This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/0/CE964F98379F0320A7191E6D6788800535885928.mft File: CE964F98379F0320A7191E6D6788800535885928.mft (raw, json) Hash identifier: mcEx8a+qnDzigpa4iEHaH6PodD80F1NVntBGdG94IU4= Subject key identifier: 26:F1:2C:59:99:89:3C:8F:E5:05:D4:D3:BC:8F:91:AF:D6:3E:85:03 Authority key identifier: CE:96:4F:98:37:9F:03:20:A7:19:1E:6D:67:88:80:05:35:88:59:28 Certificate issuer: /CN=ce964f98379f0320a7191e6d6788800535885928 Certificate serial: 15EA174E78A567F47574C08717FD7A62700ECB63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zpZPmDefAyCnGR5tZ4iABTWIWSg.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/0/CE964F98379F0320A7191E6D6788800535885928.mft Manifest number: 94 Signing time: Fri 05 Dec 2025 11:51:17 +0000 Manifest this update: Fri 05 Dec 2025 11:46:17 +0000 Manifest next update: Sat 06 Dec 2025 12:29:17 +0000 Files and hashes: 1: AS214955.asa (hash: pJ7+xLkRqPDuQTZ4CjdQziRCbw0R4LvxfMvSG4sXOdg=) 2: CE964F98379F0320A7191E6D6788800535885928.crl (hash: j52g9J/Wz3BAe0dhlyTK39XNAnqS025BH/3vzMjYTaU=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/0/CE964F98379F0320A7191E6D6788800535885928.crl rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/0/CE964F98379F0320A7191E6D6788800535885928.mft rsync://rpki.ripe.net/repository/DEFAULT/zpZPmDefAyCnGR5tZ4iABTWIWSg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 12:29:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:ea:17:4e:78:a5:67:f4:75:74:c0:87:17:fd:7a:62:70:0e:cb:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce964f98379f0320a7191e6d6788800535885928 Validity Not Before: Dec 5 11:46:17 2025 GMT Not After : Dec 6 12:29:17 2025 GMT Subject: CN=26F12C5999893C8FE505D4D3BC8F91AFD63E8503 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:35:14:2f:10:6d:02:d8:23:36:db:73:8c:75: fa:1b:b7:bf:f8:bc:30:69:47:a9:07:29:fc:3f:bf: de:fd:9e:2a:52:dc:9c:de:d8:8a:5a:09:ee:9b:50: 77:6b:44:04:28:5c:5b:98:1b:6c:18:a5:4e:30:5c: 63:9e:20:fd:83:63:c1:b8:1f:20:ae:8f:5b:4a:87: e9:09:34:ea:c5:1e:c6:e5:06:dd:59:d4:05:48:7c: 2a:d7:07:87:5d:f4:d5:99:4b:e5:67:2f:8e:7f:c9: 71:48:e2:ff:44:23:f4:2c:3b:f3:07:17:5e:05:cd: 5d:2b:98:59:8d:28:a4:97:d1:43:e8:2c:f8:a3:37: a3:68:62:e1:2c:50:7e:8b:4d:68:45:19:17:c1:7a: 75:53:91:4e:75:ab:de:82:f0:91:c5:02:60:2e:77: 80:0b:4b:20:0a:4e:69:fc:22:56:1b:c6:2f:32:bf: 60:32:c8:79:b2:bf:3c:44:d1:52:50:da:41:d6:5e: 5e:3a:6b:87:9c:8b:6b:b4:e9:4a:0c:00:7f:13:97: eb:2c:fb:93:0e:ad:14:cd:38:b0:b6:ad:7d:be:34: 03:c0:8c:da:48:37:24:3f:48:da:cb:86:b3:f8:0f: ac:55:6c:ee:ff:f7:9f:5c:76:7e:a0:c5:d7:38:80: f5:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:F1:2C:59:99:89:3C:8F:E5:05:D4:D3:BC:8F:91:AF:D6:3E:85:03 X509v3 Authority Key Identifier: keyid:CE:96:4F:98:37:9F:03:20:A7:19:1E:6D:67:88:80:05:35:88:59:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/0/CE964F98379F0320A7191E6D6788800535885928.