This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.mft File: B172548FA3C460E26CB519EE524361BCA6C7132E.mft (raw, json) Hash identifier: wN5GJQcXsLckeD6Ax7TE2tWFQ/BfUYSE+wiKvFjC/i4= Subject key identifier: 1E:98:ED:22:54:D4:D7:3E:AB:DB:95:F5:96:CA:66:6C:B3:DC:85:8B Authority key identifier: B1:72:54:8F:A3:C4:60:E2:6C:B5:19:EE:52:43:61:BC:A6:C7:13:2E Certificate issuer: /CN=b172548fa3c460e26cb519ee524361bca6c7132e Certificate serial: 067D575AA21905A28A51B84BFE30B2C1A05DD883 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.mft Manifest number: 0438 Signing time: Thu 11 Dec 2025 12:11:37 +0000 Manifest this update: Thu 11 Dec 2025 12:06:37 +0000 Manifest next update: Fri 12 Dec 2025 12:59:37 +0000 Files and hashes: 1: 39332e39352e3131332e302f32342d3234203d3e203136323736.roa (hash: cS6LWz+NEHJoa0EQVb5z92UR8C9jaztUFOxHHwpRPsY=) 2: 39332e39352e3131342e302f32342d3234203d3e20383334.roa (hash: 9slNHWe/rU70bOx5vd9mZUqmB1nBl1QE+Gk0eZLBnt8=) 3: 39332e39352e3131352e302f32342d3234203d3e20313938353834.roa (hash: FutqYRyHBMmN+0PD6TfHd0Z48pzfzxz1hCrgLY7AwAA=) 4: B172548FA3C460E26CB519EE524361BCA6C7132E.crl (hash: CheNL4mhSnpla/ZSm6C3DA9sIkmPWS7ah8AGw6G2a/4=) 5: 39332e39352e3131362e302f32342d3234203d3e203630373831.roa (hash: wiR4lXrHDBacVR9rhY/OZ5EVnNOlMyR8f6ZVRqs7p88=) 6: 39332e39352e3131372e302f32342d3234203d3e203231383539.roa (hash: Un+iljfa6BQzZnEghHopYhiwkN2j6KkmFMitjF4eFLQ=) 7: 39332e39352e3131322e302f32342d3234203d3e20333937393233.roa (hash: xW60VF00UJ78V2ZgHJcPViZgzWFpqx2V/5GdcswFg/k=) 8: 39332e39352e3131392e302f32342d3234203d3e20323135343337.roa (hash: iuam+Y72SFbVuzZ6DMbPvd9+i2O4uNgJ9aW8l1vNV9U=) 9: 39332e39352e3131352e302f32342d3234203d3e20313335333932.roa (hash: fGOsLQpuq7w+Mlth5Jlzw6zSul9g+K81meekR3kD4oA=) 10: 39332e39352e3131382e302f32342d3234203d3e20313336353537.roa (hash: RxEOrEQDuw8FdSr63g/e7GeuRwx0a/xo6StPeRUp3pQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.crl rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.mft rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 12:59:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:7d:57:5a:a2:19:05:a2:8a:51:b8:4b:fe:30:b2:c1:a0:5d:d8:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b172548fa3c460e26cb519ee524361bca6c7132e Validity Not Before: Dec 11 12:06:37 2025 GMT Not After : Dec 12 12:59:37 2025 GMT Subject: CN=1E98ED2254D4D73EABDB95F596CA666CB3DC858B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:a3:67:84:5a:73:e3:25:03:da:29:b5:68:e6: dc:97:ca:75:78:1e:a1:d3:58:81:27:7b:50:e8:c6: 38:76:d3:d1:e5:b5:59:f9:16:2d:c3:17:3a:bc:94: 7d:7c:31:ef:89:6c:1a:0c:fb:0c:ec:37:8b:21:9b: e0:51:3b:37:14:92:44:44:34:0f:a4:28:1b:b2:14: 36:cb:0c:da:88:bd:a9:34:a7:c3:3b:7e:fe:2e:03: ff:60:2b:22:bc:fd:cd:bc:1f:a0:d5:4a:b2:87:f9: 62:c1:1b:0d:5e:41:53:b6:8c:8f:a4:04:62:4c:42: 30:b9:dc:8f:da:38:92:bb:1a:bf:17:6a:72:1b:a3: fc:1e:07:1f:6b:ce:90:6a:be:14:b4:3a:3c:ed:cc: 41:88:23:a8:85:71:26:7d:1e:2d:3c:cc:84:c4:a0: 48:e2:0b:5a:6e:79:b2:2b:75:1e:ca:16:2a:ac:9a: