This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/0/5DBF811E504A4FA2C29D3B4F11DFB713642873D3.mft File: 5DBF811E504A4FA2C29D3B4F11DFB713642873D3.mft (raw, json) Hash identifier: hgKCSvtqQ5aXVUm86z1ZicSl6ahqic8Lcp2yfOrFW+k= Subject key identifier: 0E:E9:BC:3A:20:C3:B5:C6:9D:27:E2:7F:70:3A:72:27:48:45:11:48 Authority key identifier: 5D:BF:81:1E:50:4A:4F:A2:C2:9D:3B:4F:11:DF:B7:13:64:28:73:D3 Certificate issuer: /CN=5dbf811e504a4fa2c29d3b4f11dfb713642873d3 Certificate serial: 2F5D71EBC3314737D3B756B3E0DAC8E6A1607F4B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xb-BHlBKT6LCnTtPEd-3E2Qoc9M.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/0/5DBF811E504A4FA2C29D3B4F11DFB713642873D3.mft Manifest number: 0261 Signing time: Sat 06 Dec 2025 10:29:04 +0000 Manifest this update: Sat 06 Dec 2025 10:24:04 +0000 Manifest next update: Sun 07 Dec 2025 12:10:04 +0000 Files and hashes: 1: 5DBF811E504A4FA2C29D3B4F11DFB713642873D3.crl (hash: SLe2BLqqJnN3B19OLv45PIJXnX0x4b8o6WkD673WMGY=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/0/5DBF811E504A4FA2C29D3B4F11DFB713642873D3.crl rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/0/5DBF811E504A4FA2C29D3B4F11DFB713642873D3.mft rsync://rpki.ripe.net/repository/DEFAULT/Xb-BHlBKT6LCnTtPEd-3E2Qoc9M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:10:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:5d:71:eb:c3:31:47:37:d3:b7:56:b3:e0:da:c8:e6:a1:60:7f:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dbf811e504a4fa2c29d3b4f11dfb713642873d3 Validity Not Before: Dec 6 10:24:04 2025 GMT Not After : Dec 7 12:10:04 2025 GMT Subject: CN=0EE9BC3A20C3B5C69D27E27F703A722748451148 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:63:a0:10:3e:6e:71:94:ca:dc:83:f3:ca:e0: ae:d0:05:b6:19:ce:9b:d9:ae:fc:7e:ab:ad:88:bb: d5:e9:db:89:01:05:73:ec:40:ff:fb:bd:d3:34:55: 79:da:c3:a0:92:3a:31:93:98:49:74:2a:a4:f7:b1: 3a:8f:ad:d8:1f:66:ef:65:9b:ec:83:e6:ca:a7:eb: 21:bd:b4:e2:bf:6d:57:98:ca:44:c5:d6:d4:3c:ce: fa:d1:eb:21:5a:90:31:bc:3b:82:4c:b2:02:6c:fb: 21:e6:4d:1b:53:fd:f8:6a:98:f1:3a:f0:0a:df:b2: 95:84:f7:83:1d:1f:17:49:f7:9b:f4:07:2c:01:f4: d5:ee:ec:28:64:3a:53:b3:59:08:d0:d8:d8:94:bb: a4:dd:15:d1:c4:4b:16:c7:0c:ae:dc:2d:13:65:c7: 64:27:2a:55:03:a9:a8:ea:e8:34:95:8d:db:b2:a6: d7:00:78:f4:a5:a7:ff:81:ad:f6:7d:c8:33:2b:fd: 04:b8:32:32:7c:9e:b8:54:46:e3:a2:b5:5b:f4:d0: e8:6d:8a:b1:7d:f7:e4:34:30:51:8f:4d:cf:03:b0: 2b:7a:c9:2c:09:7f:b1:4c:cc:3d:65:3e:69:0e:66: 99:44:ec:e8:00:f9:82:fc:ca:90:32:0f:02:68:19: 22:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:E9:BC:3A:20:C3:B5:C6:9D:27:E2:7F:70:3A:72:27:48:45:11:48 X509v3 Authority Key Identifier: keyid:5D:BF:81:1E:50:4A:4F:A2:C2:9D:3B:4F:11:DF:B7:13:64:28:73:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/0/5DBF811E504A4FA2C29D3B4F11DFB713642873D3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xb-BHlBKT6LCnTtPEd-3E2Qoc9M.