This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.mft File: 8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.mft (raw, json) Hash identifier: O7JQea3XbbB90uUJUNkwrcvFffMWF/3XiiwQ/wSPF5w= Subject key identifier: B5:35:74:29:5F:31:91:CD:25:D6:C8:05:89:33:3C:CB:06:1B:4C:6C Authority key identifier: 8B:AD:30:7C:D4:DF:11:01:4E:40:ED:DF:FF:D6:0F:9A:09:E6:E9:5C Certificate issuer: /CN=8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C Certificate serial: 37540FF0BEBBBDA3F9FB0EA07E0E41753274BC82 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.mft Manifest number: 0265 Signing time: Sun 14 Dec 2025 19:49:04 +0000 Manifest this update: Sun 14 Dec 2025 19:44:04 +0000 Manifest next update: Mon 15 Dec 2025 22:33:04 +0000 Files and hashes: 1: 8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.crl (hash: Y/of7UZO0v1oQn37ncHu6ja42MFvrJv37WhnRIW02ys=) 2: 326131333a393634343a343030303a3a2f34302d3430203d3e20323034323931.roa (hash: 1o4m8PJbpPTt/WwCt8wMPBTEbmCl+8vcVtrKZbTYjFM=) 3: 326131333a393634343a343061653a3a2f34382d3438203d3e20323034323931.roa (hash: /APvQtIczoMdPeFgS8yLWOSzDbhA86h5Cc1N87vUKRI=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.crl rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.mft rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.cer rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.crl rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.mft rsync://rpki.ripe.net/repository/DEFAULT/8dBXL-cpkb0yhUuscWZ269rSKs4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 13:12:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:54:0f:f0:be:bb:bd:a3:f9:fb:0e:a0:7e:0e:41:75:32:74:bc:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C Validity Not Before: Dec 14 19:44:04 2025 GMT Not After : Dec 15 22:33:04 2025 GMT Subject: CN=B53574295F3191CD25D6C80589333CCB061B4C6C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:cf:1e:e1:a3:d4:8b:d8:4f:59:e7:dc:cf:c5: 03:51:55:28:1f:bf:f4:e4:42:aa:f9:c0:93:a9:d9: a3:32:10:36:b7:3b:6b:e9:26:2a:02:f8:ae:df:44: c0:a8:84:ca:0d:2a:43:7c:ae:89:53:f4:04:fe:15: 27:4b:1b:99:74:6e:ed:4d:85:53:de:49:7d:26:c9: a5:e2:5d:e4:8e:43:8f:50:6b:3d:6e:d3:94:b4:56: 00:80:02:67:7e:3b:89:f2:d6:d0:5e:52:06:10:90: 70:c5:1f:9d:3a:89:0b:12:68:a0:c8:da:17:bb:61: a4:16:f6:28:4b:72:3c:9a:b8:e1:fd:b5:e8:64:a1: fb:cb:f1:c1:e7:fd:03:d5:07:be:94:5f:9a:e1:b2: f0:3c:06:a9:76:19:c2:bb:ca:0a:97:a2:08:b4:6f: 31:20:52:5a:0f:8e:20:ad:00:21:7c:2b:8b:18:39: 75:db:57:b1:68:b3:45:82:01:38:de:69:99:61:e3: d3:00:a9:c2:eb:36:0b:0a:e5:2d:85:f9:8f:33:dd: 95:e6:22:61:a0:b9:19:62:f2:e5:f8:b7:a5:1e:0f: 4f:03:45:cf:93:9a:f1:a8:26:4e:98:57:50:d5:d7: 4c:ed:0c:88:aa:1c:a0:b1:e0:89:42:03:35:5b:cf: 37:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:35:74:29:5F:31:91:CD:25:D6:C8:05:89:33:3C:CB:06:1B:4C:6C