This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.mft File: 92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.mft (raw, json) Hash identifier: SY0JmQImxttEFRcZ7C/zFvoaTFBPZNhKmSqx+TbwAS4= Subject key identifier: 82:58:7C:4B:5D:C9:7F:57:99:E8:A0:63:20:3D:4C:DD:20:65:BC:E7 Authority key identifier: 92:F4:9D:E8:68:4F:12:87:F4:F6:CB:18:5D:5C:F7:DE:80:C9:0B:94 Certificate issuer: /CN=92f49de8684f1287f4f6cb185d5cf7de80c90b94 Certificate serial: 672B6BA320EBF47FBFD480D45EE6A5A5234205BD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kvSd6GhPEof09ssYXVz33oDJC5Q.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.mft Manifest number: 0144 Signing time: Tue 09 Dec 2025 23:01:37 +0000 Manifest this update: Tue 09 Dec 2025 22:56:37 +0000 Manifest next update: Thu 11 Dec 2025 00:25:37 +0000 Files and hashes: 1: 39352e3231342e3138322e302f32342d3234203d3e20323131343135.roa (hash: 7RDjli52ea3Y5rIxOBi7CoAOYzObgN76cF1oNhGaH/0=) 2: 34352e3135362e35322e302f32322d3232203d3e2039303039.roa (hash: eK18gsMy8+wzgYZmaz7TkcO08JcfPTkHAWlv0aJXuz0=) 3: 34352e3135362e35322e302f32342d3234203d3e2039303039.roa (hash: TVTxbW5Hn/uwBDAOJAxsysgEid6g/rYwKpFkj0KhHLI=) 4: 39352e3231342e3138322e302f32342d3234203d3e20323132333834.roa (hash: ahvCpQCYKDC5UmCWINUE1+9+R3CEuxDs9xpt+/mHGMc=) 5: 39352e3231342e3138312e302f32342d3234203d3e20323132323338.roa (hash: P3AXSCPo5qCcqJ/tF9UnDRiSqmNKJoNVWYccPe9dv1w=) 6: 39352e3231342e3138332e302f32342d3234203d3e20323039313831.roa (hash: lTsB3YA1lHFbSl1Cmaufvak87ZyxIaRmoFdP+J/wwxc=) 7: 39352e3231342e3137322e302f32342d3234203d3e20313937343737.roa (hash: y8hcJrulcRceTx871qhtDNBcbMxDEQZoJON7Dc+UpGA=) 8: 34352e3135362e35322e302f32322d3234203d3e2039303039.roa (hash: Bs9P6MukVIk3Mqg2bASja42eYp9YV11upUqwTKj8Pqc=) 9: 3138352e3131352e3230372e302f32342d3234203d3e20323132333336.roa (hash: yFl38PxDDUPllDewnZ7MEFH9Z5qJaOTL0zY/pvxRoUY=) 10: 92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.crl (hash: pHh2W0RBmM3Nfs/EWCgxMumUQC8H7TdUm3iqo1/Qon4=) 11: 39352e3231342e3138302e302f32342d3234203d3e20323033373538.roa (hash: yeHT2siMw+46e40lrxlb+yyyQe2+Rk/4CH0GwC6laEg=) 12: 39352e3231342e3137352e302f32342d3234203d3e20313335333931.roa (hash: dZLABnxKpTxFiKmt1/yK20i3zGqpWgZ6NnQoPD/883U=) 13: 34352e3133392e3139382e302f32342d3234203d3e20323134343636.roa (hash: 9KX5zC7UuI47N7heL//vNyLO3x7YEi1CucEhFX8SUR0=) 14: 39352e3231342e3138322e302f32342d3234203d3e20323132363039.roa (hash: AjgG1gM1OxMVlGFutJS1mpX2Qd4qqtcRZt6UVKIG+j4=) 15: 39352e3231342e3137332e302f32342d3234203d3e20323035383836.roa (hash: hlOWlwYDh27EwXxqncP4qruI2Plo8gnGCk/gZpUDCgY=) 16: 39352e3231342e3137342e302f32342d3234203d3e20323134343636.roa (hash: EnyfxlxrEZoOAQu439Mhaj0MSgN4o3Cr584mhVLUCgw=) 17: 39352e3231342e3137332e302f32342d3234203d3e203235313938.roa (hash: ZBwA38W5ihOuNN99BklpNu84rXSZQZCwBh8vdc50O64=) 18: 34352e3133392e3139392e302f32342d3234203d3e20323134343636.roa (hash: JaeJstE2poR1Rlm8a7RHcBFfHeeu7vNkxKzYr0p4Jc8=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.crl rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.mft rsync://rpki.ripe.net/repository/DEFAULT/kvSd6GhPEof09ssYXVz33oDJC5Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 10 Dec 2025 16:15:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:2b:6b:a3:20:eb:f4:7f:bf:d4:80:d4:5e:e6:a5:a5:23:42:05:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92f49de8684f1287f4f6cb185d5cf7de80c90b94 Validity Not Before: Dec 9 22:56:37 2025 GMT Not After : Dec 11 00:25:37 2025 GMT Subject: CN=82587C4B5DC97F5799E8A063203D4CDD2065BCE7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:29:39:8a:be:f6:da:71:a5:1c:6e:58:ad:65: bc:25:c6:a4:a0:3a:f9:79:93:12:4c:a6:19:12:b1: 63:44:9c:3b:de:6b:f6:35:da:31:ab:bf:19:58:fb: 1b:0f:7a:0e:81:13:b6:08:89:e8:bd:3b:85:da:8b: 0f:b4:4e:aa:d7:ad:52:74:29:04:3e:17:2d:94:b9: 05:b7:6d:fe:48:4e:9c:62:0a:24:17:51:cc:a4:f6: c8:49:11:e4:87:22:90:eb:89:76:36:d1:d0:8e:1c: e9:df:69:af:a3:ba:23:9e:5c:f9:1d:5b:13:05:5c: 95:e3:72:35:7a:31:74:be:d7:e7:24:d3:42:ff:18: b6:43:95:dd:af:9a:de:92:3b:2e:f0:0d:4b:fa:97: c2:35:bf:c4:e8:23:74:31:9b:3e:6a:c0:92:88:64: 95:17:67:4d:2d:b8:a3:31:fe:67:3a:12:a1:94:cf: 8e:4a:34:11:18:75:8a:3f:a6:fe:90:86:89:f1:37: 1c:bf:5b:40:5a:5e:c9:ff:3b:cf:b6:15:23:1b:fa: 10:8d:8f:97:f2:75:2f:40:6b:91:38:2c:b7:3b:48: 26:39:0c:56:26:49:51:62:8d:54:c1:c1:53:ac:a8: e1:17:74:b2:0f:dc:df:31:d4:fe:46:cb:ce:15:44: 22:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:58:7C:4B:5D:C9:7F:57:99:E8:A0:63:20:3D:4C:DD:20:65:BC:E7 X509v3 Authority Key Identifier: keyid:92:F4:9D:E8:68:4F:12:87:F4:F6:CB:18:5D:5C:F7:DE:80:C9:0B:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kvSd6GhPEof09ssYXVz33oDJC5Q.