This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/78D65D4A22DF705BEED7B3432FBE48A356597724.mft File: 78D65D4A22DF705BEED7B3432FBE48A356597724.mft (raw, json) Hash identifier: RLGCQMTz2e9a43x46RUrMlVWmU0v0Ie3vr1WlH1tU8w= Subject key identifier: 97:82:D6:4A:73:FB:A3:75:10:A0:48:5A:4C:3F:3B:DA:09:43:08:C7 Authority key identifier: 78:D6:5D:4A:22:DF:70:5B:EE:D7:B3:43:2F:BE:48:A3:56:59:77:24 Certificate issuer: /CN=78d65d4a22df705beed7b3432fbe48a356597724 Certificate serial: 0E8778CF62BCD8829A782E64227A036457706FB2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eNZdSiLfcFvu17NDL75Io1ZZdyQ.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/78D65D4A22DF705BEED7B3432FBE48A356597724.mft Manifest number: AD Signing time: Fri 26 Dec 2025 06:42:50 +0000 Manifest this update: Fri 26 Dec 2025 06:37:50 +0000 Manifest next update: Sat 27 Dec 2025 08:47:50 +0000 Files and hashes: 1: 38302e38332e3138382e302f32322d3234203d3e20333937363330.roa (hash: we+BIDcecMDdhb3LTIFwBqfI4/tuGmFvD0wy77xN0HU=) 2: 38302e38332e3138342e302f32322d3232203d3e203539373136.roa (hash: olHSbZHs/2t98PZjXMrMMRiZVSEe6IbSK97ATG0UHJ0=) 3: 38302e38332e3138382e302f32342d3234203d3e203634323637.roa (hash: Zn2fU/zf/URUjzPX4k5UlzylOiLYtLrcrJVzOaLXmd8=) 4: 38302e38332e3138382e302f32322d3234203d3e203534323532.roa (hash: oxLxEjiJHAfR5sb7doKgFq8fOEt0To+nubINa8ThuEA=) 5: 38302e38332e3139302e302f32342d3234203d3e203634323637.roa (hash: e7OjSlp/jABhHoAxV0NvuSo5CYOdNcptQrwcU0YPf4I=) 6: 3138352e36392e322e302f32342d3234203d3e203539373136.roa (hash: C4vtZUJ4sSvWQ2xt2gUpLOR/9kh093F6GFa+cSWJX6U=) 7: 78D65D4A22DF705BEED7B3432FBE48A356597724.crl (hash: K6CK+8xX4aFlzcsB8JKKigvjrgL3XMNvg7uRjymokH4=) 8: 323030313a346365383a3a2f32392d3239203d3e203539373136.roa (hash: CgDSfpo0IftLrA7o4eNAILZADKAHzaR3sZbqAdusdP4=) 9: 3138352e3139302e3232382e302f32332d3234203d3e203332313332.roa (hash: jVr1HOM/vAQFN9/2YcEKEGs7D1zQDrdtbTvacM//wP0=) 10: 323030313a346365383a3a2f33322d3332203d3e20323530.roa (hash: zJJBd2Rg1C8mF3Brr7ZPVnCCMMdyplxley/QZ6Up3Cg=) 11: 38302e38332e3138392e302f32342d3234203d3e20333937363330.roa (hash: buBr0nPzFwtnExYzKZ33K40LR3ws0xsbE+PF1JfUozA=) 12: 38302e38332e3139312e302f32342d3234203d3e203534323532.roa (hash: t/r9GueVtBRqkEzG5ECpDmGAbhT8tQffnXyVbWMfuP8=) 13: 38302e38332e3138382e302f32322d3234203d3e203634323637.roa (hash: usGVmfBSjshsI+jZ0UI5vbfRCtEIbFpWtlpk5JhJZu8=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/78D65D4A22DF705BEED7B3432FBE48A356597724.crl rsync://rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/78D65D4A22DF705BEED7B3432FBE48A356597724.mft rsync://rpki.ripe.net/repository/DEFAULT/eNZdSiLfcFvu17NDL75Io1ZZdyQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:87:78:cf:62:bc:d8:82:9a:78:2e:64:22:7a:03:64:57:70:6f:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78d65d4a22df705beed7b3432fbe48a356597724 Validity Not Before: Dec 26 06:37:50 2025 GMT Not After : Dec 27 08:47:50 2025 GMT Subject: CN=9782D64A73FBA37510A0485A4C3F3BDA094308C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:2e:7e:c7:0b:55:0e:f7:1e:3f:6f:fa:e6:b2: 87:1a:e1:b6:45:5c:f0:d7:d9:05:1a:05:a8:be:e0: 79:4e:52:47:10:44:15:a9:c2:5a:7f:24:cf:eb:b1: 29:0a:d7:85:b9:a3:87:6b:2f:da:6e:b3:62:0e:d3: e8:d7:c8:7c:3f:1d:8b:b9:e4:f9:03:d3:ef:62:57: 66:95:5f:23:ae:b6:2d:79:b2:87:9f:b7:49:44:15: 71:89:43:ae:d1:1b:b4:31:28:27:4c:20:5c:99:c3: b6:09:8f:61:22:ac:aa:24:f8:94:2e:f6:89:0f:54: f1:24:24:83:e6:02:85:ce:c0:f7:70:9e:14:92:e0: cb:d7:86:e3:38:57:61:d5:31:ea:55:2a:6f:03:89: dd:0d:12:12:67:f7:c0:8b:2d:dc:c8:95:1d:cf:6d: 0c:6d:34:7a:b2:ae:ba:df:e7:6f:c8:fa:80:41:17: 3e:52:ee:d4:f9:3e:c0:9d:ac:cb:76:2d:dd:4b:47: a8:5f:54:e6:10:3e:84:d6:32:03:ca:dc:fe:59:4c: a2:3c:5d:96:e7:3e:b8:a1:77:0b:77:39:65:5a:3e: 2f:2f:92:ef:0f:17:bd:55:4d:92:9f:cc:95:dc:6e: ae:b0:13:0a:40:6e:89:a0:c9:5c:ed:dc:e5:42:24: e6:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:82:D6:4A:73:FB:A3:75:10:A0:48:5A:4C:3F:3B:DA:09:43:08:C7 X509v3 Authority Key Identifier: keyid:78:D6:5D:4A:22:DF:70:5B:EE:D7:B3:43:2F:BE:48:A3:56:59:77:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/78D65D4A22DF705BEED7B3432FBE48A356597724.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eNZdSiLfcFvu17NDL75Io1ZZdyQ.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/78D65D4A22DF705BEED7B3432FBE48A356597724.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:cc:42:ed:e7:dd:20:e6:ba:37:8c:5d:3b:d0:e6:df:81:e5: 78:a1:f8:c2:ba:d2:a8:db:0d:b4:97:0b:d0:af:9a:3b:a2:0b: 6d:05:32:45:d8:1e:48:2a:07:d5:f7:67:c2:22:4f:f4:0c:db: 09:46:19:9d:49:a8:cb:a2:68:28:ac:cf:ae:55:a4:5d:94:82: f5:e1:e5:79:d9:1a:c7:2c:50:c2:02:d3:e2:34:4c:9f:c0:4c: c4:cb:0d:28:b2:3f:bc:2d:5b:3c:7a:50:b8:f9:76:2b:e8:61: 4a:80:66:45:f6:d9:c4:b4:ff:af:b0:ef:af:17:a2:7a:5c:66: a1:d1:78:26:5e:79:81:e1:ba:55:15:db:fc:e5:03:0e:0e:86: ec:b8:7b:e7:9e:0f:29:27:99:51:a3:a5:ca:c5:29:34:cf:a1: 72:b8:c9:21:34:91:39:89:15:d7:a5:d0:a0:3e:d5:6e:0b:fe: fc:bc:67:ee:cd:a8:e3:62:9d:7d:5c:c9:f4:e5:43:e0:a3:17: ef:1a:6d:a9:5f:d2:09:ca:1b:bc:67:5c:b0:de:41:c2:41:f0: 68:84:1a:8e:fe:b6:63:ea:bc:6c:47:27:04:36:57:cb:1e:8f: 93:7c:92:4a:f0:5c:23:6d:d0:3b:1a:d7:db:12:a1:cf:fd:10: 7e:2f:2a:03 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUDod4z2K82IKaeC5kInoDZFdwb7IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzhkNjVkNGEyMmRmNzA1YmVlZDdiMzQzMmZiZTQ4YTM1 NjU5NzcyNDAeFw0yNTEyMjYwNjM3NTBaFw0yNTEyMjcwODQ3NTBaMDMxMTAvBgNV BAMTKDk3ODJENjRBNzNGQkEzNzUxMEEwNDg1QTRDM0YzQkRBMDk0MzA4QzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCHLn7HC1UO9x4/b/rmsoca4bZF XPDX2QUaBai+4HlOUkcQRBWpwlp/JM/rsSkK14W5o4drL9pus2IO0+jXyHw/HYu5 5PkD0+9iV2aVXyOuti15soeft0lEFXGJQ67RG7QxKCdMIFyZw7YJj2EirKok+JQu 9okPVPEkJIPmAoXOwPdwnhSS4MvXhuM4V2HVMepVKm8Did0NEhJn98CLLdzIlR3P bQxtNHqyrrrf52/I+oBBFz5S7tT5PsCdrMt2Ld1LR6hfVOYQPoTWMgPK3P5ZTKI8 XZbnPrihdwt3OWVaPi8vku8PF71VTZKfzJXcbq6wEwpAbomgyVzt3OVCJObNAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUl4LWSnP7o3UQoEhaTD872glDCMcwHwYDVR0j BBgwFoAUeNZdSiLfcFvu17NDL75Io1ZZdyQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODkyNWFkMTUtYWYwYi00NWNkLWI4ODMtMWEwNThmYTBl YmExLzAvNzhENjVENEEyMkRGNzA1QkVFRDdCMzQzMkZCRTQ4QTM1NjU5NzcyNC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2VOWmRTaUxmY0Z2dTE3TkRMNzVJbzFa WmR5US5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI1YWQxNS1h ZjBiLTQ1Y2QtYjg4My0xYTA1OGZhMGViYTEvMC83OEQ2NUQ0QTIyREY3MDVCRUVE N0IzNDMyRkJFNDhBMzU2NTk3NzI0Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk8xC7efdIOa6N4xdO9Dm 34HleKH4wrrSqNsNtJcL0K+aO6ILbQUyRdgeSCoH1fdnwiJP9AzbCUYZnUmoy6Jo KKzPrlWkXZSC9eHledkaxyxQwgLT4jRMn8BMxMsNKLI/vC1bPHpQuPl2K+hhSoBm RfbZxLT/r7DvrxeielxmodF4Jl55geG6VRXb/OUDDg6G7Lh7554PKSeZUaOlysUp NM+hcrjJITSROYkV16XQoD7Vbgv+/Lxn7s2o42KdfVzJ9OVD4KMX7xptqV/SCcob vGdcsN5BwkHwaIQajv62Y+q8bEcnBDZXyx6Pk3ySSvBcI23QOxrX2xKhz/0Qfi8q Aw== -----END CERTIFICATE-----Generated at Fri Dec 26 15:45:43 2025 by rpki-client