This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft File: CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft (raw, json) Hash identifier: p4hIfANCaKPO7gpnAfW3pDZ4uowJJ6nz7iV/tLC5QgI= Subject key identifier: 0E:52:9C:4C:D3:77:13:4C:6D:5A:B7:BA:30:5C:CC:C1:2C:07:50:32 Authority key identifier: CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4 Certificate issuer: /CN=cefce449bea8deaedb1804dba25c584df5873dc4 Certificate serial: 3CC7A656E4FE212B365E840E764E6ED5136C63DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft Manifest number: 05B2 Signing time: Tue 25 Nov 2025 18:35:50 +0000 Manifest this update: Tue 25 Nov 2025 18:30:50 +0000 Manifest next update: Wed 26 Nov 2025 22:10:50 +0000 Files and hashes: 1: 34352e31332e3134382e302f32332d3233203d3e203632333837.roa (hash: 5EJNV4UhdWOuwnTNcgbmbjrtx0zc2Gwd0NznlniRrK0=) 2: 36322e332e31382e302f32342d3234203d3e20323136323931.roa (hash: Mv5UcVUln6H+m2ppbCqxuT1Ft1vn2bxsaMxY5fGcRzU=) 3: 322e35382e38342e302f32342d3234203d3e20323136323231.roa (hash: U1S3You+fAZhVhvcdrRdWu8kGCzRG+R0tCv8DlClNys=) 4: 322e35382e38352e302f32342d3234203d3e2039333034.roa (hash: tirW2IpV28pqP9ZeL9zAVzFPWptjwkyUdF/HXTrgIfQ=) 5: 3133302e3139332e37352e302f32342d3234203d3e20323135373237.roa (hash: DfFd6UBLBkplTu5ftGj8Fsf1wrwJQPF9A4xQAHF4/X8=) 6: 3134362e31392e3231352e302f32342d3234203d3e20323036323136.roa (hash: bpy3XEt/Glb0ctRVcD/5DBdI9ndCLAP4MyfQv0tMcPQ=) 7: 322e35382e38362e302f32342d3234203d3e203432383331.roa (hash: Ga9fSUVi9MuY7PSZ+TJisDhWnGoWEZ4TH7+EN9QxZpk=) 8: CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl (hash: ynD9/sF3yBSvfdR1J7tNLXvIlRfA4R00v8MBh4k7f/4=) 9: 3139332e33352e3232362e302f32342d3234203d3e203536393632.roa (hash: 4UgfT6p/2Q50B5wnsVKN4mv/hFd7RZLIZ15wgnKLY7k=) 10: 322e35382e38372e302f32342d3234203d3e203631353936.roa (hash: M45ljxfpitcFdQWEd3Fma8ldSrrzn4db+RAFQgTFz/E=) 11: 322e35382e38372e302f32342d3234203d3e20323634343039.roa (hash: mkGL2Y74THGESksATgz18aFujAfAh2hZzUMM/zMEgtE=) 12: 34352e382e3137352e302f32342d3234203d3e2037353632.roa (hash: gPOJ5OYy4C3HcRMZFW4SHF49vn1yyv2a5aCn7ZHuj8I=) 13: 34352e382e3137332e302f32342d3234203d3e20323032363733.roa (hash: 5zwugYWKE+SXj7j9OQLYcPTCHp3CNiw9ZvtoZL3oq9E=) 14: 34352e36362e3135302e302f32342d3234203d3e20333937333733.roa (hash: 5DUJVA+pSWGfl0obwZfoWi9lZoQLdECnA4H9VJT+xbw=) 15: 3137362e3132362e3130352e302f32342d3234203d3e20313532363732.roa (hash: ds/1M3gFH31reCXMtWJtKut2HrejgsPE/Ioz8CidATY=) 16: 34352e31332e3135312e302f32342d3234203d3e20323135373033.roa (hash: aPdRk0yj6WHAWMnGbb2l+kFCRQlNzfB9p5fiHofDu7s=) 17: 34352e31332e3135302e302f32342d3234203d3e2039323934.roa (hash: GNXJYPkhU5PAMN0CYYnBrOwVIuiyCeBKcANNAOXiG4w=) 18: 3231322e31382e3131352e302f32342d3234203d3e20323135323234.roa (hash: 3xKezHtI+fBhKmdU9ku1wV8BXxr20U7aYSfVPGdTqek=) 19: 3137362e3132362e3130352e302f32342d3234203d3e20313432313131.roa (hash: BtY1Y1S506xUDGL3HPYJouh8HE8Bfu5LiAut28ETk7w=) 20: 34352e36362e3135312e302f32342d3234203d3e20333933393432.roa (hash: WkX/VhOIB2Xh55Xo8/0X7WB7DxjTEctJTPIyu/NmXnQ=) 21: 34352e382e3137342e302f32342d3234203d3e2037353632.roa (hash: M0Bu6CLDPFxg3KYMEJy4xB3uyzQGHvj9eJ5j3Kf1CaE=) 22: 3138352e3235312e32332e302f32342d3234203d3e20323030303137.roa (hash: 1nHeHr5ez78VSQCwBDXobb8Hijb3cSpgsJnQt2+b4+w=) 23: 3133302e3139332e37352e302f32342d3234203d3e2035353131.roa (hash: /BJwUN9ogW9gUI5fEpq5TqdItx+gr05E4PzR5YVIKUQ=) 24: 34352e36362e3134382e302f32342d3234203d3e203631333137.roa (hash: 9x1QRSqxq7oLu3gp885IDU4m85ilCP4ZqtuwIJ3/i80=) 25: 34352e36362e3134392e302f32342d3234203d3e20323132323338.roa (hash: UYRhWU2YtAQySXQJqSHhc8PkHnSqANYorHfiKIAiPmA=) 26: 3134362e31392e35332e302f32342d3234203d3e20313532363732.roa (hash: R9JC3sHytncw5nwNxoiEF3pniUcJV4GyDa9/Vt4/Lgk=) 27: 3133302e3139332e37352e302f32342d3234203d3e20313938383833.roa (hash: X0vCJBzdFH4FS7gRUxhOxAXsLYNsOL4GffJBGoP62Nc=) 28: 3133302e3139332e37352e302f32342d3234203d3e20323136313539.roa (hash: OScz32SKWiRDIr+bw6qduusJprZYMrHU3JDPa1ynUL8=) 29: 38332e3133382e35302e302f32342d3234203d3e20333936303236.roa (hash: X0JUgkm7bWAXyQ4SYkYDH/4wFz74Xhku1L5c/GFGAX0=) 30: 3134362e31392e3231352e302f32342d3234203d3e203432383331.roa (hash: iRYq59bmQokDL09C0IXxdPyvoOhAH6U1C6tDW9/0QSs=) 31: 36322e3132322e3138362e302f32342d3234203d3e203631333137.roa (hash: gCbw4t50he127cuIH8e7X9edy5RGT/dSqPZYrNWwgUg=) 32: 36322e332e31382e302f32342d3234203d3e20323136323232.roa (hash: xpvX4DbRPgQDl25Wd7lh+sIK3ZuIxEe17qogwqcSmAY=) 33: 3138352e3231322e3131332e302f32342d3234203d3e20323032363738.roa (hash: 0I5n2Zxpd6ZVl5qO7efqO/5G3aMiaibcayoOxL2ddNw=) 34: 34352e382e3137332e302f32342d3234203d3e20323135303531.roa (hash: KTke8ZWqVLA3ANHJ800vvcDHEpQ20KNFTJcuTxVUvFI=) 35: 3134362e31392e35332e302f32342d3234203d3e20313432313131.roa (hash: 65asAzRxJvDe1YCujUmWbIiKCzT1TU5iNap0EoVkO3Y=) 36: 3231322e31382e3131362e302f32342d3234203d3e203139343337.roa (hash: 2oZavsRfA1Q40x9PaOnupB4Ub1RzFaGZLNyIg+RCt6s=) 37: 3134362e31392e32322e302f32342d3234203d3e2039323934.roa (hash: 