This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft File: C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft (raw, json) Hash identifier: kvt1CsGLNqEGtd1OGafldHU0EHCJcyfFc1KGovblZmU= Subject key identifier: 26:93:24:38:89:AD:67:50:31:B1:CB:EF:C5:B6:18:E1:6F:6B:F4:1E Authority key identifier: C7:70:F4:33:58:B9:7B:A0:AA:9B:DC:62:BB:D5:11:E9:0A:EA:B2:9D Certificate issuer: /CN=c770f43358b97ba0aa9bdc62bbd511e90aeab29d Certificate serial: 7F37ACC1A37A898F7F6BDD0950D3DFF08A005F74 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft Manifest number: 0221 Signing time: Thu 04 Dec 2025 23:21:14 +0000 Manifest this update: Thu 04 Dec 2025 23:16:14 +0000 Manifest next update: Sat 06 Dec 2025 00:45:14 +0000 Files and hashes: 1: 34332e3233302e38352e302f32342d3234203d3e20323132363639.roa (hash: vgObUGnSREXD+ZGKD48TBidzsDD4bb41p0YUFbXX2ak=) 2: 3130332e34392e3133312e302f32342d3234203d3e20323133373131.roa (hash: 0KQImRtVxQSlo2IkiWEm4Ta1ecdBVyx0gErMixeusbs=) 3: 33312e32322e3130362e302f32342d3234203d3e20323133353032.roa (hash: jNzQvK975k0nFSky/OYcsFfueNL1XvYeIp3mtR/7WPY=) 4: 33312e32322e3130392e302f32342d3234203d3e203432383331.roa (hash: uRUTbbdZ8AYVGvK3CKTe3KYxaaV1m1bGyvfgh/rstUI=) 5: 33312e32322e3130372e302f32342d3234203d3e20313337353137.roa (hash: zucU5bamNfYRw/esvivyzaXHMAl8N0xQ+Q3coI+3JvA=) 6: 33312e32322e3130352e302f32342d3234203d3e20323135303236.roa (hash: CEnX1eNlwK6zTbdiivvYtvATObcHBs1ojc6GAmrJxmA=) 7: C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl (hash: GrL3iCq2b6Vl+3rLOXrvAJmT6Z7L9vPMPRZCnXEg8I8=) 8: 3130332e34392e3133312e302f32342d3234203d3e20313437323631.roa (hash: gI3QMk1nxnVJ3ar9nDADeDjafrF5rxSYgoW75rlLkBk=) 9: 34332e3233302e38342e302f32342d3234203d3e203633313939.roa (hash: mN7VhJyGfS7zh6TYiLbpihJCInKpBaTwITIrbKnSr78=) 10: 34332e3233302e38362e302f32332d3234203d3e2033343931.roa (hash: BqbUmbythNNYP4WqssroNY2sOPvoyuRgXIRAVuIytpA=) 11: 33312e32322e3130342e302f32342d3234203d3e20313938303230.roa (hash: 2c/Q6mL57WPxOvD74dnFYEhVwjt0QpjY04YbOcxeQJ8=) 12: 34332e3233302e38352e302f32342d3234203d3e20323131343430.roa (hash: hoZQSGqkvoyh+Fwe28UicpO6RAJD80P7rklT/Di/mQU=) 13: 33312e32322e3130382e302f32342d3234203d3e203432383331.roa (hash: 8yRIzyX7kSL5wlZucsqrW2Cnq9iyHa3XujSoVf8z1CY=) 14: 34332e3233302e38342e302f32342d3234203d3e203235313938.roa (hash: D5rxpe/mz9cZbwkoouLs3Io8a9VjYwAhmSHGosd1BJQ=) 15: 3130332e34392e3132382e302f32342d3234203d3e20313534303439.roa (hash: RP7fF4ljaFnG1QBw6wHJTYmQiSzsC+UtOPXQULgrH/c=) 16: 33312e32322e3131312e302f32342d3234203d3e20323135333535.roa (hash: brok2XUOzC0OAQs7efh1lP/TIOrHW70pJohRfs3tgEM=) 17: 3130332e34392e3132392e302f32342d3234203d3e20313533373836.roa (hash: 8ciOgQf/5f2kkiTl0Q7pGFYfq76YJlE+KlbE9/JeEuM=) 18: 3130332e34392e3133302e302f32342d3234203d3e20323036303333.roa (hash: v7D054EN2gERBe7aLvFn0V17UtLvh1fmGSVfmRoK+KQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 00:45:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:37:ac:c1:a3:7a:89:8f:7f:6b:dd:09:50:d3:df:f0:8a:00:5f:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c770f43358b97ba0aa9bdc62bbd511e90aeab29d Validity Not Before: Dec 4 23:16:14 2025 GMT Not After : Dec 6 00:45:14 2025 GMT Subject: CN=2693243889AD675031B1CBEFC5B618E16F6BF41E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:71:d6:d2:d5:26:d3:b2:f9:93:16:d4:fb:c6: b4:34:1a:60:de:9c:1a:40:6b:3c:1c:3d:55:25:ba: 18:0d:c5:64:e9:82:ff:4b:51:b1:f6:27:14:b4:81: bf:76:b0:87:f1:78:f0:db:13:a5:b3:12:f2:0e:1a: 75:82:03:8c:c4:1e:c3:57:23:2d:70:9f:5f:9d:dc: 87:3d:de:b9:4d:ea:b3:b9:81:e5:93:14:d7:78:36: dd:95:a1:bc:00:cf:06:33:1d:8e:eb:c7:ca:48:e9: 19:93:ec:e8:fa:ee:29:4e:39:81:c7:01:59:38:9d: a5:f7:51:e0:ff:d2:17:a6:46:31:2f:33:14:40:0a: b2:5d:43:19:f9:68:bd:bc:1e:06:4f:d3:89:d3:f4: 51:51:96:d9:39:5b:d1:7e:45:7c:f4:a5:b4:90:94: e5:b5:d1:8a:5a:2e:21:f3:85:cd:09:81:ef:f1:89: 2a:a8:b3:02:c7:4b:e0:e8:22:ed:9a:49:50:7e:ef: fc:bb:dd:36:8e:bb:9a:80:1e:e9:a1:f0:4b:3b:91: 0e:11:c8:96:39:16:aa:79:ba:55:94:41:6c:2d:be: f2:fe:ce:ea:c3:95:e0:29:d1:39:4f:51:ed:75:2b: bf:3a:f1:6b:bf:1e:05:2e:20:9e:f9:4d:27:7f:02: 3d:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:93:24:38:89:AD:67:50:31:B1:CB:EF:C5:B6:18:E1:6F:6B:F4:1E X509v3 Authority Key Identifier: keyid:C7:70:F4:33:58:B9:7B:A0:AA:9B:DC:62:BB:D5:11:E9:0A:EA:B2:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:9a:e3:51:5b:75:7f:75:24:9c:a0:32:78:5a:5a:25:71:a5: fa:fe:ef:c6:85:01:b2:e2:61:f5:bb:62:45:40:66:10:5b:13: 41:6d:1b:b7:37:d8:82:49:d4:1a:ff:1b:45:4f:80:34:76:de: 39:4a:d4:27:bb:61:f2:90:93:c2:e2:d8:f5:7a:61:78:0a:39: 