This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/0/74E91965A809D1AC5AA0F0D05506ACB0DDB02AB8.mft File: 74E91965A809D1AC5AA0F0D05506ACB0DDB02AB8.mft (raw, json) Hash identifier: 98qj8NWar0eO+aaENWK5mb4iMIuQckP+Mk0rATet7bs= Subject key identifier: 90:39:D7:37:3B:71:74:41:C9:83:1D:0C:A6:2F:A7:05:39:DD:4D:3A Authority key identifier: 74:E9:19:65:A8:09:D1:AC:5A:A0:F0:D0:55:06:AC:B0:DD:B0:2A:B8 Certificate issuer: /CN=74e91965a809d1ac5aa0f0d05506acb0ddb02ab8 Certificate serial: 47C97EF804CC613D2544C7CB0B1E903E26282D5A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dOkZZagJ0axaoPDQVQassN2wKrg.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/0/74E91965A809D1AC5AA0F0D05506ACB0DDB02AB8.mft Manifest number: 022B Signing time: Sat 06 Dec 2025 19:01:03 +0000 Manifest this update: Sat 06 Dec 2025 18:56:03 +0000 Manifest next update: Sun 07 Dec 2025 19:25:03 +0000 Files and hashes: 1: 74E91965A809D1AC5AA0F0D05506ACB0DDB02AB8.crl (hash: +d3LF8iV24mhiWbkjIAccigCeKGNn9sUCGVxJqkDKJw=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/0/74E91965A809D1AC5AA0F0D05506ACB0DDB02AB8.crl rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/0/74E91965A809D1AC5AA0F0D05506ACB0DDB02AB8.mft rsync://rpki.ripe.net/repository/DEFAULT/dOkZZagJ0axaoPDQVQassN2wKrg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:25:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:c9:7e:f8:04:cc:61:3d:25:44:c7:cb:0b:1e:90:3e:26:28:2d:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74e91965a809d1ac5aa0f0d05506acb0ddb02ab8 Validity Not Before: Dec 6 18:56:03 2025 GMT Not After : Dec 7 19:25:03 2025 GMT Subject: CN=9039D7373B717441C9831D0CA62FA70539DD4D3A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:c1:20:b8:ac:f7:36:24:d9:bb:cd:21:5e:27: 60:71:31:c8:8f:15:22:a1:a2:43:4b:d5:37:9a:da: b8:26:ae:fc:5e:a4:0e:c7:90:f0:82:20:17:b4:a6: 96:92:2f:e2:08:22:69:8c:aa:4d:49:22:f0:b3:48: 6e:1a:b5:c8:da:58:90:0f:3e:2a:5f:58:77:6c:56: a9:43:98:50:4d:e1:27:9c:1e:c9:f5:e1:d2:94:c2: f7:97:b3:53:c3:93:a8:26:ad:35:93:86:4f:7a:88: 8a:2a:76:1c:33:f1:dc:30:e2:9a:e6:39:0c:e1:eb: 8d:94:38:4d:da:20:c7:f7:fb:fb:30:78:69:5d:d8: 79:ff:89:16:2c:ed:90:d5:0a:34:d4:14:8f:79:d2: 5a:0e:1d:66:0d:d1:b2:ef:f3:26:a9:65:29:d8:fc: 4f:58:b1:63:75:22:a1:8b:6d:b8:eb:72:43:67:c8: 61:7a:ef:ee:df:04:32:4a:9c:f2:1b:04:be:b7:d3: b2:60:22:98:13:f2:c8:51:55:e4:d6:e5:29:65:40: 21:83:95:ab:51:60:98:07:06:7e:28:c6:f5:9b:4c: c6:46:87:96:8b:c0:ea:af:ab:3a:1d:3b:cc:b6:69: 70:61:48:c5:58:48:bf:ab:1e:6e:78:8c:f5:91:0f: e7:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:39:D7:37:3B:71:74:41:C9:83:1D:0C:A6:2F:A7:05:39:DD:4D:3A X509v3 Authority Key Identifier: keyid:74:E9:19:65:A8:09:D1:AC:5A:A0:F0:D0:55:06:AC:B0:DD:B0:2A:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/0/74E91965A809D1AC5AA0F0D05506ACB0DDB02AB8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dOkZZagJ0axaoPDQVQassN2wKrg.