This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/4/9D49BD0B2884C6DC5085C1A694DF7B970E05DAAB.mft File: 9D49BD0B2884C6DC5085C1A694DF7B970E05DAAB.mft (raw, json) Hash identifier: 49zFLeSFxbMOXQ1P5VnvFn2JtLyY9khkZGFkzCM2v80= Subject key identifier: 0E:44:89:E7:8A:2D:70:17:34:FE:84:4A:41:AC:BB:16:FC:86:7E:CF Authority key identifier: 9D:49:BD:0B:28:84:C6:DC:50:85:C1:A6:94:DF:7B:97:0E:05:DA:AB Certificate issuer: /CN=9d49bd0b2884c6dc5085c1a694df7b970e05daab Certificate serial: 643FEFF9C42A731669E974BC95632A8F44AF59E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nUm9CyiExtxQhcGmlN97lw4F2qs.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/4/9D49BD0B2884C6DC5085C1A694DF7B970E05DAAB.mft Manifest number: 0258 Signing time: Fri 05 Dec 2025 16:20:15 +0000 Manifest this update: Fri 05 Dec 2025 16:15:15 +0000 Manifest next update: Sun 07 Dec 2025 16:45:15 +0000 Files and hashes: 1: 9D49BD0B2884C6DC5085C1A694DF7B970E05DAAB.crl (hash: 0+J+U317iyHFZoGiSTHu8TfjeuSE91ShgLc8a46Zq5Q=) 2: AS209735.asa (hash: 4lq2i8m+npa42DYropbb29vhZU9mPbpa0ah43H0njAQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/4/9D49BD0B2884C6DC5085C1A694DF7B970E05DAAB.crl rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/4/9D49BD0B2884C6DC5085C1A694DF7B970E05DAAB.mft rsync://rpki.ripe.net/repository/DEFAULT/nUm9CyiExtxQhcGmlN97lw4F2qs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:3f:ef:f9:c4:2a:73:16:69:e9:74:bc:95:63:2a:8f:44:af:59:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d49bd0b2884c6dc5085c1a694df7b970e05daab Validity Not Before: Dec 5 16:15:15 2025 GMT Not After : Dec 7 16:45:15 2025 GMT Subject: CN=0E4489E78A2D701734FE844A41ACBB16FC867ECF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:fb:44:b5:c9:96:3c:96:6c:87:c9:c3:56:1e: 3e:e8:21:a0:37:19:ab:65:f3:c1:8f:0e:94:3a:86: 76:d0:d7:f3:fb:d8:03:ca:40:2b:2d:be:f3:0e:9c: 69:f2:3f:71:71:bf:97:7c:78:8b:f7:97:b6:ef:31: 06:db:ad:3f:c4:98:5d:16:65:cf:32:b9:08:96:92: 7d:6b:4f:61:8b:d9:4c:97:aa:01:1b:7e:46:60:37: af:0a:45:0b:b3:c9:82:b1:6b:d5:1a:5b:9e:59:b8: af:47:01:a7:d5:23:84:1e:a6:85:e8:f3:86:9a:db: de:c0:44:7d:96:44:3f:29:e6:83:a9:12:51:90:99: 81:dd:ad:f4:fc:b4:ae:55:b0:aa:90:43:54:01:52: 64:32:c4:8c:ce:6b:39:b2:ab:f0:46:cf:d7:5a:23: b1:4e:ff:04:33:f8:42:e0:a6:db:51:98:38:71:08: d9:f2:63:b0:06:63:94:c6:3b:eb:b5:1f:6f:c1:36: cf:3b:2e:fd:df:d8:65:e9:ad:b8:2c:60:0a:cc:3c: 24:34:85:ae:06:7c:0b:2c:1f:af:c9:d3:00:a9:62: 29:fe:49:42:0b:60:51:62:88:c1:9e:16:74:da:4a: c5:20:f2:55:60:07:9c:28:0f:5e:f1:e0:81:06:4b: 90:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:44:89:E7:8A:2D:70:17:34:FE:84:4A:41:AC:BB:16:FC:86:7E:CF X509v3 Authority Key Identifier: keyid:9D:49:BD:0B:28:84:C6:DC:50:85:C1:A6:94:DF:7B:97:0E:05:DA:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/4/9D49BD0B2884C6DC5085C1A694DF7B970E05DAAB.