This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/1/D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.mft File: D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.mft (raw, json) Hash identifier: j9+D+J8P7hgT469C5FxR9ADQKWLY8NXWoBbB6S5FWyw= Subject key identifier: 47:4F:F9:8B:0F:C9:CC:F8:8A:53:E3:46:77:76:3C:B3:B3:BB:E6:75 Authority key identifier: D0:2B:BB:44:0B:9D:D4:40:88:DB:68:4E:E8:2F:A2:A7:DA:06:FC:F6 Certificate issuer: /CN=d02bbb440b9dd44088db684ee82fa2a7da06fcf6 Certificate serial: 06C2524B83D708D48AA7F47BF4B233C77CA99AE2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Cu7RAud1ECI22hO6C-ip9oG_PY.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/1/D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.mft Manifest number: 0424 Signing time: Sat 06 Dec 2025 08:50:16 +0000 Manifest this update: Sat 06 Dec 2025 08:45:16 +0000 Manifest next update: Sun 07 Dec 2025 12:43:16 +0000 Files and hashes: 1: AS203843.asa (hash: GVjcEElWVcaHaV2bppgVpXszuN2GI++jaQIYET3p6Tg=) 2: D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.crl (hash: k4cKjI4jxrz21hoKh8Hk2Bhr+QafWZR9ojO0FO+OzBA=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/1/D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.crl rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/1/D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.mft rsync://rpki.ripe.net/repository/DEFAULT/0Cu7RAud1ECI22hO6C-ip9oG_PY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:c2:52:4b:83:d7:08:d4:8a:a7:f4:7b:f4:b2:33:c7:7c:a9:9a:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d02bbb440b9dd44088db684ee82fa2a7da06fcf6 Validity Not Before: Dec 6 08:45:16 2025 GMT Not After : Dec 7 12:43:16 2025 GMT Subject: CN=474FF98B0FC9CCF88A53E34677763CB3B3BBE675 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:0c:67:9c:62:4d:da:04:5c:31:3a:24:0e:4c: 5b:51:e5:7f:8d:87:3b:b5:29:67:62:ec:57:14:79: 09:b0:31:7f:88:3d:c7:69:2a:a0:62:a1:c3:46:8d: 81:28:86:d8:d4:fc:1a:e8:f0:7d:e5:ae:7a:c4:3e: 1c:13:12:13:e1:e4:14:de:a6:4c:a8:10:24:0a:1f: b6:63:43:78:4c:ae:c5:fe:be:a4:62:ce:41:1e:e4: 12:62:3d:8a:c5:5e:8c:29:c2:fb:df:4b:23:09:89: cb:49:af:2e:78:27:a8:fb:86:b2:ea:ec:dd:cc:b3: a4:25:ed:15:7e:86:4c:7c:6d:07:90:53:4c:a9:45: ad:60:b3:4b:0c:75:be:d3:b5:aa:d3:c0:45:81:7f: bc:65:df:b2:9a:27:59:e1:fa:44:15:e7:b5:7d:2b: 63:f0:22:67:c6:fd:95:a3:81:aa:d5:5b:6c:cb:d1: 8c:5d:2e:31:35:1d:7c:ff:79:af:1d:36:f4:62:56: 40:15:cc:a2:9f:16:33:c8:21:1c:9b:b0:2a:b8:da: 64:93:fb:10:14:6b:a2:25:b7:96:0e:ba:2b:f7:a1: 19:6e:bf:a6:53:78:0c:e5:8c:68:06:60:2f:98:00: eb:14:90:ee:d7:2e:44:8e:9b:6a:94:2f:df:41:ed: 67:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:4F:F9:8B:0F:C9:CC:F8:8A:53:E3:46:77:76:3C:B3:B3:BB:E6:75 X509v3 Authority Key Identifier: keyid:D0:2B:BB:44:0B:9D:D4:40:88:DB:68:4E:E8:2F:A2:A7:DA:06:FC:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/1/D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Cu7RAud1ECI22hO6C-ip9oG_PY.