This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/5a7c956c-22eb-4bb8-a327-ad97161295bc/0/020F7ED217FC36532E6B045CFBCCDA68A6604620.mft File: 020F7ED217FC36532E6B045CFBCCDA68A6604620.mft (raw, json) Hash identifier: ZFBJFcKGBIZHGmggKcLZ5bEMIsj/JRiBwHiu6MPov/M= Subject key identifier: AF:16:90:E5:DE:50:67:AB:51:71:0E:0B:28:56:D6:82:B0:3C:E9:BE Authority key identifier: 02:0F:7E:D2:17:FC:36:53:2E:6B:04:5C:FB:CC:DA:68:A6:60:46:20 Certificate issuer: /CN=020F7ED217FC36532E6B045CFBCCDA68A6604620 Certificate serial: 1187B14F06F6AD526F2927B51FDE8CDFAD77DBFE Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/020F7ED217FC36532E6B045CFBCCDA68A6604620.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5a7c956c-22eb-4bb8-a327-ad97161295bc/0/020F7ED217FC36532E6B045CFBCCDA68A6604620.mft Manifest number: 8D Signing time: Tue 09 Dec 2025 19:15:46 +0000 Manifest this update: Tue 09 Dec 2025 19:10:46 +0000 Manifest next update: Wed 10 Dec 2025 21:35:46 +0000 Files and hashes: 1: 020F7ED217FC36532E6B045CFBCCDA68A6604620.crl (hash: x+5MW+KX7AgSD3UTrCsMUqDmfz4tdQVx1oM32T6jVXw=) 2: 326131343a373538313a366663303a3a2f34342d3438203d3e20323037333839.roa (hash: k0slLXQGak8JfXgcycld4UCv11bkqqJyVwy8WgUs0W4=) 3: 326131343a373538313a363030303a3a2f33362d3438203d3e20323034383434.roa (hash: 9WwOZQ+czh53N90Wic7WKUZpN9yKrnRBc/mSIwdZviM=) 4: 326131343a373538313a366530303a3a2f34302d3438203d3e2039393233.roa (hash: xTMyG8vk7HfhKOphzDUHjsL1N+HXzTu0fnBjhyB6AKQ=) 5: 326131343a373538313a366665303a3a2f34342d3438203d3e20323134383431.roa (hash: eJoFXZz3vH/PzqNzkkd4bWX4CpO0e/s0UWWhyH7ohGo=) 6: 326131343a373538313a366664303a3a2f34342d3438203d3e20323135393334.roa (hash: BfxFUd5DTechXRUy4Ex3ytqAtMEr8QPJBcDEM0dDVlg=) 7: 326131343a373538313a366330303a3a2f34302d3438203d3e20313938393534.roa (hash: fPBlj/OX226nVSvX0NnbhELuUhpZ2u/Ytd/uYZbhMTA=) 8: 326131343a373538313a366662303a3a2f34342d3438203d3e20323136343332.roa (hash: cip9cJqKeyNrJhvNYpxl3IQ3uuVk6x6ccrH22pN5xrA=) 9: 326131343a373538313a366430303a3a2f34302d3438203d3e20323035333239.roa (hash: UAf2blctTo7ZlN86/McI15QZsGre1E35LEt/FhIBXBM=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5a7c956c-22eb-4bb8-a327-ad97161295bc/0/020F7ED217FC36532E6B045CFBCCDA68A6604620.crl rsync://rsync.paas.rpki.ripe.net/repository/5a7c956c-22eb-4bb8-a327-ad97161295bc/0/020F7ED217FC36532E6B045CFBCCDA68A6604620.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/020F7ED217FC36532E6B045CFBCCDA68A6604620.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 10 Dec 2025 21:35:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:87:b1:4f:06:f6:ad:52:6f:29:27:b5:1f:de:8c:df:ad:77:db:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=020F7ED217FC36532E6B045CFBCCDA68A6604620 Validity Not Before: Dec 9 19:10:46 2025 GMT Not After : Dec 10 21:35:46 2025 GMT Subject: CN=AF1690E5DE5067AB51710E0B2856D682B03CE9BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:68:c4:07:2c:f4:05:5c:00:cc:fe:14:5c:0b: ee:cb:1b:92:c9:59:50:72:b7:86:f0:0d:c5:60:6d: 1e:f3:48:02:bc:d1:ce:1f:3c:3f:51:80:87:48:a9: b8:5f:96:08:9a:e5:b7:f6:1d:36:e1:d1:ac:35:43: dc:86:bd:8e:a2:01:d9:d6:60:00:f9:b0:71:61:3a: 97:55:53:27:b5:71:5e:ed:b5:85:33:6c:4a:c9:e3: 9b:15:3a:7b:0b:3e:11:40:e3:5b:f9:b8:9d:a8:94: 37:98:35:1d:8c:92:51:af:01:70:27:9f:1b:ac:d5: d7:fc:16:a5:43:34:05:c3:d2:b0:cd:51:72:13:5c: e5:c5:13:d4:39:e2:24:af:da:e6:b6:b4:0e:1c:20: d2:dc:7a:eb:04:d6:df:d5:cb:dc:54:7e:39:cc:34: