This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8070615f-d26d-42e3-a145-5c7b67b2b64e/0/2C12F0A080F021F2BA25BC0C6EA7E06B67AAD05E.mft File: 2C12F0A080F021F2BA25BC0C6EA7E06B67AAD05E.mft (raw, json) Hash identifier: 2E17pnBqjsalHXD9/7zwd8WvdtCLKzTyccxztSgyJM0= Subject key identifier: AD:78:8A:04:B6:7B:C6:AF:AF:F5:2C:EE:1E:82:31:35:0B:F2:83:21 Authority key identifier: 2C:12:F0:A0:80:F0:21:F2:BA:25:BC:0C:6E:A7:E0:6B:67:AA:D0:5E Certificate issuer: /CN=2c12f0a080f021f2ba25bc0c6ea7e06b67aad05e Certificate serial: 7AC93809D3D308C81D2212658FB107F3AE264BBB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LBLwoIDwIfK6JbwMbqfga2eq0F4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8070615f-d26d-42e3-a145-5c7b67b2b64e/0/2C12F0A080F021F2BA25BC0C6EA7E06B67AAD05E.mft Manifest number: 01B6 Signing time: Fri 26 Dec 2025 01:47:49 +0000 Manifest this update: Fri 26 Dec 2025 01:42:45 +0000 Manifest next update: Sat 27 Dec 2025 04:22:45 +0000 Files and hashes: 1: 326131343a623430303a34393a3a2f34382d3438203d3e20323133323739.roa (hash: riIdsxtRctFPDHrFJWh54sUuVf2OxjI79zxryuANdmE=) 2: 2C12F0A080F021F2BA25BC0C6EA7E06B67AAD05E.crl (hash: 35s4wx2DwkC2zKCeoH7KjUD8jSZUDuFMCQk5Bubz7eo=) 3: AS213279.asa (hash: nJRzaMfqdZ5AI+sMn9wPdQBE/Wcrkghpk4PHewl3Wz8=) 4: 326131343a623430303a3a2f32392d3438203d3e2030.roa (hash: NhcbptlixcA3mbsPTqMiibAOrNSU1BYwO66fMNiKSfA=) 5: 326131343a623430303a3a2f34382d3438203d3e20323133323739.roa (hash: Nc5etJGF6V1MhXz6BJTwE4uruzNAtPHTBPUBd5SZlN4=) 6: 326131343a623430303a3a2f33322d3332203d3e20323133323739.roa (hash: 5hhgwEfLD9bumu2w7kC2KzlKzBKITTTKNPZHvvEg0u8=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8070615f-d26d-42e3-a145-5c7b67b2b64e/0/2C12F0A080F021F2BA25BC0C6EA7E06B67AAD05E.crl rsync://rsync.paas.rpki.ripe.net/repository/8070615f-d26d-42e3-a145-5c7b67b2b64e/0/2C12F0A080F021F2BA25BC0C6EA7E06B67AAD05E.mft rsync://rpki.ripe.net/repository/DEFAULT/LBLwoIDwIfK6JbwMbqfga2eq0F4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 04:22:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:c9:38:09:d3:d3:08:c8:1d:22:12:65:8f:b1:07:f3:ae:26:4b:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2c12f0a080f021f2ba25bc0c6ea7e06b67aad05e Validity Not Before: Dec 26 01:42:45 2025 GMT Not After : Dec 27 04:22:45 2025 GMT Subject: CN=AD788A04B67BC6AFAFF52CEE1E8231350BF28321 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:ac:4b:24:f7:1c:a4:2f:df:9e:47:2c:14:a4: bd:43:04:b4:34:b2:7f:10:c5:23:98:3b:67:74:4d: b0:bc:c9:70:51:f1:58:1e:6a:d4:3e:e4:f8:8f:3b: 29:9b:0a:8e:7d:9f:14:c3:08:40:4c:be:4b:c1:31: e5:be:fe:a9:94:85:2c:64:58:e9:6a:bf:d0:65:28: 00:aa:15:80:f5:87:7e:c1:66:81:60:31:ac:9a:d6: 98:02:ff:8d:e4:d0:82:ed:49:da:85:93:6b:72:34: 25:93:e1:6e:8b:75:f5:1d:8f:30:9d:e1:63:92:83: 05:a2:a4:ef:9e:e7:bc:f1:82:2c:a0:dc:c1:5d:29: 7b:dd:af:6b:0d:18:dc:20:d6:ae:09:9c:85:80:f5: 31:8e:26:7c:bb:8e:10:1f:e9:2d:18:9d:c1:02:51: d9:ce:77:0f:8f:ec:be:b5:e4:a5:a3:92:11:45:79: 78:a5:16:3f:25:f2:33:2c:1b:95:8c:e0:36:72:c6: 6e:15:f4:49:64:a0:ac:77:57:3d:e6:73:ed:c1:e4: d4:0c:0e:33:89:63:1b:4b:d0:f1:24:b9:4c:3c:29: d4:13:b1:d5:df:36:3f:a0:fe:e6:f0:a3:44:6a:7a: 50:71:de:b4:7c:c3:4e:a6:b8:20:81:71:ec:7d:79: 