This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.mft File: DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.mft (raw, json) Hash identifier: Md2BerIOVk5SSwMvXlOgm2ougUbjkU46ztjBRyKFhuo= Subject key identifier: 3B:3F:BB:A3:4C:C6:0C:BE:36:D8:D9:E5:BF:DF:A1:5F:46:93:25:B2 Authority key identifier: DA:B7:E2:0B:EA:5C:CB:84:F8:26:C6:4D:A1:75:7D:1D:F5:B6:FF:62 Certificate issuer: /CN=dab7e20bea5ccb84f826c64da1757d1df5b6ff62 Certificate serial: 6D87FCE4368A2E92D32BABC9D5643029DE147090 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2rfiC-pcy4T4JsZNoXV9HfW2_2I.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.mft Manifest number: 0289 Signing time: Wed 17 Dec 2025 21:14:35 +0000 Manifest this update: Wed 17 Dec 2025 21:09:35 +0000 Manifest next update: Thu 18 Dec 2025 23:26:35 +0000 Files and hashes: 1: DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.crl (hash: TLN0A6TZ8WmDspN2df+pYL2zo3JmXsj/WdmTbFJWjT8=) 2: AS215085.asa (hash: sCI+W8+X4W620uBxNueenYbQpWLmlL4f7e78KHbgIKI=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.crl rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.mft rsync://rpki.ripe.net/repository/DEFAULT/2rfiC-pcy4T4JsZNoXV9HfW2_2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 23:26:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:87:fc:e4:36:8a:2e:92:d3:2b:ab:c9:d5:64:30:29:de:14:70:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dab7e20bea5ccb84f826c64da1757d1df5b6ff62 Validity Not Before: Dec 17 21:09:35 2025 GMT Not After : Dec 18 23:26:35 2025 GMT Subject: CN=3B3FBBA34CC60CBE36D8D9E5BFDFA15F469325B2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:13:42:98:95:06:88:90:09:04:99:1d:5f:04: 77:20:d1:e9:08:5c:d0:b7:71:02:62:df:4e:47:29: df:f8:f0:d5:ee:2b:cd:fc:bc:40:9e:ae:a4:01:e9: b4:38:10:01:e6:d2:f5:9a:54:8c:32:fc:a6:bb:b4: cc:5d:04:67:01:f2:05:27:aa:df:ed:72:a3:a8:04: 85:27:81:fe:6d:df:ca:76:7b:85:21:c1:bb:b7:ee: 81:35:e2:4f:b6:f5:c8:d8:4a:f0:4c:f6:2a:aa:78: d9:4b:47:8a:e5:24:b3:f7:de:6c:f7:f3:6c:a7:a2: d5:c3:8e:90:c2:9a:00:ee:ce:f7:15:d1:14:f0:84: 54:43:4c:5c:96:d4:6d:fa:99:33:e1:08:55:58:99: 85:c7:c5:59:b3:97:8b:47:2a:02:84:16:66:fd:4a: 91:2b:9d:90:2c:70:5c:e2:7e:ea:67:99:90:a7:ee: b9:24:fa:93:01:05:f2:b9:75:36:87:37:01:70:6c: 2f:85:92:ee:70:75:df:6b:b8:58:72:a2:2d:b7:54: 65:4c:01:03:d3:65:71:be:66:79:fb:da:0b:47:94: 3c:a4:0d:82:ef:e8:65:43:b2:78:ef:9b:9b:02:98: 68:1e:d4:f5:8f:6d:87:e1:62:f8:7d:d4:d4:45:00: f6:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:3F:BB:A3:4C:C6:0C:BE:36:D8:D9:E5:BF:DF:A1:5F:46:93:25:B2 X509v3 Authority Key Identifier: keyid:DA:B7:E2:0B:EA:5C:CB:84:F8:26:C6:4D:A1:75:7D:1D:F5:B6:FF:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2rfiC-pcy4T4JsZNoXV9HfW2_2I.