This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.mft File: 25827D84056B8444CC2A7842759035354B8416BC.mft (raw, json) Hash identifier: SHOEy9due092f97xkC5VeshmbVKW8d2rGCKy5THDMmk= Subject key identifier: F3:34:91:FD:3E:2B:45:1D:26:A8:B6:B8:6E:C3:2C:F8:E6:8D:5A:57 Authority key identifier: 25:82:7D:84:05:6B:84:44:CC:2A:78:42:75:90:35:35:4B:84:16:BC Certificate issuer: /CN=25827d84056b8444cc2a7842759035354b8416bc Certificate serial: 46905C6D0AB86BC66CC407253F269C98C04164E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JYJ9hAVrhETMKnhCdZA1NUuEFrw.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.mft Manifest number: 02F6 Signing time: Fri 26 Dec 2025 05:52:46 +0000 Manifest this update: Fri 26 Dec 2025 05:47:46 +0000 Manifest next update: Sat 27 Dec 2025 07:17:46 +0000 Files and hashes: 1: 3138352e3133342e3139312e302f32342d3234203d3e20323037343837.roa (hash: wMCy3m1h75GfC2ATV5bYCJD7S6jjiI8Si5ikYie+OUI=) 2: 326131343a313463303a313a3a2f34382d3438203d3e20323037343837.roa (hash: nCuZ5ADJB2e8lGpTQQDYT3/JtyMvU82Myd2okt8I23s=) 3: 326131343a313463313a3230303a3a2f34302d3438203d3e203138363037.roa (hash: eBGi76bk+i5KfnHGqq9jtzpn0gh813x0+GlA90AUkZI=) 4: 25827D84056B8444CC2A7842759035354B8416BC.crl (hash: GwljHh7Hp9ORD+UHgrlhr1d/6VXKJPiwdNwhrsHhj4Y=) 5: 326131343a313463303a323a3a2f34382d3438203d3e20323037343837.roa (hash: lVUTv9ePxFs76NYMpRch/wm8DFit0p7cLkwe+1lgWxI=) 6: 326131343a313463303a3a2f34382d3438203d3e20323037343837.roa (hash: MAksePoJ+rnc08XyHZPcbQHx/BhF1iv7lCiKD0GFWxw=) 7: AS18607.asa (hash: ol8lct09PZ1pqBOGDq6LTNV0i5NYMmiHGhSWuOi+FwQ=) 8: 58E92F2C3859C2D0EF322A871688CB22928E2F3E.cer (hash: gYiT3SS0bbmQQSp3p/LPeJzfbx3ujd90DskZO9GZ0PQ=) 9: AS207487.asa (hash: Ha+forEe+xS82UGSV4B7j+UWBj+/I05XFS+Ojajx3y4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.crl rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.mft rsync://rpki.ripe.net/repository/DEFAULT/JYJ9hAVrhETMKnhCdZA1NUuEFrw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:90:5c:6d:0a:b8:6b:c6:6c:c4:07:25:3f:26:9c:98:c0:41:64:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25827d84056b8444cc2a7842759035354b8416bc Validity Not Before: Dec 26 05:47:46 2025 GMT Not After : Dec 27 07:17:46 2025 GMT Subject: CN=F33491FD3E2B451D26A8B6B86EC32CF8E68D5A57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:be:b7:98:08:0a:f5:67:70:0e:10:4f:e6:12: 56:ba:6c:4a:dd:bb:b0:57:89:84:b4:00:ae:24:21: bc:2d:43:51:2e:d3:21:89:ed:6f:c8:22:21:51:4c: 2d:18:b4:91:02:84:32:89:de:23:50:ae:23:d9:df: 17:ea:cb:35:15:3d:e6:52:f2:61:54:ea:23:82:d5: d2:bb:af:dd:87:05:44:17:42:20:fb:98:1f:d1:df: 29:1a:74:71:59:30:d8:e8:4c:51:0b:30:77:ce:c8: 5e:9b:1e:80:24:9d:8b:cc:30:02:42:56:8a:7a:c5: c1:d9:bb:bf:b4:01:67:31:94:69:14:98:26:bc:8f: 07:cb:c4:f2:0b:cb:90:95:92:53:52:24:66:51:15: 9e:db:97:5c:d2:aa:67:3b:20:a0:1d:a2:15:78:c8: fd:96:92:aa:fe:bb:62:4e:90:81:a3:56:f6:2c:80: 12:cd:44:25:12:bc:4d:09:b6:a7:53:6e:e1:f2:1f: 09:b2:3c:e1:e9:c2:a2:69:bc:c2:81:7f:3d:58:3e: c6:e9:d7:01:f6:94:d9:12:46:b9:c3:be:51:3f:4d: d6:25:cb:4b:68:26:18:dd:26:bc:67:c4:0d:12:c4: 3c:5e:9e:8b:4a:36:a5:a2:a3:33:0b:fd:68:e6:13: 76:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:34:91:FD:3E:2B:45:1D:26:A8:B6:B8:6E:C3:2C:F8:E6:8D:5A:57 X509v3 Authority Key Identifier: keyid:25:82:7D:84:05:6B:84:44:CC:2A:78:42:75:90:35:35:4B:84:16:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JYJ9hAVrhETMKnhCdZA1NUuEFrw.