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zpZPmDefAyCnGR5tZ4iABTWIWSg.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/0/CE964F98379F0320A7191E6D6788800535885928.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:7d:dd:65:27:ba:81:2c:79:7f:98:6a:3c:6d:e4:e2:20:67: 22:38:04:88:7b:0a:6d:ec:8a:b4:59:e7:ff:1e:f8:54:e6:89: 24:1c:39:1d:65:45:74:b0:86:ea:d7:b3:0e:9c:ae:bc:08:3f: f5:9d:42:1b:c7:31:ac:69:54:59:29:9a:92:73:b9:ec:ff:c7: 9c:88:b6:d5:87:f0:82:f1:c1:72:82:52:c9:a7:9e:91:57:8f: ef:47:39:a9:f0:24:a5:74:0d:fa:e0:22:d6:bd:79:30:85:3f: c6:15:52:c0:4b:cb:9b:84:6b:88:05:9a:3b:46:bb:8d:9c:37: 43:16:03:f0:42:14:a5:c1:22:f9:19:5d:d9:2e:95:34:87:95: a0:b6:c6:8f:03:bb:93:63:b3:85:dd:96:ce:36:90:cc:93:64: bb:b7:79:2e:6b:5c:74:b8:f3:bb:48:98:c1:ee:84:19:82:c0: 2d:db:1c:1a:09:12:ae:fc:ed:10:68:38:c1:a4:ad:6d:e7:a8: e1:ef:ea:02:da:33:a0:a6:c9:54:7f:20:bf:cf:35:d4:7e:d9: 3b:01:8c:e3:e0:aa:35:5e:02:ad:29:82:55:43:af:05:b3:f1: 2a:70:da:51:43:79:df:b2:b3:1e:bf:a1:45:a1:d0:98:a0:3a: eb:09:f5:af -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUFeoXTnilZ/R1dMCHF/16YnAOy2MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoY2U5NjRmOTgzNzlmMDMyMGE3MTkxZTZkNjc4ODgwMDUz NTg4NTkyODAeFw0yNTEyMDUxMTQ2MTdaFw0yNTEyMDYxMjI5MTdaMDMxMTAvBgNV BAMTKDI2RjEyQzU5OTk4OTNDOEZFNTA1RDREM0JDOEY5MUFGRDYzRTg1MDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgNRQvEG0C2CM223OMdfobt7/4 vDBpR6kHKfw/v979nipS3Jze2IpaCe6bUHdrRAQoXFuYG2wYpU4wXGOeIP2DY8G4 HyCuj1tKh+kJNOrFHsblBt1Z1AVIfCrXB4dd9NWZS+VnL45/yXFI4v9EI/QsO/MH F14FzV0rmFmNKKSX0UPoLPijN6NoYuEsUH6LTWhFGRfBenVTkU51q96C8JHFAmAu d4ALSyAKTmn8IlYbxi8yv2AyyHmyvzxE0VJQ2kHWXl46a4eci2u06UoMAH8Tl+ss +5MOrRTNOLC2rX2+NAPAjNpINyQ/SNrLhrP4D6xVbO7/959cdn6gxdc4gPV3AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUJvEsWZmJPI/lBdTTvI+Rr9Y+hQMwHwYDVR0j BBgwFoAUzpZPmDefAyCnGR5tZ4iABTWIWSgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvM2Y5OWU2NmQtNGM3Yi00MTMwLTkxZDUtNGZiZDg0MzU3 NzkyLzAvQ0U5NjRGOTgzNzlGMDMyMEE3MTkxRTZENjc4ODgwMDUzNTg4NTkyOC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3pwWlBtRGVmQXlDbkdSNXRaNGlBQlRX SVdTZy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zZjk5ZTY2ZC00 YzdiLTQxMzAtOTFkNS00ZmJkODQzNTc3OTIvMC9DRTk2NEY5ODM3OUYwMzIwQTcx OTFFNkQ2Nzg4ODAwNTM1ODg1OTI4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjX3dZSe6gSx5f5hqPG3k 4iBnIjgEiHsKbeyKtFnn/x74VOaJJBw5HWVFdLCG6tezDpyuvAg/9Z1CG8cxrGlU WSmaknO57P/HnIi21YfwgvHBcoJSyaeekVeP70c5qfAkpXQN+uAi1r15MIU/xhVS wEvLm4RriAWaO0a7jZw3QxYD8EIUpcEi+Rld2S6VNIeVoLbGjwO7k2Ozhd2WzjaQ zJNku7d5LmtcdLjzu0iYwe6EGYLALdscGgkSrvztEGg4waStbeeo4e/qAtozoKbJ VH8gv8811H7ZOwGM4+CqNV4CrSmCVUOvBbPxKnDaUUN537KzHr+hRaHQmKA66wn1 rw== -----END CERTIFICATE-----Generated at Sat Dec 6 05:05:31 2025 by rpki-client