This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513.mft File: 2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513.mft (raw, json) Hash identifier: ZHY6JSa6HDIf6rVDcVE4R6QYz69A+++l6RwSf21pD7E= Subject key identifier: A4:4B:02:CD:4A:D5:D1:F8:7A:2C:BB:81:FB:13:48:BA:41:6D:86:D1 Authority key identifier: 2D:6D:8B:17:B6:3C:09:8C:A2:2D:8B:13:EA:1E:8D:DC:43:AA:F5:13 Certificate issuer: /CN=2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513 Certificate serial: 1DC0F56455E272A3EF78511C84588484C716A70A Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513.mft Manifest number: 2C Signing time: Sat 06 Dec 2025 06:46:10 +0000 Manifest this update: Sat 06 Dec 2025 06:41:10 +0000 Manifest next update: Sun 07 Dec 2025 10:16:10 +0000 Files and hashes: 1: 2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513.crl (hash: y4jm8ZRjywC56KdJm/qR8pPnatt07eXjnSrXHh9FDBQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513.crl rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513.mft rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513.cer rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:c0:f5:64:55:e2:72:a3:ef:78:51:1c:84:58:84:84:c7:16:a7:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513 Validity Not Before: Dec 6 06:41:10 2025 GMT Not After : Dec 7 10:16:10 2025 GMT Subject: CN=A44B02CD4AD5D1F87A2CBB81FB1348BA416D86D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:6e:aa:a1:47:cf:ba:6b:c9:74:be:db:00:9e: f2:3e:d6:dd:23:8f:a1:75:fd:b6:c8:fd:21:99:33: 60:59:be:23:88:b5:3f:f8:06:bd:0a:11:6c:f8:04: de:46:72:47:0e:5e:8b:d8:12:4a:7d:39:a4:1d:e2: 27:7b:77:49:fb:77:7d:7b:eb:be:39:13:c2:5b:fc: ab:5c:86:fa:54:03:eb:f5:59:2a:17:03:15:6a:83: fb:dc:8b:b2:82:9a:90:28:99:91:67:ee:d8:e6:db: 88:ca:47:bd:02:65:7a:31:87:e3:bd:89:2d:c2:5c: 5b:df:02:b5:b0:2b:59:b7:44:5f:90:2e:94:e7:03: c4:2b:e7:39:b4:20:00:b9:a7:22:d5:01:72:22:26: 91:9a:23:4e:95:9b:d6:fc:42:eb:f6:a9:20:fa:d6: cc:9e:53:ef:56:96:18:20:85:cc:87:db:73:c8:f4: 61:d8:87:27:d2:23:5f:3a:d5:07:94:7e:7c:bf:56: c0:45:d4:2a:72:af:0e:21:f5:53:d1:c0:9b:a8:7f: df:40:e7:76:7a:55:2a:8b:6e:e3:86:54:39:7f:bf: 68:3d:d6:81:22:70:b6:67:1e:6f:2d:14:c4:cf:97: 58:49:18:84:03:84:22:2c:78:61:0d:d6:ae:13:52: d6:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:4B:02:CD:4A:D5:D1:F8:7A:2C:BB:81:FB:13:48:BA:41:6D:86:D1 X509v3 Authority Key Identifier: keyid:2D:6D:8B:17:B6:3C:09:8C:A2:2D:8B:13:EA:1E:8D:DC:43:AA:F5:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:02:4a:ef:50:2f:63:b2:9f:da:f2:86:84:48:5c:5f:4d:15: 