This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/2/ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.mft File: ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.mft (raw, json) Hash identifier: R+nxAw+8L9Qszk4xcY9USdRMiC7+nIrG22h6LHFq+tc= Subject key identifier: D6:4E:29:80:B6:62:1D:1B:44:1B:15:D5:5B:BC:46:50:E8:BC:C6:CC Authority key identifier: AD:FF:D4:77:85:7D:1E:9B:E9:5B:82:71:7A:42:7F:35:AF:A9:A7:D6 Certificate issuer: /CN=adffd477857d1e9be95b82717a427f35afa9a7d6 Certificate serial: 1E389350863C83895E15C4B7F8700090EAD5B0FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rf_Ud4V9HpvpW4JxekJ_Na-pp9Y.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/2/ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.mft Manifest number: 0282 Signing time: Sat 20 Dec 2025 23:08:15 +0000 Manifest this update: Sat 20 Dec 2025 23:03:15 +0000 Manifest next update: Tue 23 Dec 2025 02:27:15 +0000 Files and hashes: 1: ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.crl (hash: iTL8gAXEx6vqsDAo3hJlCD0CtK+FIl4sDQRBoiJz9Yc=) 2: AS44355.asa (hash: noT3NQk7rtD6jNk1GY90L8a80oYtiLLuAlQV7OyslJk=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/2/ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.crl rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/2/ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.mft rsync://rpki.ripe.net/repository/DEFAULT/rf_Ud4V9HpvpW4JxekJ_Na-pp9Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:38:93:50:86:3c:83:89:5e:15:c4:b7:f8:70:00:90:ea:d5:b0:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=adffd477857d1e9be95b82717a427f35afa9a7d6 Validity Not Before: Dec 20 23:03:15 2025 GMT Not After : Dec 23 02:27:15 2025 GMT Subject: CN=D64E2980B6621D1B441B15D55BBC4650E8BCC6CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:e7:7d:4b:11:b9:9b:db:00:89:28:1c:20:2c: d3:3f:49:ba:6f:6b:b6:b1:c0:4c:48:7f:62:06:a9: 9f:36:c4:d6:03:4d:03:4c:ed:dc:47:7e:a9:45:8b: 01:97:89:39:c9:bd:79:36:8f:58:b9:dc:ca:1f:98: 5c:04:37:ed:5f:15:ec:9f:7e:aa:1e:61:24:ab:36: 8f:e9:9e:1d:64:68:98:11:d0:0f:3c:d9:13:26:39: 0c:35:d8:b7:36:53:ba:89:9c:24:05:ff:cf:ec:2d: 89:8e:5c:5c:de:c6:fe:c6:10:ca:da:59:b4:eb:e1: e2:28:10:2a:3c:1f:4b:58:15:b2:53:94:ed:a9:33: ba:0e:c0:47:bc:aa:b6:d8:c1:58:78:09:b9:a5:e4: 32:70:cb:7b:7e:e8:45:e9:34:d6:39:01:ad:89:47: 91:8b:02:52:b6:1f:b2:a6:ed:86:7f:1d:18:1c:de: e7:f3:c7:d7:d8:21:3b:d4:76:7b:fb:09:dd:1d:b2: 4b:fe:fd:99:31:d6:45:ca:fa:26:e9:25:4f:ec:2c: 7f:07:e4:5f:f9:99:27:0e:07:7e:00:d7:13:5d:75: 77:ed:6e:c9:67:70:12:9d:8a:ea:6b:7c:d9:7f:70: c0:27:9c:fd:b7:56:ee:e9:28:62:68:2f:55:a4:a9: c0:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:4E:29:80:B6:62:1D:1B:44:1B:15:D5:5B:BC:46:50:E8:BC:C6:CC X509v3 Authority Key Identifier: keyid:AD:FF:D4:77:85:7D:1E:9B:E9:5B:82:71:7A:42:7F:35:AF:A9:A7:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/2/ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rf_Ud4V9HpvpW4JxekJ_Na-pp9Y.