This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.mft File: BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.mft (raw, json) Hash identifier: 6nOZr7axhmvZt7Y1C8KFagZxYh9+V+Ewp6nT17eQ2Fw= Subject key identifier: 73:C5:97:A2:B2:77:F3:7B:93:20:FF:21:F5:8E:27:09:E4:A7:B3:EB Authority key identifier: BE:0B:B7:88:69:CD:B2:AD:0C:97:1A:6A:85:8A:30:21:3E:AE:C4:7D Certificate issuer: /CN=be0bb78869cdb2ad0c971a6a858a30213eaec47d Certificate serial: 1096710116BD9153E8300F4D74C958F6349C0287 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vgu3iGnNsq0MlxpqhYowIT6uxH0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.mft Manifest number: 0191 Signing time: Sun 07 Dec 2025 18:06:20 +0000 Manifest this update: Sun 07 Dec 2025 18:01:20 +0000 Manifest next update: Mon 08 Dec 2025 20:04:20 +0000 Files and hashes: 1: 3137382e3234382e37362e302f32342d3234203d3e20323135333034.roa (hash: XrWwPHt91qxXHQ0/kVWO42vo3gTicR3T1AogX5xX6FY=) 2: 3137382e3234382e37372e302f32342d3234203d3e20323133373833.roa (hash: IZUL7zEfrS59nO5eqaFvUNxkfEHC3BRjyZY2ApRcoSg=) 3: 3137382e3234382e37342e302f32342d3234203d3e20323039313831.roa (hash: JOjM4S47fNK82HVGI3kzft2889UH/2/CmD3owvdrCqM=) 4: 3139332e3136392e37382e302f32332d3233203d3e203438343335.roa (hash: IDuy7mlGaLMOCgzEdx2/1ouXbZ90tr9UBkMDq0knNXg=) 5: 3139352e34322e3131332e302f32342d3234203d3e203438343335.roa (hash: aYbyRGpjGAy7pzSZSZu9mIeZ8V/FjY5/eUQvPy2nJ/Y=) 6: 3139352e34322e3131322e302f32342d3234203d3e203438343335.roa (hash: 0fCZnPcUR/TU0KGeDhdE4rzY8AMOIFMDCEwGzQYi3Zw=) 7: 3139332e3136392e37382e302f32332d3234203d3e203438343335.roa (hash: 0e4l5EqcD9+SWWVL79QZba03Lu9mdjyR/TfDJr390dA=) 8: 3137382e3234382e37382e302f32342d3234203d3e20323132333834.roa (hash: 55oHxRvhLlFnFgVNA6T2hJ74AYC9yyl40HSKUWc/res=) 9: 3137382e3234382e37362e302f32342d3234203d3e20323134303234.roa (hash: JikbqnpKajZI2JuxlY+TTYmy6DToKoSov4y2Ga81BQg=) 10: 3137382e3234382e37392e302f32342d3234203d3e20313335333932.roa (hash: nkla74pmgzof6BdGTx/D9Sn3aXq/+fT/xyCtH2Ux1lE=) 11: 3137382e3234382e37362e302f32342d3234203d3e203336353330.roa (hash: h2oY8dMCuUJOV8h2ooYxtJO3njho899x4gMqGa23JNE=) 12: BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.crl (hash: nC64vM3zQeDBH+F9pvWvRICGzQNTqmWEGIQ/8h4fpEI=) 13: 3139332e3136392e37382e302f32332d3234203d3e203530343334.roa (hash: i+j0/SqL92pXqr/Yt38MmbwZjTIQClt05q1Bhtl74qs=) 14: 