This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.mft File: 35B52EF20A5730A6261D6D1916C6B747FF3C2852.mft (raw, json) Hash identifier: oSMjXK4KZG3UoS7OfnyjQbskTE553bnRKWjztavcibs= Subject key identifier: 8D:5A:76:5B:79:F1:68:47:1E:B6:AD:9F:8A:1A:45:62:9B:D4:4B:9E Authority key identifier: 35:B5:2E:F2:0A:57:30:A6:26:1D:6D:19:16:C6:B7:47:FF:3C:28:52 Certificate issuer: /CN=35B52EF20A5730A6261D6D1916C6B747FF3C2852 Certificate serial: 7181F416A50899DD4288808C140CB296A773291A Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.mft Manifest number: 0186 Signing time: Wed 10 Dec 2025 08:35:49 +0000 Manifest this update: Wed 10 Dec 2025 08:30:49 +0000 Manifest next update: Thu 11 Dec 2025 09:12:49 +0000 Files and hashes: 1: 326131343a373538313a326630313a3a2f34382d3438203d3e20343031333836.roa (hash: SLj141CGncsBb5vfud/Xh4MbUscTfgukNtFTpVVNYzk=) 2: 35B52EF20A5730A6261D6D1916C6B747FF3C2852.crl (hash: 2VoqtwcDIq66b20j7658GlJ084nlisZFc7l1OwFk5eA=) 3: 326131343a373538313a323030303a3a2f34302d3438203d3e20343031333836.roa (hash: pi4F6jgMqqwUP1FTiOnfocpEw1DljOaDr1vx1pIBms8=) 4: 326131343a373538313a323830303a3a2f34302d3438203d3e20323039313039.roa (hash: U1r4ZvjM4KXIBEm7hpH6+0Qd/LSsHMlknATpB6yDZ90=) 5: 326131343a373538313a323730303a3a2f34302d3438203d3e20323039313039.roa (hash: MFKFuWCDL66Zxs5f3hEeRn+2JW7mEBoWjT7f6AJBOhM=) 6: 326131343a373538313a323330303a3a2f34302d3430203d3e20343031333836.roa (hash: 0cCFPlcOjS3xWnb1dJLZXDYv3McRJuNCq2FLbccHCeQ=) 7: 326131343a373538313a323530303a3a2f34302d3430203d3e203134343437.roa (hash: 2DfIdT8hQ452p9tTWwGSgv6G5KrCdvIla2RYi0wqius=) 8: 326131343a373538313a323030303a3a2f34302d3438203d3e20323039313039.roa (hash: lRerEWAZYVnj4WeC0lksu5JXgu5ks2mpqCgBEDRR0Q0=) 9: 326131343a373538313a323030303a3a2f34302d3438203d3e20323135333634.roa (hash: iPZr810Wf3G2BF1Yx0TXVCnIMBYWmzqlqsIx/XIB/Cc=) 10: 326131343a373538313a323030303a3a2f34302d3438203d3e20323136333234.roa (hash: bje5aLLUqgAL8DyPjKPS1MwDhANSqShDo64yB6sarZo=) 11: 326131343a373538313a323130303a3a2f34302d3430203d3e20343031333836.roa (hash: T25tbrYVZpBemZDjqgpA9HPrUcZHUwwg3LOVGpsmSZ8=) 12: 326131343a373538313a326630303a3a2f34382d3438203d3e20343031333836.roa (hash: PQEJzzZkaWaRihPz0qFSxn/fBL9FvQBY7Es5NvynDQM=) 13: 326131343a373538313a323630303a3a2f34302d3438203d3e20323039313039.roa (hash: Ah/styCnPIoGFWiO0PQ2rB66bvMdDv2NyL9mrkcrCj4=) 14: 326131343a373538313a323030303a3a2f34302d3438203d3e20333936303530.roa (hash: yUvus43IfO0AT/ck5bMQHbMTgP3EN2v06hq4szCBm40=) 15: 326131343a373538313a323930303a3a2f34302d3438203d3e20323039313039.roa (hash: ENamU9VlpUh2S5yKvYrAp12SwLl/9Jv38ffU+yHH5Iw=) 16: 326131343a373538313a323230303a3a2f34302d3430203d3e20343031333836.roa (hash: xASXurrkB21YmULJQ68AjQqXl8iRC/GmjrwM45TRghc=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.crl rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:81:f4:16:a5:08:99:dd:42:88:80:8c:14:0c:b2:96:a7:73:29:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35B52EF20A5730A6261D6D1916C6B747FF3C2852 Validity Not Before: Dec 10 08:30:49 2025 GMT Not After : Dec 11 09:12:49 2025 GMT Subject: CN=8D5A765B79F168471EB6AD9F8A1A45629BD44B9E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:05:c3:3a:e9:b0:75:b0:17:14:15:f4:02:f4: 57:57:9d:b7:f6:75:74:dc:d4:a2:f0:f2:11:4e:39: 86:7a:5b:56:14:c6:ba:7f:70:a1:be:6c:68:7a:5a: 54:59:fb:56:7d:0b:52:f0:a5:98:9a:e4:63:f1:66: 