This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/5/A93D2179411EB094DADFB0F4142A34F686FC9979.mft File: A93D2179411EB094DADFB0F4142A34F686FC9979.mft (raw, json) Hash identifier: t/HRB/MlCC9IbpJno+7DFbX6jksuWM6CD1x1SmyxOoo= Subject key identifier: BD:47:98:CA:CE:1E:39:08:6C:96:15:69:A0:A7:DD:87:B4:B8:D3:06 Authority key identifier: A9:3D:21:79:41:1E:B0:94:DA:DF:B0:F4:14:2A:34:F6:86:FC:99:79 Certificate issuer: /CN=a93d2179411eb094dadfb0f4142a34f686fc9979 Certificate serial: 63A62927890BDC2EDC485739A1FF6F945C0EF794 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qT0heUEesJTa37D0FCo09ob8mXk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/5/A93D2179411EB094DADFB0F4142A34F686FC9979.mft Manifest number: 36 Signing time: Sat 06 Dec 2025 00:50:08 +0000 Manifest this update: Sat 06 Dec 2025 00:45:08 +0000 Manifest next update: Sun 07 Dec 2025 01:09:08 +0000 Files and hashes: 1: A93D2179411EB094DADFB0F4142A34F686FC9979.crl (hash: LkgGCi2OUSEg/KICkPB4TrjMDGZobvEWcIbVuCc0ZIk=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/5/A93D2179411EB094DADFB0F4142A34F686FC9979.crl rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/5/A93D2179411EB094DADFB0F4142A34F686FC9979.mft rsync://rpki.ripe.net/repository/DEFAULT/qT0heUEesJTa37D0FCo09ob8mXk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:09:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:a6:29:27:89:0b:dc:2e:dc:48:57:39:a1:ff:6f:94:5c:0e:f7:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a93d2179411eb094dadfb0f4142a34f686fc9979 Validity Not Before: Dec 6 00:45:08 2025 GMT Not After : Dec 7 01:09:08 2025 GMT Subject: CN=BD4798CACE1E39086C961569A0A7DD87B4B8D306 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:2f:cf:e7:f7:14:98:5c:ca:30:19:32:c1:0f: ca:63:45:0a:21:c6:c6:f5:bc:a8:a1:85:85:80:af: 78:d7:75:29:e5:23:66:71:84:4b:62:69:76:6c:7d: 45:65:64:6d:8b:76:b7:d3:d1:6a:87:95:44:15:cf: 29:28:a5:c1:46:06:34:7d:42:5a:9e:39:54:e7:b3: a3:21:34:8c:e5:91:ab:49:56:fd:8f:94:25:07:2a: 38:dc:5b:33:eb:91:58:de:7a:aa:2f:64:49:b2:23: ec:cc:69:f3:0c:3e:83:75:0f:c3:72:7e:26:36:2a: b6:d8:fc:28:1c:b9:04:5d:45:a3:57:3a:39:70:73: fc:d6:1b:0b:d2:61:df:cb:03:1f:ff:94:02:9e:1d: da:6f:09:5b:47:00:f9:c5:6b:58:a0:fd:39:6c:33: bf:de:26:48:cc:bb:3d:c5:a2:de:bf:dd:1c:64:a9: 61:63:6c:a1:4b:a8:64:6d:9e:e9:de:f3:dd:6f:d8: b2:f6:f6:45:8f:31:8c:29:c7:eb:ad:03:16:4b:d7: 15:0b:52:56:9d:ad:c3:60:2a:9f:72:e8:a7:34:e4: d6:df:65:83:1a:a3:62:5a:42:42:84:04:00:5f:95: 15:86:8b:f1:5b:8b:4e:e5:97:4c:5b:da:d6:2c:68: b4:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:47:98:CA:CE:1E:39:08:6C:96:15:69:A0:A7:DD:87:B4:B8:D3:06 X509v3 Authority Key Identifier: keyid:A9:3D:21:79:41:1E:B0:94:DA:DF:B0:F4:14:2A:34:F6:86:FC:99:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/5/A93D2179411EB094DADFB0F4142A34F686FC9979.