This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/5/3611B3E6DAE8E0D1B16D5BDAFCDA3D8370FF3BF4.mft File: 3611B3E6DAE8E0D1B16D5BDAFCDA3D8370FF3BF4.mft (raw, json) Hash identifier: riN3QmRsffAXtFLYBkgnemjfIZ4eh6R/PnBc1Dtm41Y= Subject key identifier: F8:65:69:B7:A8:CD:CC:94:E8:E9:B0:51:FB:9B:B8:B1:44:F4:EC:A9 Authority key identifier: 36:11:B3:E6:DA:E8:E0:D1:B1:6D:5B:DA:FC:DA:3D:83:70:FF:3B:F4 Certificate issuer: /CN=3611b3e6dae8e0d1b16d5bdafcda3d8370ff3bf4 Certificate serial: 5589DD9A077084B2DE874A88C99F12E06F7CFC08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NhGz5tro4NGxbVva_No9g3D_O_Q.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/5/3611B3E6DAE8E0D1B16D5BDAFCDA3D8370FF3BF4.mft Manifest number: 043B Signing time: Sat 06 Dec 2025 04:56:34 +0000 Manifest this update: Sat 06 Dec 2025 04:51:34 +0000 Manifest next update: Sun 07 Dec 2025 06:00:34 +0000 Files and hashes: 1: 3611B3E6DAE8E0D1B16D5BDAFCDA3D8370FF3BF4.crl (hash: HBl7jLO+6vyfS17SFFLUTzJ1oh9qYxZqASPlKsAfdPw=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/5/3611B3E6DAE8E0D1B16D5BDAFCDA3D8370FF3BF4.crl rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/5/3611B3E6DAE8E0D1B16D5BDAFCDA3D8370FF3BF4.mft rsync://rpki.ripe.net/repository/DEFAULT/NhGz5tro4NGxbVva_No9g3D_O_Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:89:dd:9a:07:70:84:b2:de:87:4a:88:c9:9f:12:e0:6f:7c:fc:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3611b3e6dae8e0d1b16d5bdafcda3d8370ff3bf4 Validity Not Before: Dec 6 04:51:34 2025 GMT Not After : Dec 7 06:00:34 2025 GMT Subject: CN=F86569B7A8CDCC94E8E9B051FB9BB8B144F4ECA9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:b2:28:f4:70:28:6a:c5:8f:9b:4d:f0:10:1e: 42:da:a2:1d:83:1d:fc:8d:15:49:01:da:ff:9d:fd: cf:ae:89:20:73:58:aa:16:20:d0:9f:ee:78:7d:ba: 49:e9:e2:5e:03:12:cc:79:ce:c4:aa:78:6f:20:99: 2c:e9:4b:99:7a:f3:5b:5c:46:10:e4:ee:06:a4:27: 91:67:70:ad:42:01:9e:60:0e:ba:1a:26:53:b6:84: 32:21:80:07:f6:15:17:e4:8c:f1:35:3f:c8:c7:10: af:01:be:4e:90:5f:b2:d5:e7:fd:0f:17:33:fc:9f: c9:82:40:0b:d8:41:e2:a8:63:f3:0c:34:bd:0d:b8: da:b8:d2:37:f4:8d:cb:f5:b3:3d:49:99:94:cd:21: 84:4f:c5:ef:84:0d:fd:5c:9c:64:a9:63:97:be:da: 26:13:03:43:0a:be:c2:6c:97:68:58:4f:1b:a9:92: 85:b3:a7:eb:b8:b7:7d:fd:11:b4:9c:a8:7f:33:68: 83:6a:4b:33:cc:6b:02:18:28:d8:39:ee:dc:e5:7a: ed:0d:24:fc:21:9e:c1:93:45:a1:0a:60:9c:52:f7: 29:29:9f:63:f3:f9:b8:7f:c7:6d:2b:a0:14:79:6c: c1:f5:04:d0:d6:7b:0f:3d:bc:d4:de:c5:af:dc:6d: b3:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:65:69:B7:A8:CD:CC:94:E8:E9:B0:51:FB:9B:B8:B1:44:F4:EC:A9 X509v3 Authority Key Identifier: keyid:36:11:B3:E6:DA:E8:E0:D1:B1:6D:5B:DA:FC:DA:3D:83:70:FF:3B:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/5/3611B3E6DAE8E0D1B16D5BDAFCDA3D8370FF3BF4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NhGz5tro4NGxbVva_No9g3D_O_Q.