This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/2/2F08CECD5E57CBA0E68BCA7F7401BD5EDB387FB8.mft File: 2F08CECD5E57CBA0E68BCA7F7401BD5EDB387FB8.mft (raw, json) Hash identifier: 7Yo4IOrgfxso9gYRMtlQDDZwWnkU8tI7jOn5EixToHo= Subject key identifier: B2:C9:85:3B:67:D5:BE:DC:CE:6F:B3:92:DC:08:60:AD:D8:30:01:17 Authority key identifier: 2F:08:CE:CD:5E:57:CB:A0:E6:8B:CA:7F:74:01:BD:5E:DB:38:7F:B8 Certificate issuer: /CN=2f08cecd5e57cba0e68bca7f7401bd5edb387fb8 Certificate serial: 432C635B24D54A2AA45C4C648B6E3C631305C91A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LwjOzV5Xy6Dmi8p_dAG9Xts4f7g.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/2/2F08CECD5E57CBA0E68BCA7F7401BD5EDB387FB8.mft Manifest number: 0421 Signing time: Sun 07 Dec 2025 10:52:01 +0000 Manifest this update: Sun 07 Dec 2025 10:47:01 +0000 Manifest next update: Mon 08 Dec 2025 12:44:01 +0000 Files and hashes: 1: 323030313a3637633a323830303a3a2f34382d3438203d3e20323035333239.roa (hash: FrtXdPIEsvn1iYUedtjAO8L9S5GjDxa5ywOB8CuN7A0=) 2: 2F08CECD5E57CBA0E68BCA7F7401BD5EDB387FB8.crl (hash: NNFDXz1eYsuOtRDiyJF3D/MIADMhJXxRuwURV5Sl9xc=) 3: AS205329.asa (hash: VGL8fNaLY3qFu9mP5r7NvYdgKqN6s2IJxTCOZNeTahk=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/2/2F08CECD5E57CBA0E68BCA7F7401BD5EDB387FB8.crl rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/2/2F08CECD5E57CBA0E68BCA7F7401BD5EDB387FB8.mft rsync://rpki.ripe.net/repository/DEFAULT/LwjOzV5Xy6Dmi8p_dAG9Xts4f7g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 12:44:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:2c:63:5b:24:d5:4a:2a:a4:5c:4c:64:8b:6e:3c:63:13:05:c9:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f08cecd5e57cba0e68bca7f7401bd5edb387fb8 Validity Not Before: Dec 7 10:47:01 2025 GMT Not After : Dec 8 12:44:01 2025 GMT Subject: CN=B2C9853B67D5BEDCCE6FB392DC0860ADD8300117 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:5e:12:06:20:a4:b4:f7:20:4d:2e:dc:c0:a8: 0a:57:1f:d4:89:ab:f4:e8:5e:9f:a6:19:ee:c8:6c: 2e:6c:f1:10:f8:8e:e7:64:63:a2:99:7b:de:be:38: 84:dc:cc:89:3e:3e:0d:2d:2a:07:67:10:03:19:58: 2b:1c:9c:4b:c5:be:4e:06:fa:e7:38:cb:ce:1c:6d: 8c:3d:07:9c:00:4e:49:7e:68:73:09:9a:8f:2a:c5: d7:37:f3:61:50:a4:5e:8f:12:5c:39:51:ee:69:da: 83:7d:3d:b7:9b:02:36:81:96:b0:76:d7:82:d6:09: 27:bd:59:33:d8:eb:70:19:ec:a8:58:7e:99:c2:b7: ea:c9:e7:d8:cf:7c:29:f8:3c:58:dd:e7:57:ad:1d: b7:84:f3:d0:ef:ae:15:90:54:6f:a6:6c:78:f6:29: 77:c3:30:ee:2b:ba:98:4f:bb:ee:a7:0d:6b:ba:7c: 5b:04:b0:f8:d9:90:b8:fc:8c:ce:e5:75:49:93:38: eb:4f:22:3a:09:1f:43:35:53:1a:70:25:fc:d1:6e: 17:f4:59:81:bd:5d:93:ef:47:e7:2e:0a:66:15:e6: b0:b4:bd:14:1e:88:51:6e:8a:4c:a2:b4:d2:0c:5c: 78:8c:db:51:e1:0e:80:29:22:8c:c6:9f:db:98:40: 6e:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:C9:85:3B:67:D5:BE:DC:CE:6F:B3:92:DC:08:60:AD:D8:30:01:17 X509v3 Authority Key Identifier: keyid:2F:08:CE:CD:5E:57:CB:A0:E6:8B:CA:7F:74:01:BD:5E:DB:38:7F:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/2/2F08CECD5E57CBA0E68BCA7F7401BD5EDB387FB8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LwjOzV5Xy6Dmi8p_dAG9Xts4f7g.