This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/03fd0b76-7243-4b26-9760-cc07b94bfe23/0/59906C43E7E7D104C7C84232EF2B9CDDBD7290A4.mft File: 59906C43E7E7D104C7C84232EF2B9CDDBD7290A4.mft (raw, json) Hash identifier: jI/T7C/T3Nn92UZVOSKawlEm2EGMlq5dsZU12mMAOL4= Subject key identifier: 48:40:D0:18:9B:20:7C:02:B8:37:35:85:64:A0:A4:5F:5C:02:D0:7C Authority key identifier: 59:90:6C:43:E7:E7:D1:04:C7:C8:42:32:EF:2B:9C:DD:BD:72:90:A4 Certificate issuer: /CN=59906c43e7e7d104c7c84232ef2b9cddbd7290a4 Certificate serial: 4D0CB979F227AAEF7F2C27DE892E83EFCD1ACD56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WZBsQ-fn0QTHyEIy7yuc3b1ykKQ.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/03fd0b76-7243-4b26-9760-cc07b94bfe23/0/59906C43E7E7D104C7C84232EF2B9CDDBD7290A4.mft Manifest number: 3A Signing time: Fri 05 Dec 2025 13:19:40 +0000 Manifest this update: Fri 05 Dec 2025 13:14:40 +0000 Manifest next update: Sat 06 Dec 2025 16:38:40 +0000 Files and hashes: 1: 59906C43E7E7D104C7C84232EF2B9CDDBD7290A4.crl (hash: IaH6CtSOIaUHqe1e5KzXfONUVoYbtyy8a6CduaG7dEo=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/03fd0b76-7243-4b26-9760-cc07b94bfe23/0/59906C43E7E7D104C7C84232EF2B9CDDBD7290A4.crl rsync://rsync.paas.rpki.ripe.net/repository/03fd0b76-7243-4b26-9760-cc07b94bfe23/0/59906C43E7E7D104C7C84232EF2B9CDDBD7290A4.mft rsync://rpki.ripe.net/repository/DEFAULT/WZBsQ-fn0QTHyEIy7yuc3b1ykKQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 16:38:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:0c:b9:79:f2:27:aa:ef:7f:2c:27:de:89:2e:83:ef:cd:1a:cd:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59906c43e7e7d104c7c84232ef2b9cddbd7290a4 Validity Not Before: Dec 5 13:14:40 2025 GMT Not After : Dec 6 16:38:40 2025 GMT Subject: CN=4840D0189B207C02B837358564A0A45F5C02D07C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:c0:9d:a4:77:b1:59:40:bd:28:5f:50:b7:88: 5f:0d:73:ed:a7:4b:31:a4:fa:16:f2:d0:b5:d7:d8: 0a:60:01:2b:11:e7:6e:34:42:24:0b:e4:21:fa:d1: e5:7f:85:1e:b7:18:4f:b5:e8:cf:9c:12:44:51:b7: 35:f5:d3:2f:88:eb:c2:19:10:e1:b3:4a:01:70:f0: 78:6f:8b:9e:d2:62:f9:1e:a7:98:45:82:88:cb:f7: e5:cc:a7:97:bb:67:3e:a9:82:fa:4d:8f:49:a5:75: bf:c4:f3:81:3d:b1:47:12:b6:27:51:fa:32:cc:12: 14:1c:04:80:dd:ea:e8:7c:cf:3b:86:4b:34:7a:2d: 1a:ef:ae:38:cc:69:be:85:70:91:7e:9f:6a:16:13: 28:80:54:a0:33:9e:75:89:99:45:5c:ee:c1:63:90: 4d:c8:ac:d4:75:b5:b6:eb:8c:1a:48:59:84:7c:ce: 67:77:e0:29:33:40:21:bc:14:68:50:2f:8f:2b:b6: 67:2f:ca:03:c2:ef:b4:27:0d:9d:ba:46:1f:60:8f: cd:c8:cb:93:24:a7:1f:40:12:86:34:c8:f4:0a:e3: 83:79:19:54:d3:08:ee:48:14:a2:79:fe:71:1d:a8: bc:ed:c9:11:6e:22:f2:41:69:40:aa:90:83:48:9c: 81:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:40:D0:18:9B:20:7C:02:B8:37:35:85:64:A0:A4:5F:5C:02:D0:7C X509v3 Authority Key Identifier: keyid:59:90:6C:43:E7:E7:D1:04:C7:C8:42:32:EF:2B:9C:DD:BD:72:90:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/03fd0b76-7243-4b26-9760-cc07b94bfe23/0/59906C43E7E7D104C7C84232EF2B9CDDBD7290A4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WZBsQ-fn0QTHyEIy7yuc3b1ykKQ.