This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.mft File: CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.mft (raw, json) Hash identifier: kFOZTVSQiXr/DId8DXbDgkE1tTL4HgbIPR+Fmf0JOlc= Subject key identifier: 99:2B:07:0A:F0:71:25:31:71:B0:60:8F:6C:B1:12:BB:BD:49:23:C1 Authority key identifier: CC:79:1A:1F:5C:B3:BB:2C:AF:7C:28:38:21:12:E2:69:BF:1D:0F:2F Certificate issuer: /CN=CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F Certificate serial: 5AA9943EF1354CC69065354B9858C0637C3C0E70 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.mft Manifest number: C4 Signing time: Tue 16 Dec 2025 05:22:49 +0000 Manifest this update: Tue 16 Dec 2025 05:17:49 +0000 Manifest next update: Wed 17 Dec 2025 06:46:49 +0000 Files and hashes: 1: 326131343a373538303a666637383a3a2f34382d3438203d3e20323033393135.roa (hash: HnRWSrEpeOmuzTKhKK+Ly8/65pwZBhG8hC56Nip/vA0=) 2: 326131343a373538303a666637303a3a2f34382d3438203d3e20323033393135.roa (hash: zyXKXDvOIxNrBW5QrQm19sSxkRDmx9tFlmRCkefYJk4=) 3: 326131343a373538303a666637623a3a2f34382d3438203d3e20323033393135.roa (hash: +Dm2JEqaSsfzmcw/vRVxZqJazGgE0R+iZSKdYatTFPI=) 4: 326131343a373538303a666637373a3a2f34382d3438203d3e20323033393135.roa (hash: F5/aVvIreRBQw19BMcjvtJaH6IAMjMe6w+V1TelngZU=) 5: 326131343a373538303a666637393a3a2f34382d3438203d3e20323033393135.roa (hash: 4JRXyyfbh5S+gtwReXpBVGHg5Hfkr5m0dh1qPG0/BKw=) 6: CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.crl (hash: 3zbFxgD7s9STC1aQSnNLwrWSMcVdJBB5mu5dk3R0jJM=) 7: 326131343a373538303a666637353a3a2f34382d3438203d3e20323033393135.roa (hash: 9QAAhr1wwrheqUnrWa4FkevZ/+WKuCODK+T1ZZmcwl8=) 8: 326131343a373538303a666637343a3a2f34382d3438203d3e20323033393135.roa (hash: wat7PE9fGydcz5ayop5kavvbRXomHufzivqvTvbesao=) 9: 326131343a373538303a666637653a3a2f34382d3438203d3e20323033393135.roa (hash: U6uqpQVMvicANeE1+RdGwfiUHzScjnhV12wDyDdzXu8=) 10: 326131343a373538303a666637313a3a2f34382d3438203d3e20323033393135.roa (hash: tQOuxzjoO2gOr2+IueULnKw1bzMsp7EoDLzHElEe0zw=) 11: 326131343a373538303a666637333a3a2f34382d3438203d3e20323033393135.roa (hash: GieRIT3AIgJdp4hafy8WbPzRF4MVeOc7uBzRolQt/Os=) 12: 326131343a373538303a666637363a3a2f34382d3438203d3e20323033393135.roa (hash: BkHJMnQDPpptXCMBwmodU4zh5ifR8UsDSgAYqmaYZ4U=) 13: 326131343a373538303a666637643a3a2f34382d3438203d3e20323033393135.roa (hash: H+78AH4TYlugOgXjwzDN7rCd3EnIWoVZYuyJbZiEnfs=) 14: 326131343a373538303a666637633a3a2f34382d3438203d3e20323033393135.roa (hash: o5X2AD19YxTsiyZsqxaO6LcogckEDGsmBlZBOovT7M0=) 15: 326131343a373538303a666637613a3a2f34382d3438203d3e20323033393135.roa (hash: lVFPEuT+Vv7EHAhCsqJ2Rg8eFP3usNSJ0TffuGmsFKE=) 16: 326131343a373538303a666637323a3a2f34382d3438203d3e20323033393135.roa (hash: h9EOAcugJrwunceFQsvuVh/viiSOkDi6CuOcdJIPWnA=) 17: 326131343a373538303a666637663a3a2f34382d3438203d3e20323033393135.roa (hash: AKQUYWOgneoO1qpRyAABoiC4d23AXJsif2Ph8QnUXyw=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.crl rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:a9:94:3e:f1:35:4c:c6:90:65:35:4b:98:58:c0:63:7c:3c:0e:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F Validity Not Before: Dec 16 05:17:49 2025 GMT Not After : Dec 17 06:46:49 2025 GMT Subject: CN=992B070AF071253171B0608F6CB112BBBD4923C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:88:66:35:ed:41:0d:6b:bc:f8:6d:dc:80:26: 67:17:1e:b6:59:dd:a1:26:f7:bf:5a:22:9f:9a:db: d0:a1:87:5b:73:d8:02:5a:f1:45:ee:d3:4f:50:5e: 