This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/0/CE45A61BA72EBDB5F6C70F59C73086C8BF46EA26.mft File: CE45A61BA72EBDB5F6C70F59C73086C8BF46EA26.mft (raw, json) Hash identifier: x+jY8zTKP90uRkiG/RdYKam76PRa786oQfDb3cqttMo= Subject key identifier: 88:5D:40:30:77:38:93:50:4E:3E:8D:D5:F8:90:2D:F6:9A:2A:89:F4 Authority key identifier: CE:45:A6:1B:A7:2E:BD:B5:F6:C7:0F:59:C7:30:86:C8:BF:46:EA:26 Certificate issuer: /CN=ce45a61ba72ebdb5f6c70f59c73086c8bf46ea26 Certificate serial: 4D6F836FB230BBA02A5F67CA74FA4EB1D7C273A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zkWmG6cuvbX2xw9ZxzCGyL9G6iY.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/0/CE45A61BA72EBDB5F6C70F59C73086C8BF46EA26.mft Manifest number: 01B4 Signing time: Sat 06 Dec 2025 18:49:27 +0000 Manifest this update: Sat 06 Dec 2025 18:44:27 +0000 Manifest next update: Sun 07 Dec 2025 21:24:27 +0000 Files and hashes: 1: CE45A61BA72EBDB5F6C70F59C73086C8BF46EA26.crl (hash: KnFqOzG91FIs2yfLLh5e8fQqvTVA1UcLCbmqGSAefM0=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/0/CE45A61BA72EBDB5F6C70F59C73086C8BF46EA26.crl rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/0/CE45A61BA72EBDB5F6C70F59C73086C8BF46EA26.mft rsync://rpki.ripe.net/repository/DEFAULT/zkWmG6cuvbX2xw9ZxzCGyL9G6iY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:24:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:6f:83:6f:b2:30:bb:a0:2a:5f:67:ca:74:fa:4e:b1:d7:c2:73:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce45a61ba72ebdb5f6c70f59c73086c8bf46ea26 Validity Not Before: Dec 6 18:44:27 2025 GMT Not After : Dec 7 21:24:27 2025 GMT Subject: CN=885D4030773893504E3E8DD5F8902DF69A2A89F4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:17:20:c4:54:bd:6a:b4:bb:2a:f9:27:57:e0: ce:6c:52:36:2c:86:f1:1b:d5:05:a1:ec:19:08:77: db:3f:0e:34:99:e3:95:13:5a:da:2f:ff:68:19:92: bb:f4:99:9c:25:c6:cd:ea:e5:cf:23:2c:85:ab:10: db:35:5a:52:dd:55:de:78:c0:4e:4a:89:2b:77:e8: 79:3f:33:59:99:20:cb:b2:10:a1:f9:4e:fe:a5:5a: 49:5a:f6:05:8d:bb:04:2a:25:32:8a:bc:44:5f:05: 22:2e:c9:60:89:2b:18:a7:43:55:08:55:02:04:e1: b4:26:4f:9b:3d:09:c5:ce:70:26:22:40:89:a3:a8: 36:14:6f:ec:40:c7:4a:c4:43:1b:b1:30:4e:05:b4: 24:26:c2:fe:24:b3:16:4c:c9:0d:8b:5d:53:87:ba: 8f:39:0f:7b:f4:da:e1:cc:43:28:07:ec:b5:6b:8b: 74:f3:a6:28:26:7c:f5:16:b7:e6:46:c9:77:46:99: 39:9f:7a:e2:6e:64:4b:b1:f6:c5:13:8b:65:1c:b2: 82:7a:2c:d6:74:cd:de:ef:75:c8:9a:04:48:94:f9: 3e:c2:72:44:21:f1:35:23:a4:da:bf:23:fa:13:41: 7a:cd:ab:a9:a6:95:d4:98:6b:43:36:07:20:3d:7f: bd:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:5D:40:30:77:38:93:50:4E:3E:8D:D5:F8:90:2D:F6:9A:2A:89:F4 X509v3 Authority Key Identifier: keyid:CE:45:A6:1B:A7:2E:BD:B5:F6:C7:0F:59:C7:30:86:C8:BF:46:EA:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/0/CE45A61BA72EBDB5F6C70F59C73086C8BF46EA26.