This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft File: 42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft (raw, json) Hash identifier: wWSAnQpZxttU605ePy43KKcOvcX6Tv3XhPdd7xjubII= Subject key identifier: BD:07:DC:C1:91:65:EC:CC:0C:2A:26:47:70:23:13:AF:80:DF:87:20 Authority key identifier: 42:E5:08:FB:A8:96:0F:48:07:1B:11:9A:CC:BF:57:BD:BF:3A:80:57 Certificate issuer: /CN=42e508fba8960f48071b119accbf57bdbf3a8057 Certificate serial: 4896689031956A3ABEBC5828479B9A90BE4CE820 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft Manifest number: 024A Signing time: Sat 06 Dec 2025 16:23:34 +0000 Manifest this update: Sat 06 Dec 2025 16:18:34 +0000 Manifest next update: Sun 07 Dec 2025 19:14:34 +0000 Files and hashes: 1: 326130623a346530343a3a2f34382d3438203d3e203236393534.roa (hash: kjCVplBQIQWTrk/MT/vsXbIMmP0BY/AuB2NZAKC1i00=) 2: 5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer (hash: xVnvGBOQAGx7ddcmxacteZKEbUgAqtkW3B5rWiVC4Gw=) 3: 326130623a346530343a626565663a3a2f34382d3438203d3e203236393534.roa (hash: dXSnrOSsmksjfaruQTR4onccvLxLXawLPmHLDP+0pZ0=) 4: 36322e3138322e3139322e302f32312d3234203d3e203432353332.roa (hash: 3uX+IJtCK1auUN/owB303ntI6bBy0+b5ouSYztCnTmQ=) 5: 42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl (hash: 7UiQany6wR72SrRdGHJaE7UHuJQJSJl0fQQa12i38DY=) 6: 3139352e39352e3134392e302f32342d3234203d3e203236393534.roa (hash: 4RKcXrOywUF2n3zLGUholuQfQjsDw3jfgXGtm0jfONU=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:96:68:90:31:95:6a:3a:be:bc:58:28:47:9b:9a:90:be:4c:e8:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42e508fba8960f48071b119accbf57bdbf3a8057 Validity Not Before: Dec 6 16:18:34 2025 GMT Not After : Dec 7 19:14:34 2025 GMT Subject: CN=BD07DCC19165ECCC0C2A2647702313AF80DF8720 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:e6:cd:5f:59:0d:42:c6:a4:a6:87:78:75:e0: b3:8b:18:7f:6b:44:0f:70:a6:e4:07:14:c4:12:17: de:fb:ca:34:99:27:5b:78:f0:99:51:6d:6c:74:57: 0a:2c:7b:cf:0d:5e:51:cb:a1:c8:ce:ff:43:5e:4d: 15:5c:10:29:f7:a6:be:31:02:f5:60:b9:e4:61:12: 12:c8:b9:a9:cc:b6:ed:bf:f2:9c:ac:94:6d:ef:af: 22:9e:71:0b:0c:23:08:b6:b9:c2:07:29:39:db:3d: f6:11:e5:88:be:a0:60:c6:6b:a3:09:1b:42:33:00: 42:82:09:08:f8:88:07:77:81:c2:e1:53:c0:2a:0f: 37:07:3d:76:83:4f:7c:3c:43:90:36:9a:95:b4:6a: f4:ce:82:38:8c:27:c2:16:8b:ae:a8:5e:79:4f:08: 90:02:6a:85:29:c8:f9:5a:c2:da:8e:b3:bd:fd:92: 86:f8:f6:e6:31:ed:fb:77:7e:e8:e5:15:8d:67:ab: fd:d4:68:39:61:17:dc:cb:a5:86:09:b9:25:9d:55: ac:10:20:67:36:49:68:61:99:be:39:ed:15:c7:a9: 9b:b3:59:1e:7a:34:9d:b8:6d:89:f4:9d:00:be:c3: d3:08:31:58:0c:38:20:11:e2:ca:31:77:de:df:ee: 46:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:07:DC:C1:91:65:EC:CC:0C:2A:26:47:70:23:13:AF:80:DF:87:20 