This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/93f083b7-7818-4ccf-8663-9191f8a8616a/0/05BBDB629FDD0F1C33BFB1AC7CF44121BC5E6EAD.mft File: 05BBDB629FDD0F1C33BFB1AC7CF44121BC5E6EAD.mft (raw, json) Hash identifier: VBv+/50DzsJONTd1uzj3kUEgJMET0Evi7+S5MMJgtmg= Subject key identifier: 0A:E2:FD:94:6F:D0:89:19:67:8A:EA:41:0F:D3:3C:72:17:E7:C2:D1 Authority key identifier: 05:BB:DB:62:9F:DD:0F:1C:33:BF:B1:AC:7C:F4:41:21:BC:5E:6E:AD Certificate issuer: /CN=05bbdb629fdd0f1c33bfb1ac7cf44121bc5e6ead Certificate serial: 36FE64B7E3C4246E5EA50759FB6CA31E0B2EFB94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbvbYp_dDxwzv7GsfPRBIbxebq0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/93f083b7-7818-4ccf-8663-9191f8a8616a/0/05BBDB629FDD0F1C33BFB1AC7CF44121BC5E6EAD.mft Manifest number: 04C3 Signing time: Tue 09 Dec 2025 12:31:37 +0000 Manifest this update: Tue 09 Dec 2025 12:26:37 +0000 Manifest next update: Wed 10 Dec 2025 15:57:37 +0000 Files and hashes: 1: 38342e33382e3235342e302f32342d3234203d3e20323134343332.roa (hash: TnW3zKmNDxY1s+JdH67yvpdfB6A0/qDHS7IbwvxOzo8=) 2: 05BBDB629FDD0F1C33BFB1AC7CF44121BC5E6EAD.crl (hash: bfy0u9m4vIx2q/+U93tSQeP6cxRbyTvt5OebGPzw5jE=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/93f083b7-7818-4ccf-8663-9191f8a8616a/0/05BBDB629FDD0F1C33BFB1AC7CF44121BC5E6EAD.crl rsync://rsync.paas.rpki.ripe.net/repository/93f083b7-7818-4ccf-8663-9191f8a8616a/0/05BBDB629FDD0F1C33BFB1AC7CF44121BC5E6EAD.mft rsync://rpki.ripe.net/repository/DEFAULT/BbvbYp_dDxwzv7GsfPRBIbxebq0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 10 Dec 2025 15:57:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:fe:64:b7:e3:c4:24:6e:5e:a5:07:59:fb:6c:a3:1e:0b:2e:fb:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05bbdb629fdd0f1c33bfb1ac7cf44121bc5e6ead Validity Not Before: Dec 9 12:26:37 2025 GMT Not After : Dec 10 15:57:37 2025 GMT Subject: CN=0AE2FD946FD08919678AEA410FD33C7217E7C2D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:17:ef:d4:bf:96:45:dd:8f:9a:e5:ff:1f:f4: f1:a0:04:54:25:ad:e1:fd:e9:5a:b0:2a:4b:eb:89: 06:e8:dc:cb:e5:35:d0:94:6a:59:83:ef:f7:ed:f7: b0:34:ea:55:d2:ef:42:40:cd:28:3d:fc:1b:b7:af: 7b:d9:98:f9:95:18:57:d6:fc:84:21:0f:7f:77:5a: 11:1b:bf:68:de:92:21:03:d5:1f:af:ac:2d:73:a3: c5:b3:de:59:c1:ea:26:43:61:16:31:4a:e4:16:d5: cc:5d:7f:11:32:39:1d:84:0c:ec:2b:ef:ca:ff:e7: 94:db:34:50:50:1b:ab:74:93:e1:dd:dc:38:b3:3e: b4:59:61:69:93:d1:20:c6:45:71:c7:e3:d6:25:1c: a5:9a:20:26:fd:ed:1d:dc:b9:d3:bf:42:46:73:71: de:21:2f:c3:b1:fd:d2:8e:cd:8c:b4:cf:75:82:a1: 14:64:1d:a8:22:03:b3:b3:dc:a8:fd:90:d8:79:10: b6:40:52:54:91:6e:2c:e1:1a:d4:8b:d3:c9:53:14: 1c:86:c8:4c:03:2e:76:ef:f0:08:f9:c2:33:cc:30: c4:1a:57:ee:43:9d:20:e8:46:22:bc:c8:0f:49:d9: 99:ee:47:08:f7:2e:f3:2d:ac:35:a9:2f:30:3e:fb: 2e:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:E2:FD:94:6F:D0:89:19:67:8A:EA:41:0F:D3:3C:72:17:E7:C2:D1 X509v3 Authority Key Identifier: keyid:05:BB:DB:62:9F:DD:0F:1C:33:BF:B1:AC:7C:F4:41:21:BC:5E:6E:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/93f083b7-7818-4ccf-8663-9191f8a8616a/0/05BBDB629FDD0F1C33BFB1AC7CF44121BC5E6EAD.