This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/5/C284E54726A876081FA2857EF4AF5B1A78D096B4.mft File: C284E54726A876081FA2857EF4AF5B1A78D096B4.mft (raw, json) Hash identifier: G8BJYUZYQYED37hbQxWuAD+rT7aVSkuR2DgtVnyXGlw= Subject key identifier: 61:9E:58:CE:F7:0F:D1:FC:C6:F3:70:95:35:A7:1C:05:AC:37:DC:1C Authority key identifier: C2:84:E5:47:26:A8:76:08:1F:A2:85:7E:F4:AF:5B:1A:78:D0:96:B4 Certificate issuer: /CN=C284E54726A876081FA2857EF4AF5B1A78D096B4 Certificate serial: 57A7F2AB7F3D09A81832D57AACAD08568066EE3A Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/C284E54726A876081FA2857EF4AF5B1A78D096B4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/5/C284E54726A876081FA2857EF4AF5B1A78D096B4.mft Manifest number: D5 Signing time: Sat 06 Dec 2025 00:34:44 +0000 Manifest this update: Sat 06 Dec 2025 00:29:44 +0000 Manifest next update: Sun 07 Dec 2025 01:05:44 +0000 Files and hashes: 1: C284E54726A876081FA2857EF4AF5B1A78D096B4.crl (hash: xWgaogzcnIfuiIm6cNJseX9SWczE0kpBq6wW4O0ryiE=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/5/C284E54726A876081FA2857EF4AF5B1A78D096B4.crl rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/5/C284E54726A876081FA2857EF4AF5B1A78D096B4.mft rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/C284E54726A876081FA2857EF4AF5B1A78D096B4.cer rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:05:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:a7:f2:ab:7f:3d:09:a8:18:32:d5:7a:ac:ad:08:56:80:66:ee:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C284E54726A876081FA2857EF4AF5B1A78D096B4 Validity Not Before: Dec 6 00:29:44 2025 GMT Not After : Dec 7 01:05:44 2025 GMT Subject: CN=619E58CEF70FD1FCC6F3709535A71C05AC37DC1C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:50:04:9d:a3:21:e6:90:e6:76:fc:2e:b0:aa: 57:dd:c1:1e:06:f5:32:e5:4c:cc:ed:48:06:6d:06: e7:01:d0:bd:8f:9a:89:f7:bb:51:6e:7f:89:77:a8: b9:76:ac:3f:cc:13:85:bc:b8:de:7e:66:b0:d0:45: 43:62:9f:aa:36:9c:5a:1d:5c:9e:49:fe:4b:44:30: b3:e8:f4:45:f4:11:87:4d:c0:f7:13:a1:4f:79:5c: 15:3d:5a:73:02:bc:17:10:94:c1:9b:94:09:e6:ce: 6b:8c:45:cb:8c:ec:12:5a:a6:07:89:6b:69:15:0f: 20:42:fd:12:fc:79:03:3c:3d:40:d9:c4:cd:82:26: 97:12:ec:71:ca:20:81:a9:4f:65:b9:a9:17:d1:ca: 76:24:61:8e:16:67:2e:bb:4a:cf:77:76:3f:0e:78: d0:1e:fd:34:a2:7a:54:df:e9:aa:e7:52:ca:4a:7f: e5:ee:c0:03:1d:94:75:ce:fa:bc:0b:d3:14:be:ce: d3:48:5d:1b:a4:3d:75:97:92:95:4e:84:de:16:01: 07:46:35:6d:dd:d7:a6:7a:a5:0a:19:a8:88:f8:3b: 8c:dd:cb:a7:09:e9:4d:07:d4:26:ed:09:c9:12:36: 1c:de:f3:73:d4:41:0d:4f:4b:4d:bb:9a:c1:11:01: af:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:9E:58:CE:F7:0F:D1:FC:C6:F3:70:95:35:A7:1C:05:AC:37:DC:1C X509v3 Authority Key Identifier: keyid:C2:84:E5:47:26:A8:76:08:1F:A2:85:7E:F4:AF:5B:1A:78:D0:96:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/5/C284E54726A876081FA2857EF4AF5B1A78D096B4.