This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft File: 4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft (raw, json) Hash identifier: pwER8MAZ85BA4+NHM5QBJbRnaU3mX7WHuhFF7eMAA5g= Subject key identifier: BD:55:5B:94:B9:9E:0D:88:95:04:7C:95:AC:5A:AB:86:20:B1:F3:FF Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76 Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76 Certificate serial: 656C029C3FD148BF2A5F5409ADDA5EDEC80783BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft Manifest number: 31 Signing time: Thu 27 Nov 2025 18:40:52 +0000 Manifest this update: Thu 27 Nov 2025 18:35:52 +0000 Manifest next update: Fri 28 Nov 2025 18:47:52 +0000 Files and hashes: 1: 352e3139392e302e302f32332d3234203d3e2034373636.roa (hash: fkd1HaVNJf7l0mlOvixuLlNIhfpcobvMqSMFW5i9M+k=) 2: 3231322e37342e33362e302f32332d3234203d3e2034373636.roa (hash: +qRI5JDodbfFjoj/U6c37sePKQA9L/nQjiMHpoPan0k=) 3: 352e3139392e322e302f32342d3234203d3e20383334.roa (hash: fJTauUb3C5ODwA3NEW/7tQUpv1UkXLGVmZVrDQotrds=) 4: 3231322e37342e33342e302f32342d3234203d3e203235313938.roa (hash: u+CJFixb/TfQTFiPUcv8M19i1454ALxa1B6lNbpI3Ek=) 5: 352e3139392e33322e302f32322d3234203d3e20383334.roa (hash: wHi/K7jkDZlOgAcLQ2orzAvP6GWa0NTiJ30LAzYTgs0=) 6: 352e3139392e33392e302f32342d3234203d3e20323035383836.roa (hash: G0dHN+CXIo4pUkp/sYtiWtOv7C+87LhSJVHOBYplH2Q=) 7: 3138352e3136392e3132302e302f32342d3234203d3e203235313938.roa (hash: NhwNgSRRC4ze1vFyna1H6oipTAX1WYy4vfkJyAyZaok=) 8: 352e3139392e33362e302f32332d3234203d3e20383334.roa (hash: e6C7uP4SsF+Xwc+yfszvXNHVIvJ/eTTJStryEC703oI=) 9: 352e3139392e33382e302f32342d3234203d3e20383334.roa (hash: 0362QmgMfp+pm0iSet6T13/ixlJ04OKieIWwibbcZkk=) 10: 3138352e3136392e3132312e302f32342d3234203d3e20383334.roa (hash: 5ydZXyEJMLgmPqqodM7OR8o4h7aXX+g+j21lBhF51Hk=) 11: 352e3139392e32362e302f32332d3234203d3e20383334.roa (hash: 1QXdd6mBmXVNffnrIU1AUy68V+ojS5R+WxPDTzSdhBA=) 12: 3231322e37342e33322e302f32342d3234203d3e20323039333336.roa (hash: FH6FqDXFQ/WAQOta0zaRvwGtWt4jNqdlI61tpxRU34g=) 13: 352e3139392e382e302f32322d3234203d3e20383334.roa (hash: drQZmGogqeo3DDz/7imygJ/8r5KWWZO6Is6TgK1B5n4=) 14: 3231322e37342e33382e302f32332d3234203d3e20383334.roa (hash: tbG9527WbTHnWwxz9Yd2tbsmD4sMWr9sPpLCOTleDso=) 15: 352e3139392e32302e302f32332d3234203d3e20383334.roa (hash: QvTaZHbJDvGa5lY65f690MXZNG767G5Bd2a5bo5+3Bo=) 16: 3138352e3136392e3132302e302f32342d3234203d3e20323035383836.roa (hash: Kl3yirtS/GQk6rUyZlPSoy//aSSwc7ETiQPS/ovJvdA=) 17: 3138352e3136392e3132322e302f32342d3234203d3e20323035383836.roa (hash: +LcwJOkmCFcaKrlR2fH3FN/eQNaWZm4nD6af4WT6XXA=) 18: 3231322e37342e34372e302f32342d3234203d3e20323035383836.roa (hash: w0UpXoKkSl0862d4qInGSxq8jgcZBFr+wgvxyyT4sFI=) 19: 326130303a313766383a3a2f33322d3634203d3e203439343338.roa (hash: /KtiO33L6se3kHkVpFIPImnjoEV3e3gPcr4HV+lO8sc=) 20: 352e3139392e32332e302f32342d3234203d3e203230343733.roa (hash: 85emnoFIIZEck9qOCD8+fBhi9DyMDr+qHWMNX3Pl9pc=) 21: 3231322e37342e36322e302f32332d3234203d3e20383334.roa (hash: FhVIH1oqeyWRXelusY7VYX0XcSHjWuRSms602qLYDS8=) 22: 352e3139392e31322e302f32332d3234203d3e20383334.roa (hash: w5fYhqiORwySyVzI+lwW/lcap/TpvK9njxSZiAI7jCo=) 23: 352e3139392e342e302f32322d3234203d3e20383334.roa (hash: 65MqopLjpyM8Mqlpr5SzIvO2zxNR0Tk0bh69luxGgCk=) 24: 352e3139392e34382e302f32302d3234203d3e20383334.roa (hash: KQYYTeYecaAjP4TsoYrv2gNBDDrXQX1i6HAjqN6cgos=) 25: 352e3139392e31342e302f32342d3234203d3e20383334.roa (hash: Y/R322fr3rA/8G1jlm5vYU4HllA9nyOgFjszd7MIowI=) 26: 352e3139392e34302e302f32312d3234203d3e20383334.roa (hash: RhmwnUF0evkCBGvNW9Pxo1FbNx1Hwmt7OynFlIb8KEI=) 27: 3231322e37342e36302e302f32342d3234203d3e203136323736.roa (hash: LfsfjRYplHNXIuKxg8KjUxNxR2TAxr0H5Pi7YQ3PchE=) 28: 352e3139392e31352e302f32342d3234203d3e203230343733.roa (hash: oVkiCPiNJRJM/W+z3ndD4pSoOtGs4Qbrd83E+p9HcJU=) 29: 3231322e37342e34382e302f32312d3234203d3e20383334.roa (hash: Td+J869St+dhm4LWIAGWNXZmf3uOkE9PSOXuPVKIF3U=) 30: 352e3139392e32382e302f32322d3234203d3e20383334.roa (hash: blzkIaXs4LsOOA2O5xYIWbW5hviQNa505WTGCpw8pB0=) 31: 352e3139392e32352e302f32342d3234203d3e20383334.roa (hash: MVErUVWhLRH809b+QYI+5PK9fhqDeaqu1d6Qy8LzR98=) 32: 352e3139392e332e302f32342d3234203d3e203235313938.roa (hash: sqhE+ZIkxeIT3WBcQVH8OwR/DpijD0Jp/HrUaOEDhYE=) 33: 39312e3234362e32372e302f32342d3234203d3e20323035383836.roa (hash: mX462CgFns7W4X+4kzEy9rbR0Uh9rNqKOg71fpqrw7E=) 34: 3231322e37342e35362e302f32322d3234203d3e20383334.roa (hash: jWFWXkgGEzDyFbGzdlWX2LXoJglHkjfmQtBe6VTHs1U=) 35: 352e3139392e31362e302f32322d3234203d3e20383334.roa (hash: gtGuCR7WqssHrln/Y4e465GTa/RHfpMeR/odre8pN2Y=) 36: 352e3139392e32342e302f32342d3234203d3e203230343733.roa (hash: q7+glSxlm2qX+H1QjBKKgOd1wGs12LGnA8QDd8YyJhE=) 37: 3231322e37342e34302e302f32322d3234203d3e20383334.roa (hash: 2AymSG1obDI5Lgxi2X9WGKfsJG40XOBhT+TMpBznMVg=) 38: 4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl (hash: rHKq4ERebdpApoOBkmjNVECJEDhZJB5J0WW7Yo6hDqo=) 39: 3231322e37342e33352e302f32342d3234203d3e20323035383836.roa (hash: J4GVIkO6TSYEbQLOirEiQ148hJHkKGgqVur53LKHR+M=) 40: 