This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/4c9acece-d05b-4f73-9c6e-d8785d1789c3/1/E9D2F7329F5BA42EE0D898228DEE58B64CA813FE.mft File: E9D2F7329F5BA42EE0D898228DEE58B64CA813FE.mft (raw, json) Hash identifier: jI6lA4Wre3dlJjNjMa4oWv9ju9hSbIySdB0XWvAeFH0= Subject key identifier: 1C:B8:EE:15:CF:BE:CF:8F:AB:4A:CA:7B:BB:33:A7:FC:28:3F:36:2A Authority key identifier: E9:D2:F7:32:9F:5B:A4:2E:E0:D8:98:22:8D:EE:58:B6:4C:A8:13:FE Certificate issuer: /CN=E9D2F7329F5BA42EE0D898228DEE58B64CA813FE Certificate serial: 1DA3FE21DB591EB0B0D30866030D525F6E092B87 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/E9D2F7329F5BA42EE0D898228DEE58B64CA813FE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/4c9acece-d05b-4f73-9c6e-d8785d1789c3/1/E9D2F7329F5BA42EE0D898228DEE58B64CA813FE.mft Manifest number: 2B Signing time: Sat 06 Dec 2025 00:59:29 +0000 Manifest this update: Sat 06 Dec 2025 00:54:29 +0000 Manifest next update: Sun 07 Dec 2025 02:47:29 +0000 Files and hashes: 1: E9D2F7329F5BA42EE0D898228DEE58B64CA813FE.crl (hash: Krnt225FEnarvcu0BuaBhegoCCHgtZE0ZGNWuXoW1vs=) 2: 326131343a373538313a6230303a3a2f34302d3438203d3e20323134353735.roa (hash: YwVA55nGhmg50Nrcm1+tsq8Rc4xtCFLwJqkp0AhkdXQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/4c9acece-d05b-4f73-9c6e-d8785d1789c3/1/E9D2F7329F5BA42EE0D898228DEE58B64CA813FE.crl rsync://rsync.paas.rpki.ripe.net/repository/4c9acece-d05b-4f73-9c6e-d8785d1789c3/1/E9D2F7329F5BA42EE0D898228DEE58B64CA813FE.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/E9D2F7329F5BA42EE0D898228DEE58B64CA813FE.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:a3:fe:21:db:59:1e:b0:b0:d3:08:66:03:0d:52:5f:6e:09:2b:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E9D2F7329F5BA42EE0D898228DEE58B64CA813FE Validity Not Before: Dec 6 00:54:29 2025 GMT Not After : Dec 7 02:47:29 2025 GMT Subject: CN=1CB8EE15CFBECF8FAB4ACA7BBB33A7FC283F362A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:19:00:f0:83:10:46:e8:82:db:3f:af:d8:fc: 3e:61:cd:93:22:4b:12:26:0b:9a:a2:bd:07:21:06: 6f:e0:4f:70:07:3d:61:9f:80:fd:4e:3d:50:24:89: 23:fd:d6:fe:7f:57:58:a6:82:fb:2c:04:0a:54:5d: ae:e5:50:1f:c2:2b:a4:60:4e:d1:d6:e9:1e:9f:e9: fa:27:2f:41:92:aa:93:30:fc:39:05:6f:5e:41:fe: 74:78:96:3f:d0:65:79:c8:3c:82:cd:0c:4b:14:8d: bb:bc:c6:31:3f:23:71:45:b1:4a:0c:68:d4:f8:45: a3:9d:60:3f:34:d3:75:74:74:f6:c5:ee:72:e5:ef: d7:4c:90:61:47:2f:61:d5:65:95:89:51:50:1c:b3: 7c:ac:6e:6a:af:b5:43:e4:30:80:da:23:de:28:17: c8:4f:eb:68:9d:8b:42:aa:c1:d8:a7:50:e9:f9:36: a1:70:21:b7:77:d8:50:d3:b9:03:6b:96:56:66:65: 60:26:48:3f:dc:80:9f:08:cd:aa:b2:df:8a:82:5d: 3f:b2:7e:08:e7:af:17:0c:ba:a0:45:75:0c:ce:42: 5b:28:61:bd:54:25:58:f0:26:d5:36:aa:64:dd:1c: c4:42:79:01:d7:f8:21:1b:0b:6b:c1:0f:12:04:4d: 0a:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:B8:EE:15:CF:BE:CF:8F:AB:4A:CA:7B:BB:33:A7:FC:28:3F:36:2A X509v3 Authority Key Identifier: keyid:E9:D2:F7:32:9F:5B:A4:2E:E0:D8:98:22:8D:EE:58:B6:4C:A8:13:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/4c9acece-d05b-4f73-9c6e-d8785d1789c3/1/E9D2F7329F5BA42EE0D898228DEE58B64CA813FE.