This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/212531c8-b248-4431-a18e-4e6dc8d6b6e8/0/0DD4CFA21D83ABD8B565498180680D141A81960F.mft File: 0DD4CFA21D83ABD8B565498180680D141A81960F.mft (raw, json) Hash identifier: 659CiNvjn1XN2x8axstliKn4HaqC2+CxyE5t3/J78Kg= Subject key identifier: 32:6D:79:EE:DA:B2:94:15:3A:AD:50:EC:02:A8:D4:F4:0E:A8:6F:E4 Authority key identifier: 0D:D4:CF:A2:1D:83:AB:D8:B5:65:49:81:80:68:0D:14:1A:81:96:0F Certificate issuer: /CN=0dd4cfa21d83abd8b565498180680d141a81960f Certificate serial: 7F15456EABA2EABCB8C08238796295544257738E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DdTPoh2Dq9i1ZUmBgGgNFBqBlg8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/212531c8-b248-4431-a18e-4e6dc8d6b6e8/0/0DD4CFA21D83ABD8B565498180680D141A81960F.mft Manifest number: AD Signing time: Fri 05 Dec 2025 16:31:16 +0000 Manifest this update: Fri 05 Dec 2025 16:26:16 +0000 Manifest next update: Sat 06 Dec 2025 17:55:16 +0000 Files and hashes: 1: 0DD4CFA21D83ABD8B565498180680D141A81960F.crl (hash: uS37dhjoCO8JfojiNyHj5uhlc9HOnCm6DhFpbyuUC4w=) 2: 3231322e362e34382e302f32342d3234203d3e20343031373833.roa (hash: xMLOXyY+BsMcBRRtKTQRzQvqncsTWn47VROaOw/TU2U=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/212531c8-b248-4431-a18e-4e6dc8d6b6e8/0/0DD4CFA21D83ABD8B565498180680D141A81960F.crl rsync://rsync.paas.rpki.ripe.net/repository/212531c8-b248-4431-a18e-4e6dc8d6b6e8/0/0DD4CFA21D83ABD8B565498180680D141A81960F.mft rsync://rpki.ripe.net/repository/DEFAULT/DdTPoh2Dq9i1ZUmBgGgNFBqBlg8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 17:55:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:15:45:6e:ab:a2:ea:bc:b8:c0:82:38:79:62:95:54:42:57:73:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dd4cfa21d83abd8b565498180680d141a81960f Validity Not Before: Dec 5 16:26:16 2025 GMT Not After : Dec 6 17:55:16 2025 GMT Subject: CN=326D79EEDAB294153AAD50EC02A8D4F40EA86FE4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:be:a6:ff:06:43:c5:50:56:3b:52:29:02:11: f2:c9:ba:81:d6:5e:20:da:34:43:39:2c:90:43:ed: 81:9d:95:0f:fc:36:81:bf:e0:82:05:fe:29:fa:54: 7a:9d:33:b0:56:67:48:26:3a:6a:a7:53:42:53:d8: cd:45:1a:54:e7:b3:64:70:95:fd:06:ab:9a:79:0e: 2c:94:d8:e0:06:ee:c5:54:d3:e1:02:65:3e:98:22: 2b:44:fb:b3:33:7f:cf:98:08:60:f6:c2:fb:e1:f8: dd:c9:24:fe:a6:b6:ec:6b:29:f2:5c:b6:ad:ef:30: 09:0c:a7:f3:42:3d:3b:ed:b8:a2:22:54:20:1f:51: fa:d1:81:3f:51:b0:ca:bb:04:a3:11:b3:1f:0c:bf: 39:94:8c:d0:ba:94:96:bb:35:17:80:89:81:12:2e: e4:45:bf:b7:89:c4:e9:40:a6:06:c3:27:fa:54:e2: 4e:dc:5e:58:00:2c:a8:4c:1d:37:63:c2:e2:cf:5f: d4:d9:22:f8:3c:77:2e:f5:e1:5e:2b:f3:1b:a7:59: c7:13:60:8b:57:99:49:88:88:b4:4e:6a:98:4a:43: 6a:18:dc:ba:8e:12:3a:17:85:02:dd:f7:1e:de:c1: f0:24:9e:cf:12:cd:54:29:e8:ed:c1:81:12:a8:2b: 0c:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:6D:79:EE:DA:B2:94:15:3A:AD:50:EC:02:A8:D4:F4:0E:A8:6F:E4 X509v3 Authority Key Identifier: keyid:0D:D4:CF:A2:1D:83:AB:D8:B5:65:49:81:80:68:0D:14:1A:81:96:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/212531c8-b248-4431-a18e-4e6dc8d6b6e8/0/0DD4CFA21D83ABD8B565498180680D141A81960F.