This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft
File: CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft (raw, json)
Hash identifier: JhiSsIRwIvvxKK0WmOBJ3ltBeEnyVMVDtXOTPnS1lEc=
Subject key identifier: B3:C3:88:94:AE:59:22:B9:6D:6D:83:4F:E1:90:6E:99:FD:78:43:D2
Authority key identifier: CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
Certificate issuer: /CN=cefce449bea8deaedb1804dba25c584df5873dc4
Certificate serial: 1991AB11C2AAF95381834BFF442815364B0DB929
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft
Manifest number: 05C6
Signing time: Tue 09 Dec 2025 16:41:37 +0000
Manifest this update: Tue 09 Dec 2025 16:36:37 +0000
Manifest next update: Wed 10 Dec 2025 18:41:37 +0000
Files and hashes: 1: 34352e36362e3135302e302f32342d3234203d3e20333937333733.roa (hash: 5DUJVA+pSWGfl0obwZfoWi9lZoQLdECnA4H9VJT+xbw=)
2: 38332e3133382e35302e302f32342d3234203d3e20333936303236.roa (hash: X0JUgkm7bWAXyQ4SYkYDH/4wFz74Xhku1L5c/GFGAX0=)
3: 3137362e3132362e3130352e302f32342d3234203d3e20313432313131.roa (hash: BtY1Y1S506xUDGL3HPYJouh8HE8Bfu5LiAut28ETk7w=)
4: 3134362e31392e35332e302f32342d3234203d3e20313532363732.roa (hash: R9JC3sHytncw5nwNxoiEF3pniUcJV4GyDa9/Vt4/Lgk=)
5: 3231332e352e3132382e302f32342d3234203d3e20313939303538.roa (hash: gEy9Oc8qQMzfRi3Vg23eKfgAotPRUQjE79aKVoo7YPw=)
6: 3231322e32342e3132372e302f32342d3234203d3e203136323736.roa (hash: Rs7w/chVuiM2q/eQlWg7hYcTj07lMXsGjRzGrKCmtq8=)
7: 3231322e31382e3131352e302f32342d3234203d3e20323135323234.roa (hash: 3xKezHtI+fBhKmdU9ku1wV8BXxr20U7aYSfVPGdTqek=)
8: 34352e382e3137352e302f32342d3234203d3e2037353632.roa (hash: gPOJ5OYy4C3HcRMZFW4SHF49vn1yyv2a5aCn7ZHuj8I=)
9: 34352e382e3137322e302f32342d3234203d3e20323035373333.roa (hash: 1rINDmT9fsbaOlLLqeJ7eTf+zBwneu4N6jBRg+Yc4gc=)
10: 34352e382e3137332e302f32342d3234203d3e20323032363733.roa (hash: 5zwugYWKE+SXj7j9OQLYcPTCHp3CNiw9ZvtoZL3oq9E=)
11: 3134362e31392e3231362e302f32342d3234203d3e20313334363737.roa (hash: r2VWTeXnfDWuim8gDU2ktI3y2NGYwT6ofTi2l1VlIzk=)
12: 3134362e31392e3231352e302f32342d3234203d3e203432383331.roa (hash: iRYq59bmQokDL09C0IXxdPyvoOhAH6U1C6tDW9/0QSs=)
13: 3138352e3231322e3131332e302f32342d3234203d3e20323032363738.roa (hash: 0I5n2Zxpd6ZVl5qO7efqO/5G3aMiaibcayoOxL2ddNw=)
14: 3133302e3139332e37352e302f32342d3234203d3e2035353131.roa (hash: /BJwUN9ogW9gUI5fEpq5TqdItx+gr05E4PzR5YVIKUQ=)
15: 3231322e31382e3131362e302f32342d3234203d3e203139343337.roa (hash: 2oZavsRfA1Q40x9PaOnupB4Ub1RzFaGZLNyIg+RCt6s=)