79:68:17:89:16:88:42:f3:76:33:43:a2:6e:09:4b:2d:07:71: 12:b1:b2:32:68:86:59:b8:9d:d0:7f:46:b3:cd:a7:89:20:48: 50:68:44:cc:cf:1a:f8:9b:8d:a7:19:d1:e9:1c:57:be:f9:34: da:72:55:e5:be:b2:fc:30:2c:6f:e4:1e:1f:78:7e:2d:50:2c: a9:e5:76:aa:72:56:3d:22:f4:92:32:91:65:0f:93:4b:25:47: 3c:1c:4d:b4:e5:c9:88:93:1f:0a:8b:8d:e7:fd:2a:ff:6b:c0: 28:19:f1:36:11:73:68:a1:56:47:25:80:6c:e7:da:c4:27:dc: 79:a5:00:25:0a:6a:67:92:26:05:13:e7:4b:ce:e4:8d:cd:cf: 5a:c6:46:79:65:ea:87:8c:0a:86:c6:53:0c:db:b5:63:de:65: eb:0f:7f:e7:96:5f:e7:ca:5b:ee:f9:50:66:41:ec:a1:a3:45: d1:5b:de:dc:07:73:ae:2c:81:23:0d:03:a6:37:2e:5c:d3:ca: 9b:9b:75:9d:0e:3e:f5:c0:02:c1:a9:8e:7e:fe:c8:69:57:df: 26:5f:15:93:7f:11:0c:33:ad:06:2c:29:ce:3b:26:78:81:96: e4:db:66:0b -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUHcD1ZFXicqPveFEchFiEhMcWpwowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQ2RDhCMTdCNjNDMDk4Q0EyMkQ4QjEzRUExRThEREM0 M0FBRjUxMzAeFw0yNTEyMDYwNjQxMTBaFw0yNTEyMDcxMDE2MTBaMDMxMTAvBgNV BAMTKEE0NEIwMkNENEFENUQxRjg3QTJDQkI4MUZCMTM0OEJBNDE2RDg2RDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHbqqhR8+6a8l0vtsAnvI+1t0j j6F1/bbI/SGZM2BZviOItT/4Br0KEWz4BN5GckcOXovYEkp9OaQd4id7d0n7d317 6745E8Jb/KtchvpUA+v1WSoXAxVqg/vci7KCmpAomZFn7tjm24jKR70CZXoxh+O9 iS3CXFvfArWwK1m3RF+QLpTnA8Qr5zm0IAC5pyLVAXIiJpGaI06Vm9b8Quv2qSD6 1syeU+9WlhgghcyH23PI9GHYhyfSI1861QeUfny/VsBF1Cpyrw4h9VPRwJuof99A 53Z6VSqLbuOGVDl/v2g91oEicLZnHm8tFMTPl1hJGIQDhCIseGEN1q4TUtYnAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUpEsCzUrV0fh6LLuB+xNIukFthtEwHwYDVR0j BBgwFoAULW2LF7Y8CYyiLYsT6h6N3EOq9RMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjhhYmFiYmItZjA0OC00ZGUxLTkyMDYtOGQ0MGYwNzE4 MDhiLzYvMkQ2RDhCMTdCNjNDMDk4Q0EyMkQ4QjEzRUExRThEREM0M0FBRjUxMy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yYWY3M2E5Yy0yMDU4LTQz YmItOWFjNi01YWI0MmRmYmY0MDkvNC8yRDZEOEIxN0I2M0MwOThDQTIyRDhCMTNF QTFFOEREQzQzQUFGNTEzLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzY4YWJhYmJiLWYwNDgtNGRlMS05MjA2LThkNDBmMDcxODA4Yi82LzJENkQ4QjE3 QjYzQzA5OENBMjJEOEIxM0VBMUU4RERDNDNBQUY1MTMubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCsAkrv UC9jsp/a8oaESFxfTRV5aBeJFohC83YzQ6JuCUstB3ESsbIyaIZZuJ3Qf0azzaeJ IEhQaETMzxr4m42nGdHpHFe++TTaclXlvrL8MCxv5B4feH4tUCyp5XaqclY9IvSS MpFlD5NLJUc8HE205cmIkx8Ki43n/Sr/a8AoGfE2EXNooVZHJYBs59rEJ9x5pQAl CmpnkiYFE+dLzuSNzc9axkZ5ZeqHjAqGxlMM27Vj3mXrD3/nll/nylvu+VBmQeyh o0XRW97cB3OuLIEjDQOmNy5c08qbm3WdDj71wALBqY5+/shpV98mXxWTfxEMM60G LCnOOyZ4gZbk22YL -----END CERTIFICATE-----Generated at Sat Dec 6 12:27:30 2025 by rpki-client