4a:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:78:8A:04:B6:7B:C6:AF:AF:F5:2C:EE:1E:82:31:35:0B:F2:83:21 X509v3 Authority Key Identifier: keyid:2C:12:F0:A0:80:F0:21:F2:BA:25:BC:0C:6E:A7:E0:6B:67:AA:D0:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8070615f-d26d-42e3-a145-5c7b67b2b64e/0/2C12F0A080F021F2BA25BC0C6EA7E06B67AAD05E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LBLwoIDwIfK6JbwMbqfga2eq0F4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8070615f-d26d-42e3-a145-5c7b67b2b64e/0/2C12F0A080F021F2BA25BC0C6EA7E06B67AAD05E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:83:28:32:19:2c:bc:26:ca:8b:ad:9b:11:ce:96:b4:cb:cf: ed:2e:ff:63:3f:2e:35:2c:ca:4b:a4:d5:ab:1e:01:31:ff:e6: f6:28:c0:27:1f:42:0b:74:32:1e:1c:d7:67:a6:4e:1e:33:9b: 4d:69:21:90:32:80:7f:81:d9:76:54:84:6a:33:31:aa:aa:8e: dd:12:d8:0f:ef:61:3c:ff:2d:81:40:17:79:d6:9e:70:5a:06: e5:fb:f4:22:76:fb:4c:c3:ac:6a:c7:06:0c:5a:80:93:0a:79: 2a:b1:4b:2d:cc:4f:94:44:11:62:02:3c:7e:40:60:24:d1:ac: ae:7e:5a:59:49:05:0c:56:94:95:77:b0:fa:41:b6:e3:b7:07: 16:30:33:53:6d:9f:3a:c5:4a:02:d5:9c:3d:22:68:27:29:d2: a7:8f:dc:96:f1:d1:e3:77:bc:23:6d:c2:0a:a3:65:a6:4b:c2: a9:4f:4b:67:b3:84:84:a7:f1:2d:fd:bf:58:b0:f8:b7:4d:e5: 40:b4:18:45:87:dd:f9:10:e1:6d:96:12:40:d7:f0:23:bb:87: 53:14:1e:71:fd:44:85:08:b0:2e:e9:87:68:21:a2:72:95:f0: e9:35:f6:6c:e8:71:2a:cd:b9:2f:60:10:82:cc:14:7e:22:e3: 77:5d:df:92 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUesk4CdPTCMgdIhJlj7EH864mS7swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMmMxMmYwYTA4MGYwMjFmMmJhMjViYzBjNmVhN2UwNmI2 N2FhZDA1ZTAeFw0yNTEyMjYwMTQyNDVaFw0yNTEyMjcwNDIyNDVaMDMxMTAvBgNV BAMTKEFENzg4QTA0QjY3QkM2QUZBRkY1MkNFRTFFODIzMTM1MEJGMjgzMjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtrEsk9xykL9+eRywUpL1DBLQ0 sn8QxSOYO2d0TbC8yXBR8VgeatQ+5PiPOymbCo59nxTDCEBMvkvBMeW+/qmUhSxk WOlqv9BlKACqFYD1h37BZoFgMaya1pgC/43k0ILtSdqFk2tyNCWT4W6LdfUdjzCd 4WOSgwWipO+e57zxgiyg3MFdKXvdr2sNGNwg1q4JnIWA9TGOJny7jhAf6S0YncEC UdnOdw+P7L615KWjkhFFeXilFj8l8jMsG5WM4DZyxm4V9ElkoKx3Vz3mc+3B5NQM DjOJYxtL0PEkuUw8KdQTsdXfNj+g/ubwo0RqelBx3rR8w06muCCBcex9eUpjAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUrXiKBLZ7xq+v9SzuHoIxNQvygyEwHwYDVR0j BBgwFoAULBLwoIDwIfK6JbwMbqfga2eq0F4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODA3MDYxNWYtZDI2ZC00MmUzLWExNDUtNWM3YjY3YjJi NjRlLzAvMkMxMkYwQTA4MEYwMjFGMkJBMjVCQzBDNkVBN0UwNkI2N0FBRDA1RS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0xCTHdvSUR3SWZLNkpid01icWZnYTJl cTBGNC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84MDcwNjE1Zi1k MjZkLTQyZTMtYTE0NS01YzdiNjdiMmI2NGUvMC8yQzEyRjBBMDgwRjAyMUYyQkEy NUJDMEM2RUE3RTA2QjY3QUFEMDVFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIYMoMhksvCbKi62bEc6W tMvP7S7/Yz8uNSzKS6TVqx4BMf/m9ijAJx9CC3QyHhzXZ6ZOHjObTWkhkDKAf4HZ dlSEajMxqqqO3RLYD+9hPP8tgUAXedaecFoG5fv0Inb7TMOsascGDFqAkwp5KrFL LcxPlEQRYgI8fkBgJNGsrn5aWUkFDFaUlXew+kG247cHFjAzU22fOsVKAtWcPSJo JynSp4/clvHR43e8I23CCqNlpkvCqU9LZ7OEhKfxLf2/WLD4t03lQLQYRYfd+RDh bZYSQNfwI7uHUxQecf1EhQiwLumHaCGicpXw6TX2bOhxKs25L2AQgswUfiLjd13f kg== -----END CERTIFICATE-----Generated at Fri Dec 26 17:40:28 2025 by rpki-client