This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.mft File: 1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.mft (raw, json) Hash identifier: bxv2W1ggQYCasgEFJaO4Xz4FwWMTfie6XmI0EWDIbDI= Subject key identifier: BD:30:2E:24:64:84:CF:FC:60:A6:6D:04:ED:93:7B:3B:9C:6B:B3:40 Authority key identifier: 1D:BD:1D:47:FD:8E:45:74:C8:42:17:43:C9:CC:5F:0E:F8:3E:0E:71 Certificate issuer: /CN=1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71 Certificate serial: 091FEE225EA5ECB2017DB52C8393216D463B344B Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.mft Manifest number: 033C Signing time: Sat 06 Dec 2025 15:21:39 +0000 Manifest this update: Sat 06 Dec 2025 15:16:39 +0000 Manifest next update: Sun 07 Dec 2025 18:20:39 +0000 Files and hashes: 1: 326131343a316563373a663030303a3a2f34302d3430203d3e20323038343533.roa (hash: kUd+OV7q9DAowS2L3/fdq/oS4HUMTFtScny+gWU7CG0=) 2: 1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.crl (hash: pEvwqUQhhO78rlwtrSPh/EDXzvi1DLgEg2fuuASTuZA=) 3: 326131343a316563373a663030653a3a2f34382d3438203d3e203336383332.roa (hash: 0dTOq5r3nzcU4nhnM0SPSmfHWBkaaGJU3KJhAxTcvLU=) 4: 326131343a316563373a663030643a3a2f34382d3438203d3e20323136313133.roa (hash: RA+L2a9rUnQEkE0h3dE9SdgUVHKokLJZl3eEmnwupDU=) 5: 326131343a316563373a663030663a3a2f34382d3438203d3e20323038343533.roa (hash: ZBQrTYQq6EzEXXQqVVLmnECxmx5vDStz1fI8gjrWa9o=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.crl rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.mft rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.cer rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:31:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:1f:ee:22:5e:a5:ec:b2:01:7d:b5:2c:83:93:21:6d:46:3b:34:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71 Validity Not Before: Dec 6 15:16:39 2025 GMT Not After : Dec 7 18:20:39 2025 GMT Subject: CN=BD302E246484CFFC60A66D04ED937B3B9C6BB340 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:06:7f:6e:73:05:cd:4d:c5:d6:7b:04:fa:80: e2:13:36:58:f4:91:cf:89:1f:6b:3e:3a:3e:cf:54: 7b:2a:a6:2b:78:2e:6c:82:16:2f:69:71:64:fb:64: 93:88:8a:c8:bf:95:de:af:93:b8:eb:9b:b6:99:1b: 76:bd:a0:f7:12:0a:98:be:4a:b6:8a:1d:14:7e:e5: 4b:f5:9d:b3:d2:48:ce:98:06:f7:a7:9e:04:93:d7: de:17:73:80:da:52:dc:4d:e3:2c:02:97:c7:34:f3: de:c7:78:20:8f:4a:d2:d5:0d:da:2c:0d:d0:60:83: 1a:79:84:db:e6:0e:99:52:14:19:79:6f:89:d1:e6: 0c:cc:eb:f8:19:c6:7b:e5:74:f1:7c:8e:f0:c0:16: b3:91:9e:95:d9:3a:dd:56:4b:f2:20:b6:50:31:9c: 89:fd:88:80:a9:42:75:79:08:b0:d9:4c:4a:a3:63: 84:c3:1f:11:fd:e8:e7:2c:b3:7a:a2:eb:ab:1c:2d: 97:ab:95:d8:c7:bf:1c:e7:5d:10:a3:b7:22:86:64: 64:bb:82:75:03:21:40:c0:96:1a:59:6c:ee:fb:cf: 57:53:74:89:45:e5:78:71:85:3e:03:08:85:00:a7: 83:ea:45:9a:0a:10:9d:6d:42:3f:cd:21:c6:f7:51: d9:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:30:2E:24:64:84:CF:FC:60:A6:6D:04:ED:93:7B:3B:9C:6B:B3:40 X509v3 Authority Key Identifier: keyid:1D:BD:1D:47:FD:8E:45:74:C8:42:17:43:C9:CC:5F:0E:F8:3E:0E:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:e7:19:8d:12:10:f2:75:c7:d9:b0:1a:11:90:6e:32:1e:45: 88:3d:db:1e:b4:6a:ca:03:f1:76:c8:f5:f8:1a:75:24:97:c8: 00:c3:c9:f7:db:10:dc:22:32:ea:88:2b:c8:ca:9c:db:26:87: d0:37:b5:05:0c:7b:1b:6f:1f:42:71:30:a8:eb:79:ed:fe:99: 90:92:45:3d:fa:64:a5:dd:9d:bf:b5:7f:fb:b7:83:b4:6e:09: b5:81:e5:57:79:4b:64:f5:0b:87:5d:3d:dc:e8:e0:ae:d4:bb: 5c:b9:34:a7:95:c7:f3:b6:df:9e:c2:e4:e2:0d:66:2b:8e:a4: 40:d0:ae:b7:9f:82:6e:0b:bf:d0:bd:0b:d4:d4:b8:4b:eb:84: 37:de:90:c2:fa:d6:69:21:54:e7:f0:5a:0e:c0:b0:e8:42:e4: 79:82:24:6d:5f:bd:f7:45:6d:49:10:44:1a:61:97:60:91:ab: a7:77:2b:a1:e3:ec:c0:d2:40:c3:32:8b:89:1c:7f:21:2e:6f: 97:3b:cf:78:0f:08:c2:bd:99:0a:e5:e1:f8:05:cb:4a:50:00: 0c:81:e6:d2:8c:5a:fd:74:59:fa:a3:7a:78:e0:9e:8c:49:f0: 99:17:76:d2:af:94:30:a0:d9:43:1b:b4:c1:4e:96:5d:03:d2: 6c:dc:62:14 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUCR/uIl6l7LIBfbUsg5MhbUY7NEswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMURCRDFENDdGRDhFNDU3NEM4NDIxNzQzQzlDQzVGMEVG ODNFMEU3MTAeFw0yNTEyMDYxNTE2MzlaFw0yNTEyMDcxODIwMzlaMDMxMTAvBgNV BAMTKEJEMzAyRTI0NjQ4NENGRkM2MEE2NkQwNEVEOTM3QjNCOUM2QkIzNDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1Bn9ucwXNTcXWewT6gOITNlj0 kc+JH2s+Oj7PVHsqpit4LmyCFi9pcWT7ZJOIisi/ld6vk7jrm7aZG3a9oPcSCpi+ SraKHRR+5Uv1nbPSSM6YBvenngST194Xc4DaUtxN4ywCl8c0897HeCCPStLVDdos DdBggxp5hNvmDplSFBl5b4nR5gzM6/gZxnvldPF8jvDAFrORnpXZOt1WS/IgtlAx nIn9iICpQnV5CLDZTEqjY4TDHxH96Ocss3qi66scLZerldjHvxznXRCjtyKGZGS7 gnUDIUDAlhpZbO77z1dTdIlF5XhxhT4DCIUAp4PqRZoKEJ1tQj/NIcb3UdnvAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUvTAuJGSEz/xgpm0E7ZN7O5xrs0AwHwYDVR0j BBgwFoAUHb0dR/2ORXTIQhdDycxfDvg+DnEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE0NzZkNjItOWNmYS00ODcxLWEyZDktZmFkZjU3ODFj MTFiLzIvMURCRDFENDdGRDhFNDU3NEM4NDIxNzQzQzlDQzVGMEVGODNFMEU3MS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xYTNiYjkzZi05OGE0LTRj N2UtYTBlMS04MDU3YTRmMDg2YzkvMC8xREJEMUQ0N0ZEOEU0NTc0Qzg0MjE3NDND OUNDNUYwRUY4M0UwRTcxLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzcxNDc2ZDYyLTljZmEtNDg3MS1hMmQ5LWZhZGY1NzgxYzExYi8yLzFEQkQxRDQ3 RkQ4RTQ1NzRDODQyMTc0M0M5Q0M1RjBFRjgzRTBFNzEubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBc5xmN EhDydcfZsBoRkG4yHkWIPdsetGrKA/F2yPX4GnUkl8gAw8n32xDcIjLqiCvIypzb JofQN7UFDHsbbx9CcTCo63nt/pmQkkU9+mSl3Z2/tX/7t4O0bgm1geVXeUtk9QuH XT3c6OCu1LtcuTSnlcfztt+ewuTiDWYrjqRA0K63n4JuC7/QvQvU1LhL64Q33pDC +tZpIVTn8FoOwLDoQuR5giRtX733RW1JEEQaYZdgkaundyuh4+zA0kDDMouJHH8h Lm+XO894DwjCvZkK5eH4BctKUAAMgebSjFr9dFn6o3p44J6MSfCZF3bSr5QwoNlD G7TBTpZdA9Js3GIU -----END CERTIFICATE-----Generated at Sun Dec 7 06:48:42 2025 by rpki-client