This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.mft File: 98A87CAD5B710890A9528F166F4202393824E6B8.mft (raw, json) Hash identifier: kNPzXmN7tBTmL0UFo2JVtSt8IKL9KD0bW3gFWb3AbKE= Subject key identifier: 94:46:DF:DB:94:92:92:FF:C6:0E:F4:1C:75:BD:52:2C:B5:3A:64:32 Authority key identifier: 98:A8:7C:AD:5B:71:08:90:A9:52:8F:16:6F:42:02:39:38:24:E6:B8 Certificate issuer: /CN=98a87cad5b710890a9528f166f4202393824e6b8 Certificate serial: 0CBDC6829BA1C461C39F5E1116386C2BBAC58C28 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mKh8rVtxCJCpUo8Wb0ICOTgk5rg.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.mft Manifest number: 04AF Signing time: Mon 15 Dec 2025 08:09:27 +0000 Manifest this update: Mon 15 Dec 2025 08:04:27 +0000 Manifest next update: Tue 16 Dec 2025 08:51:27 +0000 Files and hashes: 1: 39342e3132362e3233342e302f32342d3234203d3e203438303730.roa (hash: wQ/YXS5V0WqyAz3I38Grxwtf2vC7Tnq0YU0pMolmNpk=) 2: 326131313a353730313a31303a3a2f34342d3434203d3e20323030313938.roa (hash: IiLsd5rWyRAEtPC2BRNztBwgXOWFkCLAq6FHsMnhQxg=) 3: 326131313a353730303a3a2f33322d3332203d3e203438303730.roa (hash: Fqs+xGh2wCPoRebx3WWGGz8gG+3wDYrzV+eGaABVra0=) 4: 98A87CAD5B710890A9528F166F4202393824E6B8.crl (hash: Ndf+u6hifnMDS3kz+uQI86Kp4YpSker+H3DJ7tDm1XE=) 5: 39342e3132362e3233382e302f32342d3234203d3e203438303730.roa (hash: EEtfGKQPQ42nFzzdsRfixi4zKQ5tTYPEdAQ1iAcmdE4=) 6: 39342e3132362e3233372e302f32342d3234203d3e203438303730.roa (hash: SY6OvQv9R/Ut8R5yFxdy0RVK/9dKsg8ZwmC3iNS9Rpw=) 7: AS48070.asa (hash: 5MT6ORI/F8ffsUlifpuRiZkf4qUWanqmxrgKmyiz55A=) 8: 326131313a353730373a61613a3a2f34382d3438203d3e203438303730.roa (hash: JswRhPyDtXHdt3LcnGr0rU+2WVgkSTrzy91w1+vHXG0=) 9: 39342e3132362e3233332e302f32342d3234203d3e203438303730.roa (hash: /8dVa93viKNoM1pCJooeH0rtbsVAVvDJFpjlC3WNZyI=) 10: 39342e3132362e3233362e302f32342d3234203d3e203438303730.roa (hash: ma+wlMqMsb7J0TC2Gy822cEZS57hTDfS/GzCjZsgQ1k=) 11: 0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.cer (hash: Pc4F216M/oD/fxZDUk8HLynWg8D1IQ0ANHs5N2ZC0VQ=) 12: 39342e3132362e3233352e302f32342d3234203d3e203438303730.roa (hash: S5WIAkzllTXfMiWpREUuucFgM0BSw7Pb5gT995rR5+k=) 13: 326131313a353730373a3a2f33322d3332203d3e203438303730.roa (hash: 242POLRepYH713AUptOGvBkM/JpRNVCsIm5BodQGTyY=) 14: 39342e3132362e3233392e302f32342d3234203d3e203438303730.roa (hash: NDHvIIcUiAk7uX5boyMA8yHxKUGe6BZWK+cptlXNnOA=) 15: 39342e3132362e3233322e302f32342d3234203d3e203438303730.roa (hash: VIdYFIOIqW5zJ3T1LDGwWjmJ764XjM+ac+86S8Ja5hk=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.crl rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.mft rsync://rpki.ripe.net/repository/DEFAULT/mKh8rVtxCJCpUo8Wb0ICOTgk5rg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 08:51:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:bd:c6:82:9b:a1:c4:61:c3:9f:5e:11:16:38:6c:2b:ba:c5:8c:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98a87cad5b710890a9528f166f4202393824e6b8 Validity Not Before: Dec 15 08:04:27 2025 GMT Not After : Dec 16 08:51:27 2025 GMT Subject: CN=9446DFDB949292FFC60EF41C75BD522CB53A6432 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:f5:65:6f:c9:6d:21:d2:f5:6c:f7:c4:20:8f: fa:0b:16:e4:2c:ee:c2:b8:f6:9a:76:64:6e:0b:12: cb:dd:f4:6b:44:ee:8c:52:2b:25:20:40:12:ca:62: 4b:51:a4:1a:8b:3d:8c:c9:7f:a7:1d:d7:c3:e4:da: 5c:b0:a2:77:bf:d5:a5:88:02:31:db:da:b4:b9:2f: 14:01:ae:ba:3d:f2:9d:ab:9c:f0:e3:53:78:7d:7d: 