This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/9C9C8D5185D8125C9D65490A0EE0601C997FDAA5.mft File: 9C9C8D5185D8125C9D65490A0EE0601C997FDAA5.mft (raw, json) Hash identifier: Ri/RFxWEEtbFW8162NqvOgqmBjFdh8oqyFoq1f7/Xcg= Subject key identifier: 64:34:5B:3F:47:A8:3A:F4:A7:41:36:F8:38:06:48:A8:FE:F4:89:A6 Authority key identifier: 9C:9C:8D:51:85:D8:12:5C:9D:65:49:0A:0E:E0:60:1C:99:7F:DA:A5 Certificate issuer: /CN=9c9c8d5185d8125c9d65490a0ee0601c997fdaa5 Certificate serial: 4D8A99B786E374986187C82A74866709D017B0DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nJyNUYXYElydZUkKDuBgHJl_2qU.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/9C9C8D5185D8125C9D65490A0EE0601C997FDAA5.mft Manifest number: 2A Signing time: Fri 05 Dec 2025 12:41:38 +0000 Manifest this update: Fri 05 Dec 2025 12:36:38 +0000 Manifest next update: Sat 06 Dec 2025 15:50:38 +0000 Files and hashes: 1: 9C9C8D5185D8125C9D65490A0EE0601C997FDAA5.crl (hash: hh5RowCk41beQAo1dH+Ei0mNQqEpL0w93G/9kIEY8kw=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/9C9C8D5185D8125C9D65490A0EE0601C997FDAA5.crl rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/9C9C8D5185D8125C9D65490A0EE0601C997FDAA5.mft rsync://rpki.ripe.net/repository/DEFAULT/nJyNUYXYElydZUkKDuBgHJl_2qU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 15:50:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:8a:99:b7:86:e3:74:98:61:87:c8:2a:74:86:67:09:d0:17:b0:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c9c8d5185d8125c9d65490a0ee0601c997fdaa5 Validity Not Before: Dec 5 12:36:38 2025 GMT Not After : Dec 6 15:50:38 2025 GMT Subject: CN=64345B3F47A83AF4A74136F8380648A8FEF489A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:56:68:4b:e2:d8:0f:22:13:29:17:83:30:7d: d0:dc:e2:17:3f:53:71:56:c3:13:ec:c1:df:6f:a3: 21:e4:77:59:5e:02:be:8c:d3:9c:d1:98:98:23:d4: 7a:9e:6d:7a:2f:22:3c:ad:0e:85:c1:16:8e:75:ba: af:2d:37:4d:7e:66:f5:71:6d:d5:48:52:b2:20:23: f2:0c:94:26:27:e6:e2:c7:e5:71:a2:af:a5:c8:e2: de:e8:e5:03:a0:28:c8:cd:7d:a8:d9:b8:15:8c:e5: 5d:e6:b8:6c:4f:59:8c:81:8c:39:ee:19:37:ac:92: fc:25:45:37:bb:97:c2:4b:70:a7:6e:58:2a:1e:cb: 02:a1:a5:91:27:7f:f8:35:20:33:b6:2d:98:f5:8c: ce:a9:b0:3a:44:b7:9a:94:c0:9f:d9:a8:a7:ab:02: 4d:84:c3:a8:fb:61:6a:31:37:9a:5a:15:ee:33:d8: 76:ec:7d:c8:9b:ce:dd:d3:72:00:8a:6f:66:e4:b2: fb:b6:a6:45:00:1e:fd:cb:17:15:44:cf:6b:2f:86: 98:06:e0:68:fa:59:bf:7b:ae:94:a2:e0:72:0e:14: c4:f7:ce:e5:19:8a:28:7b:dd:2a:a2:1f:20:6b:3a: b5:40:31:bf:66:bb:08:4f:d5:24:ce:35:b0:50:a6: c5:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:34:5B:3F:47:A8:3A:F4:A7:41:36:F8:38:06:48:A8:FE:F4:89:A6 X509v3 Authority Key Identifier: keyid:9C:9C:8D:51:85:D8:12:5C:9D:65:49:0A:0E:E0:60:1C:99:7F:DA:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/9C9C8D5185D8125C9D65490A0EE0601C997FDAA5.