This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/3/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.mft File: D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.mft (raw, json) Hash identifier: 1lJFKLYC4DNbjiqCa+HrtvXCDm8S1UWdh+C0Hcnn598= Subject key identifier: BC:70:39:B5:79:AE:0B:2C:72:51:3E:C2:1B:61:E3:90:DE:D1:21:09 Authority key identifier: D6:15:AB:CB:A5:01:55:64:AD:E9:B4:73:D6:4F:1E:34:A0:BA:8D:4A Certificate issuer: /CN=D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A Certificate serial: 3B3DBAAB422F30C30EDD676A5731AEC05651484C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/3/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.mft Manifest number: 0157 Signing time: Thu 11 Dec 2025 05:40:16 +0000 Manifest this update: Thu 11 Dec 2025 05:35:16 +0000 Manifest next update: Fri 12 Dec 2025 09:24:16 +0000 Files and hashes: 1: 326131343a373538303a3930333a3a2f34382d3438203d3e203331383938.roa (hash: ypgUGD6Euz3HGS0A9GoVgCiVtLF78aI6ZX/YlUyvGd8=) 2: D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.crl (hash: D1EbHI9BvWh08JSG5udQKNjgoR0r66jx+i/3+JpB4VM=) 3: 326131343a373538303a3930313a3a2f34382d3438203d3e20323033383433.roa (hash: XxS9zprV7IX1JjrBQQ+JptkD2bW89WKl615fH9J1hzc=) 4: 326131343a373538303a3930323a3a2f34382d3438203d3e20323033383433.roa (hash: BFT8GbG7CSJ9YmzS1PjnMDrg1nwAcfXEJPEfuo5FzQk=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/3/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.crl rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/3/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 09:24:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:3d:ba:ab:42:2f:30:c3:0e:dd:67:6a:57:31:ae:c0:56:51:48:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A Validity Not Before: Dec 11 05:35:16 2025 GMT Not After : Dec 12 09:24:16 2025 GMT Subject: CN=BC7039B579AE0B2C72513EC21B61E390DED12109 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:5a:27:75:63:a1:61:45:3e:92:3e:95:d6:95: 48:b8:81:86:22:d8:83:c9:45:14:17:63:f1:28:94: eb:64:49:15:ff:37:b0:f8:ec:74:51:4f:61:d7:91: a5:6e:fa:02:88:ad:c6:2d:6d:b3:12:a8:18:10:30: 1b:92:fe:59:e2:be:45:69:37:b5:00:84:61:88:d6: a8:76:e3:13:7f:84:25:4d:6b:67:e9:32:90:bd:44: 27:c1:dc:8a:ad:44:ed:40:a5:77:10:9c:0e:db:c8: 94:8b:57:70:9e:df:eb:41:18:ea:f8:92:14:54:92: 04:cc:f7:06:19:f5:0c:ec:55:ea:f8:e8:5a:1b:e5: e1:5a:d0:20:6d:f7:2c:82:fa:c8:1d:35:80:80:2b: ca:aa:d5:14:1e:f1:d6:6c:f2:0d:8d:62:b6:f7:ff: 80:d4:10:c8:b6:c0:b2:ec:55:a1:ec:78:5e:ad:8e: 5c:1b:a7:46:c6:11:d5:e6:b9:d7:29:d2:0a:ff:df: 81:2b:7c:5d:c6:40:f9:fe:39:ae:7e:be:07:5d:2c: 59:7e:de:36:a1:9f:24:63:6f:fd:69:65:df:0a:80: 20:89:38:f0:96:7e:27:db:13:c4:34:7f:ce:16:3b: d6:7d:8f:fb:46:dd:8c:c0:16:a6:9d:b3:6a:84:e4: fe:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:70:39:B5:79:AE:0B:2C:72:51:3E:C2:1B:61:E3:90:DE:D1:21:09 