This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.mft File: 8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.mft (raw, json) Hash identifier: fWRprdvLZvGyWoYKdLSB2m/UD7R0qwBQNSGM1aZOTnM= Subject key identifier: A0:15:11:57:BF:0E:D5:44:72:FB:A7:21:15:20:5C:02:AE:9A:B8:95 Authority key identifier: 8C:12:B4:27:38:32:B4:15:6F:E0:09:2F:6A:E7:E5:B3:CE:23:AD:8B Certificate issuer: /CN=8c12b4273832b4156fe0092f6ae7e5b3ce23ad8b Certificate serial: 348E1635B65DA3CA9C4BE512E1D5070826275EAA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jBK0JzgytBVv4Akvaufls84jrYs.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.mft Manifest number: 032C Signing time: Sat 13 Dec 2025 18:27:09 +0000 Manifest this update: Sat 13 Dec 2025 18:22:09 +0000 Manifest next update: Sun 14 Dec 2025 18:51:09 +0000 Files and hashes: 1: 34352e39352e38302e302f32332d3234203d3e20383334.roa (hash: KBlnTmJTjtkN7635frU4KVMJE9hjrxjj/MnRirqH9PE=) 2: 3231322e3130332e34362e302f32332d3234203d3e20383334.roa (hash: KXdSlEyWgzgk/M6Mp4m4zNoDfJwL8UmNysyOArD47tw=) 3: 39312e3139302e3135372e302f32342d3234203d3e20323130383330.roa (hash: uxCs+vRLf89Iqe2Vg3VmQVaqgZcbd6t3ZZRDH3hDvaY=) 4: 8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.crl (hash: ChmYvpHbb6Lczt1Y/9d3uvDyeQCQ6LZx3WQwq7g9rtk=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.crl rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.mft rsync://rpki.ripe.net/repository/DEFAULT/jBK0JzgytBVv4Akvaufls84jrYs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 18:51:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:8e:16:35:b6:5d:a3:ca:9c:4b:e5:12:e1:d5:07:08:26:27:5e:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c12b4273832b4156fe0092f6ae7e5b3ce23ad8b Validity Not Before: Dec 13 18:22:09 2025 GMT Not After : Dec 14 18:51:09 2025 GMT Subject: CN=A0151157BF0ED54472FBA72115205C02AE9AB895 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:93:00:f6:18:47:e9:f3:62:a7:8c:11:a3:b4: 80:8c:2c:43:f7:38:32:3d:f9:fe:07:da:0c:4e:e8: c8:6a:cd:22:94:b2:f7:e0:15:03:f4:27:4e:ff:a6: 15:bb:d9:13:51:b4:a5:6a:ea:6b:1c:df:a1:37:3c: 4a:42:45:53:94:2c:93:96:ac:bc:f1:dc:b9:c4:62: 1a:ae:a7:96:fb:4c:44:d4:84:c2:8e:ea:1b:8d:06: fb:94:c1:4f:b8:fc:af:89:cc:6e:df:f0:84:29:6a: 7c:58:f5:5a:ba:f8:f1:dc:5e:63:52:ca:b5:c7:96: 47:87:21:17:1d:04:b3:7d:e5:39:7c:ad:38:b2:a3: f0:9f:dc:30:47:ca:70:a8:69:4b:a8:ba:32:12:23: df:e7:b8:59:f3:72:fd:ec:ae:44:9f:7c:04:3e:c9: 55:aa:86:0a:db:c5:e1:ea:5e:53:bc:41:00:ec:26: e4:e2:8a:d4:97:04:f8:57:55:49:1e:3c:d9:86:22: 80:c9:c5:e8:f9:27:e4:89:9e:23:22:32:a6:f4:9c: d7:01:70:b6:12:9a:c2:f1:22:9b:60:83:4c:a2:95: b3:92:37:1f:cd:b2:85:ad:0d:9e:ad:33:f4:e9:83: 2d:ac:ec:35:56:57:39:d5:c4:33:2a:df:0e:91:04: 4e:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:15:11:57:BF:0E:D5:44:72:FB:A7:21:15:20:5C:02:AE:9A:B8:95 X509v3 Authority Key Identifier: keyid:8C:12:B4:27:38:32:B4:15:6F:E0:09:2F:6A:E7:E5:B3:CE:23:AD:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jBK0JzgytBVv4Akvaufls84jrYs.