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:e4:46:83:0a:ea:f4:b4:f8:21:45:35:41:91:28:3f:4e:99: a1:3c:b9:b0:c3:d2:b4:5e:66:fd:e6:3e:c2:00:10:db:09:aa: ae:1b:d1:df:c3:42:95:72:b1:70:85:db:bf:89:ff:71:1d:e6: f4:87:9b:d1:31:32:1b:0c:76:f6:22:e2:0c:0a:ba:8c:e6:af: fc:88:9b:c8:97:e9:29:9e:93:1e:2d:5b:30:c9:98:b2:0e:66: bc:f6:99:52:62:d9:8a:1d:ff:b8:41:73:f5:d6:06:6a:0c:6b: d1:2f:bf:15:14:5a:65:d7:e2:01:bd:d0:3f:f4:73:c8:65:ce: a0:7f:41:4a:93:5a:74:90:57:07:ca:73:ea:e2:66:95:c2:b2: 83:ab:04:da:bd:17:65:f1:60:f6:db:41:12:0b:23:2b:60:13: 81:87:2b:6e:68:bd:42:81:8b:c4:16:46:12:f4:5c:2e:76:eb: 28:a8:01:5e:ae:d9:a2:b1:14:a1:9a:50:57:fc:87:63:19:5a: 49:59:f9:79:45:99:22:a0:b4:eb:ae:6b:7b:88:7d:33:c4:d2: 04:a3:2a:74:9e:f5:cb:d8:58:ae:47:45:dc:5c:4c:5c:13:34: 24:c6:01:79:2a:e9:ec:51:22:ad:e8:d7:ce:f7:3f:c8:10:44: 32:d7:b9:c9 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUZytroyDr9H+/1IDUXualpSNCBb0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTJmNDlkZTg2ODRmMTI4N2Y0ZjZjYjE4NWQ1Y2Y3ZGU4 MGM5MGI5NDAeFw0yNTEyMDkyMjU2MzdaFw0yNTEyMTEwMDI1MzdaMDMxMTAvBgNV BAMTKDgyNTg3QzRCNURDOTdGNTc5OUU4QTA2MzIwM0Q0Q0REMjA2NUJDRTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+KTmKvvbacaUcblitZbwlxqSg Ovl5kxJMphkSsWNEnDvea/Y12jGrvxlY+xsPeg6BE7YIiei9O4Xaiw+0TqrXrVJ0 KQQ+Fy2UuQW3bf5ITpxiCiQXUcyk9shJEeSHIpDriXY20dCOHOnfaa+juiOeXPkd WxMFXJXjcjV6MXS+1+ck00L/GLZDld2vmt6SOy7wDUv6l8I1v8ToI3Qxmz5qwJKI ZJUXZ00tuKMx/mc6EqGUz45KNBEYdYo/pv6QhonxNxy/W0BaXsn/O8+2FSMb+hCN j5fydS9Aa5E4LLc7SCY5DFYmSVFijVTBwVOsqOEXdLIP3N8x1P5Gy84VRCJrAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUglh8S13Jf1eZ6KBjID1M3SBlvOcwHwYDVR0j BBgwFoAUkvSd6GhPEof09ssYXVz33oDJC5QwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjA5MjMzODktMmJkZS00M2UwLWIwZDUtZmMyNDRhNjMw M2QwLzAvOTJGNDlERTg2ODRGMTI4N0Y0RjZDQjE4NUQ1Q0Y3REU4MEM5MEI5NC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2t2U2Q2R2hQRW9mMDlzc1lYVnozM29E SkM1US5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82MDkyMzM4OS0y YmRlLTQzZTAtYjBkNS1mYzI0NGE2MzAzZDAvMC85MkY0OURFODY4NEYxMjg3RjRG NkNCMTg1RDVDRjdERTgwQzkwQjk0Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJuRGgwrq9LT4IUU1QZEo P06ZoTy5sMPStF5m/eY+wgAQ2wmqrhvR38NClXKxcIXbv4n/cR3m9Ieb0TEyGwx2 9iLiDAq6jOav/IibyJfpKZ6THi1bMMmYsg5mvPaZUmLZih3/uEFz9dYGagxr0S+/ FRRaZdfiAb3QP/RzyGXOoH9BSpNadJBXB8pz6uJmlcKyg6sE2r0XZfFg9ttBEgsj K2ATgYcrbmi9QoGLxBZGEvRcLnbrKKgBXq7ZorEUoZpQV/yHYxlaSVn5eUWZIqC0 665re4h9M8TSBKMqdJ71y9hYrkdF3FxMXBM0JMYBeSrp7FEirejXzvc/yBBEMte5 yQ== -----END CERTIFICATE-----Generated at Wed Dec 10 01:38:44 2025 by rpki-client