This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/29C9C8CA32A12DE7C686B5240D01173FC43C71FF.mft File: 29C9C8CA32A12DE7C686B5240D01173FC43C71FF.mft (raw, json) Hash identifier: F5imTN8cWIqMhowJ7x3fV9vZ5eA93YHNlXFVxRGfoJQ= Subject key identifier: 63:92:6E:44:D6:9A:D8:A6:74:84:A5:CC:53:B2:2B:68:B4:9A:C8:5D Authority key identifier: 29:C9:C8:CA:32:A1:2D:E7:C6:86:B5:24:0D:01:17:3F:C4:3C:71:FF Certificate issuer: /CN=29c9c8ca32a12de7c686b5240d01173fc43c71ff Certificate serial: 13BE885FC3DAFE94A1A9BC82C98276759A3FFB1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KcnIyjKhLefGhrUkDQEXP8Q8cf8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/29C9C8CA32A12DE7C686B5240D01173FC43C71FF.mft Manifest number: 0590 Signing time: Mon 08 Dec 2025 05:47:28 +0000 Manifest this update: Mon 08 Dec 2025 05:42:28 +0000 Manifest next update: Tue 09 Dec 2025 06:02:28 +0000 Files and hashes: 1: 29C9C8CA32A12DE7C686B5240D01173FC43C71FF.crl (hash: ybdoKqhO29rX4pVsWWuuaGpFEgkQEoNyBTVVMmyYDHo=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/29C9C8CA32A12DE7C686B5240D01173FC43C71FF.crl rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/29C9C8CA32A12DE7C686B5240D01173FC43C71FF.mft rsync://rpki.ripe.net/repository/DEFAULT/KcnIyjKhLefGhrUkDQEXP8Q8cf8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:be:88:5f:c3:da:fe:94:a1:a9:bc:82:c9:82:76:75:9a:3f:fb:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29c9c8ca32a12de7c686b5240d01173fc43c71ff Validity Not Before: Dec 8 05:42:28 2025 GMT Not After : Dec 9 06:02:28 2025 GMT Subject: CN=63926E44D69AD8A67484A5CC53B22B68B49AC85D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:fe:df:3e:13:7a:e2:5f:47:ab:ac:c8:75:be: f6:22:c3:bc:b3:41:e7:b5:e2:8a:a3:b5:0a:ea:78: 37:b5:30:87:20:01:ab:5f:da:64:42:92:ee:55:9c: f9:bb:8e:f1:46:20:21:9e:d1:a1:27:ba:a2:dc:f8: bf:01:43:d1:f8:af:eb:21:18:b3:e0:5b:76:1b:79: d7:3b:c1:f6:f6:f0:94:07:00:31:4f:2b:f9:4c:f2: fa:c2:0a:ff:b5:7f:ea:ae:c8:4d:2c:ef:a0:c6:aa: c1:41:09:96:6b:a1:27:63:01:cb:d0:ed:44:20:53: 02:33:8b:04:f4:e4:ec:1d:92:ef:55:c8:c2:31:e9: 85:46:65:86:57:b6:8d:8a:e0:55:85:79:3e:db:91: 83:67:03:98:6e:67:ec:ef:df:59:95:00:e0:17:b4: 9e:a8:28:33:7e:f8:4e:34:be:16:48:10:67:9b:2a: 47:9a:af:57:ff:ec:14:a5:a6:df:0f:21:e2:5e:d1: 50:c5:3d:51:0d:ad:79:6a:39:97:9b:6e:9a:4f:6c: b6:fb:73:1d:64:75:d2:8a:bc:99:0d:da:c2:35:3d: d5:eb:25:89:0c:a3:98:3a:df:cd:53:a7:5c:21:b5: 2f:2a:b3:c4:76:52:f3:a0:09:3a:79:11:9f:a7:d1: 7f:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:92:6E:44:D6:9A:D8:A6:74:84:A5:CC:53:B2:2B:68:B4:9A:C8:5D X509v3 Authority Key Identifier: keyid:29:C9:C8:CA:32:A1:2D:E7:C6:86:B5:24:0D:01:17:3F:C4:3C:71:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/29C9C8CA32A12DE7C686B5240D01173FC43C71FF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KcnIyjKhLefGhrUkDQEXP8Q8cf8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/29C9C8CA32A12DE7C686B5240D01173FC43C71FF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:60:d1:84:a0:94:b4:d0:78:e6:fb:8c:ce:63:fa:81:d3:23: 10:3a:57:e6:31:4d:7b:5d:ed:21:75:fa:5f:73:5d:a1:e6:2d: 9c:82:89:d1:91:f5:21:3a:86:c9:2c:40:12:6f:22:a9:e7:65: 30:99:e1:94:17:4b:26:56:a2:7a:97:62:8d:94:a0:23:56:78: 30:43:63:19:2e:3c:38:77:13:57:cb:3c:6e:61:40:b6:2b:d8: 15:34:dd:55:4f:80:c0:7a:57:f8:70:89:a1:68:9e:33:c1:a3: 44:94:54:5f:ed:4b:81:55:ce:5a:eb:b7:3e:60:b0:d2:06:9f: 56:7e:b1:1f:d8:66:a7:a1:81:84:7f:9f:9f:9c:17:56:03:2d: 84:84:8e:d2:b7:6f:f3:ce:39:41:51:cf:13:7d:e2:65:7c:70: 4d:fe:18:54:87:38:5e:c5:b2:ae:c6:85:69:f8:64:9b:37:aa: 25:73:02:70:0a:24:6b:da:1f:fd:97:e3:17:e3:c5:2d:8f:96: ce:33:b6:2b:56:a8:08:df:e6:8d:79:d4:f8:8a:a8:31:42:b9: 76:89:71:87:4c:ee:ec:ab:35:37:58:29:44:7d:9d:15:23:b0: 6b:91:aa:8f:0c:72:39:f8:43:10:c6:fa:c5:74:31:79:86:0a: aa:0d:5e:b9 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUE76IX8Pa/pShqbyCyYJ2dZo/+xwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjljOWM4Y2EzMmExMmRlN2M2ODZiNTI0MGQwMTE3M2Zj NDNjNzFmZjAeFw0yNTEyMDgwNTQyMjhaFw0yNTEyMDkwNjAyMjhaMDMxMTAvBgNV BAMTKDYzOTI2RTQ0RDY5QUQ4QTY3NDg0QTVDQzUzQjIyQjY4QjQ5QUM4NUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCM/t8+E3riX0errMh1vvYiw7yz Qee14oqjtQrqeDe1MIcgAatf2mRCku5VnPm7jvFGICGe0aEnuqLc+L8BQ9H4r+sh GLPgW3Ybedc7wfb28JQHADFPK/lM8vrCCv+1f+quyE0s76DGqsFBCZZroSdjAcvQ 7UQgUwIziwT05Owdku9VyMIx6YVGZYZXto2K4FWFeT7bkYNnA5huZ+zv31mVAOAX tJ6oKDN++E40vhZIEGebKkear1f/7BSlpt8PIeJe0VDFPVENrXlqOZebbppPbLb7 cx1kddKKvJkN2sI1PdXrJYkMo5g6381Tp1whtS8qs8R2UvOgCTp5EZ+n0X95AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUY5JuRNaa2KZ0hKXMU7IraLSayF0wHwYDVR0j BBgwFoAUKcnIyjKhLefGhrUkDQEXP8Q8cf8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMWJmOGU5NzctNzI3OC00NmNmLWFiZDEtOTljZDFmZDJi ZTRlLzEvMjlDOUM4Q0EzMkExMkRFN0M2ODZCNTI0MEQwMTE3M0ZDNDNDNzFGRi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0tjbkl5aktoTGVmR2hyVWtEUUVYUDhR OGNmOC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xYmY4ZTk3Ny03 Mjc4LTQ2Y2YtYWJkMS05OWNkMWZkMmJlNGUvMS8yOUM5QzhDQTMyQTEyREU3QzY4 NkI1MjQwRDAxMTczRkM0M0M3MUZGLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABWDRhKCUtNB45vuMzmP6 gdMjEDpX5jFNe13tIXX6X3NdoeYtnIKJ0ZH1ITqGySxAEm8iqedlMJnhlBdLJlai epdijZSgI1Z4MENjGS48OHcTV8s8bmFAtivYFTTdVU+AwHpX+HCJoWieM8GjRJRU X+1LgVXOWuu3PmCw0gafVn6xH9hmp6GBhH+fn5wXVgMthISO0rdv8845QVHPE33i ZXxwTf4YVIc4XsWyrsaFafhkmzeqJXMCcAoka9of/ZfjF+PFLY+WzjO2K1aoCN/m jXnU+IqoMUK5dolxh0zu7Ks1N1gpRH2dFSOwa5GqjwxyOfhDEMb6xXQxeYYKqg1e uQ== -----END CERTIFICATE-----Generated at Mon Dec 8 09:36:23 2025 by rpki-client