This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/0/CF277DDF4A74DE53E4483795713BFB135A1140DE.mft File: CF277DDF4A74DE53E4483795713BFB135A1140DE.mft (raw, json) Hash identifier: rW3EZt67DjVzq2+CAn6Y3i9+wFxcUIF1u11U8Ypz+DM= Subject key identifier: 12:D3:A5:3A:27:EE:31:41:3D:01:C8:E6:B1:C5:11:7A:5B:C1:4B:72 Authority key identifier: CF:27:7D:DF:4A:74:DE:53:E4:48:37:95:71:3B:FB:13:5A:11:40:DE Certificate issuer: /CN=cf277ddf4a74de53e4483795713bfb135a1140de Certificate serial: 55FD16B8D25147E6AA846671B962502090115694 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zyd930p03lPkSDeVcTv7E1oRQN4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/0/CF277DDF4A74DE53E4483795713BFB135A1140DE.mft Manifest number: 1B Signing time: Fri 05 Dec 2025 22:22:14 +0000 Manifest this update: Fri 05 Dec 2025 22:17:14 +0000 Manifest next update: Sat 06 Dec 2025 22:49:14 +0000 Files and hashes: 1: CF277DDF4A74DE53E4483795713BFB135A1140DE.crl (hash: 7Hb6MviJfx12p7zwV6u5NlvNd94ydQURgsMVjnVwcdo=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/0/CF277DDF4A74DE53E4483795713BFB135A1140DE.crl rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/0/CF277DDF4A74DE53E4483795713BFB135A1140DE.mft rsync://rpki.ripe.net/repository/DEFAULT/zyd930p03lPkSDeVcTv7E1oRQN4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:49:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:fd:16:b8:d2:51:47:e6:aa:84:66:71:b9:62:50:20:90:11:56:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf277ddf4a74de53e4483795713bfb135a1140de Validity Not Before: Dec 5 22:17:14 2025 GMT Not After : Dec 6 22:49:14 2025 GMT Subject: CN=12D3A53A27EE31413D01C8E6B1C5117A5BC14B72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:d9:86:df:e2:be:8a:e9:09:2b:31:7c:f4:eb: f9:46:54:0a:69:dd:46:91:2e:32:3b:64:33:cd:41: d3:78:a5:1d:62:51:62:5a:1d:6c:84:db:a4:56:9a: 50:6d:0a:41:bf:9b:18:f5:82:90:ba:35:24:a4:86: e4:d5:de:1e:30:89:fe:23:39:d9:f3:13:9c:98:9f: 27:04:42:99:e6:65:a0:95:aa:08:5a:e6:81:d4:a1: 3e:4f:0c:a1:fe:9c:83:32:0b:18:e6:4b:2c:4a:2f: 77:fc:e5:d7:37:8d:0d:32:e6:51:f9:5a:60:ad:0b: f6:e2:8a:c8:99:98:6c:1b:81:e2:43:a1:9b:45:ae: a0:64:9f:6d:8b:e7:65:ea:d2:cc:d1:93:26:11:4e: 76:74:f2:ef:72:8d:d9:23:62:37:8b:c3:57:5a:1d: 88:04:52:87:75:d6:4f:a7:88:79:2c:37:c6:a9:43: 38:b6:05:84:08:db:89:dc:ad:5b:9e:5e:2e:1b:ce: 30:da:cb:61:26:31:19:b6:fe:03:a4:e3:0c:91:5f: bc:55:60:b5:98:c8:ef:ca:d4:21:78:e3:17:e4:69: 39:f4:25:c2:6a:59:2d:3c:23:47:24:d0:aa:86:2c: 1a:a2:0d:f9:6c:04:07:eb:57:54:d3:1e:a3:60:12: 32:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:D3:A5:3A:27:EE:31:41:3D:01:C8:E6:B1:C5:11:7A:5B:C1:4B:72 X509v3 Authority Key Identifier: keyid:CF:27:7D:DF:4A:74:DE:53:E4:48:37:95:71:3B:FB:13:5A:11:40:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/0/CF277DDF4A74DE53E4483795713BFB135A1140DE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zyd930p03lPkSDeVcTv7E1oRQN4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/0/CF277DDF4A74DE53E4483795713BFB135A1140DE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:04:00:f2:57:09:48:14:ff:30:8e:dc:df:e7:27:64:a4:b4: 27:f9:74:cd:7b:19:2a:4c:c3:50:d4:e9:a1:97:17:4f:ff:b0: b8:eb:60:e0:74:82:b9:d4:6d:17:5e:5b:9f:8a:bd:42:52:ed: 57:ea:a1:29:c9:b7:8f:1e:be:a6:fe:bc:55:73:4e:85:6b:f9: 89:ee:98:af:50:5c:bb:c6:1d:30:36:68:12:8c:f3:31:40:ba: 8c:3a:95:7c:49:e2:88:69:77:80:e5:c0:94:e9:8e:d7:9b:8a: 58:58:4b:05:0c:5b:e5:e0:4c:9d:dc:4a:a9:4b:fb:c5:49:db: 9d:e9:0f:8c:c3:38:b7:b5:33:2e:7f:89:f4:ce:0d:3c:25:c3: b8:8a:75:39:54:54:b4:fe:d5:c7:c0:ce:eb:d2:3f:c8:65:c9: a5:a8:81:ff:3e:3a:4f:cd:62:73:e0:07:a4:eb:d9:a6:5d:a4: a0:99:9b:78:0d:3c:39:91:53:6e:69:d3:1a:eb:17:ac:31:79: f4:63:cd:f0:26:5f:32:58:ad:a2:d7:1f:5f:65:aa:6b:53:4e: 56:c9:09:a3:ae:3b:d9:6d:1f:1b:fd:80:49:52:62:35:d3:51: 47:84:7c:9a:04:f5:ef:f1:86:92:5f:e4:72:b7:c8:8a:3d:05: 1f:3c:22:a0 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUVf0WuNJRR+aqhGZxuWJQIJARVpQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoY2YyNzdkZGY0YTc0ZGU1M2U0NDgzNzk1NzEzYmZiMTM1 YTExNDBkZTAeFw0yNTEyMDUyMjE3MTRaFw0yNTEyMDYyMjQ5MTRaMDMxMTAvBgNV BAMTKDEyRDNBNTNBMjdFRTMxNDEzRDAxQzhFNkIxQzUxMTdBNUJDMTRCNzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr2Ybf4r6K6QkrMXz06/lGVApp 3UaRLjI7ZDPNQdN4pR1iUWJaHWyE26RWmlBtCkG/mxj1gpC6NSSkhuTV3h4wif4j OdnzE5yYnycEQpnmZaCVqgha5oHUoT5PDKH+nIMyCxjmSyxKL3f85dc3jQ0y5lH5 WmCtC/biisiZmGwbgeJDoZtFrqBkn22L52Xq0szRkyYRTnZ08u9yjdkjYjeLw1da HYgEUod11k+niHksN8apQzi2BYQI24ncrVueXi4bzjDay2EmMRm2/gOk4wyRX7xV YLWYyO/K1CF44xfkaTn0JcJqWS08I0ck0KqGLBqiDflsBAfrV1TTHqNgEjLVAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUEtOlOifuMUE9AcjmscURelvBS3IwHwYDVR0j BBgwFoAUzyd930p03lPkSDeVcTv7E1oRQN4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzhlNjE2MTEtM2IwYi00MWNlLTg4Y2QtZTU2MDM1M2Y2 OTQyLzAvQ0YyNzdEREY0QTc0REU1M0U0NDgzNzk1NzEzQkZCMTM1QTExNDBERS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3p5ZDkzMHAwM2xQa1NEZVZjVHY3RTFv UlFONC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS83OGU2MTYxMS0z YjBiLTQxY2UtODhjZC1lNTYwMzUzZjY5NDIvMC9DRjI3N0RERjRBNzRERTUzRTQ0 ODM3OTU3MTNCRkIxMzVBMTE0MERFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsQQA8lcJSBT/MI7c3+cn ZKS0J/l0zXsZKkzDUNTpoZcXT/+wuOtg4HSCudRtF15bn4q9QlLtV+qhKcm3jx6+ pv68VXNOhWv5ie6Yr1Bcu8YdMDZoEozzMUC6jDqVfEniiGl3gOXAlOmO15uKWFhL BQxb5eBMndxKqUv7xUnbnekPjMM4t7UzLn+J9M4NPCXDuIp1OVRUtP7Vx8DO69I/ yGXJpaiB/z46T81ic+AHpOvZpl2koJmbeA08OZFTbmnTGusXrDF59GPN8CZfMlit otcfX2Wqa1NOVskJo6472W0fG/2ASVJiNdNRR4R8mgT17/GGkl/kcrfIij0FHzwi oA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:41:43 2025 by rpki-client