ca:ac:2a:b9:ea:b9:d0:33:a1:17:c6:13:9c:2b:ae: 5b:dd:61:86:c9:3a:82:b6:30:16:14:95:19:22:60: 59:5b:24:b7:c2:df:da:b3:ed:7a:3f:91:2d:1c:01: d1:5d:21:49:5d:14:23:e1:89:2f:1c:ff:8a:30:6e: 2f:b6:d1:75:47:3f:f1:c8:45:96:21:be:65:ad:24: b5:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:98:ED:22:54:D4:D7:3E:AB:DB:95:F5:96:CA:66:6C:B3:DC:85:8B X509v3 Authority Key Identifier: keyid:B1:72:54:8F:A3:C4:60:E2:6C:B5:19:EE:52:43:61:BC:A6:C7:13:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:06:3b:a0:ea:23:3c:19:c1:59:d0:a0:13:70:df:3d:0b:2a: 1a:1d:8b:6f:30:06:ce:1c:d0:e5:48:28:86:7c:c2:21:28:91: e8:92:78:ea:25:cb:b3:23:fc:ad:07:89:c1:cf:ff:05:d0:f9: 6f:0f:21:da:01:b3:e1:04:ee:5d:c3:be:ce:5e:70:6d:77:8e: d5:09:d8:14:02:dc:d5:77:1e:32:b0:25:6d:41:b0:d0:ca:be: 26:33:d6:c8:6a:6a:d0:7c:23:b4:e1:f9:de:cd:46:26:bc:a9: 9b:73:ae:b8:42:b3:e1:df:d3:cc:5a:e7:d3:b3:63:6b:65:d6: a3:a9:4b:39:5a:2f:a2:05:38:ec:c3:bd:b6:23:67:c8:13:a9: 60:73:f5:84:92:eb:23:97:db:66:24:a9:41:79:2b:91:5d:3b: 6a:f6:70:dc:12:0a:4b:f4:5b:04:f6:13:fc:ab:ce:1a:4b:d3: 0f:81:13:5f:05:7b:da:a2:3e:57:5f:7e:9e:d6:db:ad:a7:80: 37:eb:4f:f5:e1:57:47:0a:e2:5e:48:9d:c3:38:09:99:16:3c: b2:96:d1:62:d3:4c:0e:28:5d:0c:d9:62:93:d9:66:06:fa:11: d4:3e:d9:8c:66:4a:a0:02:38:92:a8:6f:a6:62:07:ec:08:d2: f0:5e:7e:d3 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUBn1XWqIZBaKKUbhL/jCywaBd2IMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYjE3MjU0OGZhM2M0NjBlMjZjYjUxOWVlNTI0MzYxYmNh NmM3MTMyZTAeFw0yNTEyMTExMjA2MzdaFw0yNTEyMTIxMjU5MzdaMDMxMTAvBgNV BAMTKDFFOThFRDIyNTRENEQ3M0VBQkRCOTVGNTk2Q0E2NjZDQjNEQzg1OEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9o2eEWnPjJQPaKbVo5tyXynV4 HqHTWIEne1Doxjh209HltVn5Fi3DFzq8lH18Me+JbBoM+wzsN4shm+BROzcUkkRE NA+kKBuyFDbLDNqIvak0p8M7fv4uA/9gKyK8/c28H6DVSrKH+WLBGw1eQVO2jI+k BGJMQjC53I/aOJK7Gr8XanIbo/weBx9rzpBqvhS0OjztzEGII6iFcSZ9Hi08zITE oEjiC1puebIrdR7KFiqsmsqsKrnqudAzoRfGE5wrrlvdYYbJOoK2MBYUlRkiYFlb JLfC39qz7Xo/kS0cAdFdIUldFCPhiS8c/4owbi+20XVHP/HIRZYhvmWtJLWjAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUHpjtIlTU1z6r25X1lspmbLPchYswHwYDVR0j BBgwFoAUsXJUj6PEYOJstRnuUkNhvKbHEy4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOTY1NzNlODgtZGFiYS00YWM3LWEyZWQtMzIxYzgyNzdk MjVlLzAvQjE3MjU0OEZBM0M0NjBFMjZDQjUxOUVFNTI0MzYxQkNBNkM3MTMyRS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3NYSlVqNlBFWU9Kc3RSbnVVa05odkti SEV5NC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85NjU3M2U4OC1k YWJhLTRhYzctYTJlZC0zMjFjODI3N2QyNWUvMC9CMTcyNTQ4RkEzQzQ2MEUyNkNC NTE5RUU1MjQzNjFCQ0E2QzcxMzJFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhgY7oOojPBnBWdCgE3Df PQsqGh2LbzAGzhzQ5UgohnzCISiR6JJ46iXLsyP8rQeJwc//BdD5bw8h2gGz4QTu XcO+zl5wbXeO1QnYFALc1XceMrAlbUGw0Mq+JjPWyGpq0HwjtOH53s1GJrypm3Ou uEKz4d/TzFrn07Nja2XWo6lLOVovogU47MO9tiNnyBOpYHP1hJLrI5fbZiSpQXkr kV07avZw3BIKS/RbBPYT/KvOGkvTD4ETXwV72qI+V19+ntbbraeAN+tP9eFXRwri XkidwzgJmRY8spbRYtNMDihdDNlik9lmBvoR1D7ZjGZKoAI4kqhvpmIH7AjS8F5+ 0w== -----END CERTIFICATE-----Generated at Fri Dec 12 00:27:48 2025 by rpki-client