X509v3 Authority Key Identifier: keyid:8B:AD:30:7C:D4:DF:11:01:4E:40:ED:DF:FF:D6:0F:9A:09:E6:E9:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:9e:bf:2d:b8:61:ad:f8:4d:98:50:25:45:ca:b5:be:4f:b4: 9e:07:2a:f4:3e:72:8e:f7:a0:ae:c5:5e:3b:21:27:4b:e7:1a: dd:60:44:04:9e:73:78:f4:34:38:8f:cb:ad:2e:57:43:9e:21: e4:e6:a5:da:71:3d:d9:b3:e1:75:90:18:02:d2:5e:c6:b0:3b: 53:a4:7c:00:07:d5:97:3b:df:87:c6:c7:83:9b:b7:0d:25:35: c4:c4:d1:d5:fe:48:a9:ed:ac:0e:a9:1a:93:7c:04:1e:fd:5c: 15:50:30:0d:ed:83:9d:07:ef:c6:ac:68:fb:b4:1a:ba:e5:1a: d3:6d:c6:f3:7b:ce:91:5e:de:25:d6:14:35:89:b2:1e:f4:9a: fa:a8:44:ad:ed:10:78:76:14:97:64:8a:dc:7f:b2:3a:57:0d: 5b:53:54:a1:46:6a:9d:6b:20:f0:d5:95:cc:03:41:83:60:f7: 3d:ae:47:b6:e8:39:39:cf:da:a4:5e:a4:13:30:68:eb:45:65: eb:49:fa:ef:cd:98:90:e6:f1:2e:e0:e2:34:70:e7:19:10:53: 3a:9e:19:88:41:f3:f5:43:0c:92:c6:ba:22:86:6f:7a:a5:7d: 05:a3:99:be:30:01:b3:3f:36:2b:2c:44:87:a5:e8:d7:66:8d: 0f:50:db:ba -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUN1QP8L67vaP5+w6gfg5BdTJ0vIIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEJBRDMwN0NENERGMTEwMTRFNDBFRERGRkZENjBGOUEw OUU2RTk1QzAeFw0yNTEyMTQxOTQ0MDRaFw0yNTEyMTUyMjMzMDRaMDMxMTAvBgNV BAMTKEI1MzU3NDI5NUYzMTkxQ0QyNUQ2QzgwNTg5MzMzQ0NCMDYxQjRDNkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCzx7ho9SL2E9Z59zPxQNRVSgf v/TkQqr5wJOp2aMyEDa3O2vpJioC+K7fRMCohMoNKkN8rolT9AT+FSdLG5l0bu1N hVPeSX0myaXiXeSOQ49Qaz1u05S0VgCAAmd+O4ny1tBeUgYQkHDFH506iQsSaKDI 2he7YaQW9ihLcjyauOH9tehkofvL8cHn/QPVB76UX5rhsvA8Bql2GcK7ygqXogi0 bzEgUloPjiCtACF8K4sYOXXbV7Fos0WCATjeaZlh49MAqcLrNgsK5S2F+Y8z3ZXm ImGguRli8uX4t6UeD08DRc+TmvGoJk6YV1DV10ztDIiqHKCx4IlCAzVbzzeNAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUtTV0KV8xkc0l1sgFiTM8ywYbTGwwHwYDVR0j BBgwFoAUi60wfNTfEQFOQO3f/9YPmgnm6VwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjVlYWU3NDUtOGFjOS00ZTcxLWJjOTQtZmNiMjYxNzAz Zjk2LzEvOEJBRDMwN0NENERGMTEwMTRFNDBFRERGRkZENjBGOUEwOUU2RTk1Qy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lMzBkZTg0Yi00MDBhLTRm ZDEtYWI4YS1lNzYxNmUyNDViNDkvMC84QkFEMzA3Q0Q0REYxMTAxNEU0MEVEREZG RkQ2MEY5QTA5RTZFOTVDLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzY1ZWFlNzQ1LThhYzktNGU3MS1iYzk0LWZjYjI2MTcwM2Y5Ni8xLzhCQUQzMDdD RDRERjExMDE0RTQwRURERkZGRDYwRjlBMDlFNkU5NUMubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAlnr8t uGGt+E2YUCVFyrW+T7SeByr0PnKO96CuxV47ISdL5xrdYEQEnnN49DQ4j8utLldD niHk5qXacT3Zs+F1kBgC0l7GsDtTpHwAB9WXO9+HxseDm7cNJTXExNHV/kip7awO qRqTfAQe/VwVUDAN7YOdB+/GrGj7tBq65RrTbcbze86RXt4l1hQ1ibIe9Jr6qESt 7RB4dhSXZIrcf7I6Vw1bU1ShRmqdayDw1ZXMA0GDYPc9rke26Dk5z9qkXqQTMGjr RWXrSfrvzZiQ5vEu4OI0cOcZEFM6nhmIQfP1QwySxroihm96pX0Fo5m+MAGzPzYr LESHpejXZo0PUNu6 -----END CERTIFICATE-----Generated at Sun Dec 14 22:51:41 2025 by rpki-client