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/03fd0b76-7243-4b26-9760-cc07b94bfe23/0/59906C43E7E7D104C7C84232EF2B9CDDBD7290A4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:eb:8b:b9:b5:3d:13:50:7e:8d:9a:f4:22:3e:d3:70:b7:9e: 83:ba:b9:0e:a7:69:3f:0a:b7:e2:8e:f1:5e:07:6c:b1:58:34: 2b:09:c1:81:37:98:2e:ee:f3:54:08:fe:a1:3f:4a:5b:e7:c3: d4:1d:f5:27:5c:d7:8b:70:2b:6a:96:47:9e:97:1c:ff:db:db: fc:33:ee:b4:a6:b4:6f:8a:dc:05:af:46:18:ea:be:0e:55:f7: 00:80:8a:24:d5:be:0a:11:9d:71:35:df:f4:61:db:b4:11:95: 67:af:9b:e4:97:e8:30:49:0a:96:55:0c:5a:10:7c:56:79:8c: 4a:06:39:40:1f:32:7e:24:f8:ec:aa:f5:87:7c:9b:04:a1:75: fa:ea:ab:77:3b:0e:2a:34:f6:cb:a4:98:b4:03:e0:e4:42:8f: 74:bb:e3:b0:0a:20:29:7e:4f:74:2b:2c:a8:ce:87:25:7f:84: 1a:33:9e:d3:bb:92:57:e8:2f:6a:9d:c4:19:78:06:8d:bb:6f: d8:40:13:1e:17:a4:be:5a:ca:28:c7:72:c2:d2:69:4f:2d:88: d4:42:b6:3b:93:31:56:11:e3:1f:75:48:9c:58:3b:6f:98:64: b6:54:0a:77:be:cf:63:36:f0:1d:d3:71:c2:a1:86:ff:5c:b6: 3a:1a:16:ee -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUTQy5efInqu9/LCfeiS6D780azVYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTk5MDZjNDNlN2U3ZDEwNGM3Yzg0MjMyZWYyYjljZGRi ZDcyOTBhNDAeFw0yNTEyMDUxMzE0NDBaFw0yNTEyMDYxNjM4NDBaMDMxMTAvBgNV BAMTKDQ4NDBEMDE4OUIyMDdDMDJCODM3MzU4NTY0QTBBNDVGNUMwMkQwN0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDywJ2kd7FZQL0oX1C3iF8Nc+2n SzGk+hby0LXX2ApgASsR5240QiQL5CH60eV/hR63GE+16M+cEkRRtzX10y+I68IZ EOGzSgFw8Hhvi57SYvkep5hFgojL9+XMp5e7Zz6pgvpNj0mldb/E84E9sUcStidR +jLMEhQcBIDd6uh8zzuGSzR6LRrvrjjMab6FcJF+n2oWEyiAVKAznnWJmUVc7sFj kE3IrNR1tbbrjBpIWYR8zmd34CkzQCG8FGhQL48rtmcvygPC77QnDZ26Rh9gj83I y5Mkpx9AEoY0yPQK44N5GVTTCO5IFKJ5/nEdqLztyRFuIvJBaUCqkINInIHBAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUSEDQGJsgfAK4NzWFZKCkX1wC0HwwHwYDVR0j BBgwFoAUWZBsQ+fn0QTHyEIy7yuc3b1ykKQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDNmZDBiNzYtNzI0My00YjI2LTk3NjAtY2MwN2I5NGJm ZTIzLzAvNTk5MDZDNDNFN0U3RDEwNEM3Qzg0MjMyRUYyQjlDRERCRDcyOTBBNC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1daQnNRLWZuMFFUSHlFSXk3eXVjM2Ix eWtLUS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8wM2ZkMGI3Ni03 MjQzLTRiMjYtOTc2MC1jYzA3Yjk0YmZlMjMvMC81OTkwNkM0M0U3RTdEMTA0QzdD ODQyMzJFRjJCOUNEREJENzI5MEE0Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbOuLubU9E1B+jZr0Ij7T cLeeg7q5DqdpPwq34o7xXgdssVg0KwnBgTeYLu7zVAj+oT9KW+fD1B31J1zXi3Ar apZHnpcc/9vb/DPutKa0b4rcBa9GGOq+DlX3AICKJNW+ChGdcTXf9GHbtBGVZ6+b 5JfoMEkKllUMWhB8VnmMSgY5QB8yfiT47Kr1h3ybBKF1+uqrdzsOKjT2y6SYtAPg 5EKPdLvjsAogKX5PdCssqM6HJX+EGjOe07uSV+gvap3EGXgGjbtv2EATHhekvlrK KMdywtJpTy2I1EK2O5MxVhHjH3VInFg7b5hktlQKd77PYzbwHdNxwqGG/1y2OhoW 7g== -----END CERTIFICATE-----Generated at Sat Dec 6 07:41:59 2025 by rpki-client