This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/29066f5d-ecc1-4927-95c1-e1a8df8f9897/0/1498141819112B8446C2D4A3111F53038F05DBE9.mft File: 1498141819112B8446C2D4A3111F53038F05DBE9.mft (raw, json) Hash identifier: Y//A7Qs3DN0FdZGwQ6CrFKq8Yz0QbqS03QsqtmQw/6M= Subject key identifier: 1E:B4:E4:8C:E1:62:52:30:18:41:4C:8F:EC:70:9F:3C:D8:EE:95:7D Authority key identifier: 14:98:14:18:19:11:2B:84:46:C2:D4:A3:11:1F:53:03:8F:05:DB:E9 Certificate issuer: /CN=1498141819112b8446c2d4a3111f53038f05dbe9 Certificate serial: 302055A3D4BAA1ECAED8CE917D7E95C38226CA01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FJgUGBkRK4RGwtSjER9TA48F2-k.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/29066f5d-ecc1-4927-95c1-e1a8df8f9897/0/1498141819112B8446C2D4A3111F53038F05DBE9.mft Manifest number: 0115 Signing time: Sun 14 Dec 2025 04:57:09 +0000 Manifest this update: Sun 14 Dec 2025 04:52:09 +0000 Manifest next update: Mon 15 Dec 2025 08:35:09 +0000 Files and hashes: 1: 1498141819112B8446C2D4A3111F53038F05DBE9.crl (hash: oG4W02Hj2jt1+SiCdRgKFW8zSWT+9wnZuv2LQaoTtjQ=) 2: 3138352e39312e3131332e302f32342d3234203d3e20323134323038.roa (hash: qSSu/jTa9CtmAhgZlrJ1s4QldXeKp0EqfLu29FuP5Zs=) 3: 3138352e39312e3131342e302f32342d3234203d3e20323132323338.roa (hash: O3+fkuGYHEGuJgzobwksf3BrAnxvmElLOiQKqynfHQQ=) 4: 3138352e39312e3131352e302f32342d3234203d3e2034363337.roa (hash: ck91ILJJRhGrU5dcx7s2t1suhnGyLbRTekoZlADPXPE=) 5: 3138352e39312e3131322e302f32342d3234203d3e20383334.roa (hash: XesoIFDmsJmrSdpgdAV0vhyomNLwoypYQnvo40xyQgs=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/29066f5d-ecc1-4927-95c1-e1a8df8f9897/0/1498141819112B8446C2D4A3111F53038F05DBE9.crl rsync://rsync.paas.rpki.ripe.net/repository/29066f5d-ecc1-4927-95c1-e1a8df8f9897/0/1498141819112B8446C2D4A3111F53038F05DBE9.mft rsync://rpki.ripe.net/repository/DEFAULT/FJgUGBkRK4RGwtSjER9TA48F2-k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:20:55:a3:d4:ba:a1:ec:ae:d8:ce:91:7d:7e:95:c3:82:26:ca:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1498141819112b8446c2d4a3111f53038f05dbe9 Validity Not Before: Dec 14 04:52:09 2025 GMT Not After : Dec 15 08:35:09 2025 GMT Subject: CN=1EB4E48CE162523018414C8FEC709F3CD8EE957D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:40:73:8e:ea:3d:34:db:2c:b8:e1:58:16:d1: b5:b3:7d:47:dc:61:61:55:26:4c:57:96:9d:d8:db: d6:e6:7e:66:a6:f4:4d:3f:d1:06:e9:96:96:b2:17: 9f:10:cc:12:99:f8:6f:16:2c:28:41:52:06:9b:60: dc:4a:57:4d:10:71:89:49:37:d7:34:1a:4b:76:7f: 14:88:d9:28:8c:4f:8e:7f:02:b5:e2:f5:59:ae:53: 14:2d:25:98:f2:6e:f8:77:16:37:df:a1:4f:c5:98: 28:7e:c6:db:b1:86:b3:4b:e0:af:de:35:ab:76:c9: b3:0c:7d:54:47:df:23:57:31:dd:6a:6d:8a:68:af: 63:46:0e:6b:e1:92:b5:ae:a2:18:3a:f5:74:1f:78: 40:69:51:a8:1a:26:f1:8c:c5:36:69:fb:65:17:49: c7:5b:fb:29:d1:e0:c1:d8:c3:d7:8a:66:1f:58:a6: 0d:16:82:47:e6:1b:a8:f3:e1:f0:be:17:9f:f6:80: 75:2f:ad:ce:4d:f6:7b:95:5f:4e:22:ff:06:5d:9d: 92:33:c0:3b:71:86:32:d5:7e:f4:f1:ca:b3:ef:19: bb:0b:ce:b7:d7:02:51:41:7e:f7:7a:86:b4:bc:8a: d0:b5:06:bb:ba:c2:d0:ca:4d:a9:bd:9f:5c:5c:b8: fa:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:B4:E4:8C:E1:62:52:30:18:41:4C:8F:EC:70:9F:3C:D8:EE:95:7D X509v3 Authority Key Identifier: keyid:14:98:14:18:19:11:2B:84:46:C2:D4:A3:11:1F:53:03:8F:05:DB:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/29066f5d-ecc1-4927-95c1-e1a8df8f9897/0/1498141819112B8446C2D4A3111F53038F05DBE9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FJgUGBkRK4RGwtSjER9TA48F2-k.