This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.mft File: F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.mft (raw, json) Hash identifier: rChjapJrfLd6j3mDu9WC8gb9Y3wHiACXTMGI7rg6S2w= Subject key identifier: 8D:E8:54:EA:91:91:F1:63:15:50:85:11:C8:08:BE:F3:19:A0:E8:6B Authority key identifier: F9:F7:A2:88:5C:F3:01:2F:A1:39:0D:3B:32:59:FC:78:AE:F7:AD:1A Certificate issuer: /CN=F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A Certificate serial: 5D77B7846EA64F8B20E7CDB031D2FFDE83D9182E Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.mft Manifest number: 0349 Signing time: Sat 13 Dec 2025 22:16:20 +0000 Manifest this update: Sat 13 Dec 2025 22:11:20 +0000 Manifest next update: Mon 15 Dec 2025 00:08:20 +0000 Files and hashes: 1: F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.crl (hash: J5GoMiajgUSfOraSsrbyzXDLWPFeeygWIGPsCuPufYs=) 2: 326131343a373538313a6634303a3a2f34342d3438203d3e20323134363433.roa (hash: jjg3HPw+XVWQVO0XHgF/TKZW97oaDPDZVvcbfhgJX94=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.crl rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 00:08:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:77:b7:84:6e:a6:4f:8b:20:e7:cd:b0:31:d2:ff:de:83:d9:18:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A Validity Not Before: Dec 13 22:11:20 2025 GMT Not After : Dec 15 00:08:20 2025 GMT Subject: CN=8DE854EA9191F16315508511C808BEF319A0E86B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:1b:aa:d7:8b:5c:0f:d8:75:91:e5:3e:5a:b8: ba:86:34:c3:9b:8e:00:48:a9:ef:68:ff:a0:3f:99: 32:21:2f:7d:41:98:90:8d:e5:6c:8d:ca:02:bd:d7: 94:f4:de:72:07:08:c2:db:24:aa:aa:18:7c:1f:cb: 0b:c1:5f:62:fb:f5:ea:93:c6:4d:8a:96:22:43:ac: 3c:57:d3:0c:96:0a:22:b4:09:bc:dd:f6:1c:6a:82: 94:20:63:32:90:57:5e:db:2a:1d:d6:cc:99:1d:7b: ab:f2:43:89:61:0a:15:c2:f1:a6:b6:c3:5f:c3:8f: 1c:9d:cf:70:d7:64:ad:31:9a:38:33:3a:d6:c1:87: bf:f2:c8:24:eb:2e:e4:2e:56:21:00:e4:29:0c:cc: bc:71:b2:0c:cd:d4:7b:4b:60:33:b4:23:11:ea:84: e8:23:14:14:9c:ed:ea:b5:81:c0:10:3b:ce:69:a4: 11:0c:f4:74:67:2e:05:d2:82:bd:eb:3c:83:64:91: 5b:cc:81:70:51:91:a8:7a:87:0c:13:76:50:6e:51: 8b:05:23:84:3e:87:0a:17:03:33:3c:ee:37:bd:f6: ac:be:0a:58:12:a5:9a:84:37:79:da:1f:fd:f1:d8: ee:80:94:4d:44:3a:82:2f:33:33:e2:ab:0b:e1:ee: bf:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:E8:54:EA:91:91:F1:63:15:50:85:11:C8:08:BE:F3:19:A0:E8:6B X509v3 Authority Key Identifier: keyid:F9:F7:A2:88:5C:F3:01:2F:A1:39:0D:3B:32:59:FC:78:AE:F7:AD:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:fa:04:47:67:c1:a1:83:2c:c9:7a:11:ad:d0:ea:73:6c:c2: 