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/0/74E91965A809D1AC5AA0F0D05506ACB0DDB02AB8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:5b:ed:3f:50:d4:d1:25:c5:78:f1:20:b3:2b:ef:2e:75:7a: dc:1d:a8:24:78:dd:33:c7:18:08:c2:19:d4:5d:dd:e3:9e:3c: 8c:aa:1e:b6:39:0f:e1:cd:ca:2d:bb:75:45:88:a2:03:9e:ab: 6f:a7:e1:82:6a:77:0d:53:bb:61:27:6f:fc:fb:8d:35:79:70: 36:4c:2e:e0:76:12:eb:f2:9e:6b:78:ca:01:90:b1:84:97:76: 9b:f9:0c:43:19:07:d3:43:dd:95:9e:3a:88:72:7b:ad:6d:67: 3c:d4:ef:e7:2c:04:be:5c:6d:54:74:3e:50:5b:80:f0:88:c8: 8e:11:b7:0b:00:c2:f1:18:2c:a2:09:46:03:3e:cc:80:4e:01: ed:41:05:f5:c1:28:6a:49:ad:3c:ee:b7:36:d2:69:17:c5:1f: b4:cd:37:d2:83:38:9f:b6:bc:a2:aa:7a:8d:2b:85:17:9f:02: c2:1b:ee:3c:67:79:f1:a1:b1:37:46:15:3a:aa:c8:82:ae:2a: 2c:63:05:d6:eb:ac:ff:e6:00:77:1e:bf:1d:20:1e:a7:de:4d: ea:1f:c2:b1:e6:16:ba:05:f8:b6:62:f0:02:53:bb:07:84:e2: f7:fc:7e:3c:7f:0c:65:7f:2f:dd:54:26:11:42:be:f0:2b:84: f3:f2:f5:30 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUR8l++ATMYT0lRMfLCx6QPiYoLVowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzRlOTE5NjVhODA5ZDFhYzVhYTBmMGQwNTUwNmFjYjBk ZGIwMmFiODAeFw0yNTEyMDYxODU2MDNaFw0yNTEyMDcxOTI1MDNaMDMxMTAvBgNV BAMTKDkwMzlENzM3M0I3MTc0NDFDOTgzMUQwQ0E2MkZBNzA1MzlERDREM0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiwSC4rPc2JNm7zSFeJ2BxMciP FSKhokNL1Tea2rgmrvxepA7HkPCCIBe0ppaSL+IIImmMqk1JIvCzSG4atcjaWJAP PipfWHdsVqlDmFBN4SecHsn14dKUwveXs1PDk6gmrTWThk96iIoqdhwz8dww4prm OQzh642UOE3aIMf3+/sweGld2Hn/iRYs7ZDVCjTUFI950loOHWYN0bLv8yapZSnY /E9YsWN1IqGLbbjrckNnyGF67+7fBDJKnPIbBL6307JgIpgT8shRVeTW5SllQCGD latRYJgHBn4oxvWbTMZGh5aLwOqvqzodO8y2aXBhSMVYSL+rHm54jPWRD+f7AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUkDnXNztxdEHJgx0Mpi+nBTndTTowHwYDVR0j BBgwFoAUdOkZZagJ0axaoPDQVQassN2wKrgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjJjZjhiYTctY2IwMi00MThiLWJlMDQtNGQ5ZjNhMDdl OTUwLzAvNzRFOTE5NjVBODA5RDFBQzVBQTBGMEQwNTUwNkFDQjBEREIwMkFCOC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RPa1paYWdKMGF4YW9QRFFWUWFzc04y d0tyZy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yMmNmOGJhNy1j YjAyLTQxOGItYmUwNC00ZDlmM2EwN2U5NTAvMC83NEU5MTk2NUE4MDlEMUFDNUFB MEYwRDA1NTA2QUNCMEREQjAyQUI4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjFvtP1DU0SXFePEgsyvv LnV63B2oJHjdM8cYCMIZ1F3d4548jKoetjkP4c3KLbt1RYiiA56rb6fhgmp3DVO7 YSdv/PuNNXlwNkwu4HYS6/Kea3jKAZCxhJd2m/kMQxkH00PdlZ46iHJ7rW1nPNTv 5ywEvlxtVHQ+UFuA8IjIjhG3CwDC8RgsoglGAz7MgE4B7UEF9cEoakmtPO63NtJp F8UftM030oM4n7a8oqp6jSuFF58CwhvuPGd58aGxN0YVOqrIgq4qLGMF1uus/+YA dx6/HSAep95N6h/CseYWugX4tmLwAlO7B4Ti9/x+PH8MZX8v3VQmEUK+8CuE8/L1 MA== -----END CERTIFICATE-----Generated at Sun Dec 7 01:44:50 2025 by rpki-client