This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/3/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.mft File: D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.mft (raw, json) Hash identifier: a26U1rGgY8PN4pcR27AKcxRfpuw4tV/evH/H3DpblUI= Subject key identifier: FF:EC:F0:E6:57:2B:86:92:B2:55:86:2C:6E:5B:1D:22:5E:62:4A:B9 Authority key identifier: D6:15:AB:CB:A5:01:55:64:AD:E9:B4:73:D6:4F:1E:34:A0:BA:8D:4A Certificate issuer: /CN=D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A Certificate serial: 552148F9A3E7DEB80BA70A623E533B91EB81F59C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/3/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.mft Manifest number: 0150 Signing time: Fri 05 Dec 2025 17:30:16 +0000 Manifest this update: Fri 05 Dec 2025 17:25:16 +0000 Manifest next update: Sat 06 Dec 2025 18:59:16 +0000 Files and hashes: 1: D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.crl (hash: qGCBsKQpXvli0RM8MvUang4ckro/dU0y4sjXFrDIFxI=) 2: 326131343a373538303a3930333a3a2f34382d3438203d3e203331383938.roa (hash: ypgUGD6Euz3HGS0A9GoVgCiVtLF78aI6ZX/YlUyvGd8=) 3: 326131343a373538303a3930313a3a2f34382d3438203d3e20323033383433.roa (hash: XxS9zprV7IX1JjrBQQ+JptkD2bW89WKl615fH9J1hzc=) 4: 326131343a373538303a3930323a3a2f34382d3438203d3e20323033383433.roa (hash: BFT8GbG7CSJ9YmzS1PjnMDrg1nwAcfXEJPEfuo5FzQk=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/3/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.crl rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/3/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 18:59:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:21:48:f9:a3:e7:de:b8:0b:a7:0a:62:3e:53:3b:91:eb:81:f5:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A Validity Not Before: Dec 5 17:25:16 2025 GMT Not After : Dec 6 18:59:16 2025 GMT Subject: CN=FFECF0E6572B8692B255862C6E5B1D225E624AB9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:a6:87:13:c4:5b:b2:76:6a:53:79:7e:33:92: f6:15:bd:3b:a2:50:7b:46:83:73:47:70:c0:99:46: 46:c0:62:47:2d:ca:90:f8:83:3b:f6:8d:94:f1:25: ec:0b:19:c7:69:4f:86:d3:44:25:dd:60:49:23:28: 65:30:f1:98:cd:64:5d:4b:57:d9:50:18:a0:85:7f: 65:0c:3a:7d:d1:cc:24:b0:42:a2:81:3a:51:cc:79: 25:15:63:d2:3b:fc:f4:bf:9f:eb:25:4f:d8:6a:18: a5:f8:9d:09:6e:13:32:21:4f:15:14:b1:25:b1:b0: c0:15:fd:a6:73:ea:16:48:3c:e2:64:7f:fd:c8:a0: 9b:43:b2:14:6d:0a:29:e8:4a:79:ce:1c:92:56:15: 2f:60:63:43:3a:94:c1:04:ed:ee:d7:ca:7a:b8:32: fe:2a:e7:f4:2e:99:73:ac:4c:f0:f8:9c:be:b1:ec: 0c:55:fe:14:1f:28:8a:1d:9d:d3:a3:74:ee:51:c2: 25:b6:45:6d:97:b7:8a:38:0f:47:a2:77:be:69:11: 3b:cd:b5:5d:e0:c8:34:26:ec:72:79:c0:5e:f4:e1: dd:e0:7a:f4:f1:2f:4c:74:fb:36:7a:fa:ac:1a:21: 05:5f:90:40:6b:1a:93:15:b8:90:65:5d:f1:98:2c: 4c:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:EC:F0:E6:57:2B:86:92:B2:55:86:2C:6E:5B:1D:22:5E:62:4A:B9 