16: 36322e332e31382e302f32342d3234203d3e20323136323931.roa (hash: Mv5UcVUln6H+m2ppbCqxuT1Ft1vn2bxsaMxY5fGcRzU=)
17: 3134362e31392e3231352e302f32342d3234203d3e20323036323136.roa (hash: bpy3XEt/Glb0ctRVcD/5DBdI9ndCLAP4MyfQv0tMcPQ=)
18: 34352e382e3137342e302f32342d3234203d3e2037353632.roa (hash: M0Bu6CLDPFxg3KYMEJy4xB3uyzQGHvj9eJ5j3Kf1CaE=)
19: 322e35382e38352e302f32342d3234203d3e20383334.roa (hash: tlmvzJ4yU5noW/rrvRUB30jWwtpRp8Or9JFg8aJLA6I=)
20: 36322e3132322e3138352e302f32342d3234203d3e20333937343233.roa (hash: xE+Kag7RYYIC/6Gdcunr8SGE54x+vaEZMv3MSSvdWDk=)
21: 36322e332e31382e302f32342d3234203d3e20323136323232.roa (hash: xpvX4DbRPgQDl25Wd7lh+sIK3ZuIxEe17qogwqcSmAY=)
22: 34352e36362e3134382e302f32342d3234203d3e203631333137.roa (hash: 9x1QRSqxq7oLu3gp885IDU4m85ilCP4ZqtuwIJ3/i80=)
23: 36322e3132322e3138362e302f32342d3234203d3e203631333137.roa (hash: gCbw4t50he127cuIH8e7X9edy5RGT/dSqPZYrNWwgUg=)
24: 3133302e3139332e37352e302f32342d3234203d3e20323132383135.roa (hash: 0KfkzJx6v7WvN2jvvqOfF0fI8+Z91Ctb8PuaEX/6n0M=)
25: 3133302e3139332e37352e302f32342d3234203d3e20323136313539.roa (hash: OScz32SKWiRDIr+bw6qduusJprZYMrHU3JDPa1ynUL8=)
26: 38392e3130372e392e302f32342d3234203d3e20313534303439.roa (hash: W8Nr5Pu7VW6wiorrg4hzFmpLYlb8TxaBJrzhK/IwqPg=)
27: 34352e31332e3134392e302f32342d3234203d3e203631333137.roa (hash: Q3PPUlB/JvHRLRIa7IieyrUl/m1wHR8wutqNN0xNel0=)
28: 34352e382e3137332e302f32342d3234203d3e20323135303531.roa (hash: KTke8ZWqVLA3ANHJ800vvcDHEpQ20KNFTJcuTxVUvFI=)
29: 322e35382e38372e302f32342d3234203d3e203631353936.roa (hash: M45ljxfpitcFdQWEd3Fma8ldSrrzn4db+RAFQgTFz/E=)
30: CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl (hash: wS2kpadyl6v8zjWkkXrRziEFlGQymJJqxYyYLSMsyyg=)
31: 34352e36362e3135312e302f32342d3234203d3e20333933393432.roa (hash: WkX/VhOIB2Xh55Xo8/0X7WB7DxjTEctJTPIyu/NmXnQ=)
32: 34352e31332e3135302e302f32342d3234203d3e2039323934.roa (hash: GNXJYPkhU5PAMN0CYYnBrOwVIuiyCeBKcANNAOXiG4w=)
33: 3134362e31392e32322e302f32342d3234203d3e2039323934.roa (hash: 4ThssK8ksZD7mFwPOIttfQuPgXi87SmagzrwaTeHUHI=)
34: 3134362e31392e35332e302f32342d3234203d3e20313432313131.roa (hash: 65asAzRxJvDe1YCujUmWbIiKCzT1TU5iNap0EoVkO3Y=)
35: 3133302e3139332e37352e302f32342d3234203d3e20323135373237.roa (hash: DfFd6UBLBkplTu5ftGj8Fsf1wrwJQPF9A4xQAHF4/X8=)
36: 3138352e3235312e32332e302f32342d3234203d3e20323030303137.roa (hash: 1nHeHr5ez78VSQCwBDXobb8Hijb3cSpgsJnQt2+b4+w=)
37: 322e35382e38372e302f32342d3234203d3e20323634343039.roa (hash: mkGL2Y74THGESksATgz18aFujAfAh2hZzUMM/zMEgtE=)
