This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.mft File: F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.mft (raw, json) Hash identifier: 9gkZf2bXqmA74iq+YMvWf5/PP8x9Um2ES6mmsH7Kb/8= Subject key identifier: 6C:C8:AB:E9:EE:BC:64:52:04:BD:75:5D:F3:64:9D:EC:6D:31:57:76 Authority key identifier: F2:9F:BA:B4:DB:86:7F:6B:D9:A7:EF:F6:AA:55:D9:8C:16:2E:1A:AD Certificate issuer: /CN=f29fbab4db867f6bd9a7eff6aa55d98c162e1aad Certificate serial: 1A3D0DABF7A328DA68D499475C01F895D9CACA28 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8p-6tNuGf2vZp-_2qlXZjBYuGq0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.mft Manifest number: 05D0 Signing time: Fri 12 Dec 2025 07:21:38 +0000 Manifest this update: Fri 12 Dec 2025 07:16:38 +0000 Manifest next update: Sat 13 Dec 2025 11:07:38 +0000 Files and hashes: 1: F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.crl (hash: COUZ55bk58NI/7xfJn8r3Oo46bkpWw8HYrhHuNpjPow=) 2: 34362e3235302e3232342e302f32302d3234203d3e20313431393935.roa (hash: ht90MUomGkgWhJETWF0rvugOS8SI8qvW9OndsUlGu80=) 3: 34362e3235302e3234302e302f32302d3234203d3e20313431393935.roa (hash: 5zFYerIngzLwSwbeiiGPHVQadLBE1/J7oEEXeFR/OFM=) 4: 326130303a386530303a313a3a2f34382d3438203d3e203230373132.roa (hash: 2qiBxfK+UGsXjYXrt6Cm3jSdVu6qoZhGBCRhmjYUhjg=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.crl rsync://rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.mft rsync://rpki.ripe.net/repository/DEFAULT/8p-6tNuGf2vZp-_2qlXZjBYuGq0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 08:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:3d:0d:ab:f7:a3:28:da:68:d4:99:47:5c:01:f8:95:d9:ca:ca:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f29fbab4db867f6bd9a7eff6aa55d98c162e1aad Validity Not Before: Dec 12 07:16:38 2025 GMT Not After : Dec 13 11:07:38 2025 GMT Subject: CN=6CC8ABE9EEBC645204BD755DF3649DEC6D315776 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:2d:4a:b7:61:64:b5:d5:48:4a:fd:b1:b3:08: c4:62:01:cc:e9:58:f1:bb:f0:14:74:0d:77:e8:f1: 28:3c:08:af:26:a3:31:2c:15:af:4e:54:7d:39:d4: 0d:53:29:ff:4e:1a:28:4b:19:f9:74:ee:8a:27:33: 3f:fe:dd:fd:23:27:da:11:7a:d0:1e:b0:e0:d4:ac: bc:17:f4:79:41:02:a7:3a:90:3e:f7:54:14:54:5e: 39:84:55:18:f7:56:91:1e:b4:a8:84:73:c6:50:97: 61:d4:55:3a:9d:05:d7:1a:cf:f9:52:89:64:43:f6: 1b:9e:b6:12:a7:19:23:38:73:75:df:9d:c5:c7:cb: c5:6d:85:d0:a0:9d:8a:b0:ee:eb:a1:85:8a:f2:68: 99:fb:36:75:fe:ae:6a:ee:08:7a:83:0d:29:f1:10: 49:54:ff:c8:e8:e0:98:04:93:a8:80:47:0f:b3:0e: 8c:85:c2:c9:a2:08:7d:24:c8:53:09:1c:1f:12:50: 3c:01:1d:74:6b:eb:4f:d2:1b:ee:35:db:3d:c7:48: f9:43:43:68:0f:8b:ea:73:f9:ad:11:bb:42:9f:f2: a1:ec:33:f9:53:cc:1e:36:06:f8:15:09:a5:8d:57: 97:1d:4a:20:bb:0f:50:98:0a:72:bc:16:86:c5:00: 4b:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:C8:AB:E9:EE:BC:64:52:04:BD:75:5D:F3:64:9D:EC:6D:31:57:76 