This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.mft File: B149F23A3E99C4760297DD7104B400C835D86D19.mft (raw, json) Hash identifier: l1MGOELSXrtmAipy0oozY9BSugtfXRqNYuPfAYKumhk= Subject key identifier: AF:0F:8E:E8:A8:36:F1:1C:F7:29:A8:C9:3E:5C:76:C9:46:CE:0B:8C Authority key identifier: B1:49:F2:3A:3E:99:C4:76:02:97:DD:71:04:B4:00:C8:35:D8:6D:19 Certificate issuer: /CN=B149F23A3E99C4760297DD7104B400C835D86D19 Certificate serial: 071C8DAF03E71C3A60BFBA61EA2E30F71CCE640F Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B149F23A3E99C4760297DD7104B400C835D86D19.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.mft Manifest number: 94 Signing time: Mon 08 Dec 2025 01:43:18 +0000 Manifest this update: Mon 08 Dec 2025 01:38:18 +0000 Manifest next update: Tue 09 Dec 2025 01:59:18 +0000 Files and hashes: 1: B11D50A5D47F732F3F808FEAE6A3906CC4509C44.cer (hash: fOEqRqKlaLKUtKYMsGd37ZJXvbw9QPqtaVQY5rFpBpQ=) 2: B149F23A3E99C4760297DD7104B400C835D86D19.crl (hash: WXGUM3QzCT6z5uulkSiMTRZ0whvQ0TKbSLpLWseihpQ=) 3: E2D8063C20C5FF1C1C1ACC3AD4E9D0C0C8648229.cer (hash: ttIHeVow2IErbUXmp4n67KjX2H68UmfVMTfPkOmulDw=) 4: 326131343a373538333a663436303a3a2f34342d3438203d3e20323131353735.roa (hash: LMFmuLJ4IgxIQCv2slhgNeKFDMCx6rSWhmkOn3RblbI=) 5: 326131343a373538333a663436303a3a2f34342d3438203d3e20323134373230.roa (hash: 4YEjtMXLVEjj9+5CMQ85BeokEYmpgzJkQtl+GYY10z4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.crl rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B149F23A3E99C4760297DD7104B400C835D86D19.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Dec 2025 01:59:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:1c:8d:af:03:e7:1c:3a:60:bf:ba:61:ea:2e:30:f7:1c:ce:64:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B149F23A3E99C4760297DD7104B400C835D86D19 Validity Not Before: Dec 8 01:38:18 2025 GMT Not After : Dec 9 01:59:18 2025 GMT Subject: CN=AF0F8EE8A836F11CF729A8C93E5C76C946CE0B8C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:57:77:f1:20:d7:fa:be:ff:76:9c:d5:99:c6: b3:f7:33:05:d8:d3:8b:fd:2f:14:48:7c:28:f9:ff: 2c:9a:1d:72:5f:46:53:aa:24:2b:2a:63:e3:06:77: 73:28:fb:b5:7a:19:0e:7a:ac:5d:d4:4b:02:ce:9d: 2b:68:db:6c:c9:71:b5:92:b3:32:29:ef:ac:ad:56: a2:b1:73:de:d7:c4:ab:29:1d:25:eb:f7:66:25:97: c7:47:c4:58:46:1b:2c:86:bd:cc:49:f3:64:2f:a0: ab:9f:60:91:dc:61:d3:7c:e4:87:c6:8b:42:c3:cc: d3:5c:65:d7:a2:20:ff:8c:83:c3:27:86:30:0f:25: 5a:2f:fc:4c:4e:6f:db:cf:8a:d6:af:24:f3:8b:67: 48:25:44:a0:64:e0:36:8b:e4:ba:21:36:82:e0:b4: 22:93:4b:29:ac:12:48:fe:f1:e9:8b:2f:1e:10:0b: 46:12:f3:a4:cd:cd:c1:85:b9:09:b0:1c:90:3a:56: 79:4a:c7:d2:d7:14:49:6e:ba:bb:1a:56:fb:6c:26: 2c:16:53:20:ec:2a:71:99:73:e7:2c:c6:ed:16:60: ff:a8:21:0f:fb:e2:82:39:f5:1e:66:95:c4:26:84: 4f:ef:60:a3:02:d8:4f:db:84:35:57:05:fa:01:24: 0b:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:0F:8E:E8:A8:36:F1:1C:F7:29:A8:C9:3E:5C:76:C9:46:CE:0B:8C X509v3 Authority Key Identifier: keyid:B1:49:F2:3A:3E:99:C4:76:02:97:DD:71:04:B4:00:C8:35:D8:6D:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B149F23A3E99C4760297DD7104B400C835D86D19.