This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/0/193B972646653C886D4001CDAD73EC4E473DA173.mft File: 193B972646653C886D4001CDAD73EC4E473DA173.mft (raw, json) Hash identifier: k7O2oYUJWqlmI9uD6m4fysUG0+a4ulVspmJy9oIckOk= Subject key identifier: ED:2D:23:9C:08:4A:42:1F:82:2B:D7:30:31:03:2F:D7:37:03:66:FB Authority key identifier: 19:3B:97:26:46:65:3C:88:6D:40:01:CD:AD:73:EC:4E:47:3D:A1:73 Certificate issuer: /CN=193b972646653c886d4001cdad73ec4e473da173 Certificate serial: 149D2634C4DC6A5F49CCCAF986B1B754F987F674 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GTuXJkZlPIhtQAHNrXPsTkc9oXM.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/0/193B972646653C886D4001CDAD73EC4E473DA173.mft Manifest number: 028D Signing time: Sat 06 Dec 2025 00:45:32 +0000 Manifest this update: Sat 06 Dec 2025 00:40:32 +0000 Manifest next update: Sun 07 Dec 2025 02:33:32 +0000 Files and hashes: 1: 193B972646653C886D4001CDAD73EC4E473DA173.crl (hash: Fcu7vMDLxIW9DqZJlD30AoFNpEQSzs77G1XtN3566pY=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/0/193B972646653C886D4001CDAD73EC4E473DA173.crl rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/0/193B972646653C886D4001CDAD73EC4E473DA173.mft rsync://rpki.ripe.net/repository/DEFAULT/GTuXJkZlPIhtQAHNrXPsTkc9oXM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:33:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:9d:26:34:c4:dc:6a:5f:49:cc:ca:f9:86:b1:b7:54:f9:87:f6:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=193b972646653c886d4001cdad73ec4e473da173 Validity Not Before: Dec 6 00:40:32 2025 GMT Not After : Dec 7 02:33:32 2025 GMT Subject: CN=ED2D239C084A421F822BD73031032FD7370366FB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:73:a6:94:39:bc:c9:31:17:a0:01:59:c8:12: cd:c3:0c:25:2b:f8:c7:76:8b:19:4b:bd:d8:4c:4f: a0:1f:0c:42:27:51:dd:f9:33:47:70:4f:93:a8:3f: 11:da:7f:31:38:93:f1:4c:69:3d:ca:7b:82:09:7d: 43:58:48:84:a4:53:1e:a4:b1:68:8f:b1:42:43:5a: f9:84:b7:4f:d9:42:5e:b1:57:9e:b5:b6:80:11:36: 8a:c9:50:74:b5:91:74:d8:d3:8c:9e:0e:47:66:36: 33:b2:29:89:01:d3:25:b1:79:4e:a7:e2:be:91:07: f3:39:27:34:19:bd:fc:9a:4e:72:15:c5:bc:d9:63: 59:aa:4e:55:f2:4e:48:88:27:2f:d0:25:64:48:bd: 59:03:dc:61:cb:41:9f:8a:45:f0:d2:7d:11:4d:8a: 1f:c5:df:4f:6f:76:46:04:67:7d:62:ea:b8:93:68: 18:35:a3:e0:43:c7:74:35:df:52:14:a3:ba:36:74: d6:7e:e5:a9:84:ed:55:39:1f:0a:eb:5e:77:bf:9d: 2a:9e:f2:71:50:e9:62:31:57:2c:ef:c3:b3:01:d7: 99:87:f4:7e:a0:4a:ec:4b:62:f7:22:fe:34:d8:4f: 46:55:b0:dc:81:31:9a:40:f4:55:58:2b:c8:73:7f: 8f:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:2D:23:9C:08:4A:42:1F:82:2B:D7:30:31:03:2F:D7:37:03:66:FB X509v3 Authority Key Identifier: keyid:19:3B:97:26:46:65:3C:88:6D:40:01:CD:AD:73:EC:4E:47:3D:A1:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/0/193B972646653C886D4001CDAD73EC4E473DA173.