e3:37:dc:fa:5f:fb:a9:4a:3f:d6:7b:5a:c7:fb:21: 5a:63:97:80:48:e3:9b:90:33:86:07:e9:44:a7:95: 5b:c8:6f:f1:51:03:a3:92:01:20:b4:5c:31:dc:e2: 5d:e6:1a:2b:54:49:84:bf:d6:c1:e9:c4:d0:4d:97: 89:9d:aa:d0:06:bb:c5:4c:a6:d1:58:c5:dd:0b:33: 0b:8d:55:69:1f:55:09:ae:87:a7:2a:21:c8:2b:c8: 06:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:16:90:E5:DE:50:67:AB:51:71:0E:0B:28:56:D6:82:B0:3C:E9:BE X509v3 Authority Key Identifier: keyid:02:0F:7E:D2:17:FC:36:53:2E:6B:04:5C:FB:CC:DA:68:A6:60:46:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/5a7c956c-22eb-4bb8-a327-ad97161295bc/0/020F7ED217FC36532E6B045CFBCCDA68A6604620.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/020F7ED217FC36532E6B045CFBCCDA68A6604620.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5a7c956c-22eb-4bb8-a327-ad97161295bc/0/020F7ED217FC36532E6B045CFBCCDA68A6604620.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:ce:59:9d:d0:ac:b5:89:5b:f4:e7:af:9d:19:85:ef:0b:d2: 63:66:8a:76:8b:78:c6:c1:1e:a7:c5:54:68:ea:66:63:a8:cb: 9b:15:af:48:7e:dd:3f:d9:9d:1f:df:65:90:e6:42:24:b2:fb: 42:52:75:2f:d6:1c:67:a9:ac:20:62:2d:5f:20:57:b5:e8:13: 8b:18:68:8b:e3:fd:33:7c:1c:36:70:3c:58:05:48:f1:4c:4c: c9:cb:48:fd:bd:9c:6b:13:f9:8d:f7:90:d4:78:4a:a2:90:b1: de:bb:bc:36:8d:7c:c5:36:62:0d:57:dc:3f:25:f3:b7:d5:91: 3f:65:f5:6f:17:33:f0:4c:72:33:9a:85:92:ed:0d:76:4e:94: 9a:23:1e:00:01:0a:77:62:d5:27:68:a3:25:e8:69:49:c0:c0: b7:50:42:4d:7c:bc:80:67:24:bd:ee:8f:5d:d5:cc:39:8e:cd: 09:0f:a0:8b:bf:bb:ed:a8:81:86:f6:dd:fb:af:31:03:02:fc: 82:35:01:5a:e8:4c:f4:c3:72:b6:69:64:fb:43:03:ff:83:77: fb:30:9a:61:d3:b0:5c:5e:8d:26:1e:6e:b8:94:d1:94:e7:e1: 27:d6:5b:b9:82:50:f7:a7:99:59:2b:26:f3:34:78:23:d4:a9: 68:92:05:77 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUEYexTwb2rVJvKSe1H96M36132/4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDIwRjdFRDIxN0ZDMzY1MzJFNkIwNDVDRkJDQ0RBNjhB NjYwNDYyMDAeFw0yNTEyMDkxOTEwNDZaFw0yNTEyMTAyMTM1NDZaMDMxMTAvBgNV BAMTKEFGMTY5MEU1REU1MDY3QUI1MTcxMEUwQjI4NTZENjgyQjAzQ0U5QkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD3aMQHLPQFXADM/hRcC+7LG5LJ WVByt4bwDcVgbR7zSAK80c4fPD9RgIdIqbhflgia5bf2HTbh0aw1Q9yGvY6iAdnW YAD5sHFhOpdVUye1cV7ttYUzbErJ45sVOnsLPhFA41v5uJ2olDeYNR2MklGvAXAn nxus1df8FqVDNAXD0rDNUXITXOXFE9Q54iSv2ua2tA4cINLceusE1t/Vy9xUfjnM NOM33Ppf+6lKP9Z7Wsf7IVpjl4BI45uQM4YH6USnlVvIb/FRA6OSASC0XDHc4l3m GitUSYS/1sHpxNBNl4mdqtAGu8VMptFYxd0LMwuNVWkfVQmuh6cqIcgryAYjAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUrxaQ5d5QZ6tRcQ4LKFbWgrA86b4wHwYDVR0j BBgwFoAUAg9+0hf8NlMuawRc+8zaaKZgRiAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNWE3Yzk1NmMtMjJlYi00YmI4LWEzMjctYWQ5NzE2MTI5 NWJjLzAvMDIwRjdFRDIxN0ZDMzY1MzJFNkIwNDVDRkJDQ0RBNjhBNjYwNDYyMC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8wMjBGN0VEMjE3RkMzNjUzMkU2QjA0NUNG QkNDREE2OEE2NjA0NjIwLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzVhN2M5NTZjLTIyZWItNGJiOC1hMzI3LWFkOTcxNjEyOTViYy8wLzAyMEY3RUQy MTdGQzM2NTMyRTZCMDQ1Q0ZCQ0NEQTY4QTY2MDQ2MjAubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBxzlmd 0Ky1iVv056+dGYXvC9JjZop2i3jGwR6nxVRo6mZjqMubFa9Ift0/2Z0f32WQ5kIk svtCUnUv1hxnqawgYi1fIFe16BOLGGiL4/0zfBw2cDxYBUjxTEzJy0j9vZxrE/mN 95DUeEqikLHeu7w2jXzFNmINV9w/JfO31ZE/ZfVvFzPwTHIzmoWS7Q12TpSaIx4A AQp3YtUnaKMl6GlJwMC3UEJNfLyAZyS97o9d1cw5js0JD6CLv7vtqIGG9t37rzED AvyCNQFa6Ez0w3K2aWT7QwP/g3f7MJph07BcXo0mHm64lNGU5+En1lu5glD3p5lZ KybzNHgj1KlokgV3 -----END CERTIFICATE-----Generated at Wed Dec 10 10:54:34 2025 by rpki-client