This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f812d3ef-c5fc-45b0-954a-8a52210c2e90/0/61D9F4B7CF8D860603082E07FDCA08518E16AAFB.mft File: 61D9F4B7CF8D860603082E07FDCA08518E16AAFB.mft (raw, json) Hash identifier: wXz3rvGxZE3v15rPYeZ+eqWjV1wLEGoI3X4Sy7jt8hc= Subject key identifier: 14:33:BA:63:98:6B:D0:F7:EA:CB:C1:03:09:AF:A2:CF:5E:A7:42:B5 Authority key identifier: 61:D9:F4:B7:CF:8D:86:06:03:08:2E:07:FD:CA:08:51:8E:16:AA:FB Certificate issuer: /CN=61D9F4B7CF8D860603082E07FDCA08518E16AAFB Certificate serial: 4B6628839ECBCED185713CFB5381286E170C411A Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/61D9F4B7CF8D860603082E07FDCA08518E16AAFB.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f812d3ef-c5fc-45b0-954a-8a52210c2e90/0/61D9F4B7CF8D860603082E07FDCA08518E16AAFB.mft Manifest number: 05 Signing time: Sat 13 Dec 2025 09:17:04 +0000 Manifest this update: Sat 13 Dec 2025 09:12:04 +0000 Manifest next update: Sun 14 Dec 2025 10:12:04 +0000 Files and hashes: 1: 61D9F4B7CF8D860603082E07FDCA08518E16AAFB.crl (hash: Y81I4chbFN62gEeQpEBUYVG7733n4/RvAD9+ELMbKfE=) 2: 326130663a316363353a6330303a3a2f34302d3430203d3e20323038373534.roa (hash: Q5Z/wqUBwWhM8mRyojjN6NpV/xV/IzhUzgKoHX5P1HU=) 3: 326130663a316363353a6330303a3a2f34342d3434203d3e20313337393038.roa (hash: ATZc214+3GX48p6REnIm7Qjen5IkiQYJugGYiQlSRpg=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f812d3ef-c5fc-45b0-954a-8a52210c2e90/0/61D9F4B7CF8D860603082E07FDCA08518E16AAFB.crl rsync://rsync.paas.rpki.ripe.net/repository/f812d3ef-c5fc-45b0-954a-8a52210c2e90/0/61D9F4B7CF8D860603082E07FDCA08518E16AAFB.mft rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/61D9F4B7CF8D860603082E07FDCA08518E16AAFB.cer rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/75A838E02C61800F73D3019DE0A51F567B64BC0E.crl rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/75A838E02C61800F73D3019DE0A51F567B64BC0E.mft rsync://rpki.ripe.net/repository/DEFAULT/dag44CxhgA9z0wGd4KUfVntkvA4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 10:12:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:66:28:83:9e:cb:ce:d1:85:71:3c:fb:53:81:28:6e:17:0c:41:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61D9F4B7CF8D860603082E07FDCA08518E16AAFB Validity Not Before: Dec 13 09:12:04 2025 GMT Not After : Dec 14 10:12:04 2025 GMT Subject: CN=1433BA63986BD0F7EACBC10309AFA2CF5EA742B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:68:67:77:e0:2a:96:8d:be:98:34:c8:4c:17: 90:1f:83:e9:61:cb:b4:f5:fa:35:e0:ad:36:31:fb: 3f:97:3b:7b:22:65:9c:0d:68:ed:99:af:97:24:bd: 6e:9c:58:a8:3e:c7:0a:03:8f:ce:68:6f:35:66:31: 22:52:56:c7:15:c1:52:e1:ff:88:0f:ec:c4:90:01: db:31:80:a9:4b:6d:b8:5a:e6:1b:63:0a:df:c2:fe: 5f:54:42:8c:12:34:a0:5c:c7:ef:30:69:bb:36:16: 19:fd:e1:c6:de:c0:d5:b4:d3:b4:c0:94:5f:2d:57: e3:c9:f3:13:95:07:71:a2:6a:5c:17:6a:1c:79:41: d8:af:18:7b:83:cf:56:01:14:0c:33:75:7d:6b:59: 32:92:5c:cf:42:ca:26:f9:84:56:89:79:31:15:2b: 32:78:87:26:be:da:59:1e:6f:79:c1:11:ed:b4:91: ed:33:d8:56:2b:66:bb:e8:14:a2:e9:c1:1e:2f:49: 51:25:32:bf:0e:3b:a5:d1:c7:dc:1f:eb:dc:dc:5a: 04:cf:a1:c3:0d:c0:59:1f:b4:9c:c9:fb:cb:8c:e6: 14:d3:10:ef:56:56:90:86:ae:c1:63:27:d5:ad:d7: f2:c5:63:38:cb:b9:51:39:e4:fb:8e:bb:52:ee:5e: 0a:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:33:BA:63:98:6B:D0:F7:EA:CB:C1:03:09:AF:A2:CF:5E:A7:42:B5 X509v3 Authority Key Identifier: keyid:61:D9:F4:B7:CF:8D:86:06:03:08:2E:07:FD:CA:08:51:8E:16:AA:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f812d3ef-c5fc-45b0-954a-8a52210c2e90/0/61D9F4B7CF8D860603082E07FDCA08518E16AAFB.