38: 3137362e3132362e3130352e302f32342d3234203d3e20313532363732.roa (hash: ds/1M3gFH31reCXMtWJtKut2HrejgsPE/Ioz8CidATY=)
39: 34352e36362e3134392e302f32342d3234203d3e20323132323338.roa (hash: UYRhWU2YtAQySXQJqSHhc8PkHnSqANYorHfiKIAiPmA=)
40: 3139332e33352e3232362e302f32342d3234203d3e203536393632.roa (hash: 4UgfT6p/2Q50B5wnsVKN4mv/hFd7RZLIZ15wgnKLY7k=)
41: 34352e31332e3135312e302f32342d3234203d3e20323135373033.roa (hash: aPdRk0yj6WHAWMnGbb2l+kFCRQlNzfB9p5fiHofDu7s=)
42: 3133302e3139332e37352e302f32342d3234203d3e20313938383833.roa (hash: X0vCJBzdFH4FS7gRUxhOxAXsLYNsOL4GffJBGoP62Nc=)
43: 34352e31332e3134382e302f32332d3233203d3e203632333837.roa (hash: 5EJNV4UhdWOuwnTNcgbmbjrtx0zc2Gwd0NznlniRrK0=)
44: 322e35382e38342e302f32342d3234203d3e20323136323231.roa (hash: U1S3You+fAZhVhvcdrRdWu8kGCzRG+R0tCv8DlClNys=)
45: 322e35382e38362e302f32342d3234203d3e203432383331.roa (hash: Ga9fSUVi9MuY7PSZ+TJisDhWnGoWEZ4TH7+EN9QxZpk=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl
rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Dec 2025 16:15:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:91:ab:11:c2:aa:f9:53:81:83:4b:ff:44:28:15:36:4b:0d:b9:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cefce449bea8deaedb1804dba25c584df5873dc4
Validity
Not Before: Dec 9 16:36:37 2025 GMT
Not After : Dec 10 18:41:37 2025 GMT
Subject: CN=B3C38894AE5922B96D6D834FE1906E99FD7843D2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:7b:67:b9:39:5d:8a:38:b8:fe:29:a1:07:37:
c4:6a:93:a6:69:31:9b:4f:53:30:51:2d:68:f7:1c:
75:8b:ac:23:3a:ae:1e:41:82:b9:2b:5c:a3:31:d0:
3f:30:26:ad:4a:c6:24:0e:a4:69:a3:45:42:47:ee:
f2:22:18:66:9f:55:53:ef:df:16:94:3d:8b:75:0c:
87:60:f7:61:cd:21:74:6c:eb:01:03:5e:07:5f:2a:
0d:ab:30:75:9e:90:61:e6:0b:f5:18:b4:c1:a0:b6:
75:ea:ae:a6:c3:cb:34:39:10:0a:a1:a9:fc:b5:a1:
80:12:46:95:7c:3c:43:e7:42:40:b6:09:bc:05:fe:
72:03:0b:3c:41:52:de:2a:32:66:5a:d7:d6:82:c9:
ef:b1:a7:fd:35:7d:9d:6b:d7:62:9a:ec:c4:00:a2:
82:7f:58:0f:43:94:ce:0b:fd:56:5c:9e:79:83:7f:
d4:eb:ff:66:0d:fb:6d:2c:0a:78:30:7b:b7:48:00:
05:53:35:13:ed:5c:76:a3:3f:b7:67:c8:c3:6b:bb:
08:f9:bf:c6:31:cf:8d:6c:9c:b9:e7:f1:fa:29:dd:
ea:f7:e1:b7:69:0b:44:29:7f:8f:80:b7:6e:3f:73:
1b:b8:ca:2a:18:a4:0f:98:1a:e1:ca:a3:55:03:10:
33:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:C3:88:94:AE:59:22:B9:6D:6D:83:4F:E1:90:6E:99:FD:78:43:D2
X509v3 Authority Key Identifier:
keyid:CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:f2:b6:25:17:e4:b0:2b:13:a1:b5:fd:88:a9:2c:52:8c:f2:
d0:73:c6:83:c3:35:c1:73:d5:2c:65:e9:88:5d:0d:fc:a9:d9:
35:f6:35:66:08:31:a9:1d:b3:35:a0:b5:52:af:c3:70:77:2a:
f7:27:18:c9:7e:cb:fd:a2:b6:0a:2f:08:85:77:90:1f:ea:e0:
0c:dc:d6:71:a0:ff:ca:b2:48:9c:0a:e0:84:f6:c7:76:0e:be:
c9:2b:a4:6a:35:03:a8:79:c0:db:a3:36:4f:2e:63:50:67:5d:
a0:00:bb:65:60:2a:0b:23:e8:d7:46:86:5a:19:7d:5f:a4:4a:
18:f7:1f:8b:fa:9b:e1:89:13:29:dc:ad:8f:24:cb:29:ee:7b:
5e:68:69:fe:4e:f2:db:67:54:20:aa:ae:bb:3b:d3:59:15:40:
b3:6c:9d:2f:12:a5:3e:6f:86:6c:30:cf:cb:5f:73:3b:55:a2:
66:c6:a9:7a:4a:db:ea:45:90:8c:52:20:24:aa:9a:2d:8e:2a:
f4:21:4d:4c:aa:3f:e1:5f:09:3b:e4:e9:6d:11:de:95:ef:2b:
c3:21:6c:f5:ff:12:97:96:27:81:a4:24:5d:17:5f:08:8f:ab:
a5:db:11:c5:16:77:27:8f:6d:83:a9:fb:59:ef:a0:79:14:29:
aa:dd:9d:22
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUGZGrEcKq+VOBg0v/RCgVNksNuSkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoY2VmY2U0NDliZWE4ZGVhZWRiMTgwNGRiYTI1YzU4NGRm
NTg3M2RjNDAeFw0yNTEyMDkxNjM2MzdaFw0yNTEyMTAxODQxMzdaMDMxMTAvBgNV
BAMTKEIzQzM4ODk0QUU1OTIyQjk2RDZEODM0RkUxOTA2RTk5RkQ3ODQzRDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCve2e5OV2KOLj+KaEHN8Rqk6Zp
MZtPUzBRLWj3HHWLrCM6rh5BgrkrXKMx0D8wJq1KxiQOpGmjRUJH7vIiGGafVVPv
3xaUPYt1DIdg92HNIXRs6wEDXgdfKg2rMHWekGHmC/UYtMGgtnXqrqbDyzQ5EAqh
qfy1oYASRpV8PEPnQkC2CbwF/nIDCzxBUt4qMmZa19aCye+xp/01fZ1r12Ka7MQA
ooJ/WA9DlM4L/VZcnnmDf9Tr/2YN+20sCngwe7dIAAVTNRPtXHajP7dnyMNruwj5
v8Yxz41snLnn8fop3er34bdpC0Qpf4+At24/cxu4yioYpA+YGuHKo1UDEDMtAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUs8OIlK5ZIrltbYNP4ZBumf14Q9IwHwYDVR0j
BBgwFoAUzvzkSb6o3q7bGATbolxYTfWHPcQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZDFiMzVmOGItNmY0OC00YmFkLWIxODUtNWMxZGFhOGFj
ZGE5LzAvQ0VGQ0U0NDlCRUE4REVBRURCMTgwNERCQTI1QzU4NERGNTg3M0RDNC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3p2emtTYjZvM3E3YkdBVGJvbHhZVGZX
SFBjUS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kMWIzNWY4Yi02
ZjQ4LTRiYWQtYjE4NS01YzFkYWE4YWNkYTkvMC9DRUZDRTQ0OUJFQThERUFFREIx
ODA0REJBMjVDNTg0REY1ODczREM0Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyvK2JRfksCsTobX9iKks
Uozy0HPGg8M1wXPVLGXpiF0N/KnZNfY1ZggxqR2zNaC1Uq/DcHcq9ycYyX7L/aK2
Ci8IhXeQH+rgDNzWcaD/yrJInArghPbHdg6+ySukajUDqHnA26M2Ty5jUGddoAC7
ZWAqCyPo10aGWhl9X6RKGPcfi/qb4YkTKdytjyTLKe57Xmhp/k7y22dUIKquuzvT
WRVAs2ydLxKlPm+GbDDPy19zO1WiZsapekrb6kWQjFIgJKqaLY4q9CFNTKo/4V8J
O+TpbRHele8rwyFs9f8Sl5YngaQkXRdfCI+rpdsRxRZ3J49tg6n7We+geRQpqt2d
Ig==
-----END CERTIFICATE-----
Generated at Tue Dec 9 22:55:58 2025 by rpki-client