This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/2/79CD5287DB23A5A4FE71669DAC5433F8A48461BD.mft File: 79CD5287DB23A5A4FE71669DAC5433F8A48461BD.mft (raw, json) Hash identifier: qNiPeat+A1v1zsY6rXdWOp/bwI8Iv7wumjY04gw5+Bc= Subject key identifier: 5C:B7:03:28:26:06:35:60:F3:E6:5C:1D:4D:56:ED:D6:F1:74:07:1D Authority key identifier: 79:CD:52:87:DB:23:A5:A4:FE:71:66:9D:AC:54:33:F8:A4:84:61:BD Certificate issuer: /CN=79cd5287db23a5a4fe71669dac5433f8a48461bd Certificate serial: 4EC8E0BF602202B734A6FE413EA1B9E1D91C9EC7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ec1Sh9sjpaT-cWadrFQz-KSEYb0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/2/79CD5287DB23A5A4FE71669DAC5433F8A48461BD.mft Manifest number: 0260 Signing time: Sat 06 Dec 2025 00:23:48 +0000 Manifest this update: Sat 06 Dec 2025 00:18:48 +0000 Manifest next update: Sun 07 Dec 2025 03:36:48 +0000 Files and hashes: 1: 79CD5287DB23A5A4FE71669DAC5433F8A48461BD.crl (hash: JDKsxfwDZKnhSzt26IDcDcXd4GUecR9xsSYka5iMGrU=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/2/79CD5287DB23A5A4FE71669DAC5433F8A48461BD.crl rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/2/79CD5287DB23A5A4FE71669DAC5433F8A48461BD.mft rsync://rpki.ripe.net/repository/DEFAULT/ec1Sh9sjpaT-cWadrFQz-KSEYb0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:36:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:c8:e0:bf:60:22:02:b7:34:a6:fe:41:3e:a1:b9:e1:d9:1c:9e:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=79cd5287db23a5a4fe71669dac5433f8a48461bd Validity Not Before: Dec 6 00:18:48 2025 GMT Not After : Dec 7 03:36:48 2025 GMT Subject: CN=5CB7032826063560F3E65C1D4D56EDD6F174071D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:2e:03:ec:fd:3b:01:06:85:8d:67:a9:21:b0: 92:cc:68:f2:78:f6:7d:83:aa:7e:a5:6d:f1:b2:61: c0:9d:8d:13:5f:b7:84:4e:8b:20:96:86:a6:ba:42: 5d:c5:ea:17:6e:e8:9c:bc:5c:a4:8a:a7:2f:f8:5b: b2:66:87:ee:cb:a1:ca:33:eb:64:fc:10:28:1e:7a: f3:e3:d2:b5:20:f5:fb:43:72:8a:2d:88:b3:7c:b0: 71:7f:c1:4b:32:56:17:a6:c3:fd:d8:f9:79:4e:c7: 4b:b2:be:40:d6:e0:08:93:02:ca:60:64:e1:e4:aa: 30:c5:6a:62:3b:9a:22:58:d6:2b:04:1e:fb:77:8f: 34:37:84:6d:7b:22:f9:8c:a2:b2:a8:79:ca:36:ef: 75:a3:14:aa:50:af:7f:de:0d:0c:50:0e:5f:a0:26: d3:be:ac:5d:00:2b:d5:57:ba:03:5f:37:c2:67:54: d5:d1:9a:b1:89:a0:6c:b3:29:d8:b3:5e:81:74:ae: 6f:08:8c:f7:e9:e4:04:08:fd:06:61:92:46:d1:5f: 7d:93:be:78:35:94:28:78:9b:d1:ff:f3:91:94:9e: 65:1e:98:9c:2f:16:0b:67:8f:bd:f8:5c:f7:43:dc: 54:37:6d:0a:e0:61:4e:bf:08:e0:fc:17:72:83:0f: 5c:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:B7:03:28:26:06:35:60:F3:E6:5C:1D:4D:56:ED:D6:F1:74:07:1D X509v3 Authority Key Identifier: keyid:79:CD:52:87:DB:23:A5:A4:FE:71:66:9D:AC:54:33:F8:A4:84:61:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/2/79CD5287DB23A5A4FE71669DAC5433F8A48461BD.