This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.mft File: 8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.mft (raw, json) Hash identifier: HxKXEKtZ1GaEVuyVFjZVUUrf+40pJkMMvtU1JE837cY= Subject key identifier: D0:F1:73:4C:F8:E8:39:28:FF:7F:61:E5:99:C6:B9:F4:EB:CC:68:DF Authority key identifier: 8B:9B:A9:AD:DE:96:35:77:7B:F5:86:FD:49:3E:14:CD:30:F7:C4:CA Certificate issuer: /CN=8b9ba9adde9635777bf586fd493e14cd30f7c4ca Certificate serial: 3CC8A63886072A6F2305B651B5BE566C846FA3B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i5uprd6WNXd79Yb9ST4UzTD3xMo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.mft Manifest number: 0525 Signing time: Tue 30 Dec 2025 07:28:09 +0000 Manifest this update: Tue 30 Dec 2025 07:23:09 +0000 Manifest next update: Wed 31 Dec 2025 10:06:09 +0000 Files and hashes: 1: 8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.crl (hash: AKAeyIif3qQGl7oa1bI77atQ6t9ZmPQdHfDUo/C8FOk=) 2: 3138382e3136342e3135362e302f32342d3234203d3e20383334.roa (hash: sY/xAuh6Mg68YWt7c8TloEoU7TIBsTXsCx6tRGi7xp4=) 3: 3138382e3136342e3135342e302f32342d3234203d3e20383334.roa (hash: vvTevjxETDa595QBqFXtPC5dkfNklcd1MuoPmql9OGw=) 4: 3138382e3136342e3135352e302f32342d3234203d3e203631333137.roa (hash: W1I8woHaqJ6kU4xjFwKm1g6uV7UZ51m6Dv8R/7Dp0Oc=) 5: 3138382e3136342e3135322e302f32342d3234203d3e203631333137.roa (hash: PjHq1CK+fSk+5WuONiKJilG5oXTFh0dZnkKMEZVNP8E=) 6: 3138382e3136342e3135332e302f32342d3234203d3e203631333137.roa (hash: pkJz5L9iLZRF+OIvLDh3t2xUInq31L6An4us+3j1eD0=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.crl rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.mft rsync://rpki.ripe.net/repository/DEFAULT/i5uprd6WNXd79Yb9ST4UzTD3xMo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 10:06:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:c8:a6:38:86:07:2a:6f:23:05:b6:51:b5:be:56:6c:84:6f:a3:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b9ba9adde9635777bf586fd493e14cd30f7c4ca Validity Not Before: Dec 30 07:23:09 2025 GMT Not After : Dec 31 10:06:09 2025 GMT Subject: CN=D0F1734CF8E83928FF7F61E599C6B9F4EBCC68DF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:19:fd:46:6f:e9:2b:d4:36:31:9a:ef:30:81: ed:22:5c:a5:18:3c:d5:1a:12:51:0f:f2:64:c4:15: 3f:d6:7c:a5:e0:ae:39:0b:32:a1:9f:ff:47:fb:2d: 8e:e7:4c:50:18:7e:30:14:e4:c0:06:db:22:3b:14: 62:ea:b6:98:e0:26:0d:87:b8:06:4f:ad:35:e3:fe: c3:dd:32:c4:12:1d:14:9d:4e:44:d1:c6:e9:f8:0f: 18:d5:2d:c7:41:48:77:57:4b:da:4a:4e:e3:32:10: 0a:f5:16:72:3e:a0:2f:19:99:0d:5c:00:f8:ca:85: b9:f0:71:f3:73:79:89:7e:c8:07:92:61:e6:30:d8: 22:32:fc:ca:af:da:23:15:c2:3d:94:36:b5:13:2f: d7:0e:90:58:b8:09:66:30:1f:5a:75:7a:9d:aa:7a: eb:12:61:07:24:41:d0:d3:9c:cf:a4:3f:cd:fb:8c: 8a:94:30:d7:ad:c3:a9:56:57:a9:0f:db:a2:eb:b4: d5:88:a0:f1:d7:da:a0:9c:02:9a:b5:47:11:56:c4: 4d:ef:35:36:36:19:c9:e7:97:7b:99:45:90:c7:23: 34:da:54:41:d5:05:08:aa:cd:9d:fa:3c:60:9f:09: c7:0d:8c:d5:6e:68:ec:1c:90:11:e8:30:65:38:9a: 52:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:F1:73:4C:F8:E8:39:28:FF:7F:61:E5:99:C6:B9:F4:EB:CC:68:DF X509v3 Authority Key Identifier: keyid:8B:9B:A9:AD:DE:96:35:77:7B:F5:86:FD:49:3E:14:CD:30:F7:C4:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i5uprd6WNXd79Yb9ST4UzTD3xMo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:92:ba:e7:f6:92:36:19:09:a5:e2:a3:fb:3d:b1:75:26:04: e0:88:53:ec:2d:d8:d4:dd:55:c4:60:48:0d:b8:c6:52:16:09: fa:ac:72:45:ad:9f:3d:51:12:8c:28:0b:88:88:82:f6:6b:6a: ec:fd:b8:c5:12:ec:b2:ff:26:79:37:ce:2c:e1:61:b5:7a:b0: af:c9:5b:34:a7:0f:79:3b:68:f4:0d:b9:90:18:3b:9f:fd:53: a7:2b:09:fd:06:2c:d0:7a:f7:52:5c:dc:3f:6d:9f:cc:ff:28: 69:7f:75:b2:b8:24:90:f9:25:c6:a5:3e:f1:90:b7:fa:59:fe: c3:c7:5b:0b:8c:b0:b4:5f:71:5c:ce:af:aa:bc:18:ba:fd:15: e7:a0:7e:a3:f7:6a:a5:db:82:b5:a0:36:68:9b:33:48:f8:64: ad:97:8c:09:6f:95:b9:2f:38:d1:4c:42:31:3f:20:ae:d1:f0: 51:87:4b:d4:a2:ec:e9:8f:aa:d6:87:b3:36:ea:ee:89:d7:47: 04:1d:ae:94:be:e0:5c:34:08:f4:8d:12:68:35:fe:36:7c:67: da:bd:c5:28:c4:0c:1c:85:35:b1:ae:5a:a7:b5:32:4c:73:1e: dc:3d:04:ab:dc:9d:56:32:13:b9:97:af:74:d0:4f:15:dc:1b: a7:c1:a8:fb -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUPMimOIYHKm8jBbZRtb5WbIRvo7QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI5YmE5YWRkZTk2MzU3NzdiZjU4NmZkNDkzZTE0Y2Qz MGY3YzRjYTAeFw0yNTEyMzAwNzIzMDlaFw0yNTEyMzExMDA2MDlaMDMxMTAvBgNV BAMTKEQwRjE3MzRDRjhFODM5MjhGRjdGNjFFNTk5QzZCOUY0RUJDQzY4REYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCKGf1Gb+kr1DYxmu8wge0iXKUY PNUaElEP8mTEFT/WfKXgrjkLMqGf/0f7LY7nTFAYfjAU5MAG2yI7FGLqtpjgJg2H uAZPrTXj/sPdMsQSHRSdTkTRxun4DxjVLcdBSHdXS9pKTuMyEAr1FnI+oC8ZmQ1c APjKhbnwcfNzeYl+yAeSYeYw2CIy/Mqv2iMVwj2UNrUTL9cOkFi4CWYwH1p1ep2q eusSYQckQdDTnM+kP837jIqUMNetw6lWV6kP26LrtNWIoPHX2qCcApq1RxFWxE3v NTY2Gcnnl3uZRZDHIzTaVEHVBQiqzZ36PGCfCccNjNVuaOwckBHoMGU4mlLLAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU0PFzTPjoOSj/f2Hlmca59OvMaN8wHwYDVR0j BBgwFoAUi5uprd6WNXd79Yb9ST4UzTD3xMowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNmMwMzA4OTAtZjZlMC00MTBjLWJjOTktYWYwOTIxZDFj M2E0LzAvOEI5QkE5QURERTk2MzU3NzdCRjU4NkZENDkzRTE0Q0QzMEY3QzRDQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2k1dXByZDZXTlhkNzlZYjlTVDRVelRE M3hNby5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YzAzMDg5MC1m NmUwLTQxMGMtYmM5OS1hZjA5MjFkMWMzYTQvMC84QjlCQTlBRERFOTYzNTc3N0JG NTg2RkQ0OTNFMTRDRDMwRjdDNENBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ5K65/aSNhkJpeKj+z2x dSYE4IhT7C3Y1N1VxGBIDbjGUhYJ+qxyRa2fPVESjCgLiIiC9mtq7P24xRLssv8m eTfOLOFhtXqwr8lbNKcPeTto9A25kBg7n/1TpysJ/QYs0Hr3UlzcP22fzP8oaX91 srgkkPklxqU+8ZC3+ln+w8dbC4ywtF9xXM6vqrwYuv0V56B+o/dqpduCtaA2aJsz SPhkrZeMCW+VuS840UxCMT8grtHwUYdL1KLs6Y+q1oezNuruiddHBB2ulL7gXDQI 9I0SaDX+Nnxn2r3FKMQMHIU1sa5ap7UyTHMe3D0Eq9ydVjITuZevdNBPFdwbp8Go +w== -----END CERTIFICATE-----Generated at Tue Dec 30 23:06:43 2025 by rpki-client