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:90:51:36:87:7c:10:fd:86:c0:31:06:c7:47:9d:bb:74:1d: d8:0c:22:75:59:52:71:90:76:a4:f2:1c:8c:bf:02:55:66:39: f1:7f:b5:77:04:0e:ef:38:07:be:d1:18:97:f3:54:85:ef:3f: 6d:11:93:f7:da:b6:07:e8:bc:f4:11:87:4d:1b:50:df:d1:30: 8b:27:66:8a:52:45:dd:12:ec:b9:3d:68:61:7a:d7:13:86:bd: 72:75:c9:64:78:e9:7e:f2:ab:5a:ff:6b:db:bf:98:bc:ff:b0: 18:a0:38:eb:f3:6c:4b:a7:0b:31:b5:18:c7:bd:85:92:74:9c: b5:ff:19:97:9b:d4:75:99:d7:bd:85:ec:a9:98:1b:a5:23:2e: bd:26:76:19:a4:6d:31:ff:49:bd:09:8e:a3:75:ab:68:15:46: fa:b0:e6:fd:f2:a9:4e:4e:12:a1:bb:89:ef:7d:de:f2:66:57: 1d:2d:57:43:24:d5:e6:89:b0:9f:f3:9d:f0:ac:ce:83:93:36: 39:00:cc:8c:be:1f:9d:ef:19:2d:7f:ea:fd:13:45:57:d6:17: 69:db:62:b5:a2:23:ae:8a:f0:0b:50:98:49:92:e9:70:49:58: 64:28:bb:f7:db:1c:53:eb:c7:80:73:78:2a:a2:19:2e:6f:72: 34:8d:fe:37 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUBxyNrwPnHDpgv7ph6i4w9xzOZA8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjE0OUYyM0EzRTk5QzQ3NjAyOTdERDcxMDRCNDAwQzgz NUQ4NkQxOTAeFw0yNTEyMDgwMTM4MThaFw0yNTEyMDkwMTU5MThaMDMxMTAvBgNV BAMTKEFGMEY4RUU4QTgzNkYxMUNGNzI5QThDOTNFNUM3NkM5NDZDRTBCOEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcV3fxINf6vv92nNWZxrP3MwXY 04v9LxRIfCj5/yyaHXJfRlOqJCsqY+MGd3Mo+7V6GQ56rF3USwLOnSto22zJcbWS szIp76ytVqKxc97XxKspHSXr92Yll8dHxFhGGyyGvcxJ82QvoKufYJHcYdN85IfG i0LDzNNcZdeiIP+Mg8MnhjAPJVov/ExOb9vPitavJPOLZ0glRKBk4DaL5LohNoLg tCKTSymsEkj+8emLLx4QC0YS86TNzcGFuQmwHJA6VnlKx9LXFEluursaVvtsJiwW UyDsKnGZc+csxu0WYP+oIQ/74oI59R5mlcQmhE/vYKMC2E/bhDVXBfoBJAvJAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUrw+O6Kg28Rz3KajJPlx2yUbOC4wwHwYDVR0j BBgwFoAUsUnyOj6ZxHYCl91xBLQAyDXYbRkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOTgxZjk3ODItODk4ZS00YjgzLTk1ZTYtNGZmNGFiNzVj OWRjLzIvQjE0OUYyM0EzRTk5QzQ3NjAyOTdERDcxMDRCNDAwQzgzNUQ4NkQxOS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9CMTQ5RjIzQTNFOTlDNDc2MDI5N0RENzEw NEI0MDBDODM1RDg2RDE5LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 Lzk4MWY5NzgyLTg5OGUtNGI4My05NWU2LTRmZjRhYjc1YzlkYy8yL0IxNDlGMjNB M0U5OUM0NzYwMjk3REQ3MTA0QjQwMEM4MzVEODZEMTkubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBrkFE2 h3wQ/YbAMQbHR527dB3YDCJ1WVJxkHak8hyMvwJVZjnxf7V3BA7vOAe+0RiX81SF 7z9tEZP32rYH6Lz0EYdNG1Df0TCLJ2aKUkXdEuy5PWhhetcThr1ydclkeOl+8qta /2vbv5i8/7AYoDjr82xLpwsxtRjHvYWSdJy1/xmXm9R1mde9heypmBulIy69JnYZ pG0x/0m9CY6jdatoFUb6sOb98qlOThKhu4nvfd7yZlcdLVdDJNXmibCf853wrM6D kzY5AMyMvh+d7xktf+r9E0VX1hdp22K1oiOuivALUJhJkulwSVhkKLv32xxT68eA c3gqohkub3I0jf43 -----END CERTIFICATE-----Generated at Mon Dec 8 10:30:07 2025 by rpki-client