This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.mft File: 4C189E42F35C944D463D9EA6501F093EB62BA785.mft (raw, json) Hash identifier: 61arWrskqwSJTuWtiYH3flxAYnC4kQV+4S/bd8yc/cE= Subject key identifier: BA:C6:61:FF:F0:D2:CD:5E:5B:8F:85:0C:20:56:21:A2:0A:C3:C9:B4 Authority key identifier: 4C:18:9E:42:F3:5C:94:4D:46:3D:9E:A6:50:1F:09:3E:B6:2B:A7:85 Certificate issuer: /CN=4c189e42f35c944d463d9ea6501f093eb62ba785 Certificate serial: 40590A3B29C9839E8F8C27BE74FA8FAF4EFDD345 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.mft Manifest number: 03E2 Signing time: Thu 11 Dec 2025 19:01:37 +0000 Manifest this update: Thu 11 Dec 2025 18:56:37 +0000 Manifest next update: Fri 12 Dec 2025 21:05:37 +0000 Files and hashes: 1: 4C189E42F35C944D463D9EA6501F093EB62BA785.crl (hash: UT4BdktrZc32F69Rwb+lQSzNReepRSOobKCEfzdEoKo=) 2: 3138352e31332e3232372e302f32342d3234203d3e2039333034.roa (hash: K2jdp87W7OWk11i68RJYc6WUM+0fdCVTP9+PN22bU6U=) 3: 3135392e3235332e352e302f32342d3234203d3e203533333536.roa (hash: 9QDAlicDZU2dKA/slyHao02LhaPY7/2iCnESN6BbiqA=) 4: 3135392e3235332e332e302f32342d3234203d3e203533333536.roa (hash: uV5gP669aq0NtuCXuZBm6wWsNYwP/024H/522nPjCx8=) 5: 3135392e3235332e302e302f32342d3234203d3e20323036323831.roa (hash: WedmFf2QIQuuVKf/1QK4DuIi+i1j87BtcRZVJGzgY68=) 6: 3135392e3235332e322e302f32342d3234203d3e20323134313433.roa (hash: qmuf0vkLJtyYNBk6lONse3deUisFPtDCWrL9dDMaewk=) 7: 3138352e31332e3232352e302f32342d3234203d3e20323132323338.roa (hash: aEdAeNisTHp0DrhGmu6wes4iqejlgHHMcCeDYK0A3FQ=) 8: 3135392e3235332e362e302f32342d3234203d3e20323134313433.roa (hash: ium02BtB+GfbIHn2YGUt7i7of/NJnXnez2EEtYL+duE=) 9: 3138352e31332e3232362e302f32342d3234203d3e20313532313739.roa (hash: kbUfx2g7/W6xr6BcRBqigrahrWSKqlZaZ80tT5+SQUk=) 10: 3135392e3235332e342e302f32342d3234203d3e20323134313433.roa (hash: JO9eMRAwPS+hZf1UF8eYFlm1nYrsRkC7Oj1Lhed/bAU=) 11: 3138352e31332e3232342e302f32342d3234203d3e20313335333931.roa (hash: Y4VGjNKxdM1kt8f9/kG9Dub6HzXbG7OXpVqySki/RW4=) 12: 3135392e3235332e372e302f32342d3234203d3e20323134313433.roa (hash: 8/3XzRXXjmYpSthB/PqRmvioB+R4a98BuFhtWRNYmtk=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.crl rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.mft rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:59:0a:3b:29:c9:83:9e:8f:8c:27:be:74:fa:8f:af:4e:fd:d3:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c189e42f35c944d463d9ea6501f093eb62ba785 Validity Not Before: Dec 11 18:56:37 2025 GMT Not After : Dec 12 21:05:37 2025 GMT Subject: CN=BAC661FFF0D2CD5E5B8F850C205621A20AC3C9B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:d5:d9:32:50:c9:d8:64:c4:7a:fb:ab:c0:86: 71:e5:44:d3:a8:11:cf:0a:9d:e1:eb:36:11:8a:60: 54:14:0c:79:62:26:99:b6:b2:75:45:a2:cb:5c:c4: 6b:a3:92:89:86:60:4f:35:48:6c:70:23:1b:dc:21: 75:b7:b1:87:13:8a:80:21:e2:64:13:51:a0:f3:b1: 31:9f:de:fc:ef:be:3e:e3:db:c4:f3:e3:9e:e3:34: 76:27:a0:df:a3:1d:b5:c3:78:ae:40:f0:de:79:86: 2d:54:78:e5:f7:44:f7:c3:9c:67:f1:00:84:eb:88: 25:30:f8:a6:74:15:b9:ee:b3:6e:f9:ae:8c:d7:07: 36:7b:b3:c0:ba:bc:da:da:23:03:63:1a:3d:1a:82: b5:19:ea:1d:17:b3:b4:f3:f0:31:15:e1:8e:c4:d6: 07:e7:55:eb:06:0a:27:1c:65:4a:52:23:f9:64:05: af:3f:14:04:b5:b6:e7:46:13:fa:c1:42:19:52:78: fd:a3:74:bd:7f:e6:76:dd:a4:0c:18:dd:54:b7:90: 30:fb:21:42:f2:50:8a:f0:bd:9f:41:6c:a5:f7:d4: 22:3a:97:5c:4b:b0:e2:35:6f:8b:d1:93:75:04:aa: 39:ac:f7:d1:04:e9:c0:e4:62:d9:b8:f1:28:6f:f4: 0d:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:C6:61:FF:F0:D2:CD:5E:5B:8F:85:0C:20:56:21:A2:0A:C3:C9:B4 X509v3 Authority Key Identifier: keyid:4C:18:9E:42:F3:5C:94:4D:46:3D:9E:A6:50:1F:09:3E:B6:2B:A7:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:33:01:f2:7d:de:9a:e9:5f:20:18:e0:6c:2e:ee:b2:13:93: bb:38:60:af:9a:f6:09:81:da:21:3c:99:90:26:b3:3a:a0:d1: e6:3a:80:d4:36:17:65:01:88:0e:e3:c4:9c:86:30:79:79:44: 2b:60:83:db:04:ac:e6:f4:3e:2b:83:4a:74:a3:18:0a:23:1a: 7b:96:3b:8a:02:fd:15:89:0e:62:69:05:b8:f7:62:2b:e0:c5: 35:c3:51:50:d3:e3:6a:39:cd:da:1d:75:79:0b:4e:ee:4d:71: ce:c6:fe:a1:96:7a:76:e1:19:67:95:e8:43:8e:5f:5d:a2:8c: 3a:02:c4:57:c7:1a:a1:f6:c9:c8:7c:9d:d3:ac:7f:ea:97:ae: 0f:98:a6:65:e9:e1:6f:e2:03:5b:3d:90:e3:3c:73:6d:77:c2: d2:2e:1f:b9:5e:02:c6:d9:14:e2:87:41:1e:56:be:c0:57:70: 97:30:8a:58:a9:73:86:67:1c:87:a2:18:02:6d:1c:0f:f3:4e: b5:2f:da:ea:c7:46:62:ec:86:5d:27:88:25:ea:67:9c:6e:ef: 0b:c0:04:4f:74:0a:3a:46:bc:5b:9e:0a:28:8d:53:81:43:e3: f9:f9:47:2e:5e:37:16:5b:c0:be:24:f1:24:5e:7b:b9:8b:04: e2:0d:b7:7a -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUQFkKOynJg56PjCe+dPqPr07900UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGMxODllNDJmMzVjOTQ0ZDQ2M2Q5ZWE2NTAxZjA5M2Vi NjJiYTc4NTAeFw0yNTEyMTExODU2MzdaFw0yNTEyMTIyMTA1MzdaMDMxMTAvBgNV BAMTKEJBQzY2MUZGRjBEMkNENUU1QjhGODUwQzIwNTYyMUEyMEFDM0M5QjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDn1dkyUMnYZMR6+6vAhnHlRNOo Ec8KneHrNhGKYFQUDHliJpm2snVFostcxGujkomGYE81SGxwIxvcIXW3sYcTioAh 4mQTUaDzsTGf3vzvvj7j28Tz457jNHYnoN+jHbXDeK5A8N55hi1UeOX3RPfDnGfx AITriCUw+KZ0Fbnus275rozXBzZ7s8C6vNraIwNjGj0agrUZ6h0Xs7Tz8DEV4Y7E 1gfnVesGCiccZUpSI/lkBa8/FAS1tudGE/rBQhlSeP2jdL1/5nbdpAwY3VS3kDD7 IULyUIrwvZ9BbKX31CI6l1xLsOI1b4vRk3UEqjms99EE6cDkYtm48Shv9A0/AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUusZh//DSzV5bj4UMIFYhogrDybQwHwYDVR0j BBgwFoAUTBieQvNclE1GPZ6mUB8JPrYrp4UwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2U1MTBlMTctMzFmYS00MTRiLTk4OWUtMDI2ZGJiNmZk ZjUxLzAvNEMxODlFNDJGMzVDOTQ0RDQ2M0Q5RUE2NTAxRjA5M0VCNjJCQTc4NS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1RCaWVRdk5jbEUxR1BaNm1VQjhKUHJZ cnA0VS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9jZTUxMGUxNy0z MWZhLTQxNGItOTg5ZS0wMjZkYmI2ZmRmNTEvMC80QzE4OUU0MkYzNUM5NDRENDYz RDlFQTY1MDFGMDkzRUI2MkJBNzg1Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtzMB8n3emulfIBjgbC7u shOTuzhgr5r2CYHaITyZkCazOqDR5jqA1DYXZQGIDuPEnIYweXlEK2CD2wSs5vQ+ K4NKdKMYCiMae5Y7igL9FYkOYmkFuPdiK+DFNcNRUNPjajnN2h11eQtO7k1xzsb+ oZZ6duEZZ5XoQ45fXaKMOgLEV8caofbJyHyd06x/6peuD5imZenhb+IDWz2Q4zxz bXfC0i4fuV4CxtkU4odBHla+wFdwlzCKWKlzhmcch6IYAm0cD/NOtS/a6sdGYuyG XSeIJepnnG7vC8AET3QKOka8W54KKI1TgUPj+flHLl43FlvAviTxJF57uYsE4g23 eg== -----END CERTIFICATE-----Generated at Fri Dec 12 02:18:43 2025 by rpki-client