3139352e34322e3131322e302f32332d3233203d3e203438343335.roa (hash: LnJ/05IgVINSSDv4l3ajCKuAD4mr9PXKyWCylRmwux0=) 15: 3137382e3234382e37322e302f32342d3234203d3e20313531383732.roa (hash: 562I7wk8pDZNtdMzcEoC9Q7KQUjR9i2cYfXfdpaRXg8=) 16: 3137382e3234382e37332e302f32342d3234203d3e20313431393638.roa (hash: zMoHCJaZZ5vI4uszw9fV0p+6ygU9pfTnJ4jfa1DsJEg=) 17: 3137382e3234382e37352e302f32342d3234203d3e20313939303538.roa (hash: 0IUSu+qptfP2e6dJnAny9tG4Cb2xcvVtmtBD0i4piak=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.crl rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.mft rsync://rpki.ripe.net/repository/DEFAULT/vgu3iGnNsq0MlxpqhYowIT6uxH0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 20:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:96:71:01:16:bd:91:53:e8:30:0f:4d:74:c9:58:f6:34:9c:02:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be0bb78869cdb2ad0c971a6a858a30213eaec47d Validity Not Before: Dec 7 18:01:20 2025 GMT Not After : Dec 8 20:04:20 2025 GMT Subject: CN=73C597A2B277F37B9320FF21F58E2709E4A7B3EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:16:df:02:58:06:e0:a0:2b:4c:d3:31:ab:da: 2a:f8:35:0a:44:6d:ff:0a:c7:f1:c7:c0:8b:e8:ed: 14:53:99:1f:4b:c7:15:da:18:97:f3:7f:7d:c8:71: a9:dd:3a:dc:21:24:d2:51:57:83:a1:41:36:a1:e0: bf:96:66:0d:29:f1:07:5a:e4:95:88:a9:b5:cd:13: 64:40:bd:36:85:ad:57:11:b6:cc:5b:72:23:c8:54: 14:4d:b4:e6:4c:e7:6d:22:49:61:7b:48:db:02:6f: 62:3b:49:da:74:71:90:ff:88:40:4d:2a:d0:e2:1a: 3d:a3:24:6c:e8:f9:45:44:d0:5e:08:11:25:1e:06: 0e:fa:81:51:fd:76:ef:9b:e6:4e:da:cd:6f:b4:24: 3f:c3:d8:be:50:51:f4:5e:39:ae:3d:65:35:91:f3: 1e:3e:12:75:a4:c7:b5:0d:e9:07:66:5a:b6:96:6e: f0:a8:a8:2f:fa:3f:7d:2a:d3:b4:a5:94:03:f5:18: 42:cd:5a:c0:b8:fe:d4:06:ed:b6:55:9f:f6:7e:89: ed:f2:3e:08:b5:6e:1f:d0:20:0b:84:00:93:36:df: 03:d5:c1:9f:5c:4f:a5:70:86:1b:19:28:30:8c:7b: 9b:8c:e0:ea:35:77:8d:2d:a3:bb:3f:9f:0f:90:6a: 87:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:C5:97:A2:B2:77:F3:7B:93:20:FF:21:F5:8E:27:09:E4:A7:B3:EB X509v3 Authority Key Identifier: keyid:BE:0B:B7:88:69:CD:B2:AD:0C:97:1A:6A:85:8A:30:21:3E:AE:C4:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vgu3iGnNsq0MlxpqhYowIT6uxH0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:1e:26:da:ba:f6:ae:94:43:ed:c3:07:0e:f3:b8:6e:7b:ea: fa:a9:86:44:8f:c8:60:76:23:37:16:0b:49:f3:a2:20:42:15: 2c:9e:fa:63:ad:e1:5d:15:17:af:86:61:e3:c0:c8:72:3b:b6: b1:b3:d5:05:21:4e:fc:18:08:fc:1d:5a:65:5d:10:fd:87:3e: 66:de:96:2b:c2:16:fa:f0:04:0d:5c:99:b1:59:2b:7b:8c:7f: 96:83:7d:f8:98:4f:1e:36:f5:92:ad:3e:c6:c5:23:a8:eb:09: 84:fb:bb:a9:35:2b:95:75:e4:86:4a:89:8e:92:63:bd:17:1f: 45:1d:fa:4d:71:ce:71:25:92:c0:5a:b0:0c:89:88:af:69:b2: 12:9a:e9:79:4e:3b:7a:32:9f:33:cc:e9:93:fa:5c:b6:70:fa: 8a:22:47:3e:e4:e7:c8:bd:e8:43:fe:08:fe:b4:29:0b:b7:ec: cc:d0:f4:a5:0c:54:02:f4:96:fc:8b:10:39:23:06:6a:4c:af: f4:26:d3:3b:e8:ec:c8:a8:69:84:82:b3:3d:ba:b5:bb:ae:39: 5a:06:ac:73:af:56:c8:a7:75:67:fd:44:7c:da:74:61:ec:52: 1a:84:0a:c1:be:4b:a1:6e:54:a2:d5:10:9f:60:1b:8a:6c:44: 9b:f9:4c:53 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUEJZxARa9kVPoMA9NdMlY9jScAocwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYmUwYmI3ODg2OWNkYjJhZDBjOTcxYTZhODU4YTMwMjEz ZWFlYzQ3ZDAeFw0yNTEyMDcxODAxMjBaFw0yNTEyMDgyMDA0MjBaMDMxMTAvBgNV BAMTKDczQzU5N0EyQjI3N0YzN0I5MzIwRkYyMUY1OEUyNzA5RTRBN0IzRUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQFt8CWAbgoCtM0zGr2ir4NQpE bf8Kx/HHwIvo7RRTmR9LxxXaGJfzf33IcandOtwhJNJRV4OhQTah4L+WZg0p8Qda 5JWIqbXNE2RAvTaFrVcRtsxbciPIVBRNtOZM520iSWF7SNsCb2I7Sdp0cZD/iEBN KtDiGj2jJGzo+UVE0F4IESUeBg76gVH9du+b5k7azW+0JD/D2L5QUfReOa49ZTWR 8x4+EnWkx7UN6QdmWraWbvCoqC/6P30q07SllAP1GELNWsC4/tQG7bZVn/Z+ie3y Pgi1bh/QIAuEAJM23wPVwZ9cT6VwhhsZKDCMe5uM4Oo1d40to7s/nw+Qaoc1AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUc8WXorJ383uTIP8h9Y4nCeSns+swHwYDVR0j BBgwFoAUvgu3iGnNsq0MlxpqhYowIT6uxH0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWMxNDMzODctZjAxMy00OTIyLTgzOGUtZTE4ODY0YmUx ZTRhLzAvQkUwQkI3ODg2OUNEQjJBRDBDOTcxQTZBODU4QTMwMjEzRUFFQzQ3RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3ZndTNpR25Oc3EwTWx4cHFoWW93SVQ2 dXhIMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYzE0MzM4Ny1m MDEzLTQ5MjItODM4ZS1lMTg4NjRiZTFlNGEvMC9CRTBCQjc4ODY5Q0RCMkFEMEM5 NzFBNkE4NThBMzAyMTNFQUVDNDdELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJR4m2rr2rpRD7cMHDvO4 bnvq+qmGRI/IYHYjNxYLSfOiIEIVLJ76Y63hXRUXr4Zh48DIcju2sbPVBSFO/BgI /B1aZV0Q/Yc+Zt6WK8IW+vAEDVyZsVkre4x/loN9+JhPHjb1kq0+xsUjqOsJhPu7 qTUrlXXkhkqJjpJjvRcfRR36TXHOcSWSwFqwDImIr2myEprpeU47ejKfM8zpk/pc tnD6iiJHPuTnyL3oQ/4I/rQpC7fszND0pQxUAvSW/IsQOSMGakyv9CbTO+jsyKhp hIKzPbq1u645Wgasc69WyKd1Z/1EfNp0YexSGoQKwb5LoW5UotUQn2AbimxEm/lM Uw== -----END CERTIFICATE-----Generated at Mon Dec 8 11:14:49 2025 by rpki-client