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/61D9F4B7CF8D860603082E07FDCA08518E16AAFB.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f812d3ef-c5fc-45b0-954a-8a52210c2e90/0/61D9F4B7CF8D860603082E07FDCA08518E16AAFB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:c7:de:1d:78:6d:40:08:d6:8b:a7:b6:3e:71:61:08:da:dc: de:27:92:8f:ee:f5:6d:17:4b:b8:84:fa:5a:1d:f8:24:bf:fe: 00:62:2c:31:f2:47:da:85:cd:31:aa:ca:80:df:44:2a:f7:8e: c9:aa:88:6a:33:65:1f:b9:7b:c9:7d:9a:be:de:d4:82:7f:06: 53:7c:78:fa:99:73:20:e4:c2:a5:8e:eb:93:87:79:22:ab:31: c9:49:96:fc:54:8e:20:99:91:15:d5:52:b1:c2:7c:d6:b6:6a: ca:62:39:8a:15:c1:7a:af:21:b0:b3:89:c6:f0:8b:69:eb:a7: f6:dd:cf:bf:ca:b2:0b:1a:22:34:3d:5b:94:1b:92:fc:94:2f: de:59:c8:58:e8:fd:16:52:2c:fd:3c:e0:db:9f:41:14:0d:94: c8:c3:c3:51:60:de:26:97:42:03:17:0d:74:5c:98:b5:a4:5f: 16:5b:cc:4e:b2:05:d0:52:49:c1:e9:1f:25:35:4e:91:d8:1e: a4:e0:c9:c1:0f:5c:8c:2d:d1:87:3f:32:71:42:48:83:5a:d1: bd:1b:12:51:aa:03:49:db:c6:ba:95:16:27:98:28:f1:e9:fc: a0:b3:eb:9b:e0:c4:92:9a:7e:89:20:c9:fd:ba:0a:5b:9d:1e: 1e:52:4f:01 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUS2Yog57LztGFcTz7U4EobhcMQRowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjFEOUY0QjdDRjhEODYwNjAzMDgyRTA3RkRDQTA4NTE4 RTE2QUFGQjAeFw0yNTEyMTMwOTEyMDRaFw0yNTEyMTQxMDEyMDRaMDMxMTAvBgNV BAMTKDE0MzNCQTYzOTg2QkQwRjdFQUNCQzEwMzA5QUZBMkNGNUVBNzQyQjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbaGd34CqWjb6YNMhMF5Afg+lh y7T1+jXgrTYx+z+XO3siZZwNaO2Zr5ckvW6cWKg+xwoDj85obzVmMSJSVscVwVLh /4gP7MSQAdsxgKlLbbha5htjCt/C/l9UQowSNKBcx+8wabs2Fhn94cbewNW007TA lF8tV+PJ8xOVB3GialwXahx5QdivGHuDz1YBFAwzdX1rWTKSXM9Cyib5hFaJeTEV KzJ4hya+2lkeb3nBEe20ke0z2FYrZrvoFKLpwR4vSVElMr8OO6XRx9wf69zcWgTP ocMNwFkftJzJ+8uM5hTTEO9WVpCGrsFjJ9Wt1/LFYzjLuVE55PuOu1LuXgprAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUFDO6Y5hr0Pfqy8EDCa+iz16nQrUwHwYDVR0j BBgwFoAUYdn0t8+NhgYDCC4H/coIUY4WqvswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZjgxMmQzZWYtYzVmYy00NWIwLTk1NGEtOGE1MjIxMGMy ZTkwLzAvNjFEOUY0QjdDRjhEODYwNjAzMDgyRTA3RkRDQTA4NTE4RTE2QUFGQi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lMjZlYjEzNi00ZmU1LTRl NjEtYTRkOC1mMzQ1ZjUyYmMyNWQvMC82MUQ5RjRCN0NGOEQ4NjA2MDMwODJFMDdG RENBMDg1MThFMTZBQUZCLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2Y4MTJkM2VmLWM1ZmMtNDViMC05NTRhLThhNTIyMTBjMmU5MC8wLzYxRDlGNEI3 Q0Y4RDg2MDYwMzA4MkUwN0ZEQ0EwODUxOEUxNkFBRkIubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCZx94d eG1ACNaLp7Y+cWEI2tzeJ5KP7vVtF0u4hPpaHfgkv/4AYiwx8kfahc0xqsqA30Qq 947JqohqM2UfuXvJfZq+3tSCfwZTfHj6mXMg5MKljuuTh3kiqzHJSZb8VI4gmZEV 1VKxwnzWtmrKYjmKFcF6ryGws4nG8Itp66f23c+/yrILGiI0PVuUG5L8lC/eWchY 6P0WUiz9PODbn0EUDZTIw8NRYN4ml0IDFw10XJi1pF8WW8xOsgXQUknB6R8lNU6R 2B6k4MnBD1yMLdGHPzJxQkiDWtG9GxJRqgNJ28a6lRYnmCjx6fygs+ub4MSSmn6J IMn9ugpbnR4eUk8B -----END CERTIFICATE-----Generated at Sat Dec 13 21:57:34 2025 by rpki-client