9b:6f:c9:e4:f9:7c:43:88:93:1f:f9:4c:d6:c9:5c: fb:f1:1e:cd:e7:b7:8c:86:41:2e:36:19:dd:57:0d: e2:3d:84:8a:27:5b:10:ff:f8:47:01:1b:69:cc:3b: a0:a2:0e:d9:73:fa:12:ed:ed:e7:f9:61:07:91:c4: 25:a1:e9:69:e8:fc:0b:2e:57:c4:3b:1c:71:88:ff: 8b:07:ef:e1:f2:b9:7b:fe:e5:53:00:89:66:54:1e: cd:05:4b:2e:48:d4:48:23:bb:9e:b8:9c:58:cd:52: ca:b6:77:80:c2:bb:c6:e8:3e:2b:04:a8:5a:fd:25: 0d:ee:e5:e4:01:6c:6a:92:0c:4c:b3:85:18:22:43: 31:a3:79:cd:22:62:55:73:b0:97:ec:e3:89:ef:8c: 7a:ce:f4:61:1c:71:eb:8b:1b:5c:9e:27:47:38:92: d8:6a:02:a1:9c:ea:b0:e2:6f:86:cb:af:e3:95:6f: 87:9d:47:f9:3d:de:a6:9d:e5:0a:81:84:ce:dc:d4: a1:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:5A:76:5B:79:F1:68:47:1E:B6:AD:9F:8A:1A:45:62:9B:D4:4B:9E X509v3 Authority Key Identifier: keyid:35:B5:2E:F2:0A:57:30:A6:26:1D:6D:19:16:C6:B7:47:FF:3C:28:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:c0:48:39:ea:dc:81:a9:ce:1b:13:2a:37:57:10:a7:92:6a: 15:dc:26:02:b2:4c:de:ee:f4:87:79:d2:67:f4:33:77:27:9d: 96:0e:4d:61:93:66:e5:b1:a6:95:16:ba:65:2a:06:22:1f:05: 14:f2:d2:af:b1:eb:68:94:9a:d2:dc:db:0e:28:32:86:1c:7d: 1e:ea:df:37:ba:15:48:96:b6:c3:a8:a6:02:e4:c1:d7:1c:8f: 14:84:ab:4b:b5:23:b4:0b:28:e0:ca:2a:4a:94:ff:3f:1e:56: f5:02:10:d8:cd:88:b8:0c:85:7b:6d:21:0e:ca:34:87:a1:74: 2c:cd:63:ce:1c:7d:79:4e:a2:72:94:a2:f7:5c:20:d7:2a:79: 15:c8:1b:87:e3:2e:4a:c6:16:02:8c:f9:fd:ea:46:e1:d6:ab: 96:bc:d1:b5:d5:c4:84:57:82:15:ac:9e:08:87:b7:28:22:8c: 1f:85:45:c6:50:ac:65:a6:db:fb:e2:6e:e7:63:e9:9e:c2:9a: 94:37:c5:28:99:c6:fc:8f:e5:28:e0:52:a2:13:92:3a:6b:72: 22:41:79:36:43:f6:14:c3:d3:c1:81:2a:04:12:05:70:72:28: 22:64:93:fd:b9:5a:1d:62:b2:fe:45:7f:5f:44:23:35:b9:40: f8:c2:21:55 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUcYH0FqUImd1CiICMFAyylqdzKRowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzVCNTJFRjIwQTU3MzBBNjI2MUQ2RDE5MTZDNkI3NDdG RjNDMjg1MjAeFw0yNTEyMTAwODMwNDlaFw0yNTEyMTEwOTEyNDlaMDMxMTAvBgNV BAMTKDhENUE3NjVCNzlGMTY4NDcxRUI2QUQ5RjhBMUE0NTYyOUJENDRCOUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2BcM66bB1sBcUFfQC9FdXnbf2 dXTc1KLw8hFOOYZ6W1YUxrp/cKG+bGh6WlRZ+1Z9C1LwpZia5GPxZptvyeT5fEOI kx/5TNbJXPvxHs3nt4yGQS42Gd1XDeI9hIonWxD/+EcBG2nMO6CiDtlz+hLt7ef5 YQeRxCWh6Wno/AsuV8Q7HHGI/4sH7+HyuXv+5VMAiWZUHs0FSy5I1Egju564nFjN Usq2d4DCu8boPisEqFr9JQ3u5eQBbGqSDEyzhRgiQzGjec0iYlVzsJfs44nvjHrO 9GEcceuLG1yeJ0c4kthqAqGc6rDib4bLr+OVb4edR/k93qad5QqBhM7c1KEVAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUjVp2W3nxaEcetq2fihpFYpvUS54wHwYDVR0j BBgwFoAUNbUu8gpXMKYmHW0ZFsa3R/88KFIwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmFkZWJiOWQtMzNjYy00MjliLWFhMzUtMTA2MzRhOGIx ZGQ0LzAvMzVCNTJFRjIwQTU3MzBBNjI2MUQ2RDE5MTZDNkI3NDdGRjNDMjg1Mi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8zNUI1MkVGMjBBNTczMEE2MjYxRDZEMTkx NkM2Qjc0N0ZGM0MyODUyLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2ZhZGViYjlkLTMzY2MtNDI5Yi1hYTM1LTEwNjM0YThiMWRkNC8wLzM1QjUyRUYy MEE1NzMwQTYyNjFENkQxOTE2QzZCNzQ3RkYzQzI4NTIubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBnwEg5 6tyBqc4bEyo3VxCnkmoV3CYCskze7vSHedJn9DN3J52WDk1hk2blsaaVFrplKgYi HwUU8tKvsetolJrS3NsOKDKGHH0e6t83uhVIlrbDqKYC5MHXHI8UhKtLtSO0Cyjg yipKlP8/Hlb1AhDYzYi4DIV7bSEOyjSHoXQszWPOHH15TqJylKL3XCDXKnkVyBuH 4y5KxhYCjPn96kbh1quWvNG11cSEV4IVrJ4Ih7coIowfhUXGUKxlptv74m7nY+me wpqUN8Uomcb8j+Uo4FKiE5I6a3IiQXk2Q/YUw9PBgSoEEgVwcigiZJP9uVodYrL+ RX9fRCM1uUD4wiFV -----END CERTIFICATE-----Generated at Wed Dec 10 10:55:43 2025 by rpki-client