This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.mft File: 069FAF47FF48AEF4C98F5097074530A74C111AB9.mft (raw, json) Hash identifier: ThxM1GY34SOYDoSSJrpA2qJ7FCp97uhcOpFSjSFKsv0= Subject key identifier: C5:FE:C6:A3:31:2B:9D:CC:70:57:32:62:86:98:F8:E2:50:62:45:22 Authority key identifier: 06:9F:AF:47:FF:48:AE:F4:C9:8F:50:97:07:45:30:A7:4C:11:1A:B9 Certificate issuer: /CN=069FAF47FF48AEF4C98F5097074530A74C111AB9 Certificate serial: 0AF2B325AFA5DB8AB81C7CC439F0BDCDABCD6AB5 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/069FAF47FF48AEF4C98F5097074530A74C111AB9.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.mft Manifest number: 0411 Signing time: Wed 10 Dec 2025 00:57:19 +0000 Manifest this update: Wed 10 Dec 2025 00:52:19 +0000 Manifest next update: Thu 11 Dec 2025 01:55:19 +0000 Files and hashes: 1: 069FAF47FF48AEF4C98F5097074530A74C111AB9.crl (hash: KMMU+PJNz38uQlmKDwYumniDwrlkK8XeWqggyd7U+tQ=) 2: 326130663a383563313a3336333a3a2f34382d3438203d3e20323135363137.roa (hash: G15mowLoM7Eub0vLuxgC+jxtFArNOkVyDHG13blFH8s=) 3: 326130663a383563313a3335313a3a2f34382d3438203d3e20343031333836.roa (hash: pdFac+QI0R/UPdzS1q2a9ExUPSLxlAAabS/RPyMDKJ0=) 4: 326130663a383563313a3335373a3a2f34382d3438203d3e20323135363137.roa (hash: 0B/fHqDaAtnHXiIonhpxQ7ujnJI7VSnPxGbabzcBFIA=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.crl rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.mft rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/069FAF47FF48AEF4C98F5097074530A74C111AB9.cer rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:f2:b3:25:af:a5:db:8a:b8:1c:7c:c4:39:f0:bd:cd:ab:cd:6a:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=069FAF47FF48AEF4C98F5097074530A74C111AB9 Validity Not Before: Dec 10 00:52:19 2025 GMT Not After : Dec 11 01:55:19 2025 GMT Subject: CN=C5FEC6A3312B9DCC705732628698F8E250624522 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:f0:fe:29:e3:e4:30:ee:0f:2e:c3:12:2b:9e: 12:19:45:e7:25:f3:26:1d:ae:1c:d8:e1:df:34:52: fb:a4:ed:37:09:df:06:d0:44:23:46:70:af:51:ec: 96:1e:24:da:e6:ae:88:07:16:50:b4:b8:51:1d:6f: 73:fa:81:fb:85:9e:ed:1a:46:ab:fa:7c:c3:6b:c8: 85:fb:63:87:7e:5e:aa:1a:11:88:db:74:33:50:f1: ea:0a:e7:56:35:8a:60:47:53:a5:20:de:19:e2:35: ef:aa:54:97:3e:b6:2d:e7:1e:0a:28:88:a0:2a:78: 6d:1b:89:d6:e1:f4:76:b1:4b:36:8a:e3:16:08:aa: 8e:e9:a8:1b:d9:e2:73:9a:99:cf:7f:eb:2a:7a:46: 92:a4:22:cc:ed:34:ed:56:c6:78:0d:a3:c8:b4:41: 2c:99:fe:a1:19:b4:7e:a9:c3:67:0b:e5:a9:81:65: 3b:27:5c:6f:79:c4:34:f0:b0:ae:b4:60:33:d4:07: 91:3d:db:85:0e:af:97:08:02:7c:4b:d2:a1:ef:63: f7:0d:f5:2e:6d:b8:19:3f:ec:19:be:cc:a1:6f:83: 45:c9:c9:d3:5c:7a:12:13:e5:90:03:71:05:89:73: 57:52:36:45:37:44:34:ae:c6:d5:0c:02:0a:ee:d3: a6:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:FE:C6:A3:31:2B:9D:CC:70:57:32:62:86:98:F8:E2:50:62:45:22 X509v3 Authority Key Identifier: keyid:06:9F:AF:47:FF:48:AE:F4:C9:8F:50:97:07:45:30:A7:4C:11:1A:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/069FAF47FF48AEF4C98F5097074530A74C111AB9.