This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/4/2BDAC6477E49E86DFA1B7DC4F8DF3A43E1AC6666.mft File: 2BDAC6477E49E86DFA1B7DC4F8DF3A43E1AC6666.mft (raw, json) Hash identifier: o010m8MmQyPl7KdxqJZv5Bg0F/vYi6Nq/euIluMUBWU= Subject key identifier: 52:2B:16:E5:BB:53:68:B1:E1:95:0D:47:F2:55:8E:B5:D6:36:FA:4F Authority key identifier: 2B:DA:C6:47:7E:49:E8:6D:FA:1B:7D:C4:F8:DF:3A:43:E1:AC:66:66 Certificate issuer: /CN=2bdac6477e49e86dfa1b7dc4f8df3a43e1ac6666 Certificate serial: 5D05D6FCD7E8467B6E6BBFFD66F6E09193ECFB02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K9rGR35J6G36G33E-N86Q-GsZmY.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/4/2BDAC6477E49E86DFA1B7DC4F8DF3A43E1AC6666.mft Manifest number: 37 Signing time: Sat 06 Dec 2025 03:30:08 +0000 Manifest this update: Sat 06 Dec 2025 03:25:08 +0000 Manifest next update: Sun 07 Dec 2025 04:54:08 +0000 Files and hashes: 1: 2BDAC6477E49E86DFA1B7DC4F8DF3A43E1AC6666.crl (hash: KtlDUePheNlRITQ35UVIhs6GmT0Vz1pm/OIL5Nx9Tm8=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/4/2BDAC6477E49E86DFA1B7DC4F8DF3A43E1AC6666.crl rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/4/2BDAC6477E49E86DFA1B7DC4F8DF3A43E1AC6666.mft rsync://rpki.ripe.net/repository/DEFAULT/K9rGR35J6G36G33E-N86Q-GsZmY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:05:d6:fc:d7:e8:46:7b:6e:6b:bf:fd:66:f6:e0:91:93:ec:fb:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bdac6477e49e86dfa1b7dc4f8df3a43e1ac6666 Validity Not Before: Dec 6 03:25:08 2025 GMT Not After : Dec 7 04:54:08 2025 GMT Subject: CN=522B16E5BB5368B1E1950D47F2558EB5D636FA4F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:89:7c:6f:0b:4d:86:2c:1a:29:00:f6:35:f5: f5:9f:4a:44:88:3e:25:0f:42:fb:c7:50:7e:52:a5: 25:da:c6:e8:b2:7f:4c:30:2e:5a:66:c3:3e:04:7e: 87:ff:30:9b:2a:b4:68:db:a3:3f:38:ec:ea:da:2e: cf:0c:d7:27:4c:33:77:7b:b6:e5:87:b4:c5:7e:4a: 8b:4c:26:e2:39:5c:e6:21:a2:0a:05:a6:f7:8f:4e: 5d:03:12:76:62:26:13:e7:46:6b:6b:3b:a2:12:34: 53:38:30:48:28:cf:d7:60:40:86:10:7c:6d:57:ac: c1:85:51:9a:5f:51:1e:c8:54:70:1f:37:ac:d2:be: 31:a8:3a:94:3f:28:c7:12:a5:92:aa:d9:43:0c:64: ed:b1:34:24:5d:06:e3:42:0c:82:bb:d5:bf:d0:42: f6:fd:29:76:04:58:df:c3:2a:51:bb:9b:5a:cf:58: f0:b8:9e:ff:cc:04:59:6f:32:bd:41:ac:4d:20:b1: 68:16:2c:31:a5:b0:ec:6d:ec:c9:9e:c1:c5:ec:3d: ec:4c:d2:b9:00:39:83:a2:04:ef:08:1c:f4:f0:e8: ef:b7:7a:dc:1e:7f:14:81:27:4c:ce:1c:32:e6:06: 40:90:53:c9:87:53:36:a6:54:c8:c3:1e:92:8a:cd: 54:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:2B:16:E5:BB:53:68:B1:E1:95:0D:47:F2:55:8E:B5:D6:36:FA:4F X509v3 Authority Key Identifier: keyid:2B:DA:C6:47:7E:49:E8:6D:FA:1B:7D:C4:F8:DF:3A:43:E1:AC:66:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/4/2BDAC6477E49E86DFA1B7DC4F8DF3A43E1AC6666.