This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/1/A4A082EAE8EF48C7B407C40E742479EADD862089.mft File: A4A082EAE8EF48C7B407C40E742479EADD862089.mft (raw, json) Hash identifier: wMH9xKNDrJgSn30Gh44kEYro4Wlna1roMABDTLTyTdE= Subject key identifier: A2:58:87:3C:A1:66:0D:55:B9:12:2B:E8:BB:23:29:D5:DA:7A:3F:C0 Authority key identifier: A4:A0:82:EA:E8:EF:48:C7:B4:07:C4:0E:74:24:79:EA:DD:86:20:89 Certificate issuer: /CN=A4A082EAE8EF48C7B407C40E742479EADD862089 Certificate serial: 7E6351B8823804D13AB97C33965C72BF5E5BDBB8 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/A4A082EAE8EF48C7B407C40E742479EADD862089.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/1/A4A082EAE8EF48C7B407C40E742479EADD862089.mft Manifest number: 01A0 Signing time: Wed 10 Dec 2025 02:56:12 +0000 Manifest this update: Wed 10 Dec 2025 02:51:12 +0000 Manifest next update: Thu 11 Dec 2025 04:52:12 +0000 Files and hashes: 1: 326130663a383563313a3339303a3a2f34382d3438203d3e20323135343730.roa (hash: mky/ldC1XpVEwoLHqIyOpw4wZEQNfx0y97P4Ne2BiJs=) 2: A4A082EAE8EF48C7B407C40E742479EADD862089.crl (hash: y4Y6mYXl+lmmACv360Bm9ItunAUp6VT5dlL2fJqm+I0=) 3: 326130663a383563313a6234643a3a2f34382d3438203d3e20323133343238.roa (hash: MorJ8/zqWP+ENMZ78Dfg8lahRlU/VfcwHwmQyMuE7hc=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/1/A4A082EAE8EF48C7B407C40E742479EADD862089.crl rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/1/A4A082EAE8EF48C7B407C40E742479EADD862089.mft rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/A4A082EAE8EF48C7B407C40E742479EADD862089.cer rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 04:52:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:63:51:b8:82:38:04:d1:3a:b9:7c:33:96:5c:72:bf:5e:5b:db:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A4A082EAE8EF48C7B407C40E742479EADD862089 Validity Not Before: Dec 10 02:51:12 2025 GMT Not After : Dec 11 04:52:12 2025 GMT Subject: CN=A258873CA1660D55B9122BE8BB2329D5DA7A3FC0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:f8:a7:1f:a3:ef:3b:da:07:b4:70:68:85:be: 32:49:fa:a8:48:5f:be:39:02:dd:ae:fa:7f:5e:8c: 1d:41:1e:50:ef:60:df:8f:66:93:d2:23:1b:fd:ce: fd:84:73:39:11:7f:25:8f:08:41:03:a2:25:5d:8d: 61:9b:e3:a9:55:49:d3:3b:16:83:38:cb:12:83:81: 4f:e4:d9:41:cc:d6:03:a4:0f:f3:61:0e:fd:0c:00: 0d:ec:35:2c:75:e3:5f:cd:2c:cb:1a:34:99:a0:18: 65:01:de:04:02:fc:ce:68:79:e2:4e:c2:b5:91:b2: 91:d7:01:91:7a:15:1a:b9:12:9a:f8:55:9c:3f:b5: d5:8d:fd:47:28:e8:b2:b3:a7:4e:40:cd:e9:05:6f: 44:6a:30:d8:a6:af:3d:09:47:99:31:f5:88:7c:98: 93:6d:94:df:73:88:9b:5b:a6:08:e0:ac:6e:ce:c3: 33:dd:9e:f4:aa:9c:13:54:5b:40:c0:bd:3a:d1:e6: 6f:0f:55:c4:50:5c:62:b7:da:08:8b:a5:3e:10:c1: d3:c5:79:62:2a:e1:80:03:06:a5:68:fb:43:67:54: 0a:fc:11:2c:78:88:00:14:e9:49:ba:ca:fc:9b:17: fa:1a:d7:a6:b2:3f:a2:32:28:44:99:5f:b5:80:2a: 1b:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:58:87:3C:A1:66:0D:55:B9:12:2B:E8:BB:23:29:D5:DA:7A:3F:C0 X509v3 Authority Key Identifier: keyid:A4:A0:82:EA:E8:EF:48:C7:B4:07:C4:0E:74:24:79:EA:DD:86:20:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/1/A4A082EAE8EF48C7B407C40E742479EADD862089.