This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/2/ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.mft File: ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.mft (raw, json) Hash identifier: mVJjlNGzzwwUm8J9rr8CLT7Zh9qSn6t1l+PWKcp61OM= Subject key identifier: B0:CF:FD:B9:12:06:7F:3F:0D:30:46:67:A2:2D:ED:08:C8:AF:08:27 Authority key identifier: AD:FF:D4:77:85:7D:1E:9B:E9:5B:82:71:7A:42:7F:35:AF:A9:A7:D6 Certificate issuer: /CN=adffd477857d1e9be95b82717a427f35afa9a7d6 Certificate serial: 786FA189D70C9FA461DCDD2B6C729456105D0931 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rf_Ud4V9HpvpW4JxekJ_Na-pp9Y.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/2/ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.mft Manifest number: 0264 Signing time: Fri 05 Dec 2025 15:25:15 +0000 Manifest this update: Fri 05 Dec 2025 15:20:15 +0000 Manifest next update: Sun 07 Dec 2025 16:43:15 +0000 Files and hashes: 1: AS44355.asa (hash: noT3NQk7rtD6jNk1GY90L8a80oYtiLLuAlQV7OyslJk=) 2: ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.crl (hash: RD0pU7jfcLsuAmnjBUj6mlWz1Txr2QLxMWCooaq0G/U=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/2/ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.crl rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/2/ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.mft rsync://rpki.ripe.net/repository/DEFAULT/rf_Ud4V9HpvpW4JxekJ_Na-pp9Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:6f:a1:89:d7:0c:9f:a4:61:dc:dd:2b:6c:72:94:56:10:5d:09:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=adffd477857d1e9be95b82717a427f35afa9a7d6 Validity Not Before: Dec 5 15:20:15 2025 GMT Not After : Dec 7 16:43:15 2025 GMT Subject: CN=B0CFFDB912067F3F0D304667A22DED08C8AF0827 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:2f:06:d7:38:bd:ca:77:56:88:2a:52:d8:68: c4:b0:49:41:85:27:5e:58:ed:34:b0:d6:f8:74:5d: 28:2e:16:ee:fe:dc:aa:72:ff:0b:e6:87:93:56:f5: 74:a3:d3:57:73:2d:4b:71:2f:db:6e:5c:4a:30:8a: 7b:89:99:27:92:99:34:8e:d1:29:b0:94:ec:2e:65: 64:3a:94:4d:c4:67:38:e1:cb:a9:81:2c:ed:86:5c: 98:57:8b:d0:22:c1:1c:28:8a:40:71:42:ac:2d:b8: 57:fe:3a:e0:d6:e2:4c:d5:27:6f:01:b1:35:21:81: 3e:59:fb:8c:8b:6e:e5:39:c0:c8:fe:e9:58:df:1a: 26:2d:a3:1b:16:a1:98:e8:0e:d8:36:ff:49:58:8f: 37:fb:11:d0:fb:b7:b5:0f:d9:50:85:44:e6:98:57: 9c:3c:f3:a7:64:c9:e9:f9:29:5d:e1:73:8d:f2:d8: 90:37:f3:30:ef:1d:e5:f9:b8:da:58:84:99:17:fe: 06:fd:9b:b4:4b:65:b0:be:91:8b:8b:32:bb:a0:2d: c0:d2:77:35:69:06:89:dd:f1:07:6b:bf:de:56:c8: ec:8e:9c:57:ec:f2:c7:d5:5f:29:71:3f:fa:fd:8f: ec:39:03:67:bd:92:de:18:43:ee:93:d6:43:ab:bf: a3:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:CF:FD:B9:12:06:7F:3F:0D:30:46:67:A2:2D:ED:08:C8:AF:08:27 X509v3 Authority Key Identifier: keyid:AD:FF:D4:77:85:7D:1E:9B:E9:5B:82:71:7A:42:7F:35:AF:A9:A7:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/2/ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rf_Ud4V9HpvpW4JxekJ_Na-pp9Y.