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:cd:06:67:f3:3e:89:f2:f2:4e:76:8f:8a:9d:e8:dc:52:5d: cc:6e:c2:68:69:ba:60:86:2d:5f:d7:7a:7c:33:f0:52:37:6e: 40:c4:ec:2c:ce:b4:05:ab:3e:9e:a0:e4:75:45:e3:f4:f6:27: c4:81:6e:9c:ad:41:28:25:84:51:9e:cf:be:b3:27:d6:ad:fa: c2:1f:a9:f6:73:fb:fe:c9:d0:f2:0d:03:92:b3:ec:99:21:35: 8c:73:d5:df:ab:4b:0e:7e:51:1b:80:c5:d4:4a:9f:ea:34:02: dd:9b:4c:ca:58:4a:6a:66:97:87:ac:46:7b:ed:fa:33:2d:ea: 9a:c9:e9:f6:ff:b8:0d:65:5d:17:b7:3e:0e:fa:1a:61:41:c4: c1:11:4a:a9:2c:e7:f9:fb:a5:23:08:36:98:84:8f:65:14:2a: 2d:77:a1:3a:ce:66:ee:d6:fb:e0:a7:bc:6e:68:3e:75:5a:39: fa:fe:c8:04:86:42:33:3d:59:4f:70:fc:91:a6:95:15:f3:d5: 10:42:57:6b:0a:83:58:c1:80:0f:87:dd:a9:f7:25:52:80:a5: 89:0f:a3:ce:40:52:5f:fa:f0:8e:fb:c1:cb:c0:1f:c9:0a:06: d2:5c:51:d3:45:6a:3e:02:e2:ab:3f:91:2f:ac:71:66:96:a9: 33:f2:7c:04 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUbYf85DaKLpLTK6vJ1WQwKd4UcJAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZGFiN2UyMGJlYTVjY2I4NGY4MjZjNjRkYTE3NTdkMWRm NWI2ZmY2MjAeFw0yNTEyMTcyMTA5MzVaFw0yNTEyMTgyMzI2MzVaMDMxMTAvBgNV BAMTKDNCM0ZCQkEzNENDNjBDQkUzNkQ4RDlFNUJGREZBMTVGNDY5MzI1QjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeE0KYlQaIkAkEmR1fBHcg0ekI XNC3cQJi305HKd/48NXuK838vECerqQB6bQ4EAHm0vWaVIwy/Ka7tMxdBGcB8gUn qt/tcqOoBIUngf5t38p2e4Uhwbu37oE14k+29cjYSvBM9iqqeNlLR4rlJLP33mz3 82ynotXDjpDCmgDuzvcV0RTwhFRDTFyW1G36mTPhCFVYmYXHxVmzl4tHKgKEFmb9 SpErnZAscFzifupnmZCn7rkk+pMBBfK5dTaHNwFwbC+Fku5wdd9ruFhyoi23VGVM AQPTZXG+Znn72gtHlDykDYLv6GVDsnjvm5sCmGge1PWPbYfhYvh91NRFAPZbAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUOz+7o0zGDL422Nnlv9+hX0aTJbIwHwYDVR0j BBgwFoAU2rfiC+pcy4T4JsZNoXV9HfW2/2IwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMzAxMTk0NGQtN2ViMy00ZjYzLWExNTktY2ZmMDJjMDI2 YWJmLzAvREFCN0UyMEJFQTVDQ0I4NEY4MjZDNjREQTE3NTdEMURGNUI2RkY2Mi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJyZmlDLXBjeTRUNEpzWk5vWFY5SGZX Ml8ySS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zMDExOTQ0ZC03 ZWIzLTRmNjMtYTE1OS1jZmYwMmMwMjZhYmYvMC9EQUI3RTIwQkVBNUNDQjg0Rjgy NkM2NERBMTc1N0QxREY1QjZGRjYyLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAec0GZ/M+ifLyTnaPip3o 3FJdzG7CaGm6YIYtX9d6fDPwUjduQMTsLM60Bas+nqDkdUXj9PYnxIFunK1BKCWE UZ7PvrMn1q36wh+p9nP7/snQ8g0DkrPsmSE1jHPV36tLDn5RG4DF1Eqf6jQC3ZtM ylhKamaXh6xGe+36My3qmsnp9v+4DWVdF7c+DvoaYUHEwRFKqSzn+fulIwg2mISP ZRQqLXehOs5m7tb74Ke8bmg+dVo5+v7IBIZCMz1ZT3D8kaaVFfPVEEJXawqDWMGA D4fdqfclUoCliQ+jzkBSX/rwjvvBy8AfyQoG0lxR00VqPgLiqz+RL6xxZpapM/J8 BA== -----END CERTIFICATE-----Generated at Thu Dec 18 11:22:36 2025 by rpki-client