98:d8:00:66:ec:f3:8c:37:fb:51:8e:9f:df:56:25:48:8f:8c: 18:03:36:e1:73:09:b9:d6:d0:12:21:89:45:20:d5:25:72:ad: ec:dc:95:19:52:16:38:10:be:18:2d:8a:f7:0e:05:30:94:06: 08:e7:e8:a1:17:79:c8:ce:8f:6a:7b:78:81:17:df:24:cc:6e: 75:72:35:6e:6e:2e:03:ef:96:32:04:a4:50:75:1b:29:6d:fe: 0f:74:85:50:d8:4d:7e:a2:90:ef:c1:b9:e7:85:b2:a9:f9:92: d7:a2:51:49:d5:21:94:96:d6:85:df:41:53:0d:a8:92:13:5b: 8f:c5:b7:cb:99:f0:be:c6:31:d6:3f:85:d6:f4:ff:93:65:bc: 0d:ad:58:5d:e1:66:80:8d:f2:f2:f5:87:9e:88:10:ec:cd:07: d5:b2:c6:50:c7:26:7a:c9:1b:10:a4:5d:8c:6f:03:3a:b7:a4: cc:bc:c9:81 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUfzeswaN6iY9/a90JUNPf8IoAX3QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYzc3MGY0MzM1OGI5N2JhMGFhOWJkYzYyYmJkNTExZTkw YWVhYjI5ZDAeFw0yNTEyMDQyMzE2MTRaFw0yNTEyMDYwMDQ1MTRaMDMxMTAvBgNV BAMTKDI2OTMyNDM4ODlBRDY3NTAzMUIxQ0JFRkM1QjYxOEUxNkY2QkY0MUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDcdbS1SbTsvmTFtT7xrQ0GmDe nBpAazwcPVUluhgNxWTpgv9LUbH2JxS0gb92sIfxePDbE6WzEvIOGnWCA4zEHsNX Iy1wn1+d3Ic93rlN6rO5geWTFNd4Nt2VobwAzwYzHY7rx8pI6RmT7Oj67ilOOYHH AVk4naX3UeD/0hemRjEvMxRACrJdQxn5aL28HgZP04nT9FFRltk5W9F+RXz0pbSQ lOW10YpaLiHzhc0Jge/xiSqoswLHS+DoIu2aSVB+7/y73TaOu5qAHumh8Es7kQ4R yJY5Fqp5ulWUQWwtvvL+zurDleAp0TlPUe11K7868Wu/HgUuIJ75TSd/Aj0BAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUJpMkOImtZ1AxscvvxbYY4W9r9B4wHwYDVR0j BBgwFoAUx3D0M1i5e6Cqm9xiu9UR6Qrqsp0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZWFmZWJkYjQtNmYwYi00MDRiLTk4ZTItYTI2YmU5NGE2 NjIwLzAvQzc3MEY0MzM1OEI5N0JBMEFBOUJEQzYyQkJENTExRTkwQUVBQjI5RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3gzRDBNMWk1ZTZDcW05eGl1OVVSNlFy cXNwMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lYWZlYmRiNC02 ZjBiLTQwNGItOThlMi1hMjZiZTk0YTY2MjAvMC9DNzcwRjQzMzU4Qjk3QkEwQUE5 QkRDNjJCQkQ1MTFFOTBBRUFCMjlELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhZrjUVt1f3UknKAyeFpa JXGl+v7vxoUBsuJh9btiRUBmEFsTQW0btzfYgknUGv8bRU+ANHbeOUrUJ7th8pCT wuLY9XpheAo5mNgAZuzzjDf7UY6f31YlSI+MGAM24XMJudbQEiGJRSDVJXKt7NyV GVIWOBC+GC2K9w4FMJQGCOfooRd5yM6Pant4gRffJMxudXI1bm4uA++WMgSkUHUb KW3+D3SFUNhNfqKQ78G554WyqfmS16JRSdUhlJbWhd9BUw2okhNbj8W3y5nwvsYx 1j+F1vT/k2W8Da1YXeFmgI3y8vWHnogQ7M0H1bLGUMcmeskbEKRdjG8DOrekzLzJ gQ== -----END CERTIFICATE-----Generated at Fri Dec 5 16:37:06 2025 by rpki-client