4ThssK8ksZD7mFwPOIttfQuPgXi87SmagzrwaTeHUHI=) 38: 3133302e3139332e37352e302f32342d3234203d3e20323132383135.roa (hash: 0KfkzJx6v7WvN2jvvqOfF0fI8+Z91Ctb8PuaEX/6n0M=) 39: 3134362e31392e3231362e302f32342d3234203d3e20313334363737.roa (hash: r2VWTeXnfDWuim8gDU2ktI3y2NGYwT6ofTi2l1VlIzk=) 40: 34352e31332e3134392e302f32342d3234203d3e203631333137.roa (hash: Q3PPUlB/JvHRLRIa7IieyrUl/m1wHR8wutqNN0xNel0=) 41: 3231322e32342e3132372e302f32342d3234203d3e203136323736.roa (hash: Rs7w/chVuiM2q/eQlWg7hYcTj07lMXsGjRzGrKCmtq8=) 42: 34352e382e3137322e302f32342d3234203d3e20323035373333.roa (hash: 1rINDmT9fsbaOlLLqeJ7eTf+zBwneu4N6jBRg+Yc4gc=) 43: 3231332e352e3132382e302f32342d3234203d3e20313939303538.roa (hash: gEy9Oc8qQMzfRi3Vg23eKfgAotPRUQjE79aKVoo7YPw=) 44: 36322e3132322e3138352e302f32342d3234203d3e20333937343233.roa (hash: xE+Kag7RYYIC/6Gdcunr8SGE54x+vaEZMv3MSSvdWDk=) 45: 38392e3130372e392e302f32342d3234203d3e20313534303439.roa (hash: W8Nr5Pu7VW6wiorrg4hzFmpLYlb8TxaBJrzhK/IwqPg=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 26 Nov 2025 22:10:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:c7:a6:56:e4:fe:21:2b:36:5e:84:0e:76:4e:6e:d5:13:6c:63:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cefce449bea8deaedb1804dba25c584df5873dc4 Validity Not Before: Nov 25 18:30:50 2025 GMT Not After : Nov 26 22:10:50 2025 GMT Subject: CN=0E529C4CD377134C6D5AB7BA305CCCC12C075032 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:f3:4b:28:d4:72:d0:d6:d7:24:bf:88:6d:b2: 96:a3:f4:85:a3:e5:09:42:05:8e:3c:f9:aa:24:ca: 18:69:b5:9f:43:95:c7:46:c2:40:74:4a:78:74:57: b6:5f:03:96:f9:70:32:9d:ff:1e:b5:8c:d6:6c:b1: 8e:31:74:bc:21:52:fd:74:29:3b:ca:12:06:9b:45: 9a:76:f4:01:96:b6:56:59:7d:64:d7:1f:c1:15:9c: cd:06:0b:c3:44:fe:4f:82:8d:4d:b5:ef:60:03:cf: 91:9c:4d:7e:3d:c3:a9:d4:b7:79:31:cb:4b:d2:f3: 54:96:a3:91:82:03:32:e3:74:0f:2a:52:00:5d:83: db:0f:a2:8e:33:33:0b:52:4f:df:92:2d:3c:ed:75: c1:ea:02:1d:0e:63:ad:2b:c6:9c:3b:8b:42:3a:0e: 42:09:d8:b8:28:d4:4c:da:98:b9:8e:4e:58:f0:4a: 4d:ad:7d:6f:d8:52:48:02:3b:62:d2:08:19:70:28: 32:6a:1c:d1:fe:09:97:d2:b3:6c:2a:93:8e:4d:77: 4c:5f:f6:70:ce:86:7e:a7:2d:46:c1:2c:da:a5:90: 22:84:9e:52:6a:00:9a:03:44:56:29:3f:85:dc:0a: 57:e7:0e:f8:b6:db:28:b6:82:95:61:7d:0b:56:50: d9:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:52:9C:4C:D3:77:13:4C:6D:5A:B7:BA:30:5C:CC:C1:2C:07:50:32 X509v3 Authority Key Identifier: keyid:CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:45:e8:fa:28:5a:86:ee:f1:f1:cc:33:9f:76:bf:b7:dd:62: 