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qT0heUEesJTa37D0FCo09ob8mXk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/5/A93D2179411EB094DADFB0F4142A34F686FC9979.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:84:44:bb:45:28:b0:6e:19:06:f4:49:4d:72:7a:5d:42:8a: 0c:a7:1b:e6:b9:c4:44:94:f3:17:ab:c6:eb:f0:97:f6:d0:27: 90:01:11:a2:9b:b3:90:6b:37:ad:0a:b2:5a:46:3f:a9:c4:a9: 1e:5d:12:c8:99:4d:07:a0:b1:01:b1:1e:cd:26:e8:7e:cc:00: 0d:7f:44:f2:f8:af:15:c3:1a:47:9f:52:00:e7:10:8c:d4:28: d3:58:13:2e:e6:27:81:f3:b1:f4:9a:f2:f2:82:ae:62:01:e9: 78:db:75:c6:35:5d:e6:c8:42:42:10:67:2f:23:01:dd:2f:01: 8b:3b:c8:0d:dc:4b:75:d7:82:d2:7d:91:bf:09:1f:e4:d0:6f: dc:4b:1d:46:52:14:cf:fb:e1:76:d9:e1:6a:a4:93:45:d3:ec: 1b:d1:23:56:2a:cb:8c:da:36:fe:53:83:6e:91:00:3d:2f:6d: ad:22:40:28:1d:b4:22:21:04:ec:e3:ea:60:06:84:3f:63:8f: fb:53:da:76:cd:88:db:fc:83:13:72:5f:ba:0b:66:90:e3:ae: eb:1e:0a:4e:bb:d2:ef:a0:ff:d5:38:1b:64:79:5a:46:11:4d: 8a:35:a1:7c:f2:7a:7a:f4:39:c3:ae:7b:0a:aa:a5:2b:58:04: 41:d9:e7:d9 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUY6YpJ4kL3C7cSFc5of9vlFwO95QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYTkzZDIxNzk0MTFlYjA5NGRhZGZiMGY0MTQyYTM0ZjY4 NmZjOTk3OTAeFw0yNTEyMDYwMDQ1MDhaFw0yNTEyMDcwMTA5MDhaMDMxMTAvBgNV BAMTKEJENDc5OENBQ0UxRTM5MDg2Qzk2MTU2OUEwQTdERDg3QjRCOEQzMDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+L8/n9xSYXMowGTLBD8pjRQoh xsb1vKihhYWAr3jXdSnlI2ZxhEtiaXZsfUVlZG2LdrfT0WqHlUQVzykopcFGBjR9 QlqeOVTns6MhNIzlkatJVv2PlCUHKjjcWzPrkVjeeqovZEmyI+zMafMMPoN1D8Ny fiY2KrbY/CgcuQRdRaNXOjlwc/zWGwvSYd/LAx//lAKeHdpvCVtHAPnFa1ig/Tls M7/eJkjMuz3Fot6/3RxkqWFjbKFLqGRtnune891v2LL29kWPMYwpx+utAxZL1xUL UladrcNgKp9y6Kc05NbfZYMao2JaQkKEBABflRWGi/Fbi07ll0xb2tYsaLQnAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUvUeYys4eOQhslhVpoKfdh7S40wYwHwYDVR0j BBgwFoAUqT0heUEesJTa37D0FCo09ob8mXkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTlhYTlkYTctZjFlNC00ZDk4LWJmOTUtOWZkZmNmNDQ4 Zjc3LzUvQTkzRDIxNzk0MTFFQjA5NERBREZCMEY0MTQyQTM0RjY4NkZDOTk3OS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3FUMGhlVUVlc0pUYTM3RDBGQ28wOW9i OG1Yay5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xOWFhOWRhNy1m MWU0LTRkOTgtYmY5NS05ZmRmY2Y0NDhmNzcvNS9BOTNEMjE3OTQxMUVCMDk0REFE RkIwRjQxNDJBMzRGNjg2RkM5OTc5Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASoREu0UosG4ZBvRJTXJ6 XUKKDKcb5rnERJTzF6vG6/CX9tAnkAERopuzkGs3rQqyWkY/qcSpHl0SyJlNB6Cx AbEezSbofswADX9E8vivFcMaR59SAOcQjNQo01gTLuYngfOx9Jry8oKuYgHpeNt1 xjVd5shCQhBnLyMB3S8BizvIDdxLddeC0n2Rvwkf5NBv3EsdRlIUz/vhdtnhaqST RdPsG9EjVirLjNo2/lODbpEAPS9trSJAKB20IiEE7OPqYAaEP2OP+1Pads2I2/yD E3JfugtmkOOu6x4KTrvS76D/1TgbZHlaRhFNijWhfPJ6evQ5w657CqqlK1gEQdnn 2Q== -----END CERTIFICATE-----Generated at Sat Dec 6 08:02:27 2025 by rpki-client