This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/4305cb3b-8d4f-4973-92b2-962a0d7e0db7/0/CF7320162773CFFE2866D9712A738E4199536117.mft File: CF7320162773CFFE2866D9712A738E4199536117.mft (raw, json) Hash identifier: NWRGPaZ/KqZxvufchNiErl5PmEdgJDC+rLzXboJFoLU= Subject key identifier: B3:74:69:84:26:38:AC:80:60:B8:08:66:05:C0:F2:BD:69:BA:97:05 Authority key identifier: CF:73:20:16:27:73:CF:FE:28:66:D9:71:2A:73:8E:41:99:53:61:17 Certificate issuer: /CN=cf7320162773cffe2866d9712a738e4199536117 Certificate serial: 36ED0D26A6BF155F3498BBFA79BDAA68CF3C0E25 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z3MgFidzz_4oZtlxKnOOQZlTYRc.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/4305cb3b-8d4f-4973-92b2-962a0d7e0db7/0/CF7320162773CFFE2866D9712A738E4199536117.mft Manifest number: 80 Signing time: Fri 05 Dec 2025 22:51:09 +0000 Manifest this update: Fri 05 Dec 2025 22:45:05 +0000 Manifest next update: Sun 07 Dec 2025 00:37:05 +0000 Files and hashes: 1: CF7320162773CFFE2866D9712A738E4199536117.crl (hash: LYqC8MT5k66Ijs05WaN4oL0Xq3/ocjSNRoqKFYTdCGU=) 2: AS208824.asa (hash: pO2oqucndlObtPTLzYJvUNtIOdgCmd6bYfZzGJi1V2k=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/4305cb3b-8d4f-4973-92b2-962a0d7e0db7/0/CF7320162773CFFE2866D9712A738E4199536117.crl rsync://rsync.paas.rpki.ripe.net/repository/4305cb3b-8d4f-4973-92b2-962a0d7e0db7/0/CF7320162773CFFE2866D9712A738E4199536117.mft rsync://rpki.ripe.net/repository/DEFAULT/z3MgFidzz_4oZtlxKnOOQZlTYRc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:ed:0d:26:a6:bf:15:5f:34:98:bb:fa:79:bd:aa:68:cf:3c:0e:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf7320162773cffe2866d9712a738e4199536117 Validity Not Before: Dec 5 22:45:05 2025 GMT Not After : Dec 7 00:37:05 2025 GMT Subject: CN=B37469842638AC8060B8086605C0F2BD69BA9705 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:be:05:4a:7b:22:07:03:ff:ad:09:c6:81:0d: 80:df:f9:a2:52:49:11:55:3a:6a:60:45:ae:00:bc: ff:1d:73:91:7b:e5:f5:99:14:27:50:15:b3:74:e7: c7:68:b5:6b:0b:c6:7f:81:37:a8:3a:da:d5:5b:fb: 30:95:0e:b5:41:21:3b:bd:8f:6d:5d:bc:f0:47:1f: cc:53:99:80:2d:19:00:f3:34:b6:68:c5:d4:29:34: 1b:7d:05:58:f3:ee:c7:18:c1:8f:a2:a7:85:07:14: 1f:59:0d:a7:ee:ba:e8:1f:e8:bf:f2:56:9e:e6:24: 33:25:46:d3:bf:71:94:86:bb:83:35:66:91:ee:8d: eb:16:3c:b8:cd:38:a6:0e:c3:b0:2d:a1:fe:cb:b2: 05:65:06:c4:d9:f9:1a:03:a2:1c:dc:08:bd:72:01: c4:7b:0e:9e:74:b8:2b:8a:6c:40:29:46:c3:72:0f: 4d:a9:3e:a2:d6:03:86:78:3b:9f:f7:25:03:76:7c: b4:8a:09:d8:6b:de:1b:8b:c4:6a:eb:a1:a0:8d:6a: b1:b3:0e:28:a6:00:84:68:2e:4b:2a:75:dd:03:15: 10:c7:7c:41:47:6e:ef:09:79:ae:ed:c3:78:98:c1: 65:aa:ad:e4:22:6e:d0:2a:b1:75:12:1b:58:fd:ac: ad:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:74:69:84:26:38:AC:80:60:B8:08:66:05:C0:F2:BD:69:BA:97:05 X509v3 Authority Key Identifier: keyid:CF:73:20:16:27:73:CF:FE:28:66:D9:71:2A:73:8E:41:99:53:61:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/4305cb3b-8d4f-4973-92b2-962a0d7e0db7/0/CF7320162773CFFE2866D9712A738E4199536117.