This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c5836e60-6a92-47ef-9b9b-92a84d6d35ba/1/E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.mft File: E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.mft (raw, json) Hash identifier: 72eOiz3b7MlWnmZHkUdfIQz5mMGc2m3dqVuhW3pWED0= Subject key identifier: B8:8F:08:C8:A2:B1:61:26:A3:13:07:4E:C9:BF:C3:6F:DC:76:1D:71 Authority key identifier: E8:9F:91:5D:86:BB:9F:13:D0:F2:29:CA:78:CD:6D:9F:3E:AB:CF:7C Certificate issuer: /CN=E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C Certificate serial: 6241A6A0C5066CB28640A1C6F4644D9DB76632E4 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c5836e60-6a92-47ef-9b9b-92a84d6d35ba/1/E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.mft Manifest number: BE Signing time: Tue 16 Dec 2025 05:55:54 +0000 Manifest this update: Tue 16 Dec 2025 05:50:54 +0000 Manifest next update: Wed 17 Dec 2025 06:07:54 +0000 Files and hashes: 1: E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.crl (hash: vU40fi9cqWYDofJ8uVmJI7eAkD42KadHvZwZSsuIOLM=) 2: 326131343a373538313a333936363a3a2f34382d3634203d3e20313939373633.roa (hash: +BDNAKrmKMibTT2xQwMz+K+qOmE3P6UuU3BvjMVQ0iI=) 3: 326131343a373538313a333937373a3a2f34382d3634203d3e20313939373633.roa (hash: 6W8xvuJxWbwP3DdLZ6e8Sa+pGsBO2lzU710UJC28MHg=) 4: 326131343a373538313a333966663a3a2f34382d3634203d3e20313939373633.roa (hash: aCq/jKA1GGay4DL6ZU284taMNq3/9u17cmIYZEHZP9Y=) 5: 326131343a373538313a333936313a3a2f34382d3634203d3e20313939373633.roa (hash: V25LiWzxXAuXeQVJTbroIsiNYHCj/akr9IIXebvCE7Q=) 6: 326131343a373538313a333936323a3a2f34382d3634203d3e20313939373633.roa (hash: oCjl7TQd0xhHJ9B8MSi48PHfMmMZri62JgNd0y5lz+I=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c5836e60-6a92-47ef-9b9b-92a84d6d35ba/1/E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.crl rsync://rsync.paas.rpki.ripe.net/repository/c5836e60-6a92-47ef-9b9b-92a84d6d35ba/1/E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 06:07:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:41:a6:a0:c5:06:6c:b2:86:40:a1:c6:f4:64:4d:9d:b7:66:32:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C Validity Not Before: Dec 16 05:50:54 2025 GMT Not After : Dec 17 06:07:54 2025 GMT Subject: CN=B88F08C8A2B16126A313074EC9BFC36FDC761D71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:73:57:47:d9:e9:9e:eb:70:cf:cd:f5:39:f6: 2b:40:25:e7:23:bb:de:36:fc:a8:84:37:36:25:e7: d0:55:eb:23:dd:40:1c:db:81:cb:1f:23:73:0b:88: 07:27:03:af:b5:d2:95:23:46:62:9b:c4:23:83:fe: ec:72:f3:21:c9:e2:a4:ae:b5:d2:ab:c0:5d:c4:dc: 89:94:e3:51:47:3f:e8:1d:bf:b3:46:2a:20:d9:7a: 9c:f1:a6:5c:2e:9b:64:bf:42:6c:db:7e:c3:9b:ff: d0:01:27:a9:20:f1:70:b8:92:34:e8:86:19:04:58: 5c:a7:bf:c3:f1:c9:ed:22:4b:67:b7:1b:f4:bd:8a: a2:4b:20:2f:fd:d3:75:62:b9:f9:c2:fe:0d:01:6b: 33:48:74:69:4f:72:96:2d:93:bf:43:0b:75:3c:05: cd:9e:58:3a:ad:3d:ce:d3:1c:7e:37:e9:cf:55:f8: a0:09:8a:fa:86:ff:92:14:8a:49:f8:93:1e:45:5f: 11:09:01:08:37:0e:f5:35:99:a7:1b:7f:b9:75:48: 6a:df:0c:fc:3b:bc:90:b7:20:80:c2:2c:6d:f8:5d: d9:d9:2b:0a:a6:72:1c:b4:52:3b:7f:4c:41:83:53: bb:14:1f:b6:53:2c:c8:b8:66:c5:51:65:bd:12:20: 5a:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:8F:08:C8:A2:B1:61:26:A3:13:07:4E:C9:BF:C3:6F:DC:76:1D:71 X509v3 Authority Key Identifier: keyid:E8:9F:91:5D:86:BB:9F:13:D0:F2:29:CA:78:CD:6D:9F:3E:AB:CF:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c5836e60-6a92-47ef-9b9b-92a84d6d35ba/1/E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c5836e60-6a92-47ef-9b9b-92a84d6d35ba/1/E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:55:cd:31:3d:73:89:b6:60:0d:c3:13:40:b7:b9:12:8f:81: 8d:74:be:24:e2:67:d8:98:19:b3:b7:0b:ec:65:df:35:54:97: 2d:38:68:a5:15:36:90:b3:66:af:47:41:50:f3:19:a5:b3:79: c3:fc:96:f0:20:8d:43:7c:18:33:14:8e:27:ad:d2:31:8a:2e: 76:44:5c:ad:d7:ee:c7:56:5c:88:a3:7c:38:0e:a5:46:29:ac: c5:21:d9:2b:ef:a9:66:11:44:e4:27:59:d7:d7:22:f0:53:81: ab:af:23:70:45:e5:1b:10:fc:f2:4b:bf:8d:20:36:f5:a5:66: 58:cf:3e:34:8e:da:a4:9e:a6:1d:a7:40:88:44:5d:49:e9:ad: 7c:35:6b:17:62:fc:bc:fb:66:fc:68:b8:2b:8c:7a:cf:2d:cb: 01:13:79:20:17:d5:f7:a3:73:45:69:34:3d:14:82:af:72:28: 09:c5:b4:8d:4c:7e:81:80:0b:5f:02:24:11:b9:e3:ab:a0:fc: 5b:c6:3d:4b:c6:1c:e6:94:e2:c1:a9:2c:2a:66:03:4f:34:3a: 9f:a1:7d:c7:25:3b:5f:00:18:fd:98:cc:2a:87:f9:ce:ce:7e: b4:de:f9:f0:a6:e4:80:61:2b:a4:9a:82:97:08:ef:02:7e:d6: 11:e8:13:43 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUYkGmoMUGbLKGQKHG9GRNnbdmMuQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTg5RjkxNUQ4NkJCOUYxM0QwRjIyOUNBNzhDRDZEOUYz RUFCQ0Y3QzAeFw0yNTEyMTYwNTUwNTRaFw0yNTEyMTcwNjA3NTRaMDMxMTAvBgNV BAMTKEI4OEYwOEM4QTJCMTYxMjZBMzEzMDc0RUM5QkZDMzZGREM3NjFENzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzc1dH2eme63DPzfU59itAJecj u942/KiENzYl59BV6yPdQBzbgcsfI3MLiAcnA6+10pUjRmKbxCOD/uxy8yHJ4qSu tdKrwF3E3ImU41FHP+gdv7NGKiDZepzxplwum2S/QmzbfsOb/9ABJ6kg8XC4kjTo hhkEWFynv8Pxye0iS2e3G/S9iqJLIC/903ViufnC/g0BazNIdGlPcpYtk79DC3U8 Bc2eWDqtPc7THH436c9V+KAJivqG/5IUikn4kx5FXxEJAQg3DvU1macbf7l1SGrf DPw7vJC3IIDCLG34XdnZKwqmchy0Ujt/TEGDU7sUH7ZTLMi4ZsVRZb0SIFrTAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUuI8IyKKxYSajEwdOyb/Db9x2HXEwHwYDVR0j BBgwFoAU6J+RXYa7nxPQ8inKeM1tnz6rz3wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzU4MzZlNjAtNmE5Mi00N2VmLTliOWItOTJhODRkNmQz NWJhLzEvRTg5RjkxNUQ4NkJCOUYxM0QwRjIyOUNBNzhDRDZEOUYzRUFCQ0Y3Qy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9FODlGOTE1RDg2QkI5RjEzRDBGMjI5Q0E3 OENENkQ5RjNFQUJDRjdDLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2M1ODM2ZTYwLTZhOTItNDdlZi05YjliLTkyYTg0ZDZkMzViYS8xL0U4OUY5MTVE ODZCQjlGMTNEMEYyMjlDQTc4Q0Q2RDlGM0VBQkNGN0MubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAZVc0x PXOJtmANwxNAt7kSj4GNdL4k4mfYmBmztwvsZd81VJctOGilFTaQs2avR0FQ8xml s3nD/JbwII1DfBgzFI4nrdIxii52RFyt1+7HVlyIo3w4DqVGKazFIdkr76lmEUTk J1nX1yLwU4GrryNwReUbEPzyS7+NIDb1pWZYzz40jtqknqYdp0CIRF1J6a18NWsX Yvy8+2b8aLgrjHrPLcsBE3kgF9X3o3NFaTQ9FIKvcigJxbSNTH6BgAtfAiQRueOr oPxbxj1LxhzmlOLBqSwqZgNPNDqfoX3HJTtfABj9mMwqh/nOzn603vnwpuSAYSuk moKXCO8CftYR6BND -----END CERTIFICATE-----Generated at Tue Dec 16 14:10:24 2025 by rpki-client