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec1Sh9sjpaT-cWadrFQz-KSEYb0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/2/79CD5287DB23A5A4FE71669DAC5433F8A48461BD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:b3:f8:71:3f:b2:c9:1f:45:6a:60:92:06:74:2e:35:c0:38: 67:c7:8f:dd:58:f8:f0:e9:ec:4c:f8:71:0c:aa:39:68:62:a8: 6f:6d:02:7b:22:8e:1b:e5:64:3e:e1:1b:30:e4:a8:aa:53:56: 4e:92:c8:24:49:3a:6e:40:a5:41:de:45:15:39:7f:f1:d6:b4: 7d:7d:fa:bc:5b:c5:c0:0c:2e:fd:ea:50:c1:98:bc:79:39:3d: 1d:48:16:0d:e3:2a:f8:9c:cc:70:e3:6a:91:f8:bd:5e:89:7e: 2e:b3:3f:1e:fc:a1:08:53:f4:1d:d7:56:19:d7:43:30:61:54: 81:a6:b1:21:15:83:22:a8:b7:96:6b:1c:56:97:43:d6:d8:ab: 35:7b:3f:89:c8:9c:09:82:88:e3:de:2f:f3:57:74:c8:9f:27: 9d:3d:80:60:67:42:df:65:af:38:fb:b0:b1:7c:49:15:f8:73: 6e:ac:cd:fc:35:ef:a0:ec:7f:87:a6:7d:40:09:15:0c:0c:4c: 42:fb:d5:50:91:63:88:b5:f5:55:06:0e:ce:32:1b:2a:3d:cb: f6:eb:3d:5a:14:63:b7:ed:06:ac:db:b4:b8:0b:4e:11:b2:df: 6f:9b:3d:98:e5:0d:b6:35:d5:fa:54:5e:67:1c:1e:b0:73:5e: d0:18:58:fd -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUTsjgv2AiArc0pv5BPqG54dkcnscwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzljZDUyODdkYjIzYTVhNGZlNzE2NjlkYWM1NDMzZjhh NDg0NjFiZDAeFw0yNTEyMDYwMDE4NDhaFw0yNTEyMDcwMzM2NDhaMDMxMTAvBgNV BAMTKDVDQjcwMzI4MjYwNjM1NjBGM0U2NUMxRDRENTZFREQ2RjE3NDA3MUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpLgPs/TsBBoWNZ6khsJLMaPJ4 9n2Dqn6lbfGyYcCdjRNft4ROiyCWhqa6Ql3F6hdu6Jy8XKSKpy/4W7Jmh+7Locoz 62T8ECgeevPj0rUg9ftDcootiLN8sHF/wUsyVhemw/3Y+XlOx0uyvkDW4AiTAspg ZOHkqjDFamI7miJY1isEHvt3jzQ3hG17IvmMorKoeco273WjFKpQr3/eDQxQDl+g JtO+rF0AK9VXugNfN8JnVNXRmrGJoGyzKdizXoF0rm8IjPfp5AQI/QZhkkbRX32T vng1lCh4m9H/85GUnmUemJwvFgtnj734XPdD3FQ3bQrgYU6/COD8F3KDD1xPAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUXLcDKCYGNWDz5lwdTVbt1vF0Bx0wHwYDVR0j BBgwFoAUec1Sh9sjpaT+cWadrFQz+KSEYb0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMmFjYTNjYTYtMzRjYy00NzcyLWJhYzAtYTM1ZGQwMTk1 Y2U3LzIvNzlDRDUyODdEQjIzQTVBNEZFNzE2NjlEQUM1NDMzRjhBNDg0NjFCRC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2VjMVNoOXNqcGFULWNXYWRyRlF6LUtT RVliMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yYWNhM2NhNi0z NGNjLTQ3NzItYmFjMC1hMzVkZDAxOTVjZTcvMi83OUNENTI4N0RCMjNBNUE0RkU3 MTY2OURBQzU0MzNGOEE0ODQ2MUJELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZbP4cT+yyR9FamCSBnQu NcA4Z8eP3Vj48OnsTPhxDKo5aGKob20CeyKOG+VkPuEbMOSoqlNWTpLIJEk6bkCl Qd5FFTl/8da0fX36vFvFwAwu/epQwZi8eTk9HUgWDeMq+JzMcONqkfi9Xol+LrM/ HvyhCFP0HddWGddDMGFUgaaxIRWDIqi3lmscVpdD1tirNXs/icicCYKI494v81d0 yJ8nnT2AYGdC32WvOPuwsXxJFfhzbqzN/DXvoOx/h6Z9QAkVDAxMQvvVUJFjiLX1 VQYOzjIbKj3L9us9WhRjt+0GrNu0uAtOEbLfb5s9mOUNtjXV+lReZxwesHNe0BhY /Q== -----END CERTIFICATE-----Generated at Sat Dec 6 15:13:54 2025 by rpki-client