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z3MgFidzz_4oZtlxKnOOQZlTYRc.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/4305cb3b-8d4f-4973-92b2-962a0d7e0db7/0/CF7320162773CFFE2866D9712A738E4199536117.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:7b:50:b4:28:a1:6e:57:dd:6e:9c:44:32:c8:36:b1:d2:0d: 19:33:a8:2f:28:17:94:a9:27:28:7a:ec:1a:20:df:0e:a0:ac: d1:64:44:1a:e0:8e:c6:85:78:07:49:eb:8f:8b:54:22:a5:ce: 3a:ab:de:35:65:b1:09:08:a5:cb:5a:f1:fd:53:9b:2e:83:9d: 98:cd:4d:b3:52:01:c3:19:7f:00:b3:4a:63:aa:d8:36:6a:b2: 18:51:a7:56:5e:fb:bf:fb:c2:73:e6:e5:0c:a4:e5:8b:ec:e4: d8:fc:74:29:18:72:a2:e5:cf:d1:dd:f8:ce:be:dc:f0:1a:90: c2:10:f0:05:25:5a:b2:33:a1:39:8e:83:60:b9:3f:64:37:d7: 45:42:e8:79:c2:fd:36:92:3f:11:21:9a:60:5e:40:9e:fc:28: c5:03:0b:12:ba:8a:fe:ba:13:ae:8d:67:aa:5f:9c:40:e3:4d: da:36:01:24:77:23:94:0a:b4:eb:88:1e:7c:04:2f:34:3d:26: c2:d6:b8:cc:bf:3a:a7:b0:f6:87:45:71:b9:3c:39:de:e9:25: d9:b7:cf:4d:8b:ea:5f:cc:58:8f:f5:0d:20:56:6b:46:f9:96: 5e:01:ba:f9:54:e3:e6:5b:98:f8:2d:23:9a:ff:0e:fa:5d:66: 31:ca:50:3b -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUNu0NJqa/FV80mLv6eb2qaM88DiUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoY2Y3MzIwMTYyNzczY2ZmZTI4NjZkOTcxMmE3MzhlNDE5 OTUzNjExNzAeFw0yNTEyMDUyMjQ1MDVaFw0yNTEyMDcwMDM3MDVaMDMxMTAvBgNV BAMTKEIzNzQ2OTg0MjYzOEFDODA2MEI4MDg2NjA1QzBGMkJENjlCQTk3MDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7vgVKeyIHA/+tCcaBDYDf+aJS SRFVOmpgRa4AvP8dc5F75fWZFCdQFbN058dotWsLxn+BN6g62tVb+zCVDrVBITu9 j21dvPBHH8xTmYAtGQDzNLZoxdQpNBt9BVjz7scYwY+ip4UHFB9ZDafuuugf6L/y Vp7mJDMlRtO/cZSGu4M1ZpHujesWPLjNOKYOw7Atof7LsgVlBsTZ+RoDohzcCL1y AcR7Dp50uCuKbEApRsNyD02pPqLWA4Z4O5/3JQN2fLSKCdhr3huLxGrroaCNarGz DiimAIRoLksqdd0DFRDHfEFHbu8Jea7tw3iYwWWqreQibtAqsXUSG1j9rK2vAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUs3RphCY4rIBguAhmBcDyvWm6lwUwHwYDVR0j BBgwFoAUz3MgFidzz/4oZtlxKnOOQZlTYRcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNDMwNWNiM2ItOGQ0Zi00OTczLTkyYjItOTYyYTBkN2Uw ZGI3LzAvQ0Y3MzIwMTYyNzczQ0ZGRTI4NjZEOTcxMkE3MzhFNDE5OTUzNjExNy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3ozTWdGaWR6el80b1p0bHhLbk9PUVps VFlSYy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS80MzA1Y2IzYi04 ZDRmLTQ5NzMtOTJiMi05NjJhMGQ3ZTBkYjcvMC9DRjczMjAxNjI3NzNDRkZFMjg2 NkQ5NzEyQTczOEU0MTk5NTM2MTE3Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASntQtCihblfdbpxEMsg2 sdINGTOoLygXlKknKHrsGiDfDqCs0WREGuCOxoV4B0nrj4tUIqXOOqveNWWxCQil y1rx/VObLoOdmM1Ns1IBwxl/ALNKY6rYNmqyGFGnVl77v/vCc+blDKTli+zk2Px0 KRhyouXP0d34zr7c8BqQwhDwBSVasjOhOY6DYLk/ZDfXRULoecL9NpI/ESGaYF5A nvwoxQMLErqK/roTro1nql+cQONN2jYBJHcjlAq064gefAQvND0mwta4zL86p7D2 h0VxuTw53ukl2bfPTYvqX8xYj/UNIFZrRvmWXgG6+VTj5luY+C0jmv8O+l1mMcpQ Ow== -----END CERTIFICATE-----Generated at Sat Dec 6 04:59:19 2025 by rpki-client