This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.mft File: 0993289B168A37D449BC0D44B1AD35E532025CF1.mft (raw, json) Hash identifier: Ox7GTlfErqK3wI/O0ylySMXWMN2lJ6X9JJDtzyyAMzc= Subject key identifier: 43:0F:95:FE:B2:D9:D0:77:B2:1E:9F:DB:01:AF:E8:E6:4E:9A:86:92 Authority key identifier: 09:93:28:9B:16:8A:37:D4:49:BC:0D:44:B1:AD:35:E5:32:02:5C:F1 Certificate issuer: /CN=0993289b168a37d449bc0d44b1ad35e532025cf1 Certificate serial: 2D543FDBE1408379591A2D7733A933AD38C68681 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CZMomxaKN9RJvA1Esa015TICXPE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.mft Manifest number: 0317 Signing time: Fri 26 Dec 2025 09:37:50 +0000 Manifest this update: Fri 26 Dec 2025 09:32:50 +0000 Manifest next update: Sat 27 Dec 2025 10:28:50 +0000 Files and hashes: 1: 3139342e3135362e37362e302f32342d3234203d3e20323132323338.roa (hash: +FUmQfKGqa7l1UgyL4zjqDbJWdoQDDjzi+PS6gpsjlM=) 2: 0993289B168A37D449BC0D44B1AD35E532025CF1.crl (hash: 19a9Uj+Hdy6r3is6gjYQWyKY1O9gpIAjR7NoLqMRn5Y=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.crl rsync://rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.mft rsync://rpki.ripe.net/repository/DEFAULT/CZMomxaKN9RJvA1Esa015TICXPE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 10:28:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:54:3f:db:e1:40:83:79:59:1a:2d:77:33:a9:33:ad:38:c6:86:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0993289b168a37d449bc0d44b1ad35e532025cf1 Validity Not Before: Dec 26 09:32:50 2025 GMT Not After : Dec 27 10:28:50 2025 GMT Subject: CN=430F95FEB2D9D077B21E9FDB01AFE8E64E9A8692 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:37:aa:f1:e3:21:d9:9e:0c:7f:a2:31:76:41: b5:23:8b:e4:72:52:74:5f:fd:c2:22:bd:50:b7:ae: b4:4e:0a:64:62:12:d3:79:e8:ed:95:1d:c5:bd:e9: 7d:0f:82:73:3a:36:a3:a1:af:36:8f:5f:6e:88:17: 19:45:a2:11:71:b4:98:33:24:ce:5c:4f:4b:8a:8a: 63:45:1d:42:20:14:99:06:9b:28:81:06:58:3e:b3: 27:e5:ad:dc:6e:ef:9d:e1:fe:60:15:4c:7b:57:7a: 6c:55:d7:5c:7c:fd:f3:c6:ee:a0:ef:26:9d:f8:d9: ee:26:c0:aa:17:27:aa:6d:c3:3c:b3:46:ee:67:dd: fb:52:2d:cc:d9:7b:f0:6c:fc:17:d0:c9:f6:49:87: 4b:f7:36:31:3a:ae:b1:94:42:94:6d:46:3a:01:af: 6a:e2:59:4b:e5:ab:61:55:8d:f5:2f:0e:9d:4b:e3: e1:c1:34:3a:c9:21:88:41:82:bd:b4:58:8a:f5:e4: 57:bd:ab:94:15:2e:a2:5c:72:29:da:c9:98:27:51: be:5e:b0:73:44:6e:47:b1:c9:e5:d9:d2:83:f4:cf: 59:c6:23:90:0f:90:39:bc:fd:96:4b:d6:54:c9:10: 41:a1:3f:0c:40:92:e3:10:96:2f:85:ed:91:e2:8e: 3b:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:0F:95:FE:B2:D9:D0:77:B2:1E:9F:DB:01:AF:E8:E6:4E:9A:86:92 X509v3 Authority Key Identifier: keyid:09:93:28:9B:16:8A:37:D4:49:BC:0D:44:B1:AD:35:E5:32:02:5C:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CZMomxaKN9RJvA1Esa015TICXPE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption f0:c9:65:20:3c:f4:5a:2b:86:ac:29:b2:c8:b4:db:c8:54:21: d6:ff:d1:5c:e6:d4:15:5e:3d:ee:ae:ef:5a:c1:69:4b:7b:f6: f6:96:ec:cc:f1:89:07:6a:2f:cf:8e:69:51:88:79:1f:9f:6e: e5:1e:16:bb:47:a2:d2:c2:46:9c:57:d2:64:2d:72:9b:f0:d0: c4:f6:17:39:32:ea:e1:44:bd:65:91:e5:35:c4:19:bd:8e:61: bb:1d:59:d4:bf:a8:a2:2d:f3:de:7e:ab:8b:4d:f8:b2:13:b3: fd:83:9d:b5:6a:61:d8:d6:20:ce:46:38:88:b3:bc:5d:b4:30: 1f:d9:bf:d7:a3:bc:aa:74:9c:73:77:48:b5:51:53:7b:a2:91: e2:a5:ad:b5:fb:41:26:4b:6a:96:d7:c9:ec:fa:e7:4b:18:1d: 7f:e9:fd:1b:6d:5a:f0:fb:c1:55:0f:62:77:ec:e0:e1:70:a4: 75:b8:b1:60:7e:6a:7f:ca:e1:14:d0:85:d5:3e:1b:cc:c9:e2: 28:95:c6:4b:06:9b:9b:82:9a:22:85:12:77:0b:2c:73:27:97: b5:8a:d1:31:ac:1a:49:ae:70:1c:90:ee:66:38:fc:4a:61:71: f6:42:6c:7e:70:e2:42:6d:0f:89:bd:5a:e9:12:b0:81:6c:06: f6:33:33:ba -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIULVQ/2+FAg3lZGi13M6kzrTjGhoEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk5MzI4OWIxNjhhMzdkNDQ5YmMwZDQ0YjFhZDM1ZTUz MjAyNWNmMTAeFw0yNTEyMjYwOTMyNTBaFw0yNTEyMjcxMDI4NTBaMDMxMTAvBgNV BAMTKDQzMEY5NUZFQjJEOUQwNzdCMjFFOUZEQjAxQUZFOEU2NEU5QTg2OTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdN6rx4yHZngx/ojF2QbUji+Ry UnRf/cIivVC3rrROCmRiEtN56O2VHcW96X0PgnM6NqOhrzaPX26IFxlFohFxtJgz JM5cT0uKimNFHUIgFJkGmyiBBlg+syflrdxu753h/mAVTHtXemxV11x8/fPG7qDv Jp342e4mwKoXJ6ptwzyzRu5n3ftSLczZe/Bs/BfQyfZJh0v3NjE6rrGUQpRtRjoB r2riWUvlq2FVjfUvDp1L4+HBNDrJIYhBgr20WIr15Fe9q5QVLqJccinayZgnUb5e sHNEbkexyeXZ0oP0z1nGI5APkDm8/ZZL1lTJEEGhPwxAkuMQli+F7ZHijjt7AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUQw+V/rLZ0HeyHp/bAa/o5k6ahpIwHwYDVR0j BBgwFoAUCZMomxaKN9RJvA1Esa015TICXPEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZTNiZDJkMmUtZjQwZS00NzJlLTlmOGYtODk4NGZlYWFh NWM3LzAvMDk5MzI4OUIxNjhBMzdENDQ5QkMwRDQ0QjFBRDM1RTUzMjAyNUNGMS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NaTW9teGFLTjlSSnZBMUVzYTAxNVRJ Q1hQRS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lM2JkMmQyZS1m NDBlLTQ3MmUtOWY4Zi04OTg0ZmVhYWE1YzcvMC8wOTkzMjg5QjE2OEEzN0Q0NDlC QzBENDRCMUFEMzVFNTMyMDI1Q0YxLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA8MllIDz0WiuGrCmyyLTb yFQh1v/RXObUFV497q7vWsFpS3v29pbszPGJB2ovz45pUYh5H59u5R4Wu0ei0sJG nFfSZC1ym/DQxPYXOTLq4US9ZZHlNcQZvY5hux1Z1L+ooi3z3n6ri034shOz/YOd tWph2NYgzkY4iLO8XbQwH9m/16O8qnScc3dItVFTe6KR4qWttftBJktqltfJ7Prn Sxgdf+n9G21a8PvBVQ9id+zg4XCkdbixYH5qf8rhFNCF1T4bzMniKJXGSwabm4Ka IoUSdwsscyeXtYrRMawaSa5wHJDuZjj8SmFx9kJsfnDiQm0Pib1a6RKwgWwG9jMz ug== -----END CERTIFICATE-----Generated at Fri Dec 26 16:06:25 2025 by rpki-client