This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/5DA3215ABFA4621D57709F838A92801F2E90DDFE.mft File: 5DA3215ABFA4621D57709F838A92801F2E90DDFE.mft (raw, json) Hash identifier: logq0swP8p0g+wTVjgcwoMZa/2cM75yN7Wz4pTPEmwE= Subject key identifier: 38:25:35:71:FA:28:F9:12:D2:A8:4F:9A:4D:B0:C4:B3:09:30:62:54 Authority key identifier: 5D:A3:21:5A:BF:A4:62:1D:57:70:9F:83:8A:92:80:1F:2E:90:DD:FE Certificate issuer: /CN=5da3215abfa4621d57709f838a92801f2e90ddfe Certificate serial: 1440A545A1FE943CF88B8FA10008CC27D49970B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaMhWr-kYh1XcJ-DipKAHy6Q3f4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/5DA3215ABFA4621D57709F838A92801F2E90DDFE.mft Manifest number: 055F Signing time: Mon 15 Dec 2025 16:27:16 +0000 Manifest this update: Mon 15 Dec 2025 16:22:16 +0000 Manifest next update: Tue 16 Dec 2025 17:48:16 +0000 Files and hashes: 1: 34352e38312e35362e302f32342d3234203d3e20383334.roa (hash: GXYgmjTTvXHYoiXI6BJ0o3nH+W3GLxXllcJjvr3gnkE=) 2: 326130393a643634303a3a2f32392d3239203d3e20313938333435.roa (hash: 2ZJoizA2XrGcopsLwhs8oaMaqFtkP0G9iClmvxEJgnM=) 3: 34352e38312e35392e302f32342d3234203d3e20323131343339.roa (hash: PzQrEpsLL9icV7+wAMJ22TsUek+9+7dTOPFgPD6vtOM=) 4: 34352e38312e35392e302f32342d3234203d3e20323132333834.roa (hash: Z55LDvJNhjuOlIMhPU51UoeT0VK3qlu4pE/EHJdIaDE=) 5: 5DA3215ABFA4621D57709F838A92801F2E90DDFE.crl (hash: R+Ez77rCTQ1gsqpe2iS8OEHLAc/EDrtLEoyL+lre8vA=) 6: 34352e38312e35372e302f32342d3234203d3e203631333137.roa (hash: Nt6v0on8wvNIRTqw0ZzJ5VjTWjEZFT63u0ZbVbhKyNc=) 7: 34352e38312e35382e302f32342d3234203d3e20323039323432.roa (hash: Cjq2FzLN5G1VEvkKyI6FB5noxcWUxvPOvV4W7hBfw5c=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/5DA3215ABFA4621D57709F838A92801F2E90DDFE.crl rsync://rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/5DA3215ABFA4621D57709F838A92801F2E90DDFE.mft rsync://rpki.ripe.net/repository/DEFAULT/XaMhWr-kYh1XcJ-DipKAHy6Q3f4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 17:48:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:40:a5:45:a1:fe:94:3c:f8:8b:8f:a1:00:08:cc:27:d4:99:70:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5da3215abfa4621d57709f838a92801f2e90ddfe Validity Not Before: Dec 15 16:22:16 2025 GMT Not After : Dec 16 17:48:16 2025 GMT Subject: CN=38253571FA28F912D2A84F9A4DB0C4B309306254 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:79:63:64:54:13:98:03:bd:cd:de:27:5a:ce: c9:ab:b4:ba:3c:fd:d2:22:49:36:ac:ca:9b:2d:b6: 73:fd:86:04:0a:c1:03:93:dc:94:f1:71:9b:bd:f6: 32:34:6b:5d:04:0c:63:60:76:f6:66:ce:91:5b:58: a4:9c:d0:25:73:e8:b6:38:aa:51:c1:36:32:68:88: 97:4f:f2:91:9f:30:d5:93:db:38:10:07:6a:8e:84: 79:a0:ef:08:d2:4f:9a:eb:7f:98:0f:fd:76:36:2c: 1e:ff:35:e3:3b:9f:55:9c:f1:42:5e:cc:96:47:87: ae:8f:3a:a3:34:8c:31:0c:1e:0c:6a:9a:23:af:42: 12:4d:fa:3f:36:62:7a:4c:32:5f:49:0d:46:21:bc: e8:44:3f:71:ad:a8:c2:01:f3:e0:d8:33:f2:62:65: 28:90:87:7d:8c:53:ba:4d:c4:7b:45:04:ff:75:0b: c9:4b:0e:28:83:c8:b1:2a:3e:a5:70:a1:af:64:eb: 74:55:77:8d:ce:40:ba:cb:18:8e:51:0b:56:5b:d2: 7c:ea:f8:5b:53:cf:e5:8a:06:4d:87:fb:a1:63:13: 85:95:aa:fd:05:95:91:44:24:62:13:49:f5:80:13: 