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DdTPoh2Dq9i1ZUmBgGgNFBqBlg8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/212531c8-b248-4431-a18e-4e6dc8d6b6e8/0/0DD4CFA21D83ABD8B565498180680D141A81960F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:53:7f:11:68:49:a4:41:0a:de:b2:d5:67:e3:0a:83:4c:f8: 7d:27:68:c9:45:53:13:9c:ec:70:b4:7e:d4:02:60:df:9f:73: 08:fd:e4:52:57:3f:27:92:de:12:ef:47:3f:90:53:8a:06:4a: cf:b7:67:3f:67:e3:de:bf:ae:44:10:1f:8c:d3:eb:91:da:40: 04:b0:51:65:06:55:b0:7c:38:09:0f:df:7d:14:3f:52:3b:64: 15:d6:19:46:6d:81:05:35:bb:cc:d0:cd:8a:46:67:e7:08:46: fa:51:fc:39:bf:35:11:9a:db:f5:28:cd:55:16:87:fb:9c:85: 4a:47:0a:44:69:ad:2e:52:c3:ff:95:1b:68:e1:c1:37:75:4c: 76:b8:38:d3:a3:c3:be:10:2e:8b:5c:e9:00:d3:40:70:c7:8c: 55:eb:a9:00:2a:5b:ff:01:b9:95:4d:2e:92:9d:5a:8a:c3:cf: e2:2b:ca:f0:ec:ee:b7:d0:b7:2f:a7:d3:64:03:64:c9:df:98: 07:fc:c2:ec:a3:36:6b:15:77:65:80:e9:b6:b1:4c:d3:97:34: 39:37:2d:cd:68:89:71:57:3a:fc:bd:07:2e:67:26:1e:a6:ba: 96:24:53:43:81:c2:03:0e:ab:5c:04:cc:81:5c:17:73:e5:4b: b0:1e:a5:8c -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUfxVFbqui6ry4wII4eWKVVEJXc44wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMGRkNGNmYTIxZDgzYWJkOGI1NjU0OTgxODA2ODBkMTQx YTgxOTYwZjAeFw0yNTEyMDUxNjI2MTZaFw0yNTEyMDYxNzU1MTZaMDMxMTAvBgNV BAMTKDMyNkQ3OUVFREFCMjk0MTUzQUFENTBFQzAyQThENEY0MEVBODZGRTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxvqb/BkPFUFY7UikCEfLJuoHW XiDaNEM5LJBD7YGdlQ/8NoG/4IIF/in6VHqdM7BWZ0gmOmqnU0JT2M1FGlTns2Rw lf0Gq5p5DiyU2OAG7sVU0+ECZT6YIitE+7Mzf8+YCGD2wvvh+N3JJP6mtuxrKfJc tq3vMAkMp/NCPTvtuKIiVCAfUfrRgT9RsMq7BKMRsx8MvzmUjNC6lJa7NReAiYES LuRFv7eJxOlApgbDJ/pU4k7cXlgALKhMHTdjwuLPX9TZIvg8dy714V4r8xunWccT YItXmUmIiLROaphKQ2oY3LqOEjoXhQLd9x7ewfAkns8SzVQp6O3BgRKoKwxbAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUMm157tqylBU6rVDsAqjU9A6ob+QwHwYDVR0j BBgwFoAUDdTPoh2Dq9i1ZUmBgGgNFBqBlg8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjEyNTMxYzgtYjI0OC00NDMxLWExOGUtNGU2ZGM4ZDZi NmU4LzAvMERENENGQTIxRDgzQUJEOEI1NjU0OTgxODA2ODBEMTQxQTgxOTYwRi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RkVFBvaDJEcTlpMVpVbUJnR2dORkJx QmxnOC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yMTI1MzFjOC1i MjQ4LTQ0MzEtYTE4ZS00ZTZkYzhkNmI2ZTgvMC8wREQ0Q0ZBMjFEODNBQkQ4QjU2 NTQ5ODE4MDY4MEQxNDFBODE5NjBGLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjlN/EWhJpEEK3rLVZ+MK g0z4fSdoyUVTE5zscLR+1AJg359zCP3kUlc/J5LeEu9HP5BTigZKz7dnP2fj3r+u RBAfjNPrkdpABLBRZQZVsHw4CQ/ffRQ/UjtkFdYZRm2BBTW7zNDNikZn5whG+lH8 Ob81EZrb9SjNVRaH+5yFSkcKRGmtLlLD/5UbaOHBN3VMdrg406PDvhAui1zpANNA cMeMVeupACpb/wG5lU0ukp1aisPP4ivK8Ozut9C3L6fTZANkyd+YB/zC7KM2axV3 ZYDptrFM05c0OTctzWiJcVc6/L0HLmcmHqa6liRTQ4HCAw6rXATMgVwXc+VLsB6l jA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:21:56 2025 by rpki-client