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nUm9CyiExtxQhcGmlN97lw4F2qs.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/4/9D49BD0B2884C6DC5085C1A694DF7B970E05DAAB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:7a:21:6a:42:0b:30:75:12:02:ad:f5:c0:f5:f8:d4:60:d5: 62:d0:0a:48:39:19:85:18:7b:a4:43:42:8e:35:99:5d:be:5f: ee:48:11:cb:55:fe:c6:77:c1:90:3b:7b:f8:3b:ab:ed:34:7d: d7:43:b1:a0:14:ae:ec:0f:b7:ff:20:3c:e1:29:6c:93:e9:ca: 6c:35:21:6a:f8:b4:c4:f9:33:50:f6:81:f0:aa:89:27:66:49: cd:29:c3:38:43:3f:34:46:b8:33:06:31:5d:c9:06:68:c7:1f: 7f:3f:b2:11:14:90:73:f3:75:88:7b:1e:84:43:38:b3:4c:4d: b6:c6:2b:99:fe:6b:ab:a6:3e:c7:c2:80:f2:06:90:1a:94:54: a9:f6:f0:3d:23:30:72:0c:84:70:3e:83:83:cb:bc:73:8a:86: 18:fa:35:9d:e8:44:ed:ed:55:b5:5e:04:dd:9a:43:44:76:9c: 93:18:ae:9a:fb:06:5f:5c:36:74:2a:44:8e:1c:39:0d:39:3f: 04:37:f1:9c:f2:4c:23:c6:bb:2b:fb:cb:e1:22:e8:2b:fc:99: 81:e0:e5:eb:f4:eb:6d:cf:d3:06:d4:09:94:75:4c:92:97:d1: 87:9c:20:02:ae:f6:14:e3:ff:da:67:5a:de:0b:ce:b1:be:71: 10:8e:d0:be -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUZD/v+cQqcxZp6XS8lWMqj0SvWeUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOWQ0OWJkMGIyODg0YzZkYzUwODVjMWE2OTRkZjdiOTcw ZTA1ZGFhYjAeFw0yNTEyMDUxNjE1MTVaFw0yNTEyMDcxNjQ1MTVaMDMxMTAvBgNV BAMTKDBFNDQ4OUU3OEEyRDcwMTczNEZFODQ0QTQxQUNCQjE2RkM4NjdFQ0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDs+0S1yZY8lmyHycNWHj7oIaA3 Gatl88GPDpQ6hnbQ1/P72APKQCstvvMOnGnyP3Fxv5d8eIv3l7bvMQbbrT/EmF0W Zc8yuQiWkn1rT2GL2UyXqgEbfkZgN68KRQuzyYKxa9UaW55ZuK9HAafVI4QepoXo 84aa297ARH2WRD8p5oOpElGQmYHdrfT8tK5VsKqQQ1QBUmQyxIzOazmyq/BGz9da I7FO/wQz+ELgpttRmDhxCNnyY7AGY5TGO+u1H2/BNs87Lv3f2GXprbgsYArMPCQ0 ha4GfAssH6/J0wCpYin+SUILYFFiiMGeFnTaSsUg8lVgB5woD17x4IEGS5C1AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUDkSJ54otcBc0/oRKQay7FvyGfs8wHwYDVR0j BBgwFoAUnUm9CyiExtxQhcGmlN97lw4F2qswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODRkNTE4MTAtMTk4Ny00NzAxLThmMWYtODQyNTExMTk2 NGY0LzQvOUQ0OUJEMEIyODg0QzZEQzUwODVDMUE2OTRERjdCOTcwRTA1REFBQi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL25VbTlDeWlFeHR4UWhjR21sTjk3bHc0 RjJxcy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84NGQ1MTgxMC0x OTg3LTQ3MDEtOGYxZi04NDI1MTExOTY0ZjQvNC85RDQ5QkQwQjI4ODRDNkRDNTA4 NUMxQTY5NERGN0I5NzBFMDVEQUFCLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh3ohakILMHUSAq31wPX4 1GDVYtAKSDkZhRh7pENCjjWZXb5f7kgRy1X+xnfBkDt7+Dur7TR910OxoBSu7A+3 /yA84Slsk+nKbDUhavi0xPkzUPaB8KqJJ2ZJzSnDOEM/NEa4MwYxXckGaMcffz+y ERSQc/N1iHsehEM4s0xNtsYrmf5rq6Y+x8KA8gaQGpRUqfbwPSMwcgyEcD6Dg8u8 c4qGGPo1nehE7e1VtV4E3ZpDRHackxiumvsGX1w2dCpEjhw5DTk/BDfxnPJMI8a7 K/vL4SLoK/yZgeDl6/Trbc/TBtQJlHVMkpfRh5wgAq72FOP/2mda3gvOsb5xEI7Q vg== -----END CERTIFICATE-----Generated at Sat Dec 6 06:11:33 2025 by rpki-client