This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.mft File: ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.mft (raw, json) Hash identifier: wc1eeClgLOyCARxP076rVmtrz9OrxX17UhDK4wJiYAU= Subject key identifier: 39:0E:8E:44:86:53:F6:5A:12:C6:F8:62:C7:80:C5:6B:18:E2:7D:48 Authority key identifier: ED:9E:DB:2A:15:87:17:85:FB:AE:38:E2:3C:38:82:0D:BF:A2:CC:A4 Certificate issuer: /CN=ed9edb2a15871785fbae38e23c38820dbfa2cca4 Certificate serial: 3DD483CC7B60EDBEA3A8FE5B8E2CC476971ADD5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.mft Manifest number: 04A8 Signing time: Wed 17 Dec 2025 14:57:30 +0000 Manifest this update: Wed 17 Dec 2025 14:52:30 +0000 Manifest next update: Thu 18 Dec 2025 18:03:30 +0000 Files and hashes: 1: 38392e34322e3131302e302f32342d3234203d3e203631333137.roa (hash: VsyHwXGnPa9jTtnErp0xUSN9uxae8b2L7otiSzP7S2M=) 2: 34362e3130322e3233332e302f32342d3234203d3e203233383635.roa (hash: e+SnYwDfi/1yFie63JthDdkoXVxOgCTXFxhh6sC9If8=) 3: 37372e38312e3133382e302f32342d3234203d3e203136323736.roa (hash: QSH/lbFqFfB0kjPH8NXF1ssxXFJMA3tQTCmwcMlSfAQ=) 4: 38392e34322e3131312e302f32342d3234203d3e203631333137.roa (hash: T+9QQX64dOYanRzHKI9rhWnUyaZt9GgRQXrvhvIBrgs=) 5: ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.crl (hash: UDwubu2H5zKV1ttloDuRF8VrCccqDKJ3DlNULXVYzkM=) 6: 39332e3131332e32352e302f32342d3234203d3e20323134323039.roa (hash: JoDR/IGOmrYGEwu1+N5VZtYwQlvGeImnksk34tLzkIU=) 7: 3139332e3230332e3230352e302f32342d3234203d3e203439343638.roa (hash: miGCXloG7luQuuhAJwRZ+kv5aIjNiE2JcKseZN1V68A=) 8: 37372e38312e3133372e302f32342d3234203d3e20333939363431.roa (hash: xL9s9lGr6Y1GcoWPNRfoiIg5P1LyMl92tRndWKMRxvY=) 9: 34362e3130322e3233322e302f32342d3234203d3e203231383539.roa (hash: xmss+X7N7YEJYzsofqDqdmVc6hQlkz4fI2F5jzOV+w0=) 10: 3139332e3230332e3230342e302f32332d3233203d3e203439343638.roa (hash: SUmtopgHH8Nww5p/xP0ODKmemVjaFc93EIAThLWzp7U=) 11: 3139332e3230332e3230342e302f32342d3234203d3e203439343638.roa (hash: QWu7fHTZ3PYuiSQam7CYDAJC5NNcXBc6g5huH6iiI3k=) 12: 39332e3131332e3231322e302f32342d3234203d3e203631333137.roa (hash: Mffmj9tigk0AvK8qUYEb5eCtUKaC20yQi7QyJq/JmDA=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.crl rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.mft rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 18:03:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:d4:83:cc:7b:60:ed:be:a3:a8:fe:5b:8e:2c:c4:76:97:1a:dd:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed9edb2a15871785fbae38e23c38820dbfa2cca4 Validity Not Before: Dec 17 14:52:30 2025 GMT Not After : Dec 18 18:03:30 2025 GMT Subject: CN=390E8E448653F65A12C6F862C780C56B18E27D48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:a5:05:95:63:da:92:5a:16:47:73:71:2c:a3: ad:5d:13:2b:28:55:b8:2f:d7:13:e7:45:84:6c:f5: 4a:fd:9b:f2:60:70:3a:f9:fb:27:6f:5a:bb:b8:bf: 46:f6:36:de:c7:e3:72:97:2f:61:8a:2b:b8:b1:72: 64:ce:26:fe:6e:ad:b9:25:82:cd:fa:86:17:bf:e3: 05:bd:61:68:a3:6e:d4:c6:3c:62:ea:42:93:6f:73: da:69:b0:5f:90:ab:ba:2c:9e:fc:58:f4:fb:88:0b: 97:f2:70:1b:81:65:b7:dc:c4:e9:f4:51:5f:db:22: d0:8c:21:d4:33:84:45:8c:c1:7a:2f:ff:e6:59:93: e0:95:a0:a0:0c:3e:79:cd:84:a7:4c:06:38:78:ed: e4:63:4a:63:e1:39:ce:2d:60:1f:86:5a:f9:19:c7: a2:5b:7d:7a:5d:f2:cc:10:5c:1d:e1:82:08:78:70: 99:ba:23:2d:2e:e7:df:d7:42:f2:a9:fd:f7:d4:28: ab:be:4f:78:a0:32:70:5d:60:cf:68:f5:74:36:32: 40:9f:68:68:cc:ab:ce:fd:3f:78:1b:1d:3e:aa:5f: 58:ae:8f:9c:4b:00:e7:4b:75:a2:2f:9e:ee:b1:75: 4c:be:4a:b8:66:9d:28:cf:23:55:bd:94:07:df:45: 01:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:0E:8E:44:86:53:F6:5A:12:C6:F8:62:C7:80:C5:6B:18:E2:7D:48 X509v3 Authority Key Identifier: keyid:ED:9E:DB:2A:15:87:17:85:FB:AE:38:E2:3C:38:82:0D:BF:A2:CC:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:54:a3:31:66:b1:fd:14:53:b9:9d:e0:f7:4c:6a:47:2d:d0: 8c:42:41:e7:ae:bd:67:ed:56:6f:85:59:5f:2a:1b:95:d2:fd: de:8b:13:0d:ee:f4:3d:70:1c:1f:77:73:2d:3c:b3:ad:d7:77: ce:f8:2d:d2:4d:d3:d1:7d:d3:33:5b:f7:6a:de:4d:c8:e8:92: de:9c:b6:83:bc:fb:75:9c:91:d5:77:25:23:40:e1:c8:c3:82: 90:64:28:e2:d2:e3:87:99:96:69:aa:9b:56:bf:c8:58:38:10: 61:39:2c:a2:4f:9e:f0:dc:b7:5b:fc:63:4f:58:bc:8e:24:6e: 11:63:82:88:d8:4c:dc:26:6a:07:a1:89:1b:21:c4:8a:96:34: bb:f6:c2:ce:e7:4c:74:e7:e0:ba:8a:73:2c:e8:00:ba:a8:33: 11:b8:d5:37:ca:90:74:83:e5:fb:d3:e1:02:12:6b:76:4c:7e: 8d:ee:66:e2:c9:70:9a:56:f4:b0:63:ef:ef:6e:1e:9d:f4:98: 1a:c8:28:00:fa:a4:aa:36:13:e9:19:74:2b:a8:dd:d0:40:b5: 07:da:61:38:23:83:91:30:53:08:1d:db:a7:21:1d:93:04:56: 3d:0f:c4:8b:63:01:80:44:71:d8:9f:84:36:82:9b:f8:c3:20: be:66:82:3e -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUPdSDzHtg7b6jqP5bjizEdpca3VswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZWQ5ZWRiMmExNTg3MTc4NWZiYWUzOGUyM2MzODgyMGRi ZmEyY2NhNDAeFw0yNTEyMTcxNDUyMzBaFw0yNTEyMTgxODAzMzBaMDMxMTAvBgNV BAMTKDM5MEU4RTQ0ODY1M0Y2NUExMkM2Rjg2MkM3ODBDNTZCMThFMjdENDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMpQWVY9qSWhZHc3Eso61dEyso Vbgv1xPnRYRs9Ur9m/JgcDr5+ydvWru4v0b2Nt7H43KXL2GKK7ixcmTOJv5urbkl gs36hhe/4wW9YWijbtTGPGLqQpNvc9ppsF+Qq7osnvxY9PuIC5fycBuBZbfcxOn0 UV/bItCMIdQzhEWMwXov/+ZZk+CVoKAMPnnNhKdMBjh47eRjSmPhOc4tYB+GWvkZ x6JbfXpd8swQXB3hggh4cJm6Iy0u59/XQvKp/ffUKKu+T3igMnBdYM9o9XQ2MkCf aGjMq879P3gbHT6qX1iuj5xLAOdLdaIvnu6xdUy+SrhmnSjPI1W9lAffRQG3AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUOQ6ORIZT9loSxvhix4DFaxjifUgwHwYDVR0j BBgwFoAU7Z7bKhWHF4X7rjjiPDiCDb+izKQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZWEwZGU5N2YtN2VlOC00Y2UwLWIwNDUtZWZhYzhjMjQz Yzc5LzAvRUQ5RURCMkExNTg3MTc4NUZCQUUzOEUyM0MzODgyMERCRkEyQ0NBNC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdaN2JLaFdIRjRYN3JqamlQRGlDRGIt aXpLUS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lYTBkZTk3Zi03 ZWU4LTRjZTAtYjA0NS1lZmFjOGMyNDNjNzkvMC9FRDlFREIyQTE1ODcxNzg1RkJB RTM4RTIzQzM4ODIwREJGQTJDQ0E0Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABFSjMWax/RRTuZ3g90xq Ry3QjEJB5669Z+1Wb4VZXyobldL93osTDe70PXAcH3dzLTyzrdd3zvgt0k3T0X3T M1v3at5NyOiS3py2g7z7dZyR1XclI0DhyMOCkGQo4tLjh5mWaaqbVr/IWDgQYTks ok+e8Ny3W/xjT1i8jiRuEWOCiNhM3CZqB6GJGyHEipY0u/bCzudMdOfguopzLOgA uqgzEbjVN8qQdIPl+9PhAhJrdkx+je5m4slwmlb0sGPv724enfSYGsgoAPqkqjYT 6Rl0K6jd0EC1B9phOCODkTBTCB3bpyEdkwRWPQ/Ei2MBgERx2J+ENoKb+MMgvmaC Pg== -----END CERTIFICATE-----Generated at Thu Dec 18 09:29:11 2025 by rpki-client