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/2/ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:4e:e1:ca:cd:e7:78:a9:16:a1:c7:94:09:45:53:54:01:1a: b7:64:69:68:5b:7d:0c:6a:3f:19:35:1c:49:b3:b2:c0:11:a1: 3a:91:0b:4f:6d:5c:a7:7a:fa:cb:ba:c6:1d:34:52:4e:1d:b6: 7a:2f:ea:0f:58:a2:a5:6c:ae:61:4f:66:b6:c2:07:03:3f:a7: 1e:a1:ae:a3:08:33:71:16:b1:36:95:e8:fc:4c:c3:57:be:ea: 6c:74:c0:11:6d:1e:5d:15:2b:0d:a5:b4:5e:33:43:12:2d:75: 3e:49:29:a9:a5:57:22:09:e4:0c:b2:47:80:61:11:97:30:7f: ed:02:2f:98:6b:c8:ec:f7:8c:61:3b:18:2e:d1:4b:a1:d0:a8: 08:8f:8e:d9:9d:e6:c0:d1:88:7d:35:db:0a:fe:93:cd:93:f7: 4c:e4:fd:74:dc:0d:3d:59:5e:73:b1:05:66:e4:bc:ae:57:b2: 3c:65:13:3d:3a:0d:83:4c:a2:88:6e:23:99:74:92:34:2d:6e: b8:32:1a:c1:85:28:82:64:13:4f:d2:51:df:98:d2:25:c2:4d: cf:21:f4:ca:5d:29:12:8b:f5:6b:92:10:81:02:f4:bb:2c:d9: bb:f4:d9:77:6f:8e:c3:26:2b:06:78:08:50:98:63:d6:79:3e: 07:7c:9a:0c -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUeG+hidcMn6Rh3N0rbHKUVhBdCTEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWRmZmQ0Nzc4NTdkMWU5YmU5NWI4MjcxN2E0MjdmMzVh ZmE5YTdkNjAeFw0yNTEyMDUxNTIwMTVaFw0yNTEyMDcxNjQzMTVaMDMxMTAvBgNV BAMTKEIwQ0ZGREI5MTIwNjdGM0YwRDMwNDY2N0EyMkRFRDA4QzhBRjA4MjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgLwbXOL3Kd1aIKlLYaMSwSUGF J15Y7TSw1vh0XSguFu7+3Kpy/wvmh5NW9XSj01dzLUtxL9tuXEowinuJmSeSmTSO 0SmwlOwuZWQ6lE3EZzjhy6mBLO2GXJhXi9AiwRwoikBxQqwtuFf+OuDW4kzVJ28B sTUhgT5Z+4yLbuU5wMj+6VjfGiYtoxsWoZjoDtg2/0lYjzf7EdD7t7UP2VCFROaY V5w886dkyen5KV3hc43y2JA38zDvHeX5uNpYhJkX/gb9m7RLZbC+kYuLMrugLcDS dzVpBond8Qdrv95WyOyOnFfs8sfVXylxP/r9j+w5A2e9kt4YQ+6T1kOrv6MdAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUsM/9uRIGfz8NMEZnoi3tCMivCCcwHwYDVR0j BBgwFoAUrf/Ud4V9HpvpW4JxekJ/Na+pp9YwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODRkNTE4MTAtMTk4Ny00NzAxLThmMWYtODQyNTExMTk2 NGY0LzIvQURGRkQ0Nzc4NTdEMUU5QkU5NUI4MjcxN0E0MjdGMzVBRkE5QTdENi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3JmX1VkNFY5SHB2cFc0Snhla0pfTmEt cHA5WS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84NGQ1MTgxMC0x OTg3LTQ3MDEtOGYxZi04NDI1MTExOTY0ZjQvMi9BREZGRDQ3Nzg1N0QxRTlCRTk1 QjgyNzE3QTQyN0YzNUFGQTlBN0Q2Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALU7hys3neKkWoceUCUVT VAEat2RpaFt9DGo/GTUcSbOywBGhOpELT21cp3r6y7rGHTRSTh22ei/qD1iipWyu YU9mtsIHAz+nHqGuowgzcRaxNpXo/EzDV77qbHTAEW0eXRUrDaW0XjNDEi11Pkkp qaVXIgnkDLJHgGERlzB/7QIvmGvI7PeMYTsYLtFLodCoCI+O2Z3mwNGIfTXbCv6T zZP3TOT9dNwNPVlec7EFZuS8rleyPGUTPToNg0yiiG4jmXSSNC1uuDIawYUogmQT T9JR35jSJcJNzyH0yl0pEov1a5IQgQL0uyzZu/TZd2+OwyYrBngIUJhj1nk+B3ya DA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:03:57 2025 by rpki-client