3231322e37342e36312e302f32342d3234203d3e20383334.roa (hash: rat/LL5/H+FNdHGzcg4DPrBChUJGwGzC1U4ONNItvRU=) 41: 39312e3234362e32372e302f32342d3234203d3e203235313938.roa (hash: gHC7M+t1lIuQnK9rZvwmCUquDXmZVxO9w2zdBUhCF54=) 42: 3138352e3136392e3132332e302f32342d3234203d3e20323035383836.roa (hash: sDe2VEOoKOG9mo4SeRNP3ZSs87O2mhleKKu6HFE3PpI=) 43: 352e3139392e332e302f32342d3234203d3e20323035383836.roa (hash: 5o0z6/m5qhC51cnzv2r9K1IxTqAdaDlCpJLCCL1osiI=) 44: 3231322e37342e33332e302f32342d3234203d3e20323136343035.roa (hash: b5R/eMW2JJAKZgMfOBawHgRL0h+fcttLr9lPC/e/oTc=) 45: 352e3139392e32322e302f32342d3234203d3e203230343733.roa (hash: OZli0DwLI2EHYi071cA1eilY9ouwYPaD3LYrqpRrOGo=) 46: 3231322e37342e34362e302f32342d3234203d3e20383334.roa (hash: KfJI73ZD+uvgJ48Ob17/ZJXQ7VzBwmqCLnEln/1uBVY=) 47: 3231322e37342e33342e302f32342d3234203d3e20323035383836.roa (hash: zdBl2MreUW7PfA24XlLpiDTC6G+xxiUpvRgXqSV13PE=) 48: 39312e3234362e32362e302f32342d3234203d3e20323039333336.roa (hash: rEAGLVQ5nYAtmkH/uKeHkUcPnM4QU/FZwu/LTkZBgUo=) 49: 3231322e37342e34342e302f32332d3234203d3e20383334.roa (hash: JzssRFw4LSgndSl0fuLw+ESi/HTgSpnBiMzqJOlTHDc=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 28 Nov 2025 18:47:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:6c:02:9c:3f:d1:48:bf:2a:5f:54:09:ad:da:5e:de:c8:07:83:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76 Validity Not Before: Nov 27 18:35:52 2025 GMT Not After : Nov 28 18:47:52 2025 GMT Subject: CN=BD555B94B99E0D8895047C95AC5AAB8620B1F3FF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:9b:7e:a1:32:0b:2f:3d:80:b8:e3:9a:83:a8: 24:eb:c0:4b:70:ea:33:ca:67:b8:1c:80:9d:ab:f6: 94:7e:c7:d0:9d:dd:ea:52:08:49:ed:25:82:b8:95: 32:cb:db:bd:5f:a0:77:39:3b:3c:da:3c:02:47:87: 86:95:52:9a:36:b3:00:82:88:d5:2b:ed:a1:9d:f2: 8b:57:0f:b6:db:b7:6e:b6:99:89:5f:a6:8d:37:d6: 73:69:ef:0f:e2:29:ec:35:36:bf:76:9b:a0:65:01: 70:1d:fc:37:fa:bf:c5:8f:90:b0:04:f7:6e:17:79: b9:ed:16:a9:ce:bd:2d:04:79:8a:bb:a7:4d:d5:a3: 8b:e0:14:ce:ed:d2:34:1a:2e:4a:2d:49:38:24:b9: c4:23:d0:ba:3b:77:38:3a:8f:dd:a3:94:31:1f:a5: 49:8f:f6:16:7c:0f:66:f9:25:09:1a:91:bd:28:67: 8e:70:0d:6e:c3:19:1e:5c:1f:8c:c1:76:9b:7e:78: da:35:8f:66:05:b2:5a:19:83:9f:dc:2a:43:fe:56: 67:be:15:d5:3b:0f:a1:83:c6:fa:da:fb:a5:1e:c3: 53:ba:3f:06:89:4f:80:be:04:c0:93:31:f3:42:c0: a1:79:52:eb:17:c9:2c:b5:1f:bf:15:20:06:66:8d: c4:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:55:5B:94:B9:9E:0D:88:95:04:7C:95:AC:5A:AB:86:20:B1:F3:FF X509v3 Authority Key Identifier: keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:dc:20:4d:7b:e1:29:52:8d:a2:3c:57:aa:69:d8:7c:9f:9d: 1a:cc:75:2e:59:35:21:e4:3f:1f:d4:0a:5f:35:67:5f:05:23: 2c:e3:e9:83:3a:e5:5f:1d:53:7d:48:9e:e6:f4:4c:c4:17:a1: a4:39:0a:5c:eb:b9:66:78:ed:45:5e:75:cf:eb:3a:7d:f2:57: da:1f:e0:36:02:cf:dc:68:4d:6a:f7:97:c6:55:a6:6c:e0:14: b5:4b:f4:60:f8:d3:8c:85:19:7a:a4:a4:e2:c6:6f:0b:57:06: 38:1a:7c:d5:3d:68:83:a5:dc:ce:aa:3c:8c:39:43:65:7f:e3: a1:73:09:0a:0a:ea:7d:c5:31:f7:ae:61:6c:29:5f:c9:19:c3: f7:39:f3:70:78:aa:6b:57:81:52:52:9f:ef:9c:4f:df:a8:4e: 35:52:83:47:e4:e8:cb:bf:03:4a:4f:0b:7b:82:55:cf:76:31: d8:1c:7f:fc:20:2e:a2:23:13:43:1e:b6:92:4c:9d:5f:bd:03: 49:3c:86:76:57:ce:f3:30:b5:ae:fe:ac:38:9f:7f:aa:b8:6e: bb:ff:2f:11:cc:f0:54:11:81:1f:3a:12:e3:cb:59:79:1e:23: ff:55:10:70:e4:e2:1c:47:2a:b8:6e:40:8e:a8:94:ad:e1:95: 09:70:49:8f -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUZWwCnD/RSL8qX1QJrdpe3sgHg7owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGIzYWNhM2E3YzY1MmE5ZmFmOGU0ZTExOWJkMmY3YmY1 NGFmZGU3NjAeFw0yNTExMjcxODM1NTJaFw0yNTExMjgxODQ3NTJaMDMxMTAvBgNV BAMTKEJENTU1Qjk0Qjk5RTBEODg5NTA0N0M5NUFDNUFBQjg2MjBCMUYzRkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBm36hMgsvPYC445qDqCTrwEtw 6jPKZ7gcgJ2r9pR+x9Cd3epSCEntJYK4lTLL271foHc5OzzaPAJHh4aVUpo2swCC iNUr7aGd8otXD7bbt262mYlfpo031nNp7w/iKew1Nr92m6BlAXAd/Df6v8WPkLAE 924XebntFqnOvS0EeYq7p03Vo4vgFM7t0jQaLkotSTgkucQj0Lo7dzg6j92jlDEf pUmP9hZ8D2b5JQkakb0oZ45wDW7DGR5cH4zBdpt+eNo1j2YFsloZg5/cKkP+Vme+ FdU7D6GDxvra+6Uew1O6PwaJT4C+BMCTMfNCwKF5UusXySy1H78VIAZmjcSvAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUvVVblLmeDYiVBHyVrFqrhiCx8/8wHwYDVR0j BBgwFoAUSzrKOnxlKp+vjk4Rm9L3v1Sv3nYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzctZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFh NzgyLzAvNEIzQUNBM0E3QzY1MkE5RkFGOEU0RTExOUJEMkY3QkY1NEFGREU3Ni5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1N6cktPbnhsS3AtdmprNFJtOUwzdjFT djNuWS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8wZDg1NGM3Ny1m ZDhiLTQyNWEtYmQ1NS04MmUxZDdmYWE3ODIvMC80QjNBQ0EzQTdDNjUyQTlGQUY4 RTRFMTE5QkQyRjdCRjU0QUZERTc2Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAdwgTXvhKVKNojxXqmnY fJ+dGsx1Llk1IeQ/H9QKXzVnXwUjLOPpgzrlXx1TfUie5vRMxBehpDkKXOu5Znjt RV51z+s6ffJX2h/gNgLP3GhNaveXxlWmbOAUtUv0YPjTjIUZeqSk4sZvC1cGOBp8 1T1og6Xczqo8jDlDZX/joXMJCgrqfcUx965hbClfyRnD9znzcHiqa1eBUlKf75xP 36hONVKDR+Toy78DSk8Le4JVz3Yx2Bx//CAuoiMTQx62kkydX70DSTyGdlfO8zC1 rv6sOJ9/qrhuu/8vEczwVBGBHzoS48tZeR4j/1UQcOTiHEcquG5AjqiUreGVCXBJ jw== -----END CERTIFICATE-----Generated at Fri Nov 28 05:40:13 2025 by rpki-client