This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/0/C9E75975E66E7BC4344F9CDE2C3073B8E54A2F0E.mft File: C9E75975E66E7BC4344F9CDE2C3073B8E54A2F0E.mft (raw, json) Hash identifier: RCh1tU06FikOSfpk1UmaryN70IdJtJ8IXImpjMbCbm4= Subject key identifier: 40:DA:57:95:D8:04:81:DD:1B:73:D4:F0:CA:3C:F2:7F:54:12:81:68 Authority key identifier: C9:E7:59:75:E6:6E:7B:C4:34:4F:9C:DE:2C:30:73:B8:E5:4A:2F:0E Certificate issuer: /CN=c9e75975e66e7bc4344f9cde2c3073b8e54a2f0e Certificate serial: 7DD0380FC32DE71F6015F47801961914551D2A43 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yedZdeZue8Q0T5zeLDBzuOVKLw4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/0/C9E75975E66E7BC4344F9CDE2C3073B8E54A2F0E.mft Manifest number: 026A Signing time: Fri 05 Dec 2025 22:07:54 +0000 Manifest this update: Fri 05 Dec 2025 22:02:54 +0000 Manifest next update: Sun 07 Dec 2025 00:25:54 +0000 Files and hashes: 1: C9E75975E66E7BC4344F9CDE2C3073B8E54A2F0E.crl (hash: MW1IVDsxrmGK9KJiUb/SwAJqhbebvI0LBqUXAsjbO70=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/0/C9E75975E66E7BC4344F9CDE2C3073B8E54A2F0E.crl rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/0/C9E75975E66E7BC4344F9CDE2C3073B8E54A2F0E.mft rsync://rpki.ripe.net/repository/DEFAULT/yedZdeZue8Q0T5zeLDBzuOVKLw4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 00:25:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:d0:38:0f:c3:2d:e7:1f:60:15:f4:78:01:96:19:14:55:1d:2a:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9e75975e66e7bc4344f9cde2c3073b8e54a2f0e Validity Not Before: Dec 5 22:02:54 2025 GMT Not After : Dec 7 00:25:54 2025 GMT Subject: CN=40DA5795D80481DD1B73D4F0CA3CF27F54128168 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:36:39:da:d3:22:84:b6:d5:58:d4:74:7c:c1: 50:29:93:70:11:84:ab:3b:9a:82:61:fb:36:40:36: 68:75:10:90:ed:4a:66:2e:44:e8:95:3b:a7:4a:45: 35:98:30:f7:71:86:8f:33:21:08:e7:99:e2:d5:5e: 82:eb:ad:5e:b0:08:77:8d:75:30:35:a1:ec:c4:12: 3d:72:39:4b:36:8b:92:e1:8f:27:74:f6:10:1f:1c: a6:59:69:7a:8f:7b:20:6b:e1:ac:13:af:d5:bc:1b: 3b:05:66:00:64:0f:a9:87:af:75:63:60:ab:20:a2: 7f:f9:87:1b:8b:4f:3c:85:65:77:a9:88:bd:b4:ef: b0:33:7c:70:be:0a:e1:49:53:1b:36:0e:f1:c3:da: 32:88:98:83:c7:24:80:d9:da:03:22:b9:ab:e8:c4: 0e:6f:72:30:53:52:15:ac:eb:e4:78:d4:b1:e7:41: 93:f6:39:87:3d:06:d0:af:79:23:f9:ca:13:49:6b: 81:b0:8c:8a:9a:73:5a:cd:b8:47:cb:b7:30:73:fe: d2:40:96:3f:f1:48:97:e3:1e:48:56:fd:83:10:25: 30:db:1d:ac:07:e5:bb:eb:94:84:46:f4:03:b1:02: c7:ad:fb:04:78:1a:35:ee:b0:33:b6:cd:2c:2f:72: 8f:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:DA:57:95:D8:04:81:DD:1B:73:D4:F0:CA:3C:F2:7F:54:12:81:68 X509v3 Authority Key Identifier: keyid:C9:E7:59:75:E6:6E:7B:C4:34:4F:9C:DE:2C:30:73:B8:E5:4A:2F:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/0/C9E75975E66E7BC4344F9CDE2C3073B8E54A2F0E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yedZdeZue8Q0T5zeLDBzuOVKLw4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/0/C9E75975E66E7BC4344F9CDE2C3073B8E54A2F0E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:cf:c8:1b:11:33:85:c0:23:81:a9:ef:fe:6b:0c:ff:19:a1: 45:5c:c3:57:34:36:44:76:a2:3a:86:fe:35:86:9d:ac:54:24: 3f:12:79:a1:36:a8:f2:39:e5:3b:99:89:3b:21:76:c6:1b:fb: 17:35:88:df:cb:06:db:1e:3a:a1:5a:d5:09:f4:af:25:39:8d: b0:6f:bc:5b:22:df:f1:48:77:6d:69:35:10:52:20:ea:2c:91: 6e:a0:bc:a6:b4:10:44:0a:31:42:1a:14:b1:1b:0e:57:10:e5: 2f:18:40:72:76:fa:01:08:f2:1b:f3:8c:78:35:b2:9e:6d:e3: 5d:14:c6:5a:48:bd:f9:f8:ae:6c:50:ad:34:c1:61:12:46:37: d4:aa:b5:1f:ee:ad:dd:a0:3f:c9:ec:7a:b6:b6:aa:dc:45:04: d7:ab:22:fc:66:59:f7:2e:7f:87:1e:cd:83:c4:90:88:12:2b: b6:51:19:f6:47:67:e3:d7:b7:a7:9d:ff:f4:37:85:7d:d7:fe: a7:fd:f3:c7:66:d4:4e:4b:d4:53:d3:10:a3:6a:bf:90:cd:1b: b2:ed:63:1b:49:d1:37:dd:48:1b:69:30:92:62:9a:0c:ed:25: 6d:89:be:b0:96:2b:f3:24:41:67:82:d6:49:42:e7:af:39:dd: 9d:93:fc:6d -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUfdA4D8Mt5x9gFfR4AZYZFFUdKkMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYzllNzU5NzVlNjZlN2JjNDM0NGY5Y2RlMmMzMDczYjhl NTRhMmYwZTAeFw0yNTEyMDUyMjAyNTRaFw0yNTEyMDcwMDI1NTRaMDMxMTAvBgNV BAMTKDQwREE1Nzk1RDgwNDgxREQxQjczRDRGMENBM0NGMjdGNTQxMjgxNjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCMNjna0yKEttVY1HR8wVApk3AR hKs7moJh+zZANmh1EJDtSmYuROiVO6dKRTWYMPdxho8zIQjnmeLVXoLrrV6wCHeN dTA1oezEEj1yOUs2i5Lhjyd09hAfHKZZaXqPeyBr4awTr9W8GzsFZgBkD6mHr3Vj YKsgon/5hxuLTzyFZXepiL2077AzfHC+CuFJUxs2DvHD2jKImIPHJIDZ2gMiuavo xA5vcjBTUhWs6+R41LHnQZP2OYc9BtCveSP5yhNJa4GwjIqac1rNuEfLtzBz/tJA lj/xSJfjHkhW/YMQJTDbHawH5bvrlIRG9AOxAset+wR4GjXusDO2zSwvco8HAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUQNpXldgEgd0bc9Twyjzyf1QSgWgwHwYDVR0j BBgwFoAUyedZdeZue8Q0T5zeLDBzuOVKLw4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNDkxYTQzYmMtNzZlYy00YWJlLWJhN2QtZTczZTkwZDY2 MmNiLzAvQzlFNzU5NzVFNjZFN0JDNDM0NEY5Q0RFMkMzMDczQjhFNTRBMkYwRS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3llZFpkZVp1ZThRMFQ1emVMREJ6dU9W S0x3NC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS80OTFhNDNiYy03 NmVjLTRhYmUtYmE3ZC1lNzNlOTBkNjYyY2IvMC9DOUU3NTk3NUU2NkU3QkM0MzQ0 RjlDREUyQzMwNzNCOEU1NEEyRjBFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfs/IGxEzhcAjganv/msM /xmhRVzDVzQ2RHaiOob+NYadrFQkPxJ5oTao8jnlO5mJOyF2xhv7FzWI38sG2x46 oVrVCfSvJTmNsG+8WyLf8Uh3bWk1EFIg6iyRbqC8prQQRAoxQhoUsRsOVxDlLxhA cnb6AQjyG/OMeDWynm3jXRTGWki9+fiubFCtNMFhEkY31Kq1H+6t3aA/yex6traq 3EUE16si/GZZ9y5/hx7Ng8SQiBIrtlEZ9kdn49e3p53/9DeFfdf+p/3zx2bUTkvU U9MQo2q/kM0bsu1jG0nRN91IG2kwkmKaDO0lbYm+sJYr8yRBZ4LWSULnrzndnZP8 bQ== -----END CERTIFICATE-----Generated at Sat Dec 6 13:52:58 2025 by rpki-client