This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/02a9e8a5-c8f4-47b3-80c9-f1e02a8aaa89/0/FA9B54C77884D87579E661822CB46BEDD39FA5D3.mft File: FA9B54C77884D87579E661822CB46BEDD39FA5D3.mft (raw, json) Hash identifier: cKlRXxcIuars4MaDV/uXqsLAK7Q0vf0kUco6sND/quk= Subject key identifier: 6C:D3:79:32:21:28:93:2F:84:2A:49:F0:FC:9D:C2:C8:6F:36:60:3E Authority key identifier: FA:9B:54:C7:78:84:D8:75:79:E6:61:82:2C:B4:6B:ED:D3:9F:A5:D3 Certificate issuer: /CN=FA9B54C77884D87579E661822CB46BEDD39FA5D3 Certificate serial: 4FA44549E497B49814DA812AA506C264E69C91A0 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/FA9B54C77884D87579E661822CB46BEDD39FA5D3.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/02a9e8a5-c8f4-47b3-80c9-f1e02a8aaa89/0/FA9B54C77884D87579E661822CB46BEDD39FA5D3.mft Manifest number: 0B Signing time: Sat 06 Dec 2025 08:56:02 +0000 Manifest this update: Sat 06 Dec 2025 08:51:02 +0000 Manifest next update: Sun 07 Dec 2025 10:07:02 +0000 Files and hashes: 1: FA9B54C77884D87579E661822CB46BEDD39FA5D3.crl (hash: DJSTtBrcZRH8/rITFN89tbdNVduIPO0xvbTXEVWhLpM=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/02a9e8a5-c8f4-47b3-80c9-f1e02a8aaa89/0/FA9B54C77884D87579E661822CB46BEDD39FA5D3.crl rsync://rsync.paas.rpki.ripe.net/repository/02a9e8a5-c8f4-47b3-80c9-f1e02a8aaa89/0/FA9B54C77884D87579E661822CB46BEDD39FA5D3.mft rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/FA9B54C77884D87579E661822CB46BEDD39FA5D3.cer rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/75A838E02C61800F73D3019DE0A51F567B64BC0E.crl rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/75A838E02C61800F73D3019DE0A51F567B64BC0E.mft rsync://rpki.ripe.net/repository/DEFAULT/dag44CxhgA9z0wGd4KUfVntkvA4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:a4:45:49:e4:97:b4:98:14:da:81:2a:a5:06:c2:64:e6:9c:91:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FA9B54C77884D87579E661822CB46BEDD39FA5D3 Validity Not Before: Dec 6 08:51:02 2025 GMT Not After : Dec 7 10:07:02 2025 GMT Subject: CN=6CD379322128932F842A49F0FC9DC2C86F36603E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:d0:f0:4f:dd:da:d3:3c:e1:0f:a2:1a:9d:b7: 2c:72:7e:40:62:c8:67:65:60:89:c2:b5:55:8a:23: f8:b2:6b:88:0a:5b:ec:2d:28:32:c3:d6:4c:3d:f9: df:a8:1e:ed:4f:27:7c:f8:ca:b2:74:7a:38:bf:40: 83:ff:9a:9c:19:e6:3f:78:30:d2:8d:8e:a7:cf:b9: 70:86:c0:5b:13:3f:c4:20:a6:a8:43:90:37:d2:db: 54:b2:e9:13:75:96:d8:2b:ef:8e:d1:ea:47:48:fa: 39:2c:f1:ee:c4:dd:b6:98:05:50:f7:83:43:d1:83: 3a:23:14:eb:9b:aa:08:94:59:c9:aa:ff:ae:26:b5: c5:12:4c:a4:f7:52:61:f2:f5:d8:bf:f3:48:0d:a9: 1b:d5:5e:2b:a1:94:20:8c:fb:19:26:e3:07:9e:c5: 64:3c:f6:d3:7a:fb:c7:dd:83:d3:51:ae:fc:cc:71: d0:1c:a4:61:11:d2:b9:dd:4b:46:8f:3f:10:90:40: 9c:13:d5:e6:f8:c4:dd:14:18:a1:f5:cf:74:c7:d6: 87:c9:0a:7a:61:42:b0:27:53:d4:7d:79:c0:b3:96: c1:c8:b5:66:dd:01:87:ed:d9:e5:a8:3f:f9:b9:2e: 1c:44:09:cd:a5:ac:90:2e:00:89:d9:07:c5:71:03: 73:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:D3:79:32:21:28:93:2F:84:2A:49:F0:FC:9D:C2:C8:6F:36:60:3E X509v3 Authority Key Identifier: keyid:FA:9B:54:C7:78:84:D8:75:79:E6:61:82:2C:B4:6B:ED:D3:9F:A5:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/02a9e8a5-c8f4-47b3-80c9-f1e02a8aaa89/0/FA9B54C77884D87579E661822CB46BEDD39FA5D3.