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/1/D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:c3:d9:d9:b8:d4:ff:dc:24:fb:69:f5:45:0f:51:f9:64:25: 74:c5:53:09:8b:21:de:89:1b:e4:70:e2:ff:09:db:d5:b5:16: 41:63:89:b4:d2:8f:d9:bc:b8:6f:c9:96:6a:94:ab:d4:40:18: 0d:f0:80:9e:22:50:7b:6f:ea:49:54:be:5c:5a:29:96:71:4b: a3:ff:c8:f4:76:d2:49:c1:22:af:2f:29:0f:34:14:59:c7:b8: f6:75:2c:e3:d8:e3:61:75:0a:93:9e:b0:85:b8:5f:66:db:c2: 3e:73:7b:b3:5a:94:e9:8c:64:e2:39:f8:23:99:36:39:3b:9b: e9:5c:a9:0d:f6:99:70:b4:c5:32:c2:2c:cb:59:83:19:9a:57: 1f:6f:da:ad:13:19:24:be:65:6e:fd:77:c1:88:61:7f:de:62: e8:74:4c:79:65:f0:95:63:bc:2a:8a:70:0d:83:ba:48:c7:62: 8c:d1:9c:90:b6:1e:99:22:a0:be:23:b3:64:72:90:b6:df:6f: 5b:8e:e7:0a:15:a3:d0:69:22:d3:ca:09:65:7e:f1:41:47:e2: ab:76:b3:f2:f2:45:e5:ee:09:b9:b0:ae:68:01:94:09:97:9c: f5:09:0e:4c:31:ab:90:89:b8:51:5b:30:7a:8c:c3:5c:48:43: 3b:35:af:a6 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUBsJSS4PXCNSKp/R79LIzx3ypmuIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZDAyYmJiNDQwYjlkZDQ0MDg4ZGI2ODRlZTgyZmEyYTdk YTA2ZmNmNjAeFw0yNTEyMDYwODQ1MTZaFw0yNTEyMDcxMjQzMTZaMDMxMTAvBgNV BAMTKDQ3NEZGOThCMEZDOUNDRjg4QTUzRTM0Njc3NzYzQ0IzQjNCQkU2NzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbDGecYk3aBFwxOiQOTFtR5X+N hzu1KWdi7FcUeQmwMX+IPcdpKqBiocNGjYEohtjU/Bro8H3lrnrEPhwTEhPh5BTe pkyoECQKH7ZjQ3hMrsX+vqRizkEe5BJiPYrFXowpwvvfSyMJictJry54J6j7hrLq 7N3Ms6Ql7RV+hkx8bQeQU0ypRa1gs0sMdb7TtarTwEWBf7xl37KaJ1nh+kQV57V9 K2PwImfG/ZWjgarVW2zL0YxdLjE1HXz/ea8dNvRiVkAVzKKfFjPIIRybsCq42mST +xAUa6Ilt5YOuiv3oRluv6ZTeAzljGgGYC+YAOsUkO7XLkSOm2qUL99B7WcVAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUR0/5iw/JzPiKU+NGd3Y8s7O75nUwHwYDVR0j BBgwFoAU0Cu7RAud1ECI22hO6C+ip9oG/PYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTNmNjg1NjEtMGE3NC00Y2NhLWJmOGYtMTJmYWFhZmM4 ZWI4LzEvRDAyQkJCNDQwQjlERDQ0MDg4REI2ODRFRTgyRkEyQTdEQTA2RkNGNi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBDdTdSQXVkMUVDSTIyaE82Qy1pcDlv R19QWS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xM2Y2ODU2MS0w YTc0LTRjY2EtYmY4Zi0xMmZhYWFmYzhlYjgvMS9EMDJCQkI0NDBCOURENDQwODhE QjY4NEVFODJGQTJBN0RBMDZGQ0Y2Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjsPZ2bjU/9wk+2n1RQ9R +WQldMVTCYsh3okb5HDi/wnb1bUWQWOJtNKP2by4b8mWapSr1EAYDfCAniJQe2/q SVS+XFoplnFLo//I9HbSScEiry8pDzQUWce49nUs49jjYXUKk56whbhfZtvCPnN7 s1qU6Yxk4jn4I5k2OTub6VypDfaZcLTFMsIsy1mDGZpXH2/arRMZJL5lbv13wYhh f95i6HRMeWXwlWO8KopwDYO6SMdijNGckLYemSKgviOzZHKQtt9vW47nChWj0Gki 08oJZX7xQUfiq3az8vJF5e4JubCuaAGUCZec9QkOTDGrkIm4UVsweozDXEhDOzWv pg== -----END CERTIFICATE-----Generated at Sat Dec 6 12:45:30 2025 by rpki-client