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/29066f5d-ecc1-4927-95c1-e1a8df8f9897/0/1498141819112B8446C2D4A3111F53038F05DBE9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:58:65:8c:6b:66:c7:fa:d1:1a:14:9e:d8:1e:8f:2d:9c:88: 63:77:88:95:19:b8:73:55:0f:4b:4c:30:62:0c:23:f8:d4:81: 1c:69:f4:19:a9:ea:d3:30:c2:c5:88:a3:e0:46:82:9b:42:b1: e9:86:8c:2e:55:ca:fd:c7:0f:28:44:3d:b0:86:43:8f:08:d4: d4:66:81:05:3b:cc:5e:71:77:d5:f0:04:40:c0:66:a0:05:fe: 2b:62:3e:d5:48:52:79:0b:b7:d5:85:98:51:57:14:fe:b4:34: de:4b:b7:34:ec:c1:c5:8f:ba:1f:2b:62:2c:51:fd:8d:59:d9: 13:d7:bc:e1:26:5e:52:3e:21:ee:06:35:aa:5a:df:72:81:f3: 4c:78:f2:a1:0a:db:df:8e:e0:5e:77:a2:ca:eb:01:6a:2c:26: 05:30:48:4b:d3:98:72:8b:77:85:2d:91:9e:57:e7:2e:ce:c9: e5:51:ca:27:07:66:15:54:22:76:c1:5d:df:26:b2:34:43:f4: 3a:7c:3a:75:40:71:86:a8:80:e8:af:7f:b4:17:45:42:bc:1b: cd:50:e9:35:2c:0f:e6:9d:42:08:4b:5f:d4:9d:e5:0b:a6:19: 76:ba:e9:4b:04:d3:a1:fa:3f:72:d8:36:cf:0c:d8:bf:43:63: 5d:db:79:63 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUMCBVo9S6oeyu2M6RfX6Vw4ImygEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTQ5ODE0MTgxOTExMmI4NDQ2YzJkNGEzMTExZjUzMDM4 ZjA1ZGJlOTAeFw0yNTEyMTQwNDUyMDlaFw0yNTEyMTUwODM1MDlaMDMxMTAvBgNV BAMTKDFFQjRFNDhDRTE2MjUyMzAxODQxNEM4RkVDNzA5RjNDRDhFRTk1N0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxQHOO6j002yy44VgW0bWzfUfc YWFVJkxXlp3Y29bmfmam9E0/0QbplpayF58QzBKZ+G8WLChBUgabYNxKV00QcYlJ N9c0Gkt2fxSI2SiMT45/ArXi9VmuUxQtJZjybvh3FjffoU/FmCh+xtuxhrNL4K/e Nat2ybMMfVRH3yNXMd1qbYpor2NGDmvhkrWuohg69XQfeEBpUagaJvGMxTZp+2UX Scdb+ynR4MHYw9eKZh9Ypg0WgkfmG6jz4fC+F5/2gHUvrc5N9nuVX04i/wZdnZIz wDtxhjLVfvTxyrPvGbsLzrfXAlFBfvd6hrS8itC1Bru6wtDKTam9n1xcuPrVAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUHrTkjOFiUjAYQUyP7HCfPNjulX0wHwYDVR0j BBgwFoAUFJgUGBkRK4RGwtSjER9TA48F2+kwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjkwNjZmNWQtZWNjMS00OTI3LTk1YzEtZTFhOGRmOGY5 ODk3LzAvMTQ5ODE0MTgxOTExMkI4NDQ2QzJENEEzMTExRjUzMDM4RjA1REJFOS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0ZKZ1VHQmtSSzRSR3d0U2pFUjlUQTQ4 RjItay5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yOTA2NmY1ZC1l Y2MxLTQ5MjctOTVjMS1lMWE4ZGY4Zjk4OTcvMC8xNDk4MTQxODE5MTEyQjg0NDZD MkQ0QTMxMTFGNTMwMzhGMDVEQkU5Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgVhljGtmx/rRGhSe2B6P LZyIY3eIlRm4c1UPS0wwYgwj+NSBHGn0Ganq0zDCxYij4EaCm0Kx6YaMLlXK/ccP KEQ9sIZDjwjU1GaBBTvMXnF31fAEQMBmoAX+K2I+1UhSeQu31YWYUVcU/rQ03ku3 NOzBxY+6HytiLFH9jVnZE9e84SZeUj4h7gY1qlrfcoHzTHjyoQrb347gXneiyusB aiwmBTBIS9OYcot3hS2RnlfnLs7J5VHKJwdmFVQidsFd3yayNEP0Onw6dUBxhqiA 6K9/tBdFQrwbzVDpNSwP5p1CCEtf1J3lC6YZdrrpSwTTofo/ctg2zwzYv0NjXdt5 Yw== -----END CERTIFICATE-----Generated at Sun Dec 14 11:46:44 2025 by rpki-client