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/2/ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:8d:94:31:93:12:13:7c:dc:59:16:a9:81:00:eb:b9:be:bb: 04:f6:a1:4d:cb:fc:60:56:39:c6:c2:07:22:22:c5:c4:de:18: 2e:49:99:57:57:a5:48:03:9c:1e:5f:4e:18:f4:83:c8:bb:8c: 7a:76:9d:e0:9f:5f:e9:5b:ff:1f:f7:8c:55:8d:4e:7f:0e:28: 15:e2:b9:c8:f4:53:ca:66:3f:ca:1c:26:a6:e7:a3:c9:82:ea: 30:c5:f8:ae:a0:3b:5d:bc:55:96:64:e2:7a:e7:cb:85:c4:fe: 31:85:79:a1:9a:73:66:d9:22:75:6e:04:1c:2f:72:38:05:a1: b9:6d:e2:a9:99:2d:98:50:72:08:24:a4:4a:01:d1:4a:ff:92: 67:be:57:c9:7e:75:3b:f7:02:d8:ba:05:48:c0:54:58:55:c9: 8c:c5:88:83:39:61:54:e2:5c:69:49:f5:4f:45:43:28:f7:d2: 6e:7c:d2:c5:0b:c7:a8:9a:fd:ae:c7:62:0f:8e:47:a8:5d:0a: bf:ca:71:21:51:9a:2b:3d:e5:50:c2:5f:48:80:46:c1:ab:cf: e7:67:9e:f1:99:6e:c0:19:68:f4:4f:35:9a:65:a2:a3:6d:a1: cb:42:0c:7f:d6:10:71:62:a9:5f:de:5f:83:2f:dd:41:30:22: 1f:a0:5e:7b -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUHjiTUIY8g4leFcS3+HAAkOrVsPswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWRmZmQ0Nzc4NTdkMWU5YmU5NWI4MjcxN2E0MjdmMzVh ZmE5YTdkNjAeFw0yNTEyMjAyMzAzMTVaFw0yNTEyMjMwMjI3MTVaMDMxMTAvBgNV BAMTKEQ2NEUyOTgwQjY2MjFEMUI0NDFCMTVENTVCQkM0NjUwRThCQ0M2Q0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv531LEbmb2wCJKBwgLNM/Sbpv a7axwExIf2IGqZ82xNYDTQNM7dxHfqlFiwGXiTnJvXk2j1i53MofmFwEN+1fFeyf fqoeYSSrNo/pnh1kaJgR0A882RMmOQw12Lc2U7qJnCQF/8/sLYmOXFzexv7GEMra WbTr4eIoECo8H0tYFbJTlO2pM7oOwEe8qrbYwVh4Cbml5DJwy3t+6EXpNNY5Aa2J R5GLAlK2H7Km7YZ/HRgc3ufzx9fYITvUdnv7Cd0dskv+/Zkx1kXK+ibpJU/sLH8H 5F/5mScOB34A1xNddXftbslncBKdiuprfNl/cMAnnP23Vu7pKGJoL1WkqcCDAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU1k4pgLZiHRtEGxXVW7xGUOi8xswwHwYDVR0j BBgwFoAUrf/Ud4V9HpvpW4JxekJ/Na+pp9YwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODRkNTE4MTAtMTk4Ny00NzAxLThmMWYtODQyNTExMTk2 NGY0LzIvQURGRkQ0Nzc4NTdEMUU5QkU5NUI4MjcxN0E0MjdGMzVBRkE5QTdENi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3JmX1VkNFY5SHB2cFc0Snhla0pfTmEt cHA5WS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84NGQ1MTgxMC0x OTg3LTQ3MDEtOGYxZi04NDI1MTExOTY0ZjQvMi9BREZGRDQ3Nzg1N0QxRTlCRTk1 QjgyNzE3QTQyN0YzNUFGQTlBN0Q2Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ42UMZMSE3zcWRapgQDr ub67BPahTcv8YFY5xsIHIiLFxN4YLkmZV1elSAOcHl9OGPSDyLuMenad4J9f6Vv/ H/eMVY1Ofw4oFeK5yPRTymY/yhwmpuejyYLqMMX4rqA7XbxVlmTieufLhcT+MYV5 oZpzZtkidW4EHC9yOAWhuW3iqZktmFByCCSkSgHRSv+SZ75XyX51O/cC2LoFSMBU WFXJjMWIgzlhVOJcaUn1T0VDKPfSbnzSxQvHqJr9rsdiD45HqF0Kv8pxIVGaKz3l UMJfSIBGwavP52ee8ZluwBlo9E81mmWio22hy0IMf9YQcWKpX95fgy/dQTAiH6Be ew== -----END CERTIFICATE-----Generated at Sun Dec 21 02:24:53 2025 by rpki-client