X509v3 Authority Key Identifier: keyid:D6:15:AB:CB:A5:01:55:64:AD:E9:B4:73:D6:4F:1E:34:A0:BA:8D:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/3/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/3/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c5:95:1a:5c:f1:81:d7:c7:a9:43:bc:aa:18:00:7a:c5:ca:72: 6b:75:3a:15:4a:22:5c:63:db:e6:d1:5d:02:a6:8d:d0:e5:91: 90:81:14:33:8a:09:14:f3:75:03:68:77:a8:4b:5a:5b:ce:19: 82:a5:99:97:5c:3c:c4:3d:75:9c:6b:af:ba:13:f4:84:a0:0a: 2a:6c:62:84:35:ad:ac:76:77:97:84:06:2f:12:0f:0f:a0:e4: f3:0b:59:98:90:6a:ce:f6:df:8a:44:2d:c1:a8:da:e5:53:6b: b9:a1:6a:01:3f:45:b1:10:c6:cd:c6:23:f6:f6:16:9a:82:28: 46:2b:bb:e2:64:b1:1c:8d:9d:3c:c9:af:c6:9e:75:95:29:7f: 41:42:6f:3f:0c:7a:97:7d:5a:16:06:d7:ba:52:53:50:3a:65: 81:18:b0:3b:72:41:59:b6:5f:d0:b9:40:2d:8f:a1:e5:ae:37: be:7f:e2:e2:a3:bd:bc:a4:e7:77:69:b7:aa:58:45:c2:6c:62: df:46:ed:c6:b7:ce:2c:ee:d5:c5:dd:9b:cc:5c:8d:27:e6:07: 8b:02:b0:18:17:48:09:99:40:a5:63:15:35:1b:7c:62:22:39: 73:33:ef:f1:21:86:7b:c0:24:b0:01:e0:b6:0f:bd:ec:4a:7b: c5:02:4b:4e -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUOz26q0IvMMMO3WdqVzGuwFZRSEwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDYxNUFCQ0JBNTAxNTU2NEFERTlCNDczRDY0RjFFMzRB MEJBOEQ0QTAeFw0yNTEyMTEwNTM1MTZaFw0yNTEyMTIwOTI0MTZaMDMxMTAvBgNV BAMTKEJDNzAzOUI1NzlBRTBCMkM3MjUxM0VDMjFCNjFFMzkwREVEMTIxMDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNWid1Y6FhRT6SPpXWlUi4gYYi 2IPJRRQXY/EolOtkSRX/N7D47HRRT2HXkaVu+gKIrcYtbbMSqBgQMBuS/lnivkVp N7UAhGGI1qh24xN/hCVNa2fpMpC9RCfB3IqtRO1ApXcQnA7byJSLV3Ce3+tBGOr4 khRUkgTM9wYZ9QzsVer46Fob5eFa0CBt9yyC+sgdNYCAK8qq1RQe8dZs8g2NYrb3 /4DUEMi2wLLsVaHseF6tjlwbp0bGEdXmudcp0gr/34ErfF3GQPn+Oa5+vgddLFl+ 3jahnyRjb/1pZd8KgCCJOPCWfifbE8Q0f84WO9Z9j/tG3YzAFqads2qE5P4NAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUvHA5tXmuCyxyUT7CG2HjkN7RIQkwHwYDVR0j BBgwFoAU1hWry6UBVWSt6bRz1k8eNKC6jUowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTNmNjg1NjEtMGE3NC00Y2NhLWJmOGYtMTJmYWFhZmM4 ZWI4LzMvRDYxNUFCQ0JBNTAxNTU2NEFERTlCNDczRDY0RjFFMzRBMEJBOEQ0QS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9ENjE1QUJDQkE1MDE1NTY0QURFOUI0NzNE NjRGMUUzNEEwQkE4RDRBLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzEzZjY4NTYxLTBhNzQtNGNjYS1iZjhmLTEyZmFhYWZjOGViOC8zL0Q2MTVBQkNC QTUwMTU1NjRBREU5QjQ3M0Q2NEYxRTM0QTBCQThENEEubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDFlRpc 8YHXx6lDvKoYAHrFynJrdToVSiJcY9vm0V0Cpo3Q5ZGQgRQzigkU83UDaHeoS1pb zhmCpZmXXDzEPXWca6+6E/SEoAoqbGKENa2sdneXhAYvEg8PoOTzC1mYkGrO9t+K RC3BqNrlU2u5oWoBP0WxEMbNxiP29haagihGK7viZLEcjZ08ya/GnnWVKX9BQm8/ DHqXfVoWBte6UlNQOmWBGLA7ckFZtl/QuUAtj6Hlrje+f+Lio728pOd3abeqWEXC bGLfRu3Gt84s7tXF3ZvMXI0n5geLArAYF0gJmUClYxU1G3xiIjlzM+/xIYZ7wCSw AeC2D73sSnvFAktO -----END CERTIFICATE-----Generated at Fri Dec 12 02:48:22 2025 by rpki-client