This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/2/C445F6C1C3A7CA8B30F85E7DB856309CABE68A08.mft File: C445F6C1C3A7CA8B30F85E7DB856309CABE68A08.mft (raw, json) Hash identifier: MTfxmK+PQhDASdxDqHzjQnC33QX1oACyqt6oxlCVV6s= Subject key identifier: 52:EE:03:12:F3:0E:74:AC:52:4E:2E:F4:43:FD:F8:6F:E5:75:AC:00 Authority key identifier: C4:45:F6:C1:C3:A7:CA:8B:30:F8:5E:7D:B8:56:30:9C:AB:E6:8A:08 Certificate issuer: /CN=c445f6c1c3a7ca8b30f85e7db856309cabe68a08 Certificate serial: 2D9774903B8CF1725BC5098FFB70CB74F9A7FAAD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xEX2wcOnyosw-F59uFYwnKvmigg.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/2/C445F6C1C3A7CA8B30F85E7DB856309CABE68A08.mft Manifest number: D4 Signing time: Sat 06 Dec 2025 04:42:27 +0000 Manifest this update: Sat 06 Dec 2025 04:37:27 +0000 Manifest next update: Sun 07 Dec 2025 04:57:27 +0000 Files and hashes: 1: C445F6C1C3A7CA8B30F85E7DB856309CABE68A08.crl (hash: 7jKlmRjpux07ZYtfXdw9wWC6bLw6b6Kz2+qs6GzRRWc=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/2/C445F6C1C3A7CA8B30F85E7DB856309CABE68A08.crl rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/2/C445F6C1C3A7CA8B30F85E7DB856309CABE68A08.mft rsync://rpki.ripe.net/repository/DEFAULT/xEX2wcOnyosw-F59uFYwnKvmigg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:57:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:97:74:90:3b:8c:f1:72:5b:c5:09:8f:fb:70:cb:74:f9:a7:fa:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c445f6c1c3a7ca8b30f85e7db856309cabe68a08 Validity Not Before: Dec 6 04:37:27 2025 GMT Not After : Dec 7 04:57:27 2025 GMT Subject: CN=52EE0312F30E74AC524E2EF443FDF86FE575AC00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:76:82:44:30:1e:2d:46:f4:43:24:96:bc:9c: 0b:8b:ba:35:cf:96:5d:5d:7d:a7:7a:da:77:d3:4c: 38:89:4b:09:ba:18:a3:e3:b0:63:b3:b7:e2:4f:86: f2:4b:45:4f:75:9a:cc:79:d6:f3:c6:3a:63:db:10: 3f:0e:d1:4d:b8:f4:32:e1:70:c7:5f:4b:56:8a:bb: b6:57:7f:54:cf:55:91:51:89:18:f6:48:a7:e9:af: a6:fb:56:48:6f:18:d0:d8:6c:52:6a:6b:28:2f:21: 8d:cf:4d:9f:51:b0:d5:31:8f:bf:cf:ea:d9:63:cf: 74:ee:a2:94:34:3c:96:98:17:32:16:62:dd:92:d9: e1:9a:42:45:1a:b5:de:f3:2c:85:53:3f:bf:ec:b6: 9f:6b:e0:f2:4f:ee:e2:ca:08:2e:44:3e:58:cf:ef: 32:1e:ea:58:c1:3a:5f:56:52:5b:a4:39:21:76:ef: 15:21:f2:75:3e:86:be:c2:cb:a6:f6:23:6e:80:0d: ca:10:8d:88:4b:48:91:b4:09:31:22:ce:c4:4e:a6: b7:13:75:61:d4:c6:e7:fe:07:da:c1:7a:14:75:d9: 3e:e0:6c:eb:c0:12:93:fa:79:2b:db:9c:0e:d3:be: 59:3f:82:b8:ab:86:b4:c3:e8:ba:d8:e2:bc:ef:08: e9:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:EE:03:12:F3:0E:74:AC:52:4E:2E:F4:43:FD:F8:6F:E5:75:AC:00 X509v3 Authority Key Identifier: keyid:C4:45:F6:C1:C3:A7:CA:8B:30:F8:5E:7D:B8:56:30:9C:AB:E6:8A:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/2/C445F6C1C3A7CA8B30F85E7DB856309CABE68A08.