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/5/3611B3E6DAE8E0D1B16D5BDAFCDA3D8370FF3BF4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:e9:2d:fd:42:4e:2d:ff:4a:51:d9:0a:be:72:0b:04:58:bf: 80:be:96:d1:5d:73:95:5c:3b:31:fd:3a:10:65:e6:a6:01:bd: 40:d2:01:52:d0:ed:58:0d:32:c7:c5:92:1f:01:64:a8:03:5b: 9e:db:dd:ba:81:0d:09:37:ba:28:3f:4d:a2:bb:24:a4:95:57: 02:99:07:e6:c3:48:c0:ee:4b:0d:ea:da:c1:80:42:86:8e:66: e5:93:68:d0:c6:e9:32:87:f3:68:8a:11:50:6e:ef:87:71:a9: b0:c9:5b:d1:fe:77:2e:a9:53:32:e5:fd:b8:c4:10:20:a0:1f: 33:ef:4f:1f:2d:6b:0f:c8:7a:97:6c:ca:5f:31:10:e5:87:86: 1b:3f:5c:cd:b1:d4:61:4c:23:2a:22:44:30:ad:c9:0d:5d:68: 82:cd:0d:4f:d8:10:a3:c6:a7:1e:75:23:31:be:da:d0:07:37: 31:ff:6f:fb:c2:72:7f:78:d7:e0:f3:70:f8:0b:d2:02:89:ad: 80:4c:0c:af:4b:ec:0a:17:0e:b1:90:96:7e:6d:dc:27:95:9f: b0:31:70:33:18:f2:a6:3a:a2:31:f0:0a:60:67:80:2a:a0:89: b7:73:6e:6b:88:e4:ab:95:f0:15:d6:e0:de:c9:c0:29:e7:16: fc:5f:89:f9 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUVYndmgdwhLLeh0qIyZ8S4G98/AgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzYxMWIzZTZkYWU4ZTBkMWIxNmQ1YmRhZmNkYTNkODM3 MGZmM2JmNDAeFw0yNTEyMDYwNDUxMzRaFw0yNTEyMDcwNjAwMzRaMDMxMTAvBgNV BAMTKEY4NjU2OUI3QThDRENDOTRFOEU5QjA1MUZCOUJCOEIxNDRGNEVDQTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7sij0cChqxY+bTfAQHkLaoh2D HfyNFUkB2v+d/c+uiSBzWKoWINCf7nh9uknp4l4DEsx5zsSqeG8gmSzpS5l681tc RhDk7gakJ5FncK1CAZ5gDroaJlO2hDIhgAf2FRfkjPE1P8jHEK8Bvk6QX7LV5/0P FzP8n8mCQAvYQeKoY/MMNL0NuNq40jf0jcv1sz1JmZTNIYRPxe+EDf1cnGSpY5e+ 2iYTA0MKvsJsl2hYTxupkoWzp+u4t339EbScqH8zaINqSzPMawIYKNg57tzleu0N JPwhnsGTRaEKYJxS9ykpn2Pz+bh/x20roBR5bMH1BNDWew89vNTexa/cbbOVAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU+GVpt6jNzJTo6bBR+5u4sUT07KkwHwYDVR0j BBgwFoAUNhGz5tro4NGxbVva/No9g3D/O/QwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjZiZDkyZjEtNDE1Yi00NzY1LThhMTYtZGJmYzQ1OTNj MWE4LzUvMzYxMUIzRTZEQUU4RTBEMUIxNkQ1QkRBRkNEQTNEODM3MEZGM0JGNC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL05oR3o1dHJvNE5HeGJWdmFfTm85ZzNE X09fUS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82NmJkOTJmMS00 MTViLTQ3NjUtOGExNi1kYmZjNDU5M2MxYTgvNS8zNjExQjNFNkRBRThFMEQxQjE2 RDVCREFGQ0RBM0Q4MzcwRkYzQkY0Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgukt/UJOLf9KUdkKvnIL BFi/gL6W0V1zlVw7Mf06EGXmpgG9QNIBUtDtWA0yx8WSHwFkqANbntvduoENCTe6 KD9NorskpJVXApkH5sNIwO5LDerawYBCho5m5ZNo0MbpMofzaIoRUG7vh3GpsMlb 0f53LqlTMuX9uMQQIKAfM+9PHy1rD8h6l2zKXzEQ5YeGGz9czbHUYUwjKiJEMK3J DV1ogs0NT9gQo8anHnUjMb7a0Ac3Mf9v+8Jyf3jX4PNw+AvSAomtgEwMr0vsChcO sZCWfm3cJ5WfsDFwMxjypjqiMfAKYGeAKqCJt3Nua4jkq5XwFdbg3snAKecW/F+J +Q== -----END CERTIFICATE-----Generated at Sat Dec 6 06:58:59 2025 by rpki-client