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbvbYp_dDxwzv7GsfPRBIbxebq0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/93f083b7-7818-4ccf-8663-9191f8a8616a/0/05BBDB629FDD0F1C33BFB1AC7CF44121BC5E6EAD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:84:3c:e1:2b:1f:06:5a:7d:65:fb:96:72:87:18:2b:f5:97: ea:d9:1c:ac:0f:47:2f:bd:52:05:dc:db:da:11:5a:0e:a8:34: d5:ee:fc:6a:f7:5a:fe:7f:33:5f:df:0f:40:9a:ea:b7:f4:10: 8f:14:8c:87:8b:98:87:59:5e:27:8a:ec:fb:ee:ac:87:cd:53: 8b:4b:71:60:b3:ed:6f:56:a2:db:5b:27:39:98:f9:d0:d3:c0: 46:08:32:8b:a0:70:e4:1a:b5:38:92:ac:5a:d7:65:91:76:e6: 29:12:b1:8b:56:83:7c:47:53:90:a2:4a:eb:31:92:f2:4a:f8: 12:f8:75:fb:8e:1c:02:53:e7:c5:b6:31:ae:a5:c3:2d:ad:37: 91:a3:a4:c9:65:2d:e7:0f:fc:86:40:0b:0d:5b:92:cf:b6:fc: 07:2c:90:38:17:00:be:5a:86:09:b9:51:14:79:2c:b4:d9:9f: af:cc:b8:83:b4:37:86:97:7b:66:cc:6a:39:57:37:80:c7:19: 07:46:31:05:80:18:4a:ac:ee:2c:7a:e5:ed:79:e3:df:ad:6b: 68:d6:95:d9:5d:e6:bd:5c:9f:a6:c3:ec:cb:1a:7e:90:9a:0f: 8d:b6:d9:2b:60:99:7c:35:c4:d8:62:58:8a:2d:dc:8a:64:9e: 61:db:ca:58 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUNv5kt+PEJG5epQdZ+2yjHgsu+5QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDViYmRiNjI5ZmRkMGYxYzMzYmZiMWFjN2NmNDQxMjFi YzVlNmVhZDAeFw0yNTEyMDkxMjI2MzdaFw0yNTEyMTAxNTU3MzdaMDMxMTAvBgNV BAMTKDBBRTJGRDk0NkZEMDg5MTk2NzhBRUE0MTBGRDMzQzcyMTdFN0MyRDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCNF+/Uv5ZF3Y+a5f8f9PGgBFQl reH96VqwKkvriQbo3MvlNdCUalmD7/ft97A06lXS70JAzSg9/Bu3r3vZmPmVGFfW /IQhD393WhEbv2jekiED1R+vrC1zo8Wz3lnB6iZDYRYxSuQW1cxdfxEyOR2EDOwr 78r/55TbNFBQG6t0k+Hd3DizPrRZYWmT0SDGRXHH49YlHKWaICb97R3cudO/QkZz cd4hL8Ox/dKOzYy0z3WCoRRkHagiA7Oz3Kj9kNh5ELZAUlSRbizhGtSL08lTFByG yEwDLnbv8Aj5wjPMMMQaV+5DnSDoRiK8yA9J2ZnuRwj3LvMtrDWpLzA++y6bAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUCuL9lG/QiRlniupBD9M8chfnwtEwHwYDVR0j BBgwFoAUBbvbYp/dDxwzv7GsfPRBIbxebq0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOTNmMDgzYjctNzgxOC00Y2NmLTg2NjMtOTE5MWY4YTg2 MTZhLzAvMDVCQkRCNjI5RkREMEYxQzMzQkZCMUFDN0NGNDQxMjFCQzVFNkVBRC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0JidmJZcF9kRHh3enY3R3NmUFJCSWJ4 ZWJxMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85M2YwODNiNy03 ODE4LTRjY2YtODY2My05MTkxZjhhODYxNmEvMC8wNUJCREI2MjlGREQwRjFDMzNC RkIxQUM3Q0Y0NDEyMUJDNUU2RUFELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApoQ84SsfBlp9ZfuWcocY K/WX6tkcrA9HL71SBdzb2hFaDqg01e78avda/n8zX98PQJrqt/QQjxSMh4uYh1le J4rs++6sh81Ti0txYLPtb1ai21snOZj50NPARggyi6Bw5Bq1OJKsWtdlkXbmKRKx i1aDfEdTkKJK6zGS8kr4Evh1+44cAlPnxbYxrqXDLa03kaOkyWUt5w/8hkALDVuS z7b8ByyQOBcAvlqGCblRFHkstNmfr8y4g7Q3hpd7ZsxqOVc3gMcZB0YxBYAYSqzu LHrl7Xnj361raNaV2V3mvVyfpsPsyxp+kJoPjbbZK2CZfDXE2GJYii3cimSeYdvK WA== -----END CERTIFICATE-----Generated at Wed Dec 10 05:24:46 2025 by rpki-client