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/0/5DBF811E504A4FA2C29D3B4F11DFB713642873D3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:a8:49:cb:25:d6:31:17:8d:70:3f:00:7f:1b:31:d5:f9:36: a2:9d:58:f8:f6:62:6b:27:e7:86:dc:65:47:a4:16:58:4c:36: 47:ff:6a:81:9f:e3:ac:b3:07:f1:d3:d9:24:64:ec:e4:8d:bb: db:1d:a6:81:23:84:3f:1c:6d:29:cd:a6:f5:14:33:77:3e:f1: c7:7f:1c:0c:99:4f:88:12:4f:d8:2f:f7:0a:70:4f:e0:8e:36: dd:ce:84:3c:2a:2f:b9:f3:eb:ce:20:7a:aa:86:e8:80:d3:81: be:a6:11:88:51:df:e4:c6:d2:9f:0b:b6:4a:53:6d:cd:3d:b9: 6b:2d:a8:f0:2c:7f:a2:b7:e8:c5:e5:5b:27:0f:83:15:2b:bb: ad:9d:ea:9a:5e:ae:d3:60:4e:d7:c2:a8:2f:f0:ff:8d:c5:23: e6:09:9b:2e:56:9b:a3:56:8f:7b:5c:85:9b:41:8f:8a:f2:7e: 5f:90:57:7e:20:e1:33:99:af:29:10:a1:e4:ee:b2:69:18:da: 1e:8e:7e:23:a0:ce:3d:a7:76:ed:af:6d:fd:76:15:2c:46:32: 7c:a6:61:d0:ae:54:92:f4:90:fe:e4:93:7d:46:7d:aa:37:a0: 0e:f5:29:94:79:ed:da:35:44:26:f5:67:44:db:73:a8:c6:e6: 5a:94:17:0d -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUL11x68MxRzfTt1az4NrI5qFgf0swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNWRiZjgxMWU1MDRhNGZhMmMyOWQzYjRmMTFkZmI3MTM2 NDI4NzNkMzAeFw0yNTEyMDYxMDI0MDRaFw0yNTEyMDcxMjEwMDRaMDMxMTAvBgNV BAMTKDBFRTlCQzNBMjBDM0I1QzY5RDI3RTI3RjcwM0E3MjI3NDg0NTExNDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEY6AQPm5xlMrcg/PK4K7QBbYZ zpvZrvx+q62Iu9Xp24kBBXPsQP/7vdM0VXnaw6CSOjGTmEl0KqT3sTqPrdgfZu9l m+yD5sqn6yG9tOK/bVeYykTF1tQ8zvrR6yFakDG8O4JMsgJs+yHmTRtT/fhqmPE6 8ArfspWE94MdHxdJ95v0BywB9NXu7ChkOlOzWQjQ2NiUu6TdFdHESxbHDK7cLRNl x2QnKlUDqajq6DSVjduyptcAePSlp/+BrfZ9yDMr/QS4MjJ8nrhURuOitVv00Oht irF99+Q0MFGPTc8DsCt6ySwJf7FMzD1lPmkOZplE7OgA+YL8ypAyDwJoGSKBAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUDum8OiDDtcadJ+J/cDpyJ0hFEUgwHwYDVR0j BBgwFoAUXb+BHlBKT6LCnTtPEd+3E2Qoc9MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjVlYWU3NDUtOGFjOS00ZTcxLWJjOTQtZmNiMjYxNzAz Zjk2LzAvNURCRjgxMUU1MDRBNEZBMkMyOUQzQjRGMTFERkI3MTM2NDI4NzNEMy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1hiLUJIbEJLVDZMQ25UdFBFZC0zRTJR b2M5TS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82NWVhZTc0NS04 YWM5LTRlNzEtYmM5NC1mY2IyNjE3MDNmOTYvMC81REJGODExRTUwNEE0RkEyQzI5 RDNCNEYxMURGQjcxMzY0Mjg3M0QzLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFqhJyyXWMReNcD8Afxsx 1fk2op1Y+PZiayfnhtxlR6QWWEw2R/9qgZ/jrLMH8dPZJGTs5I272x2mgSOEPxxt Kc2m9RQzdz7xx38cDJlPiBJP2C/3CnBP4I423c6EPCovufPrziB6qobogNOBvqYR iFHf5MbSnwu2SlNtzT25ay2o8Cx/orfoxeVbJw+DFSu7rZ3qml6u02BO18KoL/D/ jcUj5gmbLlabo1aPe1yFm0GPivJ+X5BXfiDhM5mvKRCh5O6yaRjaHo5+I6DOPad2 7a9t/XYVLEYyfKZh0K5UkvSQ/uSTfUZ9qjegDvUplHnt2jVEJvVnRNtzqMbmWpQX DQ== -----END CERTIFICATE-----Generated at Sat Dec 6 15:37:45 2025 by rpki-client