6a:aa:67:a4:37:a0:8b:24:2d:fa:b6:fa:c9:92:9e: d1:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:25:35:71:FA:28:F9:12:D2:A8:4F:9A:4D:B0:C4:B3:09:30:62:54 X509v3 Authority Key Identifier: keyid:5D:A3:21:5A:BF:A4:62:1D:57:70:9F:83:8A:92:80:1F:2E:90:DD:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/5DA3215ABFA4621D57709F838A92801F2E90DDFE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaMhWr-kYh1XcJ-DipKAHy6Q3f4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/5DA3215ABFA4621D57709F838A92801F2E90DDFE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:eb:2d:ce:cf:68:cb:6f:83:dc:e6:c6:cd:31:5a:aa:16:59: ed:c1:89:b0:f3:0b:38:14:30:bb:46:7a:6b:0c:4a:fa:e5:25: 53:5c:00:52:ae:82:4c:9c:0b:9e:d3:d0:40:62:df:19:de:2e: 41:ce:1d:a7:cf:00:d9:b6:2d:e4:87:b6:c9:ac:d5:75:a4:8f: 0a:86:d4:28:e2:f2:30:8b:87:42:c3:10:6f:19:54:0e:a1:88: 0f:6f:a0:8a:0c:0f:39:04:11:d8:57:df:58:85:c8:31:a3:45: e8:c9:5c:b0:51:ee:20:e5:98:b4:85:03:eb:49:15:e9:d8:be: b2:be:93:57:fe:e9:02:17:3e:d7:8a:f6:48:eb:6f:63:53:4b: 97:8d:37:7c:7a:5f:fd:07:43:24:6c:f1:6b:99:ab:3f:16:0b: 09:a1:c4:dd:59:33:3b:81:02:ff:21:47:de:18:ad:8c:73:11: fb:d8:18:30:99:37:55:71:b6:ef:3e:8f:44:6a:53:7f:b7:6d: 84:a6:fe:b6:3c:36:23:1e:a4:b7:1e:6f:3f:5e:a6:e4:14:8b: 21:66:03:9d:4f:72:79:49:f7:ee:47:d9:80:4e:56:46:ed:b4: b0:15:75:45:f8:7c:f5:20:b5:e1:e2:93:5c:b1:14:23:90:00: 04:88:38:08 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUFEClRaH+lDz4i4+hAAjMJ9SZcLgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNWRhMzIxNWFiZmE0NjIxZDU3NzA5ZjgzOGE5MjgwMWYy ZTkwZGRmZTAeFw0yNTEyMTUxNjIyMTZaFw0yNTEyMTYxNzQ4MTZaMDMxMTAvBgNV BAMTKDM4MjUzNTcxRkEyOEY5MTJEMkE4NEY5QTREQjBDNEIzMDkzMDYyNTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfeWNkVBOYA73N3idazsmrtLo8 /dIiSTasypsttnP9hgQKwQOT3JTxcZu99jI0a10EDGNgdvZmzpFbWKSc0CVz6LY4 qlHBNjJoiJdP8pGfMNWT2zgQB2qOhHmg7wjST5rrf5gP/XY2LB7/NeM7n1Wc8UJe zJZHh66POqM0jDEMHgxqmiOvQhJN+j82YnpMMl9JDUYhvOhEP3GtqMIB8+DYM/Ji ZSiQh32MU7pNxHtFBP91C8lLDiiDyLEqPqVwoa9k63RVd43OQLrLGI5RC1Zb0nzq +FtTz+WKBk2H+6FjE4WVqv0FlZFEJGITSfWAE2qqZ6Q3oIskLfq2+smSntEHAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUOCU1cfoo+RLSqE+aTbDEswkwYlQwHwYDVR0j BBgwFoAUXaMhWr+kYh1XcJ+DipKAHy6Q3f4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYmYyNDU2N2ItN2E3NC00YzFmLWFhODUtZGQyNGFmNzNj Y2JiLzAvNURBMzIxNUFCRkE0NjIxRDU3NzA5RjgzOEE5MjgwMUYyRTkwRERGRS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1hhTWhXci1rWWgxWGNKLURpcEtBSHk2 UTNmNC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iZjI0NTY3Yi03 YTc0LTRjMWYtYWE4NS1kZDI0YWY3M2NjYmIvMC81REEzMjE1QUJGQTQ2MjFENTc3 MDlGODM4QTkyODAxRjJFOTBEREZFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXOstzs9oy2+D3ObGzTFa qhZZ7cGJsPMLOBQwu0Z6awxK+uUlU1wAUq6CTJwLntPQQGLfGd4uQc4dp88A2bYt 5Ie2yazVdaSPCobUKOLyMIuHQsMQbxlUDqGID2+gigwPOQQR2FffWIXIMaNF6Mlc sFHuIOWYtIUD60kV6di+sr6TV/7pAhc+14r2SOtvY1NLl403fHpf/QdDJGzxa5mr PxYLCaHE3VkzO4EC/yFH3hitjHMR+9gYMJk3VXG27z6PRGpTf7dthKb+tjw2Ix6k tx5vP16m5BSLIWYDnU9yeUn37kfZgE5WRu20sBV1Rfh89SC14eKTXLEUI5AABIg4 CA== -----END CERTIFICATE-----Generated at Tue Dec 16 08:54:38 2025 by rpki-client