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nJyNUYXYElydZUkKDuBgHJl_2qU.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/9C9C8D5185D8125C9D65490A0EE0601C997FDAA5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:83:98:84:61:d4:ea:a8:d2:0b:d9:bd:ce:f6:fb:f9:b1:18: 27:bc:51:ff:87:b6:da:b0:33:d5:6b:0a:ff:ec:11:78:8d:bf: 78:e7:0e:4a:31:af:ab:af:95:a9:44:3a:bb:37:e6:6b:8d:8c: 33:61:37:18:f9:58:01:6c:48:4d:b5:77:33:b8:c0:d7:20:7b: fd:c5:e5:0d:2a:0d:7f:95:42:f5:e8:c9:3e:01:6a:7b:4e:0e: 50:c3:15:19:cf:8d:90:ac:aa:61:6a:bf:0a:3e:dc:b0:59:98: 2a:07:18:26:08:48:5f:23:bb:e3:07:03:52:bc:32:c1:2b:6a: ff:53:8f:a8:27:51:33:46:c8:a4:19:5a:fb:a3:48:e5:f9:e4: b8:f1:88:bd:e5:03:b5:26:a1:97:87:f1:fc:93:2e:28:ff:89: 8b:f8:69:f3:ce:24:be:51:54:15:38:b2:3d:18:ee:b9:47:81: b3:7a:64:73:82:c7:f6:fd:85:3f:bf:66:40:85:dd:c5:f2:8c: 9f:69:8b:2a:8a:02:58:b0:54:82:4f:16:aa:c6:7b:6f:e7:13: 29:b7:57:eb:31:a7:41:fd:58:e4:30:c3:c3:fe:20:84:7f:d2: 5e:33:c4:52:4c:59:82:d0:01:4d:6f:1e:ca:73:2c:18:6a:6a: 1c:e3:6d:2d -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUTYqZt4bjdJhhh8gqdIZnCdAXsNswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOWM5YzhkNTE4NWQ4MTI1YzlkNjU0OTBhMGVlMDYwMWM5 OTdmZGFhNTAeFw0yNTEyMDUxMjM2MzhaFw0yNTEyMDYxNTUwMzhaMDMxMTAvBgNV BAMTKDY0MzQ1QjNGNDdBODNBRjRBNzQxMzZGODM4MDY0OEE4RkVGNDg5QTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFVmhL4tgPIhMpF4MwfdDc4hc/ U3FWwxPswd9voyHkd1leAr6M05zRmJgj1HqebXovIjytDoXBFo51uq8tN01+ZvVx bdVIUrIgI/IMlCYn5uLH5XGir6XI4t7o5QOgKMjNfajZuBWM5V3muGxPWYyBjDnu GTeskvwlRTe7l8JLcKduWCoeywKhpZEnf/g1IDO2LZj1jM6psDpEt5qUwJ/ZqKer Ak2Ew6j7YWoxN5paFe4z2Hbsfcibzt3TcgCKb2bksvu2pkUAHv3LFxVEz2svhpgG 4Gj6Wb97rpSi4HIOFMT3zuUZiih73SqiHyBrOrVAMb9muwhP1STONbBQpsVrAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUZDRbP0eoOvSnQTb4OAZIqP70iaYwHwYDVR0j BBgwFoAUnJyNUYXYElydZUkKDuBgHJl/2qUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjhhYmFiYmItZjA0OC00ZGUxLTkyMDYtOGQ0MGYwNzE4 MDhiLzAvOUM5QzhENTE4NUQ4MTI1QzlENjU0OTBBMEVFMDYwMUM5OTdGREFBNS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL25KeU5VWVhZRWx5ZFpVa0tEdUJnSEps XzJxVS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82OGFiYWJiYi1m MDQ4LTRkZTEtOTIwNi04ZDQwZjA3MTgwOGIvMC85QzlDOEQ1MTg1RDgxMjVDOUQ2 NTQ5MEEwRUUwNjAxQzk5N0ZEQUE1Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKYOYhGHU6qjSC9m9zvb7 +bEYJ7xR/4e22rAz1WsK/+wReI2/eOcOSjGvq6+VqUQ6uzfma42MM2E3GPlYAWxI TbV3M7jA1yB7/cXlDSoNf5VC9ejJPgFqe04OUMMVGc+NkKyqYWq/Cj7csFmYKgcY JghIXyO74wcDUrwywStq/1OPqCdRM0bIpBla+6NI5fnkuPGIveUDtSahl4fx/JMu KP+Ji/hp884kvlFUFTiyPRjuuUeBs3pkc4LH9v2FP79mQIXdxfKMn2mLKooCWLBU gk8WqsZ7b+cTKbdX6zGnQf1Y5DDDw/4ghH/SXjPEUkxZgtABTW8eynMsGGpqHONt LQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:02:37 2025 by rpki-client