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/A4A082EAE8EF48C7B407C40E742479EADD862089.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/1/A4A082EAE8EF48C7B407C40E742479EADD862089.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:80:7a:5c:f1:e4:c9:80:52:af:00:70:fb:d2:c4:b5:3a:32: f2:fc:62:2c:c6:56:42:7b:b6:70:17:44:7f:ad:8a:f5:e6:f6: 7d:84:7c:db:ec:52:02:d1:42:f0:02:93:de:e0:53:5d:1a:e5: 3a:82:db:a2:a3:db:7e:b3:f7:54:56:98:0f:12:e9:d7:7f:b6: 82:ee:ab:e6:9a:8b:08:bf:70:29:90:19:82:28:52:f9:68:f2: d0:bf:a5:da:aa:8f:e8:cc:c7:b8:ea:34:fe:4b:33:bd:55:12: 49:fc:2a:9a:5d:d1:a9:df:b8:0f:0c:5f:49:c7:7a:4b:dd:a2: f9:f7:bf:42:15:ec:22:84:1d:52:e3:38:fe:26:dd:5e:92:6b: b8:48:9f:71:d8:f5:00:63:2e:56:7a:ef:61:47:ad:24:49:0f: 88:66:f0:b0:1f:80:b7:2a:68:c0:90:42:43:6f:be:41:48:c5: 15:ff:c2:e8:d9:26:f5:3a:e4:35:68:fa:02:6a:58:2d:f1:53: 01:e2:f8:10:aa:d2:1e:a8:73:9d:0c:b8:ec:a5:da:cc:0e:cb: 26:69:2e:c8:7a:24:24:7f:c2:c4:f2:4a:e8:2f:7d:a3:72:db: f0:5b:60:51:38:5a:6f:69:78:7c:ca:0f:cf:b9:fa:e3:65:7a: 23:49:65:06 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUfmNRuII4BNE6uXwzllxyv15b27gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTRBMDgyRUFFOEVGNDhDN0I0MDdDNDBFNzQyNDc5RUFE RDg2MjA4OTAeFw0yNTEyMTAwMjUxMTJaFw0yNTEyMTEwNDUyMTJaMDMxMTAvBgNV BAMTKEEyNTg4NzNDQTE2NjBENTVCOTEyMkJFOEJCMjMyOUQ1REE3QTNGQzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ+Kcfo+872ge0cGiFvjJJ+qhI X745At2u+n9ejB1BHlDvYN+PZpPSIxv9zv2EczkRfyWPCEEDoiVdjWGb46lVSdM7 FoM4yxKDgU/k2UHM1gOkD/NhDv0MAA3sNSx141/NLMsaNJmgGGUB3gQC/M5oeeJO wrWRspHXAZF6FRq5Epr4VZw/tdWN/Uco6LKzp05AzekFb0RqMNimrz0JR5kx9Yh8 mJNtlN9ziJtbpgjgrG7OwzPdnvSqnBNUW0DAvTrR5m8PVcRQXGK32giLpT4QwdPF eWIq4YADBqVo+0NnVAr8ESx4iAAU6Um6yvybF/oa16ayP6IyKESZX7WAKhvRAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUoliHPKFmDVW5EivouyMp1dp6P8AwHwYDVR0j BBgwFoAUpKCC6ujvSMe0B8QOdCR56t2GIIkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTlhYTlkYTctZjFlNC00ZDk4LWJmOTUtOWZkZmNmNDQ4 Zjc3LzEvQTRBMDgyRUFFOEVGNDhDN0I0MDdDNDBFNzQyNDc5RUFERDg2MjA4OS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84NGQ1MTgxMC0xOTg3LTQ3 MDEtOGYxZi04NDI1MTExOTY0ZjQvMC9BNEEwODJFQUU4RUY0OEM3QjQwN0M0MEU3 NDI0NzlFQUREODYyMDg5LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzE5YWE5ZGE3LWYxZTQtNGQ5OC1iZjk1LTlmZGZjZjQ0OGY3Ny8xL0E0QTA4MkVB RThFRjQ4QzdCNDA3QzQwRTc0MjQ3OUVBREQ4NjIwODkubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCUgHpc 8eTJgFKvAHD70sS1OjLy/GIsxlZCe7ZwF0R/rYr15vZ9hHzb7FIC0ULwApPe4FNd GuU6gtuio9t+s/dUVpgPEunXf7aC7qvmmosIv3ApkBmCKFL5aPLQv6Xaqo/ozMe4 6jT+SzO9VRJJ/CqaXdGp37gPDF9Jx3pL3aL5979CFewihB1S4zj+Jt1ekmu4SJ9x 2PUAYy5Weu9hR60kSQ+IZvCwH4C3KmjAkEJDb75BSMUV/8Lo2Sb1OuQ1aPoCalgt 8VMB4vgQqtIeqHOdDLjspdrMDssmaS7IeiQkf8LE8kroL32jctvwW2BROFpvaXh8 yg/PufrjZXojSWUG -----END CERTIFICATE-----Generated at Wed Dec 10 19:30:08 2025 by rpki-client