35:89:18:7c:92:b1:e3:60:86:bd:b4:47:5e:64:27: 03:d6:b5:e3:9a:d0:1f:da:7d:80:87:a5:1a:3f:67: 30:ae:8b:1c:fa:b1:c6:0b:d3:53:86:11:33:ec:f6: 9a:a5:17:f7:c9:87:8d:cf:60:06:09:38:7c:f5:60: b9:3f:98:60:4e:2c:9c:d0:c0:17:15:f9:b0:8c:e6: 41:34:11:e4:9c:c2:ad:8b:d6:22:7c:ae:fa:f1:d1: ae:8a:86:ba:67:86:f3:2f:fa:7d:9d:8e:b0:f8:40: 6f:71:8d:a4:52:eb:d2:cd:83:c1:89:e1:80:02:d9: 69:38:fb:c7:2d:9b:d1:bd:d2:f7:75:9c:3d:9a:12: 46:35:93:bd:af:e1:93:a3:e4:f4:17:1f:54:b4:84: 0d:7b:54:fb:20:77:96:7c:e9:ac:44:8d:35:db:81: fe:c6:da:68:5a:83:8c:ba:d5:ac:9c:df:47:78:21: cd:1b:d4:e2:96:f0:6f:ac:ab:53:f1:f2:8e:94:fa: e8:26:62:f9:bc:32:d9:00:fc:91:e9:99:90:b7:79: 85:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:2B:07:0A:F0:71:25:31:71:B0:60:8F:6C:B1:12:BB:BD:49:23:C1 X509v3 Authority Key Identifier: keyid:CC:79:1A:1F:5C:B3:BB:2C:AF:7C:28:38:21:12:E2:69:BF:1D:0F:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:8f:18:34:62:88:cf:fa:b7:55:dd:f8:2a:80:73:50:30:64: 3e:a6:aa:8c:f1:03:da:b4:f1:ac:b7:30:db:ce:d2:58:33:8b: 61:1d:bd:ce:6c:fc:a2:c1:62:2c:d4:dd:e0:e5:d8:c4:29:95: 5b:c8:21:24:4d:59:0b:f6:64:a9:15:7b:8b:91:aa:6a:ba:a1: 2e:ac:63:40:82:a6:f7:9c:79:ad:41:9a:3c:52:27:d1:be:5b: 36:a0:c9:dc:c3:41:79:1e:f7:d8:ca:e4:4e:37:92:12:cd:15: c5:e8:63:fd:0a:bb:5a:9f:1b:d9:90:7d:fa:cc:19:ec:81:dd: e8:79:6a:0f:5c:c9:84:15:d2:5a:2e:a5:25:46:7e:ef:c0:96: 76:a5:20:3c:0e:d4:2f:97:cc:c0:3a:cf:aa:a3:04:62:2d:9c: f6:b5:fd:03:6c:1f:e4:e6:ab:28:bd:23:83:86:13:56:d6:91: e7:04:f4:0a:a1:f8:72:a9:b2:74:1e:30:d3:f9:f9:9a:76:13: 67:3a:11:4b:7d:0c:9b:3c:0e:9b:ad:2d:ce:23:30:e0:77:32: fe:8c:fd:28:4b:89:7a:c9:6b:b1:45:37:cf:93:97:3b:21:66: 3b:38:06:4e:d6:8c:99:3a:d6:bf:5e:22:a4:a7:a8:96:d7:e6: 91:30:da:04 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUWqmUPvE1TMaQZTVLmFjAY3w8DnAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0M3OTFBMUY1Q0IzQkIyQ0FGN0MyODM4MjExMkUyNjlC RjFEMEYyRjAeFw0yNTEyMTYwNTE3NDlaFw0yNTEyMTcwNjQ2NDlaMDMxMTAvBgNV BAMTKDk5MkIwNzBBRjA3MTI1MzE3MUIwNjA4RjZDQjExMkJCQkQ0OTIzQzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgiGY17UENa7z4bdyAJmcXHrZZ 3aEm979aIp+a29Chh1tz2AJa8UXu009QXjWJGHySseNghr20R15kJwPWteOa0B/a fYCHpRo/ZzCuixz6scYL01OGETPs9pqlF/fJh43PYAYJOHz1YLk/mGBOLJzQwBcV +bCM5kE0EeScwq2L1iJ8rvrx0a6KhrpnhvMv+n2djrD4QG9xjaRS69LNg8GJ4YAC 2Wk4+8ctm9G90vd1nD2aEkY1k72v4ZOj5PQXH1S0hA17VPsgd5Z86axEjTXbgf7G 2mhag4y61ayc30d4Ic0b1OKW8G+sq1Px8o6U+ugmYvm8MtkA/JHpmZC3eYULAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUmSsHCvBxJTFxsGCPbLESu71JI8EwHwYDVR0j BBgwFoAUzHkaH1yzuyyvfCg4IRLiab8dDy8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYjdhMGFhNTYtNGExZC00YmE4LWFiNjYtYzU5ZmVkNGMz N2ZjLzEvQ0M3OTFBMUY1Q0IzQkIyQ0FGN0MyODM4MjExMkUyNjlCRjFEMEYyRi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9DQzc5MUExRjVDQjNCQjJDQUY3QzI4Mzgy MTEyRTI2OUJGMUQwRjJGLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2I3YTBhYTU2LTRhMWQtNGJhOC1hYjY2LWM1OWZlZDRjMzdmYy8xL0NDNzkxQTFG NUNCM0JCMkNBRjdDMjgzODIxMTJFMjY5QkYxRDBGMkYubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQC2jxg0 YojP+rdV3fgqgHNQMGQ+pqqM8QPatPGstzDbztJYM4thHb3ObPyiwWIs1N3g5djE KZVbyCEkTVkL9mSpFXuLkapquqEurGNAgqb3nHmtQZo8UifRvls2oMncw0F5HvfY yuRON5ISzRXF6GP9CrtanxvZkH36zBnsgd3oeWoPXMmEFdJaLqUlRn7vwJZ2pSA8 DtQvl8zAOs+qowRiLZz2tf0DbB/k5qsovSODhhNW1pHnBPQKofhyqbJ0HjDT+fma dhNnOhFLfQybPA6brS3OIzDgdzL+jP0oS4l6yWuxRTfPk5c7IWY7OAZO1oyZOta/ XiKkp6iW1+aRMNoE -----END CERTIFICATE-----Generated at Tue Dec 16 07:56:07 2025 by rpki-client