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zkWmG6cuvbX2xw9ZxzCGyL9G6iY.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/0/CE45A61BA72EBDB5F6C70F59C73086C8BF46EA26.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:83:91:1f:b9:26:87:74:e4:2e:40:b0:dd:99:71:70:98:1a: 34:9e:f2:d6:55:d2:6e:fe:65:b6:26:79:8b:79:ff:c6:fd:ec: 6c:6d:4d:6d:02:18:0d:d4:b9:60:d8:a1:5b:93:68:dd:59:f8: 65:fb:ef:29:3a:89:15:8e:f0:f3:82:36:3c:f2:1c:d3:58:bb: bf:ff:5f:9a:c3:c5:4b:69:fb:9d:09:56:92:aa:e1:51:a8:8d: 2b:2e:d4:b3:a6:63:c4:3f:5d:65:9f:88:93:a1:94:8c:c9:59: 60:d5:9d:80:39:a9:a3:06:6a:49:fd:b9:25:0a:33:9b:41:96: 12:67:55:ad:d5:a8:1b:f9:83:1d:71:5d:2b:8b:78:e2:a8:d0: e7:82:19:fe:ee:51:df:e7:88:d1:bf:f9:96:1a:28:8f:aa:84: a1:63:0b:02:1d:e4:d0:51:cb:7e:e4:4d:89:8e:6e:cd:29:04: f1:f5:38:06:ed:9b:7a:5a:a6:d2:d9:9a:1a:0f:ad:86:6f:ce: 9f:50:06:82:98:e4:c9:e2:c5:51:2e:a2:3f:a5:a1:b0:84:03: ee:26:01:dd:86:b9:76:cc:5b:e1:5c:40:0c:0c:3d:c4:6e:0c: d0:07:5d:92:e5:f0:c6:b6:d0:f3:26:ac:c2:9f:ea:bb:4e:73: c3:cf:c6:f7 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUTW+Db7Iwu6AqX2fKdPpOsdfCc6YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoY2U0NWE2MWJhNzJlYmRiNWY2YzcwZjU5YzczMDg2Yzhi ZjQ2ZWEyNjAeFw0yNTEyMDYxODQ0MjdaFw0yNTEyMDcyMTI0MjdaMDMxMTAvBgNV BAMTKDg4NUQ0MDMwNzczODkzNTA0RTNFOERENUY4OTAyREY2OUEyQTg5RjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHFyDEVL1qtLsq+SdX4M5sUjYs hvEb1QWh7BkId9s/DjSZ45UTWtov/2gZkrv0mZwlxs3q5c8jLIWrENs1WlLdVd54 wE5KiSt36Hk/M1mZIMuyEKH5Tv6lWkla9gWNuwQqJTKKvERfBSIuyWCJKxinQ1UI VQIE4bQmT5s9CcXOcCYiQImjqDYUb+xAx0rEQxuxME4FtCQmwv4ksxZMyQ2LXVOH uo85D3v02uHMQygH7LVri3TzpigmfPUWt+ZGyXdGmTmfeuJuZEux9sUTi2UcsoJ6 LNZ0zd7vdciaBEiU+T7CckQh8TUjpNq/I/oTQXrNq6mmldSYa0M2ByA9f71BAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUiF1AMHc4k1BOPo3V+JAt9poqifQwHwYDVR0j BBgwFoAUzkWmG6cuvbX2xw9ZxzCGyL9G6iYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTMxZTk3MjAtMGI2Mi00M2E4LThlMWYtMjMwNjg0ZWFm OWFmLzAvQ0U0NUE2MUJBNzJFQkRCNUY2QzcwRjU5QzczMDg2QzhCRjQ2RUEyNi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3prV21HNmN1dmJYMnh3OVp4ekNHeUw5 RzZpWS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS81MzFlOTcyMC0w YjYyLTQzYTgtOGUxZi0yMzA2ODRlYWY5YWYvMC9DRTQ1QTYxQkE3MkVCREI1RjZD NzBGNTlDNzMwODZDOEJGNDZFQTI2Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD4ORH7kmh3TkLkCw3Zlx cJgaNJ7y1lXSbv5ltiZ5i3n/xv3sbG1NbQIYDdS5YNihW5No3Vn4ZfvvKTqJFY7w 84I2PPIc01i7v/9fmsPFS2n7nQlWkqrhUaiNKy7Us6ZjxD9dZZ+Ik6GUjMlZYNWd gDmpowZqSf25JQozm0GWEmdVrdWoG/mDHXFdK4t44qjQ54IZ/u5R3+eI0b/5lhoo j6qEoWMLAh3k0FHLfuRNiY5uzSkE8fU4Bu2belqm0tmaGg+thm/On1AGgpjkyeLF US6iP6WhsIQD7iYB3Ya5dsxb4VxADAw9xG4M0AddkuXwxrbQ8yaswp/qu05zw8/G 9w== -----END CERTIFICATE-----Generated at Sun Dec 7 08:13:00 2025 by rpki-client