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:34:43:77:a7:31:f3:e5:a3:f8:ca:8b:8d:a4:6a:2a:83:0d: f1:14:75:eb:8a:bf:46:4b:31:d6:aa:e3:87:56:6a:c3:62:04: 06:63:7f:35:65:5c:4d:31:01:61:df:10:a5:69:03:bd:a2:eb: 61:ce:36:1c:b2:4d:0e:ce:1e:21:61:bf:8b:f5:04:77:76:d6: 1e:d4:c6:68:1d:65:f8:62:13:bb:5e:9b:f9:aa:52:7a:3e:ac: 9d:a4:00:83:37:6c:8c:bc:5d:cd:ea:b4:05:1e:4a:e4:f5:78: e7:ab:87:ed:3a:b8:e7:8c:05:1e:c9:91:92:56:92:00:88:48: a0:26:fc:00:b2:21:7c:c4:32:db:b4:d1:b9:38:d8:32:35:8c: 97:16:e3:74:64:49:86:f7:46:e2:3f:e9:7f:0b:d5:4b:a5:a4: e4:32:1d:cd:d2:16:98:7d:fe:96:bb:7e:10:75:7f:b3:e3:f9: f0:3e:77:59:b1:57:4d:50:38:6e:b9:27:79:49:56:89:10:10: ab:02:11:21:17:ac:3b:8f:44:4a:19:31:8b:67:52:9f:9f:0f: 16:29:22:10:0e:7b:95:d2:e5:05:3d:52:fb:2d:0a:e1:7b:d8: f0:7d:65:f5:86:10:70:42:20:e9:b8:c3:5b:33:8f:de:78:4c: 4c:11:16:20 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUNI4WNbZdo8qcS+US4dUHCCYnXqowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGMxMmI0MjczODMyYjQxNTZmZTAwOTJmNmFlN2U1YjNj ZTIzYWQ4YjAeFw0yNTEyMTMxODIyMDlaFw0yNTEyMTQxODUxMDlaMDMxMTAvBgNV BAMTKEEwMTUxMTU3QkYwRUQ1NDQ3MkZCQTcyMTE1MjA1QzAyQUU5QUI4OTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2kwD2GEfp82KnjBGjtICMLEP3 ODI9+f4H2gxO6MhqzSKUsvfgFQP0J07/phW72RNRtKVq6msc36E3PEpCRVOULJOW rLzx3LnEYhqup5b7TETUhMKO6huNBvuUwU+4/K+JzG7f8IQpanxY9Vq6+PHcXmNS yrXHlkeHIRcdBLN95Tl8rTiyo/Cf3DBHynCoaUuoujISI9/nuFnzcv3srkSffAQ+ yVWqhgrbxeHqXlO8QQDsJuTiitSXBPhXVUkePNmGIoDJxej5J+SJniMiMqb0nNcB cLYSmsLxIptgg0yilbOSNx/NsoWtDZ6tM/Tpgy2s7DVWVznVxDMq3w6RBE4jAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUoBURV78O1URy+6chFSBcAq6auJUwHwYDVR0j BBgwFoAUjBK0JzgytBVv4Akvaufls84jrYswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOGJmZDY4ODItZDZiMy00YWE4LWJjMGEtNzExZDY4YmQx OThiLzAvOEMxMkI0MjczODMyQjQxNTZGRTAwOTJGNkFFN0U1QjNDRTIzQUQ4Qi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2pCSzBKemd5dEJWdjRBa3ZhdWZsczg0 anJZcy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84YmZkNjg4Mi1k NmIzLTRhYTgtYmMwYS03MTFkNjhiZDE5OGIvMC84QzEyQjQyNzM4MzJCNDE1NkZF MDA5MkY2QUU3RTVCM0NFMjNBRDhCLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASDRDd6cx8+Wj+MqLjaRq KoMN8RR164q/Rksx1qrjh1Zqw2IEBmN/NWVcTTEBYd8QpWkDvaLrYc42HLJNDs4e IWG/i/UEd3bWHtTGaB1l+GITu16b+apSej6snaQAgzdsjLxdzeq0BR5K5PV456uH 7Tq454wFHsmRklaSAIhIoCb8ALIhfMQy27TRuTjYMjWMlxbjdGRJhvdG4j/pfwvV S6Wk5DIdzdIWmH3+lrt+EHV/s+P58D53WbFXTVA4brkneUlWiRAQqwIRIResO49E Shkxi2dSn58PFikiEA57ldLlBT1S+y0K4XvY8H1l9YYQcEIg6bjDWzOP3nhMTBEW IA== -----END CERTIFICATE-----Generated at Sun Dec 14 08:39:41 2025 by rpki-client