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/C284E54726A876081FA2857EF4AF5B1A78D096B4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/5/C284E54726A876081FA2857EF4AF5B1A78D096B4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:51:6e:9f:16:56:29:3a:64:a3:17:bb:5b:cc:53:97:7c:ac: a8:6f:26:04:8c:91:25:5d:b2:17:c2:3d:6d:56:68:11:96:3b: d6:21:f7:b3:f8:64:43:5b:74:e4:13:62:84:16:aa:fc:16:d3: 20:92:32:67:1a:e3:6d:9c:f3:56:78:37:28:ee:71:a8:4b:e3: 2d:90:5c:75:be:d2:38:e4:5a:29:df:25:fb:3b:74:5e:46:6e: 7b:74:06:66:7d:b8:6c:92:83:7d:7e:5e:49:a7:99:da:60:35: 96:00:fc:7d:53:9e:35:69:10:3f:96:17:5b:1c:54:c3:0c:a0: 45:62:a6:49:d7:d5:ae:50:71:dd:52:50:11:05:67:fe:46:fd: 8e:c6:37:dc:47:80:ba:c1:eb:fb:25:cb:3e:32:60:62:60:41: c0:9d:11:cd:ab:bd:3f:be:37:11:00:a7:63:46:81:92:cc:07: 2c:73:08:7f:dd:53:af:29:3e:0e:2b:2f:36:32:50:b0:87:9b: 66:5a:e3:6e:c8:e5:a1:0f:e0:78:0f:74:3d:c6:ce:b6:d4:f0: 4a:aa:41:13:b3:9b:04:5c:22:42:4c:86:bb:23:1c:9f:8e:90: 38:41:b7:50:0e:5e:d4:2d:79:90:9b:de:f6:41:ab:81:32:61: c9:58:80:56 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUV6fyq389CagYMtV6rK0IVoBm7jowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzI4NEU1NDcyNkE4NzYwODFGQTI4NTdFRjRBRjVCMUE3 OEQwOTZCNDAeFw0yNTEyMDYwMDI5NDRaFw0yNTEyMDcwMTA1NDRaMDMxMTAvBgNV BAMTKDYxOUU1OENFRjcwRkQxRkNDNkYzNzA5NTM1QTcxQzA1QUMzN0RDMUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCNUASdoyHmkOZ2/C6wqlfdwR4G 9TLlTMztSAZtBucB0L2Pmon3u1Fuf4l3qLl2rD/ME4W8uN5+ZrDQRUNin6o2nFod XJ5J/ktEMLPo9EX0EYdNwPcToU95XBU9WnMCvBcQlMGblAnmzmuMRcuM7BJapgeJ a2kVDyBC/RL8eQM8PUDZxM2CJpcS7HHKIIGpT2W5qRfRynYkYY4WZy67Ss93dj8O eNAe/TSielTf6arnUspKf+XuwAMdlHXO+rwL0xS+ztNIXRukPXWXkpVOhN4WAQdG NW3d16Z6pQoZqIj4O4zdy6cJ6U0H1CbtCckSNhze83PUQQ1PS027msERAa9BAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUYZ5YzvcP0fzG83CVNaccBaw33BwwHwYDVR0j BBgwFoAUwoTlRyaodggfooV+9K9bGnjQlrQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNmZmN2E5ODktZWNkZi00M2Q2LTg2ZTEtZjZjMzkzNWI5 YjNkLzUvQzI4NEU1NDcyNkE4NzYwODFGQTI4NTdFRjRBRjVCMUE3OEQwOTZCNC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYTAwNGJhMS00MTliLTRk YjUtYmJkMy01Y2NhNjMzY2FlM2YvNC9DMjg0RTU0NzI2QTg3NjA4MUZBMjg1N0VG NEFGNUIxQTc4RDA5NkI0LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzZmZjdhOTg5LWVjZGYtNDNkNi04NmUxLWY2YzM5MzViOWIzZC81L0MyODRFNTQ3 MjZBODc2MDgxRkEyODU3RUY0QUY1QjFBNzhEMDk2QjQubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAyUW6f FlYpOmSjF7tbzFOXfKyobyYEjJElXbIXwj1tVmgRljvWIfez+GRDW3TkE2KEFqr8 FtMgkjJnGuNtnPNWeDco7nGoS+MtkFx1vtI45Fop3yX7O3ReRm57dAZmfbhskoN9 fl5Jp5naYDWWAPx9U541aRA/lhdbHFTDDKBFYqZJ19WuUHHdUlARBWf+Rv2Oxjfc R4C6wev7Jcs+MmBiYEHAnRHNq70/vjcRAKdjRoGSzAcscwh/3VOvKT4OKy82MlCw h5tmWuNuyOWhD+B4D3Q9xs621PBKqkETs5sEXCJCTIa7IxyfjpA4QbdQDl7ULXmQ m972QauBMmHJWIBW -----END CERTIFICATE-----Generated at Sat Dec 6 09:19:55 2025 by rpki-client