75:f5:f7:e8:33:cd:6d:0c:dc:d7:4f:a0:b3:24:88: 2e:51:df:2a:2a:6a:ef:a8:d9:02:63:00:c3:d6:d0: 02:e5:45:f1:ac:c6:d1:f3:8f:d0:e9:45:12:ed:6f: b5:08:5b:db:c2:2e:ea:19:78:02:94:84:82:8c:c4: fd:59:b5:b8:99:7b:8f:d9:6f:4c:ff:6f:b6:1d:ab: 09:f1:bf:aa:cd:3c:64:19:4a:a5:23:2c:c1:4e:cf: ec:05:a9:44:27:15:d4:e6:99:d7:05:88:66:f7:23: 2f:4a:5a:b2:35:da:b7:2a:59:dc:09:ba:29:ff:d7: 0a:66:b4:9d:fb:94:38:c2:5d:28:96:a7:08:77:46: 12:da:66:e6:5a:2e:2b:97:ca:6c:38:41:07:c6:a7: b5:10:06:51:2b:9b:19:07:7d:05:06:b2:86:58:4c: f7:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:46:DF:DB:94:92:92:FF:C6:0E:F4:1C:75:BD:52:2C:B5:3A:64:32 X509v3 Authority Key Identifier: keyid:98:A8:7C:AD:5B:71:08:90:A9:52:8F:16:6F:42:02:39:38:24:E6:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mKh8rVtxCJCpUo8Wb0ICOTgk5rg.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:78:56:69:4b:d8:0d:dc:d7:ff:b3:0b:a2:ea:76:90:78:7e: af:97:a6:1d:96:22:26:80:ff:b0:3b:51:c6:8b:2a:bb:b5:68: 20:21:1d:be:3a:a7:62:b0:f7:52:49:28:2f:46:6e:d9:0a:5b: 02:d6:8c:81:9d:3e:b7:18:84:8b:fb:47:16:1d:db:f7:6c:97: 21:10:74:a4:87:84:3b:d2:cd:84:cf:b6:d4:6d:49:3d:86:b3: 53:1e:d9:e5:8f:0e:9e:a8:5a:9b:31:72:d6:2c:96:89:a0:95: eb:4c:c4:38:6f:34:79:1f:fc:eb:e8:fe:1e:82:98:39:97:62: a3:98:6c:d3:0d:ee:b9:ee:a0:b0:84:98:ee:e7:6e:47:68:24: 21:bb:dc:a3:3a:2d:01:5e:67:00:1c:b1:43:9f:17:eb:a1:e6: 26:1c:29:5c:dc:c9:74:e4:55:3f:09:2f:4a:8b:7c:5d:ce:a9: 17:d5:ac:6e:9f:d6:07:77:5f:c0:e4:ea:92:7e:c7:a3:35:37: 98:76:73:96:5f:35:76:85:83:dd:f7:5d:39:fb:61:0c:20:bb: b8:0b:9e:85:2b:0c:e6:ba:27:dd:85:13:17:64:b2:73:fe:b0: 4d:4d:bf:a1:dd:a6:08:c2:38:57:e6:10:b3:e4:b2:60:85:7d: 1e:ef:da:10 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUDL3GgpuhxGHDn14RFjhsK7rFjCgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOThhODdjYWQ1YjcxMDg5MGE5NTI4ZjE2NmY0MjAyMzkz ODI0ZTZiODAeFw0yNTEyMTUwODA0MjdaFw0yNTEyMTYwODUxMjdaMDMxMTAvBgNV BAMTKDk0NDZERkRCOTQ5MjkyRkZDNjBFRjQxQzc1QkQ1MjJDQjUzQTY0MzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp9WVvyW0h0vVs98Qgj/oLFuQs 7sK49pp2ZG4LEsvd9GtE7oxSKyUgQBLKYktRpBqLPYzJf6cd18Pk2lywone/1aWI AjHb2rS5LxQBrro98p2rnPDjU3h9fXX19+gzzW0M3NdPoLMkiC5R3yoqau+o2QJj AMPW0ALlRfGsxtHzj9DpRRLtb7UIW9vCLuoZeAKUhIKMxP1ZtbiZe4/Zb0z/b7Yd qwnxv6rNPGQZSqUjLMFOz+wFqUQnFdTmmdcFiGb3Iy9KWrI12rcqWdwJuin/1wpm tJ37lDjCXSiWpwh3RhLaZuZaLiuXymw4QQfGp7UQBlErmxkHfQUGsoZYTPe3AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUlEbf25SSkv/GDvQcdb1SLLU6ZDIwHwYDVR0j BBgwFoAUmKh8rVtxCJCpUo8Wb0ICOTgk5rgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZGNlMTk2ZmUtNGIxYS00NmVhLTljOTUtNGFmMTI5NjRh NDlkLzAvOThBODdDQUQ1QjcxMDg5MEE5NTI4RjE2NkY0MjAyMzkzODI0RTZCOC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL21LaDhyVnR4Q0pDcFVvOFdiMElDT1Rn azVyZy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kY2UxOTZmZS00 YjFhLTQ2ZWEtOWM5NS00YWYxMjk2NGE0OWQvMC85OEE4N0NBRDVCNzEwODkwQTk1 MjhGMTY2RjQyMDIzOTM4MjRFNkI4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASXhWaUvYDdzX/7MLoup2 kHh+r5emHZYiJoD/sDtRxosqu7VoICEdvjqnYrD3UkkoL0Zu2QpbAtaMgZ0+txiE i/tHFh3b92yXIRB0pIeEO9LNhM+21G1JPYazUx7Z5Y8OnqhamzFy1iyWiaCV60zE OG80eR/86+j+HoKYOZdio5hs0w3uue6gsISY7uduR2gkIbvcozotAV5nAByxQ58X 66HmJhwpXNzJdORVPwkvSot8Xc6pF9Wsbp/WB3dfwOTqkn7HozU3mHZzll81doWD 3fddOfthDCC7uAuehSsM5ron3YUTF2Syc/6wTU2/od2mCMI4V+YQs+SyYIV9Hu/a EA== -----END CERTIFICATE-----Generated at Mon Dec 15 19:23:48 2025 by rpki-client