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xEX2wcOnyosw-F59uFYwnKvmigg.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/2/C445F6C1C3A7CA8B30F85E7DB856309CABE68A08.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:77:dd:f1:2e:ad:05:3d:ef:1d:1c:d5:9d:db:8a:7f:ac:8d: b0:9f:23:5e:33:12:d8:8d:e0:93:28:45:78:94:50:72:00:dd: 1d:eb:e1:99:58:5a:41:68:22:82:d0:b3:58:eb:62:34:fa:5c: bd:24:fc:e0:7a:61:49:b0:00:2c:ba:58:f9:5e:3d:62:f9:06: 6d:f0:f6:d0:41:50:ab:fc:21:78:dd:33:ed:d9:88:11:e4:b0: e6:d8:85:a5:07:f4:05:34:e2:62:1f:11:99:cf:74:49:f2:55: 32:38:c0:ec:9c:09:1d:cb:30:5f:18:66:12:4d:81:3d:0c:2a: 76:8b:2a:84:ab:7b:2b:83:64:c0:b7:39:04:47:53:30:68:bc: b8:8d:77:e3:c4:e5:f8:f5:d4:d6:28:7d:72:7a:35:ca:87:6c: 93:68:40:2b:ae:78:2c:c0:f5:e6:8c:23:f6:6a:31:42:2f:79: 3c:9e:9f:97:60:aa:26:b5:09:5b:ba:c9:9f:24:8b:eb:6b:cb: 60:ea:89:84:d3:0d:78:ee:3f:e8:2f:1d:be:9d:6f:3b:f2:f6: 3b:35:7d:98:f0:67:c3:f5:63:ca:81:36:7a:68:b6:27:59:2e: 16:5d:e3:5a:15:9c:ec:73:9a:46:bb:85:f0:59:a5:59:65:75: 3b:db:5a:ac -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIULZd0kDuM8XJbxQmP+3DLdPmn+q0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYzQ0NWY2YzFjM2E3Y2E4YjMwZjg1ZTdkYjg1NjMwOWNh YmU2OGEwODAeFw0yNTEyMDYwNDM3MjdaFw0yNTEyMDcwNDU3MjdaMDMxMTAvBgNV BAMTKDUyRUUwMzEyRjMwRTc0QUM1MjRFMkVGNDQzRkRGODZGRTU3NUFDMDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD7doJEMB4tRvRDJJa8nAuLujXP ll1dfad62nfTTDiJSwm6GKPjsGOzt+JPhvJLRU91msx51vPGOmPbED8O0U249DLh cMdfS1aKu7ZXf1TPVZFRiRj2SKfpr6b7VkhvGNDYbFJqaygvIY3PTZ9RsNUxj7/P 6tljz3TuopQ0PJaYFzIWYt2S2eGaQkUatd7zLIVTP7/stp9r4PJP7uLKCC5EPljP 7zIe6ljBOl9WUlukOSF27xUh8nU+hr7Cy6b2I26ADcoQjYhLSJG0CTEizsROprcT dWHUxuf+B9rBehR12T7gbOvAEpP6eSvbnA7Tvlk/grirhrTD6LrY4rzvCOn5AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUUu4DEvMOdKxSTi70Q/34b+V1rAAwHwYDVR0j BBgwFoAUxEX2wcOnyosw+F59uFYwnKvmiggwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODU1YzdkNWEtMTVjNC00NTg5LTg1ZmEtYjQ5MWEwNzEw NDhjLzIvQzQ0NUY2QzFDM0E3Q0E4QjMwRjg1RTdEQjg1NjMwOUNBQkU2OEEwOC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3hFWDJ3Y09ueW9zdy1GNTl1Rll3bkt2 bWlnZy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84NTVjN2Q1YS0x NWM0LTQ1ODktODVmYS1iNDkxYTA3MTA0OGMvMi9DNDQ1RjZDMUMzQTdDQThCMzBG ODVFN0RCODU2MzA5Q0FCRTY4QTA4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD3fd8S6tBT3vHRzVnduK f6yNsJ8jXjMS2I3gkyhFeJRQcgDdHevhmVhaQWgigtCzWOtiNPpcvST84HphSbAA LLpY+V49YvkGbfD20EFQq/wheN0z7dmIEeSw5tiFpQf0BTTiYh8Rmc90SfJVMjjA 7JwJHcswXxhmEk2BPQwqdosqhKt7K4NkwLc5BEdTMGi8uI1348Tl+PXU1ih9cno1 yodsk2hAK654LMD15owj9moxQi95PJ6fl2CqJrUJW7rJnySL62vLYOqJhNMNeO4/ 6C8dvp1vO/L2OzV9mPBnw/VjyoE2emi2J1kuFl3jWhWc7HOaRruF8FmlWWV1O9ta rA== -----END CERTIFICATE-----Generated at Sat Dec 6 14:47:38 2025 by rpki-client