72:cf:5b:aa:62:8c:d5:2a:2f:0e:c3:a6:81:a0:f0:3d:91:8b: 15:b8:08:ba:ab:97:bc:a3:0c:1a:fe:4f:6c:c7:90:d4:be:aa: 6b:3b:72:fc:29:92:43:bb:de:b7:41:a5:a6:3e:5b:98:62:ab: 7a:be:b7:30:12:37:60:86:3a:48:59:16:57:9a:b9:c6:ac:c2: cd:0a:a1:c6:8c:c2:65:1d:3b:51:20:bd:81:14:fd:37:66:82: 9d:44:98:db:a0:63:b3:31:89:15:9f:dd:07:a8:52:9b:14:66: 20:b8:29:5d:d8:21:70:83:4a:38:bf:e1:d3:e0:02:bb:61:3c: 56:55:61:43:2a:3a:5e:87:a3:46:85:fb:55:da:01:a8:a6:dd: a2:0f:bc:a2:96:a1:2e:31:0a:d7:1a:dd:fd:03:84:0d:96:bc: 48:e6:dd:52:09:39:5c:8a:4f:de:3b:e4:c4:e8:ec:13:fa:5b: a5:5c:40:43:b7:0c:b6:ae:75:fb:12:1f:87:14:4d:3b:e3:95: bc:fe:1b:c6:a6:8b:8e:9e:04:1a:3e:46:19:ce:7f:e6:70:d6: 4d:a9:d6:de:31:31:23:a1:cb:67:01:8a:46:67:44:ba:b9:d9: 68:eb:57:d2 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUPMemVuT+ISs2XoQOdk5u1RNsY98wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoY2VmY2U0NDliZWE4ZGVhZWRiMTgwNGRiYTI1YzU4NGRm NTg3M2RjNDAeFw0yNTExMjUxODMwNTBaFw0yNTExMjYyMjEwNTBaMDMxMTAvBgNV BAMTKDBFNTI5QzRDRDM3NzEzNEM2RDVBQjdCQTMwNUNDQ0MxMkMwNzUwMzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC080so1HLQ1tckv4htspaj9IWj 5QlCBY48+aokyhhptZ9DlcdGwkB0Snh0V7ZfA5b5cDKd/x61jNZssY4xdLwhUv10 KTvKEgabRZp29AGWtlZZfWTXH8EVnM0GC8NE/k+CjU2172ADz5GcTX49w6nUt3kx y0vS81SWo5GCAzLjdA8qUgBdg9sPoo4zMwtST9+SLTztdcHqAh0OY60rxpw7i0I6 DkIJ2Lgo1EzamLmOTljwSk2tfW/YUkgCO2LSCBlwKDJqHNH+CZfSs2wqk45Nd0xf 9nDOhn6nLUbBLNqlkCKEnlJqAJoDRFYpP4XcClfnDvi22yi2gpVhfQtWUNkPAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUDlKcTNN3E0xtWre6MFzMwSwHUDIwHwYDVR0j BBgwFoAUzvzkSb6o3q7bGATbolxYTfWHPcQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDFiMzVmOGItNmY0OC00YmFkLWIxODUtNWMxZGFhOGFj ZGE5LzAvQ0VGQ0U0NDlCRUE4REVBRURCMTgwNERCQTI1QzU4NERGNTg3M0RDNC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3p2emtTYjZvM3E3YkdBVGJvbHhZVGZX SFBjUS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kMWIzNWY4Yi02 ZjQ4LTRiYWQtYjE4NS01YzFkYWE4YWNkYTkvMC9DRUZDRTQ0OUJFQThERUFFREIx ODA0REJBMjVDNTg0REY1ODczREM0Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAu0Xo+ihahu7x8cwzn3a/ t91ics9bqmKM1SovDsOmgaDwPZGLFbgIuquXvKMMGv5PbMeQ1L6qazty/CmSQ7ve t0Glpj5bmGKrer63MBI3YIY6SFkWV5q5xqzCzQqhxozCZR07USC9gRT9N2aCnUSY 26BjszGJFZ/dB6hSmxRmILgpXdghcINKOL/h0+ACu2E8VlVhQyo6XoejRoX7VdoB qKbdog+8opahLjEK1xrd/QOEDZa8SObdUgk5XIpP3jvkxOjsE/pbpVxAQ7cMtq51 +xIfhxRNO+OVvP4bxqaLjp4EGj5GGc5/5nDWTanW3jExI6HLZwGKRmdEurnZaOtX 0g== -----END CERTIFICATE-----Generated at Wed Nov 26 13:14:04 2025 by rpki-client