X509v3 Authority Key Identifier: keyid:42:E5:08:FB:A8:96:0F:48:07:1B:11:9A:CC:BF:57:BD:BF:3A:80:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:81:9d:ec:21:5a:0a:3a:3e:30:3c:f0:c6:e9:0e:da:55:78: 5b:b4:bc:06:dd:24:8c:8a:32:9f:aa:c3:8e:68:f1:d9:d5:88: 2d:c0:bd:d3:2f:d3:55:04:90:5c:15:87:93:30:4d:2f:1e:c5: 0d:8a:b1:9d:b7:5d:26:87:91:dd:eb:e2:c3:29:5e:94:09:49: ec:f5:97:94:74:e3:b3:fe:f8:ea:88:da:14:8c:76:c5:91:cd: e8:cb:65:45:49:86:f8:a2:a2:09:d0:61:fc:d4:65:df:7f:ea: 14:b0:bd:35:57:a4:15:38:e1:38:53:fa:17:b6:64:ab:62:e5: f3:ab:89:2c:c3:f8:f2:3c:91:66:20:00:1e:c2:89:5d:50:ad: e7:31:84:a4:e0:0e:27:d4:09:33:a7:af:c9:60:56:23:fb:18: 2f:e8:1b:04:b5:b7:d2:8f:70:31:53:16:a5:1a:b0:38:72:af: 9c:26:2b:7e:e6:6a:bb:c0:e5:76:8c:6b:80:a3:1a:90:07:9c: c8:06:07:e8:2b:57:0d:9c:b9:01:47:eb:b3:ec:7b:c4:e5:33: 4e:ac:d5:4f:8e:01:bf:68:0e:30:20:7a:18:55:e9:ef:b0:7a: b9:18:b8:eb:c3:26:10:f2:49:ef:86:d2:e9:3e:f4:77:3e:9a: 5f:4e:d6:97 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUSJZokDGVajq+vFgoR5uakL5M6CAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDJlNTA4ZmJhODk2MGY0ODA3MWIxMTlhY2NiZjU3YmRi ZjNhODA1NzAeFw0yNTEyMDYxNjE4MzRaFw0yNTEyMDcxOTE0MzRaMDMxMTAvBgNV BAMTKEJEMDdEQ0MxOTE2NUVDQ0MwQzJBMjY0NzcwMjMxM0FGODBERjg3MjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCU5s1fWQ1CxqSmh3h14LOLGH9r RA9wpuQHFMQSF977yjSZJ1t48JlRbWx0Vwose88NXlHLocjO/0NeTRVcECn3pr4x AvVgueRhEhLIuanMtu2/8pyslG3vryKecQsMIwi2ucIHKTnbPfYR5Yi+oGDGa6MJ G0IzAEKCCQj4iAd3gcLhU8AqDzcHPXaDT3w8Q5A2mpW0avTOgjiMJ8IWi66oXnlP CJACaoUpyPlawtqOs739kob49uYx7ft3fujlFY1nq/3UaDlhF9zLpYYJuSWdVawQ IGc2SWhhmb457RXHqZuzWR56NJ24bYn0nQC+w9MIMVgMOCAR4soxd97f7kYxAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUvQfcwZFl7MwMKiZHcCMTr4DfhyAwHwYDVR0j BBgwFoAUQuUI+6iWD0gHGxGazL9Xvb86gFcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzNiOGVjMDEtOGJhNS00NzlmLWEyMjktMGFiNzBlNDgx NWJiLzAvNDJFNTA4RkJBODk2MEY0ODA3MUIxMTlBQ0NCRjU3QkRCRjNBODA1Ny5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1F1VUktNmlXRDBnSEd4R2F6TDlYdmI4 NmdGYy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS83M2I4ZWMwMS04 YmE1LTQ3OWYtYTIyOS0wYWI3MGU0ODE1YmIvMC80MkU1MDhGQkE4OTYwRjQ4MDcx QjExOUFDQ0JGNTdCREJGM0E4MDU3Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbYGd7CFaCjo+MDzwxukO 2lV4W7S8Bt0kjIoyn6rDjmjx2dWILcC90y/TVQSQXBWHkzBNLx7FDYqxnbddJoeR 3eviwylelAlJ7PWXlHTjs/746ojaFIx2xZHN6MtlRUmG+KKiCdBh/NRl33/qFLC9 NVekFTjhOFP6F7Zkq2Ll86uJLMP48jyRZiAAHsKJXVCt5zGEpOAOJ9QJM6evyWBW I/sYL+gbBLW30o9wMVMWpRqwOHKvnCYrfuZqu8DldoxrgKMakAecyAYH6CtXDZy5 AUfrs+x7xOUzTqzVT44Bv2gOMCB6GFXp77B6uRi468MmEPJJ74bS6T70dz6aX07W lw== -----END CERTIFICATE-----Generated at Sat Dec 6 20:55:54 2025 by rpki-client