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/2/2F08CECD5E57CBA0E68BCA7F7401BD5EDB387FB8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:2b:e7:a7:9f:6c:bd:ac:0b:d9:97:66:60:65:36:6a:77:f6: fe:07:f3:87:81:c3:a5:87:d4:ef:c7:d5:12:01:75:ac:3a:28: 40:00:ef:4c:69:db:11:85:b7:bd:3f:fb:07:fb:93:5c:d7:67: 88:4c:c9:ab:02:bd:72:20:9d:ef:2a:fa:32:97:5c:a3:29:66: 03:bd:ad:cd:28:70:8b:63:e2:db:42:d4:69:cb:c4:cc:32:bd: b0:96:6f:f3:0e:36:39:e0:51:af:49:dc:32:a2:ed:76:b1:1b: 13:54:8c:0a:f6:ae:92:5d:e0:33:44:c9:d5:60:16:db:81:6d: 8e:d4:79:c5:3f:5a:23:f7:97:f3:72:80:73:59:ba:08:74:83: 07:c0:3d:ed:31:c5:7c:5b:d6:80:02:4c:01:41:c2:b7:a2:d8: b7:d4:9b:44:34:48:ff:99:1c:11:1d:12:ec:9c:27:d4:a2:d2: 34:79:d0:9f:cc:5b:80:c9:5f:aa:8b:3c:36:8f:06:63:0a:50: e2:ec:cd:09:80:02:c8:74:1c:0c:94:9c:d9:f0:ec:dd:f2:97: d8:a2:48:79:de:6e:da:11:31:00:b0:a6:ee:50:84:18:16:af: 68:29:bc:07:73:35:1c:67:3b:2d:fc:eb:b6:91:54:ac:b7:12: 60:96:e8:bf -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUQyxjWyTVSiqkXExki248YxMFyRowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMmYwOGNlY2Q1ZTU3Y2JhMGU2OGJjYTdmNzQwMWJkNWVk YjM4N2ZiODAeFw0yNTEyMDcxMDQ3MDFaFw0yNTEyMDgxMjQ0MDFaMDMxMTAvBgNV BAMTKEIyQzk4NTNCNjdENUJFRENDRTZGQjM5MkRDMDg2MEFERDgzMDAxMTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCXhIGIKS09yBNLtzAqApXH9SJ q/ToXp+mGe7IbC5s8RD4judkY6KZe96+OITczIk+Pg0tKgdnEAMZWCscnEvFvk4G +uc4y84cbYw9B5wATkl+aHMJmo8qxdc382FQpF6PElw5Ue5p2oN9PbebAjaBlrB2 14LWCSe9WTPY63AZ7KhYfpnCt+rJ59jPfCn4PFjd51etHbeE89DvrhWQVG+mbHj2 KXfDMO4ruphPu+6nDWu6fFsEsPjZkLj8jM7ldUmTOOtPIjoJH0M1UxpwJfzRbhf0 WYG9XZPvR+cuCmYV5rC0vRQeiFFuikyitNIMXHiM21HhDoApIozGn9uYQG7/AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUssmFO2fVvtzOb7OS3AhgrdgwARcwHwYDVR0j BBgwFoAULwjOzV5Xy6Dmi8p/dAG9Xts4f7gwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDY5NzE2MGMtYWNjNS00YjUxLWJmNTUtMTBjN2E2ZTY2 OTgwLzIvMkYwOENFQ0Q1RTU3Q0JBMEU2OEJDQTdGNzQwMUJENUVEQjM4N0ZCOC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0x3ak96VjVYeTZEbWk4cF9kQUc5WHRz NGY3Zy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kNjk3MTYwYy1h Y2M1LTRiNTEtYmY1NS0xMGM3YTZlNjY5ODAvMi8yRjA4Q0VDRDVFNTdDQkEwRTY4 QkNBN0Y3NDAxQkQ1RURCMzg3RkI4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdSvnp59svawL2ZdmYGU2 anf2/gfzh4HDpYfU78fVEgF1rDooQADvTGnbEYW3vT/7B/uTXNdniEzJqwK9ciCd 7yr6MpdcoylmA72tzShwi2Pi20LUacvEzDK9sJZv8w42OeBRr0ncMqLtdrEbE1SM Cvaukl3gM0TJ1WAW24FtjtR5xT9aI/eX83KAc1m6CHSDB8A97THFfFvWgAJMAUHC t6LYt9SbRDRI/5kcER0S7Jwn1KLSNHnQn8xbgMlfqos8No8GYwpQ4uzNCYACyHQc DJSc2fDs3fKX2KJIed5u2hExALCm7lCEGBavaCm8B3M1HGc7LfzrtpFUrLcSYJbo vw== -----END CERTIFICATE-----Generated at Sun Dec 7 18:35:22 2025 by rpki-client