X509v3 Authority Key Identifier: keyid:D6:15:AB:CB:A5:01:55:64:AD:E9:B4:73:D6:4F:1E:34:A0:BA:8D:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/3/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/3/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:aa:8c:f7:ed:12:95:61:9c:e7:5a:77:58:f5:38:e4:22:bc: 46:37:16:ed:7a:5f:ae:db:f5:7e:15:ed:51:94:cc:5a:eb:0d: cd:76:cd:76:fc:a6:00:03:09:3f:f1:e9:95:96:1f:f7:77:f7: 12:0c:0f:b4:53:3e:9a:8e:13:36:a2:90:5f:2e:8f:80:90:76: d7:40:24:d7:9e:7d:5d:ee:d2:d8:a5:11:69:11:4d:97:4b:18: c2:fa:a7:49:0e:ec:a3:6e:68:17:4b:69:78:11:74:7d:bc:7b: ca:8a:09:4e:e1:cc:b1:52:7c:f3:f6:3d:b2:64:e1:c7:40:18: cf:4e:43:11:fc:60:2a:d7:ea:d6:0c:50:c6:80:33:a1:7d:fb: 4e:30:8c:fb:15:b3:b4:b0:c5:d3:3d:2b:3d:ff:15:3d:51:39: 42:5b:f0:28:84:ed:4d:a9:7e:1e:8e:02:e0:1b:f0:c1:fa:30: 06:c6:c9:ce:c7:49:35:da:88:f8:7d:b8:c5:3b:64:c4:47:3f: 4a:66:3f:b1:42:d6:b2:a8:04:ac:8b:25:0e:ef:4c:49:5d:fd: 69:54:29:a8:f7:93:6d:24:cd:0d:bb:33:35:00:91:d1:97:12: 6e:c8:e4:f1:ec:8f:87:a8:ea:a9:e7:95:a2:c7:5c:8f:19:8e: a4:d3:12:41 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUVSFI+aPn3rgLpwpiPlM7keuB9ZwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDYxNUFCQ0JBNTAxNTU2NEFERTlCNDczRDY0RjFFMzRB MEJBOEQ0QTAeFw0yNTEyMDUxNzI1MTZaFw0yNTEyMDYxODU5MTZaMDMxMTAvBgNV BAMTKEZGRUNGMEU2NTcyQjg2OTJCMjU1ODYyQzZFNUIxRDIyNUU2MjRBQjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtpocTxFuydmpTeX4zkvYVvTui UHtGg3NHcMCZRkbAYkctypD4gzv2jZTxJewLGcdpT4bTRCXdYEkjKGUw8ZjNZF1L V9lQGKCFf2UMOn3RzCSwQqKBOlHMeSUVY9I7/PS/n+slT9hqGKX4nQluEzIhTxUU sSWxsMAV/aZz6hZIPOJkf/3IoJtDshRtCinoSnnOHJJWFS9gY0M6lMEE7e7Xynq4 Mv4q5/QumXOsTPD4nL6x7AxV/hQfKIodndOjdO5RwiW2RW2Xt4o4D0eid75pETvN tV3gyDQm7HJ5wF704d3gevTxL0x0+zZ6+qwaIQVfkEBrGpMVuJBlXfGYLEy5AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU/+zw5lcrhpKyVYYsblsdIl5iSrkwHwYDVR0j BBgwFoAU1hWry6UBVWSt6bRz1k8eNKC6jUowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTNmNjg1NjEtMGE3NC00Y2NhLWJmOGYtMTJmYWFhZmM4 ZWI4LzMvRDYxNUFCQ0JBNTAxNTU2NEFERTlCNDczRDY0RjFFMzRBMEJBOEQ0QS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9ENjE1QUJDQkE1MDE1NTY0QURFOUI0NzNE NjRGMUUzNEEwQkE4RDRBLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzEzZjY4NTYxLTBhNzQtNGNjYS1iZjhmLTEyZmFhYWZjOGViOC8zL0Q2MTVBQkNC QTUwMTU1NjRBREU5QjQ3M0Q2NEYxRTM0QTBCQThENEEubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAwqoz3 7RKVYZznWndY9TjkIrxGNxbtel+u2/V+Fe1RlMxa6w3Nds12/KYAAwk/8emVlh/3 d/cSDA+0Uz6ajhM2opBfLo+AkHbXQCTXnn1d7tLYpRFpEU2XSxjC+qdJDuyjbmgX S2l4EXR9vHvKiglO4cyxUnzz9j2yZOHHQBjPTkMR/GAq1+rWDFDGgDOhfftOMIz7 FbO0sMXTPSs9/xU9UTlCW/AohO1NqX4ejgLgG/DB+jAGxsnOx0k12oj4fbjFO2TE Rz9KZj+xQtayqASsiyUO70xJXf1pVCmo95NtJM0NuzM1AJHRlxJuyOTx7I+HqOqp 55Wix1yPGY6k0xJB -----END CERTIFICATE-----Generated at Sat Dec 6 07:19:08 2025 by rpki-client