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GTuXJkZlPIhtQAHNrXPsTkc9oXM.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/0/193B972646653C886D4001CDAD73EC4E473DA173.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:64:d2:8f:1c:68:c5:7b:84:1c:4b:07:01:b9:65:56:03:6d: f9:69:f2:e0:c4:31:2d:ce:a5:b8:1a:c0:9e:06:9c:c9:bd:9f: a0:a9:0f:d1:85:89:e1:a6:1e:58:85:d8:47:fa:2a:fa:22:c3: 24:05:c7:6f:ab:3b:62:30:3e:65:09:92:0d:8f:ad:b5:3e:c0: c3:69:f7:12:c9:c1:8d:ae:e9:bc:2f:72:bd:b5:56:74:44:d5: 2b:d5:27:7d:90:07:a6:21:3b:f5:52:36:0e:49:ba:d5:7a:02: dc:aa:9c:28:50:07:af:b3:4b:a9:01:af:bf:7a:a5:8e:57:08: 3d:ec:24:4a:41:1e:00:e8:61:1e:83:69:3c:fc:26:fe:b5:3e: 1a:0c:7c:65:c5:15:73:07:e8:b1:6d:8e:e7:44:ec:35:ed:0f: ea:00:91:e9:93:1a:71:b6:2b:c8:43:a9:84:88:dd:ef:d9:23: bb:4d:a4:a7:b6:56:28:44:e1:b8:2a:26:3f:2a:ec:29:2a:40: 79:f1:13:1a:86:8a:00:fc:a5:10:2d:d5:4b:fc:eb:55:c6:7b: c1:af:0e:96:96:0f:bf:26:61:35:19:1a:cc:1f:bf:ad:42:88: 6e:c3:10:49:47:e7:8b:d5:87:b1:39:0a:8f:a4:bd:52:8c:a3: 27:7d:49:85 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUFJ0mNMTcal9JzMr5hrG3VPmH9nQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTkzYjk3MjY0NjY1M2M4ODZkNDAwMWNkYWQ3M2VjNGU0 NzNkYTE3MzAeFw0yNTEyMDYwMDQwMzJaFw0yNTEyMDcwMjMzMzJaMDMxMTAvBgNV BAMTKEVEMkQyMzlDMDg0QTQyMUY4MjJCRDczMDMxMDMyRkQ3MzcwMzY2RkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0c6aUObzJMRegAVnIEs3DDCUr +Md2ixlLvdhMT6AfDEInUd35M0dwT5OoPxHafzE4k/FMaT3Ke4IJfUNYSISkUx6k sWiPsUJDWvmEt0/ZQl6xV561toARNorJUHS1kXTY04yeDkdmNjOyKYkB0yWxeU6n 4r6RB/M5JzQZvfyaTnIVxbzZY1mqTlXyTkiIJy/QJWRIvVkD3GHLQZ+KRfDSfRFN ih/F309vdkYEZ31i6riTaBg1o+BDx3Q131IUo7o2dNZ+5amE7VU5HwrrXne/nSqe 8nFQ6WIxVyzvw7MB15mH9H6gSuxLYvci/jTYT0ZVsNyBMZpA9FVYK8hzf49VAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU7S0jnAhKQh+CK9cwMQMv1zcDZvswHwYDVR0j BBgwFoAUGTuXJkZlPIhtQAHNrXPsTkc9oXMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzJjNDA1ZjEtYzMyZC00N2NlLTg5NDMtMDc1MmVkMTNk OGVmLzAvMTkzQjk3MjY0NjY1M0M4ODZENDAwMUNEQUQ3M0VDNEU0NzNEQTE3My5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0dUdVhKa1psUElodFFBSE5yWFBzVGtj OW9YTS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS83MmM0MDVmMS1j MzJkLTQ3Y2UtODk0My0wNzUyZWQxM2Q4ZWYvMC8xOTNCOTcyNjQ2NjUzQzg4NkQ0 MDAxQ0RBRDczRUM0RTQ3M0RBMTczLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd2TSjxxoxXuEHEsHAbll VgNt+Wny4MQxLc6luBrAngacyb2foKkP0YWJ4aYeWIXYR/oq+iLDJAXHb6s7YjA+ ZQmSDY+ttT7Aw2n3EsnBja7pvC9yvbVWdETVK9UnfZAHpiE79VI2Dkm61XoC3Kqc KFAHr7NLqQGvv3qljlcIPewkSkEeAOhhHoNpPPwm/rU+Ggx8ZcUVcwfosW2O50Ts Ne0P6gCR6ZMacbYryEOphIjd79kju02kp7ZWKEThuComPyrsKSpAefETGoaKAPyl EC3VS/zrVcZ7wa8OlpYPvyZhNRkazB+/rUKIbsMQSUfni9WHsTkKj6S9UoyjJ31J hQ== -----END CERTIFICATE-----Generated at Sat Dec 6 12:11:14 2025 by rpki-client