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/FA9B54C77884D87579E661822CB46BEDD39FA5D3.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/02a9e8a5-c8f4-47b3-80c9-f1e02a8aaa89/0/FA9B54C77884D87579E661822CB46BEDD39FA5D3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:58:0c:e7:bd:9c:85:78:22:39:47:ff:1d:07:38:0f:74:7e: aa:dd:ca:53:4a:19:2a:96:5d:84:41:99:73:d7:46:5f:2a:d8: 74:90:c1:5b:b5:56:a8:1b:ab:ad:32:ef:4e:32:18:af:5a:96: e5:63:2b:c1:c8:3c:c3:84:4f:0a:40:3e:7f:be:87:62:0c:40: 7e:a1:07:33:54:d2:48:30:d1:ac:7c:d3:65:15:12:c1:16:f7: 4b:72:bd:38:b1:b8:b0:0f:6d:19:57:f0:eb:d8:45:03:a1:26: a2:67:1b:ae:0a:ee:46:51:d5:1d:80:41:25:de:d2:55:f2:62: ee:a6:a2:43:a8:f1:19:53:e7:77:53:27:06:42:60:fc:87:d2: 58:c9:35:fa:5e:0e:7d:ea:03:00:ae:02:90:13:b0:3a:4c:63: 88:91:b5:0b:c5:0c:7c:bd:69:5f:3e:f5:a9:88:d5:f8:8d:bd: 51:41:6f:f7:bb:bf:57:3c:20:1f:ab:1c:47:f7:f1:70:09:19: e6:51:1e:6d:86:bf:70:07:aa:c5:df:f4:d2:1e:a8:df:9e:40: eb:79:71:73:06:42:54:d7:54:d0:d8:a8:25:63:de:eb:94:53: b1:da:46:0e:85:64:36:e9:b2:40:f7:dc:02:ff:18:8b:e8:17: 80:b2:23:09 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUT6RFSeSXtJgU2oEqpQbCZOackaAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkE5QjU0Qzc3ODg0RDg3NTc5RTY2MTgyMkNCNDZCRURE MzlGQTVEMzAeFw0yNTEyMDYwODUxMDJaFw0yNTEyMDcxMDA3MDJaMDMxMTAvBgNV BAMTKDZDRDM3OTMyMjEyODkzMkY4NDJBNDlGMEZDOURDMkM4NkYzNjYwM0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCb0PBP3drTPOEPohqdtyxyfkBi yGdlYInCtVWKI/iya4gKW+wtKDLD1kw9+d+oHu1PJ3z4yrJ0eji/QIP/mpwZ5j94 MNKNjqfPuXCGwFsTP8QgpqhDkDfS21Sy6RN1ltgr747R6kdI+jks8e7E3baYBVD3 g0PRgzojFOubqgiUWcmq/64mtcUSTKT3UmHy9di/80gNqRvVXiuhlCCM+xkm4wee xWQ89tN6+8fdg9NRrvzMcdAcpGER0rndS0aPPxCQQJwT1eb4xN0UGKH1z3TH1ofJ CnphQrAnU9R9ecCzlsHItWbdAYft2eWoP/m5LhxECc2lrJAuAInZB8VxA3PLAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUbNN5MiEoky+EKknw/J3CyG82YD4wHwYDVR0j BBgwFoAU+ptUx3iE2HV55mGCLLRr7dOfpdMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDJhOWU4YTUtYzhmNC00N2IzLTgwYzktZjFlMDJhOGFh YTg5LzAvRkE5QjU0Qzc3ODg0RDg3NTc5RTY2MTgyMkNCNDZCRUREMzlGQTVEMy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lMjZlYjEzNi00ZmU1LTRl NjEtYTRkOC1mMzQ1ZjUyYmMyNWQvMC9GQTlCNTRDNzc4ODREODc1NzlFNjYxODIy Q0I0NkJFREQzOUZBNUQzLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzAyYTllOGE1LWM4ZjQtNDdiMy04MGM5LWYxZTAyYThhYWE4OS8wL0ZBOUI1NEM3 Nzg4NEQ4NzU3OUU2NjE4MjJDQjQ2QkVERDM5RkE1RDMubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBpWAzn vZyFeCI5R/8dBzgPdH6q3cpTShkqll2EQZlz10ZfKth0kMFbtVaoG6utMu9OMhiv WpblYyvByDzDhE8KQD5/vodiDEB+oQczVNJIMNGsfNNlFRLBFvdLcr04sbiwD20Z V/Dr2EUDoSaiZxuuCu5GUdUdgEEl3tJV8mLupqJDqPEZU+d3UycGQmD8h9JYyTX6 Xg596gMArgKQE7A6TGOIkbULxQx8vWlfPvWpiNX4jb1RQW/3u79XPCAfqxxH9/Fw CRnmUR5thr9wB6rF3/TSHqjfnkDreXFzBkJU11TQ2KglY97rlFOx2kYOhWQ26bJA 99wC/xiL6BeAsiMJ -----END CERTIFICATE-----Generated at Sat Dec 6 12:53:47 2025 by rpki-client