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:57:74:78:57:6c:8e:8b:9a:8e:80:2b:73:8f:f4:4f:0c:27: 2d:4d:29:07:60:e0:2f:56:f6:cf:57:ac:ec:af:73:6e:e9:b7: 1b:9c:f9:de:41:9c:2e:c7:13:d8:df:9e:5e:ad:e6:a1:7d:14: 45:7b:5d:a1:34:8b:06:04:7e:39:61:bb:62:2f:ae:3e:32:61: cc:4b:d2:df:b1:d4:38:c7:94:2d:07:05:25:bb:81:69:d5:71: 07:7b:ef:a0:05:3b:3f:a3:79:39:1f:6a:4e:11:c5:02:7a:e6: 92:91:55:d1:4a:92:8a:94:79:38:f7:d9:81:77:4a:36:28:a6: 00:17:7b:2b:f6:e6:6b:b3:f8:79:20:be:14:a0:df:86:82:55: 8e:ba:e8:70:e5:b7:f4:3c:41:4f:0d:b3:cd:ca:1a:09:f9:d3: 13:72:dd:9e:13:de:85:b8:f0:fb:58:66:d3:9c:14:9e:76:f4: cf:83:f9:00:20:20:3f:5b:fb:ec:d6:2f:fe:f6:00:c9:9e:80: a3:75:b9:fd:f2:32:71:81:1e:b7:9b:da:f5:e6:c8:60:7f:41: 59:c4:49:db:52:cc:84:6a:ce:41:e1:59:13:0f:e6:fd:24:13: 35:bc:74:53:e6:28:97:d8:a0:e5:cb:3a:98:46:3a:ae:7e:18: 4a:22:8a:6f -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIURpBcbQq4a8ZsxAclPyacmMBBZOEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjU4MjdkODQwNTZiODQ0NGNjMmE3ODQyNzU5MDM1MzU0 Yjg0MTZiYzAeFw0yNTEyMjYwNTQ3NDZaFw0yNTEyMjcwNzE3NDZaMDMxMTAvBgNV BAMTKEYzMzQ5MUZEM0UyQjQ1MUQyNkE4QjZCODZFQzMyQ0Y4RTY4RDVBNTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCOvreYCAr1Z3AOEE/mEla6bErd u7BXiYS0AK4kIbwtQ1Eu0yGJ7W/IIiFRTC0YtJEChDKJ3iNQriPZ3xfqyzUVPeZS 8mFU6iOC1dK7r92HBUQXQiD7mB/R3ykadHFZMNjoTFELMHfOyF6bHoAknYvMMAJC Vop6xcHZu7+0AWcxlGkUmCa8jwfLxPILy5CVklNSJGZRFZ7bl1zSqmc7IKAdohV4 yP2Wkqr+u2JOkIGjVvYsgBLNRCUSvE0JtqdTbuHyHwmyPOHpwqJpvMKBfz1YPsbp 1wH2lNkSRrnDvlE/TdYly0toJhjdJrxnxA0SxDxenotKNqWiozML/WjmE3bXAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU8zSR/T4rRR0mqLa4bsMs+OaNWlcwHwYDVR0j BBgwFoAUJYJ9hAVrhETMKnhCdZA1NUuEFrwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjliYmZkY2YtMzVjZC00NTI0LThmZmEtMzAwNWIwYjY5 YTI5LzAvMjU4MjdEODQwNTZCODQ0NENDMkE3ODQyNzU5MDM1MzU0Qjg0MTZCQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0pZSjloQVZyaEVUTUtuaENkWkExTlV1 RUZydy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82OWJiZmRjZi0z NWNkLTQ1MjQtOGZmYS0zMDA1YjBiNjlhMjkvMC8yNTgyN0Q4NDA1NkI4NDQ0Q0My QTc4NDI3NTkwMzUzNTRCODQxNkJDLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ1d0eFdsjouajoArc4/0 TwwnLU0pB2DgL1b2z1es7K9zbum3G5z53kGcLscT2N+eXq3moX0URXtdoTSLBgR+ OWG7Yi+uPjJhzEvS37HUOMeULQcFJbuBadVxB3vvoAU7P6N5OR9qThHFAnrmkpFV 0UqSipR5OPfZgXdKNiimABd7K/bma7P4eSC+FKDfhoJVjrrocOW39DxBTw2zzcoa CfnTE3LdnhPehbjw+1hm05wUnnb0z4P5ACAgP1v77NYv/vYAyZ6Ao3W5/fIycYEe t5va9ebIYH9BWcRJ21LMhGrOQeFZEw/m/SQTNbx0U+Yol9ig5cs6mEY6rn4YSiKK bw== -----END CERTIFICATE-----Generated at Fri Dec 26 14:18:22 2025 by rpki-client