMTc5MkNEMTZDRUVEMy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzkyal9ibWdZV01Ec0dmT3BQNkY1TE5G czd0TS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8wY2MwODczNy05 MjY3LTQwMmEtOTlkNC03YWFhZmVhNDQ0ZWQvMC9GNzY4RkY2RTY4MTg1OEMwRUMx OUYzQTkzRkExNzkyQ0QxNkNFRUQzLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARIZZQt937KGiXHyrmcIM c/WT4NkB2Q5C5J0YlUk5BGzTq62rxQWG/7EnZMJgOyFPGm8+dc9uAerfDuhVp5ee 4Xl9whvBE/JIul4h4JxsknZ6lUxV6e6o5gbr/pKK/ucaUwehH4n2AgjCqyMm7Zj+ TR4Dh6blBk1Ljl5TU5AU1mFyx48pLuuBIoIgonNxVi1sGkGQ6sQNlSpq39r5t5wP 59MCBu+2yATqLzJS5CepwuhFbzL8teQl8JGxa20T8sQlKyA1AQCXVMqKsfuJMO97 wSbJumTS8v2G0P0DnRDsvIn6AWJ2gDm01jRigCiSkZ0DFnzpoAVF5VccjKsR5cwf Yw== -----END CERTIFICATE-----Generated at Wed Dec 10 11:59:53 2025 by rpki-client