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K9rGR35J6G36G33E-N86Q-GsZmY.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/4/2BDAC6477E49E86DFA1B7DC4F8DF3A43E1AC6666.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:d3:33:e5:74:e3:3f:76:04:66:3e:2c:04:8e:33:55:91:3b: 45:58:3e:81:49:b6:dd:a0:55:52:05:8e:5d:3b:91:ab:4e:b0: 8b:38:9b:d8:b2:c7:0a:87:e1:b4:bd:2f:f6:1f:bc:88:06:5e: 26:6d:27:2d:fe:61:c1:fe:8b:f5:1e:10:c8:1d:27:52:7a:2c: 28:31:ec:03:31:88:d6:ce:4c:d3:96:1e:ad:a2:42:b5:48:c6: 12:03:38:3a:75:ee:ac:9f:ad:79:b7:ea:5b:bd:fa:0e:d6:68: f8:74:bc:36:a0:dd:db:e7:f9:d4:bf:c9:3a:cd:b4:d5:ea:43: d1:86:c1:36:11:51:87:4a:6e:11:6e:60:c7:44:45:e3:75:bf: 2f:c9:49:19:41:a9:3a:24:4c:06:ed:72:6c:ea:34:93:e8:37: ed:bf:5b:ff:3c:d9:c2:fe:0f:cb:ab:76:8e:b8:97:61:3d:89: 99:8b:16:c4:db:bc:7f:97:b5:4d:7c:55:d4:8b:f4:d1:32:f5: 2d:cc:5a:61:3c:76:13:5b:c2:ef:c8:62:8c:e8:3f:48:0b:8e: 58:ee:b4:0d:5e:79:94:c6:32:c9:39:93:4a:e2:95:b1:e8:ea: 33:2a:38:ed:7a:68:14:59:7f:81:d1:fb:00:7d:77:73:0e:32: 46:25:72:9b -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUXQXW/NfoRntua7/9ZvbgkZPs+wIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMmJkYWM2NDc3ZTQ5ZTg2ZGZhMWI3ZGM0ZjhkZjNhNDNl MWFjNjY2NjAeFw0yNTEyMDYwMzI1MDhaFw0yNTEyMDcwNDU0MDhaMDMxMTAvBgNV BAMTKDUyMkIxNkU1QkI1MzY4QjFFMTk1MEQ0N0YyNTU4RUI1RDYzNkZBNEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfiXxvC02GLBopAPY19fWfSkSI PiUPQvvHUH5SpSXaxuiyf0wwLlpmwz4Efof/MJsqtGjboz847OraLs8M1ydMM3d7 tuWHtMV+SotMJuI5XOYhogoFpvePTl0DEnZiJhPnRmtrO6ISNFM4MEgoz9dgQIYQ fG1XrMGFUZpfUR7IVHAfN6zSvjGoOpQ/KMcSpZKq2UMMZO2xNCRdBuNCDIK71b/Q Qvb9KXYEWN/DKlG7m1rPWPC4nv/MBFlvMr1BrE0gsWgWLDGlsOxt7MmewcXsPexM 0rkAOYOiBO8IHPTw6O+3etwefxSBJ0zOHDLmBkCQU8mHUzamVMjDHpKKzVRvAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUUisW5btTaLHhlQ1H8lWOtdY2+k8wHwYDVR0j BBgwFoAUK9rGR35J6G36G33E+N86Q+GsZmYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTlhYTlkYTctZjFlNC00ZDk4LWJmOTUtOWZkZmNmNDQ4 Zjc3LzQvMkJEQUM2NDc3RTQ5RTg2REZBMUI3REM0RjhERjNBNDNFMUFDNjY2Ni5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0s5ckdSMzVKNkczNkczM0UtTjg2US1H c1ptWS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xOWFhOWRhNy1m MWU0LTRkOTgtYmY5NS05ZmRmY2Y0NDhmNzcvNC8yQkRBQzY0NzdFNDlFODZERkEx QjdEQzRGOERGM0E0M0UxQUM2NjY2Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWtMz5XTjP3YEZj4sBI4z VZE7RVg+gUm23aBVUgWOXTuRq06wizib2LLHCofhtL0v9h+8iAZeJm0nLf5hwf6L 9R4QyB0nUnosKDHsAzGI1s5M05YeraJCtUjGEgM4OnXurJ+tebfqW736DtZo+HS8 NqDd2+f51L/JOs201epD0YbBNhFRh0puEW5gx0RF43W/L8lJGUGpOiRMBu1ybOo0 k+g37b9b/zzZwv4Py6t2jriXYT2JmYsWxNu8f5e1TXxV1Iv00TL1LcxaYTx2E1vC 78hijOg/SAuOWO60DV55lMYyyTmTSuKVsejqMyo47XpoFFl/gdH7AH13cw4yRiVy mw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:42:02 2025 by rpki-client