This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/3/317EDB3410058E086217C50FB97009DDE70A6F1A.mft File: 317EDB3410058E086217C50FB97009DDE70A6F1A.mft (raw, json) Hash identifier: 1MdOeeMzvZHLpSQS1skNRP5E+QQmdZwq+DgfH2JWnGw= Subject key identifier: 12:4E:D2:A9:A4:0D:BE:79:A1:2C:CC:AE:CD:22:D0:55:AB:F1:B1:D7 Authority key identifier: 31:7E:DB:34:10:05:8E:08:62:17:C5:0F:B9:70:09:DD:E7:0A:6F:1A Certificate issuer: /CN=317edb3410058e086217c50fb97009dde70a6f1a Certificate serial: 3B02858B64ED9E2E9EAF0ECB2CFB59C9C3E5A1E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MX7bNBAFjghiF8UPuXAJ3ecKbxo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/3/317EDB3410058E086217C50FB97009DDE70A6F1A.mft Manifest number: 20 Signing time: Sat 06 Dec 2025 02:04:32 +0000 Manifest this update: Sat 06 Dec 2025 01:59:32 +0000 Manifest next update: Sun 07 Dec 2025 04:39:32 +0000 Files and hashes: 1: AS207682.asa (hash: yNMgsZTlVBgZuwAny+gfftheJcltZQ2eLBjscmcmhhI=) 2: 317EDB3410058E086217C50FB97009DDE70A6F1A.crl (hash: URB02nwFEGlokaRTnEE2kQoRBC3j5enYFi90Q65JN38=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/3/317EDB3410058E086217C50FB97009DDE70A6F1A.crl rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/3/317EDB3410058E086217C50FB97009DDE70A6F1A.mft rsync://rpki.ripe.net/repository/DEFAULT/MX7bNBAFjghiF8UPuXAJ3ecKbxo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:02:85:8b:64:ed:9e:2e:9e:af:0e:cb:2c:fb:59:c9:c3:e5:a1:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=317edb3410058e086217c50fb97009dde70a6f1a Validity Not Before: Dec 6 01:59:32 2025 GMT Not After : Dec 7 04:39:32 2025 GMT Subject: CN=124ED2A9A40DBE79A12CCCAECD22D055ABF1B1D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:53:3b:11:bc:a2:4e:e5:f9:91:cd:a4:43:94: 79:96:db:37:a4:7f:53:18:c1:87:5f:42:c7:05:6e: d7:c1:d8:ba:7a:34:76:02:9e:da:9f:ce:59:7f:2b: f0:4b:b6:67:8a:8f:a1:fc:35:3c:ae:60:e8:e5:0f: b8:c5:d0:9c:ff:ca:b3:a4:51:71:95:09:1c:65:59: 06:1e:3d:2f:4f:df:0e:2e:fa:9f:5b:02:0e:30:dd: 7e:f4:4e:01:49:48:3a:a5:37:56:3e:97:99:0b:c0: 58:a1:f9:4b:3b:bd:8a:0c:26:bd:8a:1f:38:54:13: 59:6d:69:0f:35:d6:89:f7:30:64:ce:e3:b3:50:bd: a3:b9:b3:fa:3f:5b:67:ee:d1:d8:c5:5b:f9:be:25: 6c:9e:8c:c8:35:95:7d:27:6b:68:35:f7:93:3e:5c: b8:f3:2a:34:5d:fb:52:73:e0:d4:cd:10:43:11:ec: 8c:42:d9:99:b8:73:fe:fb:73:ec:aa:7f:af:22:de: 38:9c:0f:04:9f:8d:28:e3:5f:de:ec:61:16:4b:28: b8:c6:f8:9a:b9:da:31:d3:ad:49:ba:7d:e6:52:fd: ed:af:da:26:99:ae:86:1f:85:76:84:fb:82:b8:11: 3f:a9:dd:b4:45:b8:ba:96:01:0f:4d:ab:a9:9b:2c: bf:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:4E:D2:A9:A4:0D:BE:79:A1:2C:CC:AE:CD:22:D0:55:AB:F1:B1:D7 X509v3 Authority Key Identifier: keyid:31:7E:DB:34:10:05:8E:08:62:17:C5:0F:B9:70:09:DD:E7:0A:6F:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/3/317EDB3410058E086217C50FB97009DDE70A6F1A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MX7bNBAFjghiF8UPuXAJ3ecKbxo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/3/317EDB3410058E086217C50FB97009DDE70A6F1A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:a5:f0:30:6a:e6:6a:8c:bb:f7:97:d4:04:3a:25:df:21:14: 62:c0:12:9e:20:87:d8:b2:95:0a:fc:e2:ec:d2:78:e9:59:47: 95:64:24:a1:f4:c4:59:bc:bb:b0:77:9d:de:b8:93:1f:ac:6f: b6:03:bc:b3:5c:1f:46:66:eb:94:e6:7d:b7:ed:13:0c:6c:a7: 11:2b:94:35:bc:a6:6b:94:2f:d6:f2:0d:df:07:03:51:f0:13: 9f:71:df:c7:d4:48:d9:5a:10:02:c1:9e:3e:ff:1c:2b:3a:d7: a9:50:cf:fd:1b:92:cb:9b:61:8c:f9:69:a8:97:aa:ca:d1:79: d7:94:05:4b:f7:c8:b9:2a:ba:1c:3d:19:6c:a8:92:c4:4d:e0: 57:ee:5a:35:b8:6e:85:59:58:17:ca:ed:9a:d6:f6:bd:b9:ae: 5e:a4:b2:a5:ba:96:8a:e4:19:84:ac:a2:55:4e:3e:b6:9a:ec: 7c:df:d1:ba:76:ba:ab:b9:14:d2:62:61:13:d6:f6:38:13:5e: eb:1a:78:34:3f:3b:80:5f:6d:f5:49:36:51:33:78:b4:dd:46: ad:cc:4f:7f:e4:ec:77:b2:96:dc:f3:ea:8c:79:8f:c8:03:0a: 20:b3:93:11:8d:3b:a2:72:54:44:bd:e3:de:90:90:71:bb:ba: 7f:50:b9:81 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUOwKFi2Ttni6erw7LLPtZycPloekwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzE3ZWRiMzQxMDA1OGUwODYyMTdjNTBmYjk3MDA5ZGRl NzBhNmYxYTAeFw0yNTEyMDYwMTU5MzJaFw0yNTEyMDcwNDM5MzJaMDMxMTAvBgNV BAMTKDEyNEVEMkE5QTQwREJFNzlBMTJDQ0NBRUNEMjJEMDU1QUJGMUIxRDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD3UzsRvKJO5fmRzaRDlHmW2zek f1MYwYdfQscFbtfB2Lp6NHYCntqfzll/K/BLtmeKj6H8NTyuYOjlD7jF0Jz/yrOk UXGVCRxlWQYePS9P3w4u+p9bAg4w3X70TgFJSDqlN1Y+l5kLwFih+Us7vYoMJr2K HzhUE1ltaQ811on3MGTO47NQvaO5s/o/W2fu0djFW/m+JWyejMg1lX0na2g195M+ XLjzKjRd+1Jz4NTNEEMR7IxC2Zm4c/77c+yqf68i3jicDwSfjSjjX97sYRZLKLjG +Jq52jHTrUm6feZS/e2v2iaZroYfhXaE+4K4ET+p3bRFuLqWAQ9Nq6mbLL+LAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUEk7SqaQNvnmhLMyuzSLQVavxsdcwHwYDVR0j BBgwFoAUMX7bNBAFjghiF8UPuXAJ3ecKbxowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMzAxMTk0NGQtN2ViMy00ZjYzLWExNTktY2ZmMDJjMDI2 YWJmLzMvMzE3RURCMzQxMDA1OEUwODYyMTdDNTBGQjk3MDA5RERFNzBBNkYxQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL01YN2JOQkFGamdoaUY4VVB1WEFKM2Vj S2J4by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zMDExOTQ0ZC03 ZWIzLTRmNjMtYTE1OS1jZmYwMmMwMjZhYmYvMy8zMTdFREIzNDEwMDU4RTA4NjIx N0M1MEZCOTcwMDlEREU3MEE2RjFBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcqXwMGrmaoy795fUBDol 3yEUYsASniCH2LKVCvzi7NJ46VlHlWQkofTEWby7sHed3riTH6xvtgO8s1wfRmbr lOZ9t+0TDGynESuUNbyma5Qv1vIN3wcDUfATn3Hfx9RI2VoQAsGePv8cKzrXqVDP /RuSy5thjPlpqJeqytF515QFS/fIuSq6HD0ZbKiSxE3gV+5aNbhuhVlYF8rtmtb2 vbmuXqSypbqWiuQZhKyiVU4+tprsfN/Runa6q7kU0mJhE9b2OBNe6xp4ND87gF9t 9Uk2UTN4tN1GrcxPf+Tsd7KW3PPqjHmPyAMKILOTEY07onJURL3j3pCQcbu6f1C5 gQ== -----END CERTIFICATE-----Generated at Sat Dec 6 05:43:53 2025 by rpki-client