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:ef:32:62:a3:2b:bc:9d:cd:7d:f3:87:3e:a7:01:5b:ea:41: 37:df:23:59:29:80:ad:7b:cf:9f:6e:e3:89:60:b6:96:d9:94: e6:1a:ee:bf:00:7e:1c:4e:a4:88:49:b7:99:2d:8b:eb:2c:91: 73:25:29:f9:2f:bf:76:41:fa:bd:af:cb:ed:9d:1d:d7:d4:74: 36:8d:55:70:b4:b4:a4:a0:6d:55:12:d7:de:c5:df:22:b8:e7: 7d:e2:94:5a:b7:eb:be:64:4a:80:9e:68:9e:b4:b5:91:be:8f: ec:68:1b:0a:6e:fb:c0:f4:70:a9:0d:ad:0a:c6:50:f1:5f:5c: 29:70:fe:a7:e9:9a:d1:15:d5:59:e4:c8:b2:34:f0:23:41:0b: 7f:dc:7e:9e:f5:8f:1f:78:8c:00:0f:16:84:d4:62:7c:ac:7b: 52:86:70:ae:89:bb:43:4d:3c:1d:1c:99:7b:87:08:5d:99:b9: f4:d7:49:c5:cd:b3:fa:24:cf:b0:58:f2:44:e1:15:2d:3f:e5: 9b:0a:6f:71:40:10:b3:9b:70:6c:57:bc:b2:b8:5a:44:cc:b4: e8:f2:66:34:6e:48:77:ba:0f:06:cb:24:5a:b2:62:f1:d9:db: 4c:a3:69:bb:1c:8f:fb:96:0d:d2:72:78:ba:ee:a8:ff:bd:cf: f3:1b:a4:4a -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUCvKzJa+l24q4HHzEOfC9zavNarUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDY5RkFGNDdGRjQ4QUVGNEM5OEY1MDk3MDc0NTMwQTc0 QzExMUFCOTAeFw0yNTEyMTAwMDUyMTlaFw0yNTEyMTEwMTU1MTlaMDMxMTAvBgNV BAMTKEM1RkVDNkEzMzEyQjlEQ0M3MDU3MzI2Mjg2OThGOEUyNTA2MjQ1MjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg8P4p4+Qw7g8uwxIrnhIZRecl 8yYdrhzY4d80Uvuk7TcJ3wbQRCNGcK9R7JYeJNrmrogHFlC0uFEdb3P6gfuFnu0a Rqv6fMNryIX7Y4d+XqoaEYjbdDNQ8eoK51Y1imBHU6Ug3hniNe+qVJc+ti3nHgoo iKAqeG0bidbh9HaxSzaK4xYIqo7pqBvZ4nOamc9/6yp6RpKkIsztNO1WxngNo8i0 QSyZ/qEZtH6pw2cL5amBZTsnXG95xDTwsK60YDPUB5E924UOr5cIAnxL0qHvY/cN 9S5tuBk/7Bm+zKFvg0XJydNcehIT5ZADcQWJc1dSNkU3RDSuxtUMAgru06anAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUxf7GozErncxwVzJihpj44lBiRSIwHwYDVR0j BBgwFoAUBp+vR/9IrvTJj1CXB0Uwp0wRGrkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjNkNWY2ODItYjUxYi00ODEyLWI4YjEtNDMwZTM4Njgz NzQ4LzIvMDY5RkFGNDdGRjQ4QUVGNEM5OEY1MDk3MDc0NTMwQTc0QzExMUFCOS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84NGQ1MTgxMC0xOTg3LTQ3 MDEtOGYxZi04NDI1MTExOTY0ZjQvMC8wNjlGQUY0N0ZGNDhBRUY0Qzk4RjUwOTcw NzQ1MzBBNzRDMTExQUI5LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzIzZDVmNjgyLWI1MWItNDgxMi1iOGIxLTQzMGUzODY4Mzc0OC8yLzA2OUZBRjQ3 RkY0OEFFRjRDOThGNTA5NzA3NDUzMEE3NEMxMTFBQjkubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCf7zJi oyu8nc1984c+pwFb6kE33yNZKYCte8+fbuOJYLaW2ZTmGu6/AH4cTqSISbeZLYvr LJFzJSn5L792Qfq9r8vtnR3X1HQ2jVVwtLSkoG1VEtfexd8iuOd94pRat+u+ZEqA nmietLWRvo/saBsKbvvA9HCpDa0KxlDxX1wpcP6n6ZrRFdVZ5MiyNPAjQQt/3H6e 9Y8feIwADxaE1GJ8rHtShnCuibtDTTwdHJl7hwhdmbn010nFzbP6JM+wWPJE4RUt P+WbCm9xQBCzm3BsV7yyuFpEzLTo8mY0bkh3ug8GyyRasmLx2dtMo2m7HI/7lg3S cni67qj/vc/zG6RK -----END CERTIFICATE-----Generated at Wed Dec 10 10:54:34 2025 by rpki-client