7b:e5:4d:d6:de:e9:2a:14:d1:46:69:ed:68:0e:85:28:ba:ef: 63:c0:91:91:f6:a7:71:d8:f5:f3:9e:fe:34:c6:f0:08:bc:70: d2:9a:bc:68:32:2f:40:ab:2f:ef:87:ec:92:8e:ef:64:ef:3b: 3c:3f:db:cb:03:8f:4d:6f:de:03:c0:22:cf:28:f6:ed:a9:7d: 01:84:66:ee:92:03:2b:c8:27:0a:c5:45:b0:a7:75:d3:89:46: 6e:8f:fd:27:95:91:56:db:10:52:86:26:9c:9e:c8:25:46:10: 06:6c:52:31:f9:41:6a:15:7c:0a:89:82:d4:01:95:0b:03:1b: 4e:8c:ac:01:92:eb:41:b5:c4:e9:bc:ec:75:84:2f:71:6c:e9: ef:ec:58:cc:7d:9b:a6:92:39:ee:69:6b:fd:62:32:e8:e1:8a: 5f:35:5f:3d:be:de:ec:3d:90:d1:76:2d:6b:b4:38:6e:85:23: c7:a7:c5:55:dc:1d:db:be:27:67:f1:fe:a4:c5:4e:14:dc:84: d1:2c:f6:bc:5b:b6:3f:df:b8:79:90:81:59:9c:60:74:c4:6a: 5c:50:de:b8:38:c2:03:3b:fa:8b:72:81:ca:06:d8:f9:ae:c8: 7d:27:cd:91 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUXXe3hG6mT4sg582wMdL/3oPZGC4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjlGN0EyODg1Q0YzMDEyRkExMzkwRDNCMzI1OUZDNzhB RUY3QUQxQTAeFw0yNTEyMTMyMjExMjBaFw0yNTEyMTUwMDA4MjBaMDMxMTAvBgNV BAMTKDhERTg1NEVBOTE5MUYxNjMxNTUwODUxMUM4MDhCRUYzMTlBMEU4NkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnG6rXi1wP2HWR5T5auLqGNMOb jgBIqe9o/6A/mTIhL31BmJCN5WyNygK915T03nIHCMLbJKqqGHwfywvBX2L79eqT xk2KliJDrDxX0wyWCiK0Cbzd9hxqgpQgYzKQV17bKh3WzJkde6vyQ4lhChXC8aa2 w1/Djxydz3DXZK0xmjgzOtbBh7/yyCTrLuQuViEA5CkMzLxxsgzN1HtLYDO0IxHq hOgjFBSc7eq1gcAQO85ppBEM9HRnLgXSgr3rPINkkVvMgXBRkah6hwwTdlBuUYsF I4Q+hwoXAzM87je99qy+ClgSpZqEN3naH/3x2O6AlE1EOoIvMzPiqwvh7r+7AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUjehU6pGR8WMVUIURyAi+8xmg6GswHwYDVR0j BBgwFoAU+feiiFzzAS+hOQ07Mln8eK73rRowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZGI4ZDhiN2QtYzQ4Ni00MjM5LTlkOWYtOGY4ZjVkY2Vk OGQwLzEvRjlGN0EyODg1Q0YzMDEyRkExMzkwRDNCMzI1OUZDNzhBRUY3QUQxQS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9GOUY3QTI4ODVDRjMwMTJGQTEzOTBEM0Iz MjU5RkM3OEFFRjdBRDFBLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2RiOGQ4YjdkLWM0ODYtNDIzOS05ZDlmLThmOGY1ZGNlZDhkMC8xL0Y5RjdBMjg4 NUNGMzAxMkZBMTM5MEQzQjMyNTlGQzc4QUVGN0FEMUEubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB/+gRH Z8GhgyzJehGt0OpzbMJ75U3W3ukqFNFGae1oDoUouu9jwJGR9qdx2PXznv40xvAI vHDSmrxoMi9Aqy/vh+ySju9k7zs8P9vLA49Nb94DwCLPKPbtqX0BhGbukgMryCcK xUWwp3XTiUZuj/0nlZFW2xBShiacnsglRhAGbFIx+UFqFXwKiYLUAZULAxtOjKwB kutBtcTpvOx1hC9xbOnv7FjMfZumkjnuaWv9YjLo4YpfNV89vt7sPZDRdi1rtDhu hSPHp8VV3B3bvidn8f6kxU4U3ITRLPa8W7Y/37h5kIFZnGB0xGpcUN64OMIDO/qL coHKBtj5rsh9J82R -----END CERTIFICATE-----Generated at Sun Dec 14 11:44:39 2025 by rpki-client