X509v3 Authority Key Identifier: keyid:F2:9F:BA:B4:DB:86:7F:6B:D9:A7:EF:F6:AA:55:D9:8C:16:2E:1A:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8p-6tNuGf2vZp-_2qlXZjBYuGq0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:f6:e4:34:84:24:f6:8b:52:30:0c:c7:a1:7e:3d:13:5f:af: 84:77:7f:6a:e6:aa:93:aa:54:c6:40:1b:6b:ab:10:a2:22:90: e2:cb:c5:f0:b8:94:11:6e:19:e0:1c:91:97:24:57:2e:1c:5b: 9c:52:1c:cb:ea:4b:5f:4d:50:f8:dc:bf:d0:70:08:27:16:20: 1a:93:64:7f:73:14:9b:13:53:b5:09:ff:d1:7b:a6:9b:6b:cb: 51:e8:b0:56:a6:f0:21:50:7e:16:9b:3c:17:22:9e:e0:e1:3f: f0:d1:31:68:55:7e:08:a5:fc:8f:4b:18:e8:cb:03:b2:93:4a: 8d:b9:c1:9d:4a:51:74:07:e9:32:e9:95:02:e3:a3:c9:4a:c7: aa:a8:4d:fb:77:9e:e9:f0:65:49:42:24:16:8e:1e:e5:82:28: 59:14:11:72:1c:20:65:69:27:39:8d:c9:be:ff:8d:e8:ee:d4: 5a:b0:0e:a3:e5:e4:a2:93:3e:c8:ca:16:63:d6:48:af:88:57: a8:70:67:64:64:29:18:34:fd:14:2f:ad:a4:9a:33:f2:64:7f: ec:f0:70:24:b5:8b:a7:a8:39:5d:7e:5e:48:74:bf:42:47:54: 15:f9:59:d2:3a:99:94:ae:7c:db:8f:be:68:bc:de:aa:e0:13: bd:06:5f:e6 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUGj0Nq/ejKNpo1JlHXAH4ldnKyigwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZjI5ZmJhYjRkYjg2N2Y2YmQ5YTdlZmY2YWE1NWQ5OGMx NjJlMWFhZDAeFw0yNTEyMTIwNzE2MzhaFw0yNTEyMTMxMTA3MzhaMDMxMTAvBgNV BAMTKDZDQzhBQkU5RUVCQzY0NTIwNEJENzU1REYzNjQ5REVDNkQzMTU3NzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVLUq3YWS11UhK/bGzCMRiAczp WPG78BR0DXfo8Sg8CK8mozEsFa9OVH051A1TKf9OGihLGfl07oonMz/+3f0jJ9oR etAesODUrLwX9HlBAqc6kD73VBRUXjmEVRj3VpEetKiEc8ZQl2HUVTqdBdcaz/lS iWRD9huethKnGSM4c3XfncXHy8VthdCgnYqw7uuhhYryaJn7NnX+rmruCHqDDSnx EElU/8jo4JgEk6iARw+zDoyFwsmiCH0kyFMJHB8SUDwBHXRr60/SG+412z3HSPlD Q2gPi+pz+a0Ru0Kf8qHsM/lTzB42BvgVCaWNV5cdSiC7D1CYCnK8FobFAEszAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUbMir6e68ZFIEvXVd82Sd7G0xV3YwHwYDVR0j BBgwFoAU8p+6tNuGf2vZp+/2qlXZjBYuGq0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYmY1MmQ4MTQtM2QyZi00ZGY0LTgxNDAtZGZiNTMwZjc0 OTEyLzAvRjI5RkJBQjREQjg2N0Y2QkQ5QTdFRkY2QUE1NUQ5OEMxNjJFMUFBRC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhwLTZ0TnVHZjJ2WnAtXzJxbFhaakJZ dUdxMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iZjUyZDgxNC0z ZDJmLTRkZjQtODE0MC1kZmI1MzBmNzQ5MTIvMC9GMjlGQkFCNERCODY3RjZCRDlB N0VGRjZBQTU1RDk4QzE2MkUxQUFELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApvbkNIQk9otSMAzHoX49 E1+vhHd/auaqk6pUxkAba6sQoiKQ4svF8LiUEW4Z4ByRlyRXLhxbnFIcy+pLX01Q +Ny/0HAIJxYgGpNkf3MUmxNTtQn/0Xumm2vLUeiwVqbwIVB+Fps8FyKe4OE/8NEx aFV+CKX8j0sY6MsDspNKjbnBnUpRdAfpMumVAuOjyUrHqqhN+3ee6fBlSUIkFo4e 5YIoWRQRchwgZWknOY3Jvv+N6O7UWrAOo+XkopM+yMoWY9ZIr4hXqHBnZGQpGDT9 FC+tpJoz8mR/7PBwJLWLp6g5XX5eSHS/QkdUFflZ0jqZlK5824++aLzequATvQZf 5g== -----END CERTIFICATE-----Generated at Fri Dec 12 17:52:29 2025 by rpki-client