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/E9D2F7329F5BA42EE0D898228DEE58B64CA813FE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/4c9acece-d05b-4f73-9c6e-d8785d1789c3/1/E9D2F7329F5BA42EE0D898228DEE58B64CA813FE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:b7:7c:1f:fd:bc:d4:07:78:bd:fa:ba:8f:37:29:69:bc:69: 3c:18:eb:e8:71:dd:ca:1d:27:bc:09:73:b4:de:38:67:54:9a: 56:b3:73:83:97:20:d2:a6:dd:5b:d5:9a:43:cc:c2:f7:c4:c8: 0e:0e:19:b1:7e:d3:cd:4c:4b:5d:cb:d7:fb:6a:76:a6:28:b5: f3:e4:2c:91:70:c8:94:52:d2:a9:a3:63:d5:00:ac:29:5d:ea: 63:71:c6:f3:8c:db:79:70:a4:61:f5:b4:9c:89:75:b3:a9:ce: f7:0e:37:e8:5c:8d:ca:4e:02:68:d2:1a:80:b3:49:ce:cc:a3: 7a:eb:f4:94:95:eb:53:1d:d5:29:f5:60:1d:c8:56:9d:bf:d5: 51:c8:ae:a7:10:ba:99:90:13:25:d8:8d:3a:8a:d6:9b:95:2d: 47:80:f0:f0:94:44:71:70:57:b0:e8:92:9a:62:46:dd:1b:08: db:a5:5a:62:95:fd:d8:4a:ff:14:8e:70:97:ed:c0:31:2a:3e: 42:43:2f:41:f4:aa:bb:bf:a6:51:db:32:d6:1c:ed:03:70:92: f4:ec:27:b9:be:24:8d:92:31:69:f3:f2:b1:4d:6a:ee:15:d9: bd:ce:bf:05:c1:ad:cb:fc:6d:e6:ee:f5:e8:f2:7a:f9:08:81: 13:33:20:70 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUHaP+IdtZHrCw0whmAw1SX24JK4cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTlEMkY3MzI5RjVCQTQyRUUwRDg5ODIyOERFRTU4QjY0 Q0E4MTNGRTAeFw0yNTEyMDYwMDU0MjlaFw0yNTEyMDcwMjQ3MjlaMDMxMTAvBgNV BAMTKDFDQjhFRTE1Q0ZCRUNGOEZBQjRBQ0E3QkJCMzNBN0ZDMjgzRjM2MkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgGQDwgxBG6ILbP6/Y/D5hzZMi SxImC5qivQchBm/gT3AHPWGfgP1OPVAkiSP91v5/V1imgvssBApUXa7lUB/CK6Rg TtHW6R6f6fonL0GSqpMw/DkFb15B/nR4lj/QZXnIPILNDEsUjbu8xjE/I3FFsUoM aNT4RaOdYD8003V0dPbF7nLl79dMkGFHL2HVZZWJUVAcs3ysbmqvtUPkMIDaI94o F8hP62idi0KqwdinUOn5NqFwIbd32FDTuQNrllZmZWAmSD/cgJ8Izaqy34qCXT+y fgjnrxcMuqBFdQzOQlsoYb1UJVjwJtU2qmTdHMRCeQHX+CEbC2vBDxIETQqjAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUHLjuFc++z4+rSsp7uzOn/Cg/NiowHwYDVR0j BBgwFoAU6dL3Mp9bpC7g2Jgije5YtkyoE/4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNGM5YWNlY2UtZDA1Yi00ZjczLTljNmUtZDg3ODVkMTc4 OWMzLzEvRTlEMkY3MzI5RjVCQTQyRUUwRDg5ODIyOERFRTU4QjY0Q0E4MTNGRS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9FOUQyRjczMjlGNUJBNDJFRTBEODk4MjI4 REVFNThCNjRDQTgxM0ZFLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzRjOWFjZWNlLWQwNWItNGY3My05YzZlLWQ4Nzg1ZDE3ODljMy8xL0U5RDJGNzMy OUY1QkE0MkVFMEQ4OTgyMjhERUU1OEI2NENBODEzRkUubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAvt3wf /bzUB3i9+rqPNylpvGk8GOvocd3KHSe8CXO03jhnVJpWs3ODlyDSpt1b1ZpDzML3 xMgODhmxftPNTEtdy9f7anamKLXz5CyRcMiUUtKpo2PVAKwpXepjccbzjNt5cKRh 9bSciXWzqc73DjfoXI3KTgJo0hqAs0nOzKN66/SUletTHdUp9WAdyFadv9VRyK6n ELqZkBMl2I06itablS1HgPDwlERxcFew6JKaYkbdGwjbpVpilf3YSv8UjnCX7cAx Kj5CQy9B9Kq7v6ZR2zLWHO0DcJL07Ce5viSNkjFp8/KxTWruFdm9zr8Fwa3L/G3m 7vXo8nr5CIETMyBw -----END CERTIFICATE-----Generated at Sat Dec 6 06:14:31 2025 by rpki-client