This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/87d8db71-a5be-464c-a8b9-8b7b374ae3fa/0/D2EA6280FF27EA14BC73A6B267953CA1E6F9F507.mft File: D2EA6280FF27EA14BC73A6B267953CA1E6F9F507.mft (raw, json) Hash identifier: YODBLth8UrGAnbOKYteOoJ3Z7QGTeXRA50UW8EMirdU= Subject key identifier: 2C:D3:0A:10:A7:FF:95:9C:44:3A:EE:45:E3:55:6E:AC:A3:A0:77:82 Authority key identifier: D2:EA:62:80:FF:27:EA:14:BC:73:A6:B2:67:95:3C:A1:E6:F9:F5:07 Certificate issuer: /CN=d2ea6280ff27ea14bc73a6b267953ca1e6f9f507 Certificate serial: 4EE64DAF0E023D424F0CD290EFFC2B4C546B21A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0upigP8n6hS8c6ayZ5U8oeb59Qc.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/87d8db71-a5be-464c-a8b9-8b7b374ae3fa/0/D2EA6280FF27EA14BC73A6B267953CA1E6F9F507.mft Manifest number: 9F Signing time: Fri 05 Dec 2025 16:48:27 +0000 Manifest this update: Fri 05 Dec 2025 16:43:27 +0000 Manifest next update: Sat 06 Dec 2025 19:07:27 +0000 Files and hashes: 1: AS213605.asa (hash: i+a6OA5dERYDlaa6eqkTHGVQTORB1/kFMxnaWVubLpQ=) 2: D2EA6280FF27EA14BC73A6B267953CA1E6F9F507.crl (hash: o2T0UmOiQtULd8TdScjKml/MZL2sofKXIhhvOVIg93U=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/87d8db71-a5be-464c-a8b9-8b7b374ae3fa/0/D2EA6280FF27EA14BC73A6B267953CA1E6F9F507.crl rsync://rsync.paas.rpki.ripe.net/repository/87d8db71-a5be-464c-a8b9-8b7b374ae3fa/0/D2EA6280FF27EA14BC73A6B267953CA1E6F9F507.mft rsync://rpki.ripe.net/repository/DEFAULT/0upigP8n6hS8c6ayZ5U8oeb59Qc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 19:07:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:e6:4d:af:0e:02:3d:42:4f:0c:d2:90:ef:fc:2b:4c:54:6b:21:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d2ea6280ff27ea14bc73a6b267953ca1e6f9f507 Validity Not Before: Dec 5 16:43:27 2025 GMT Not After : Dec 6 19:07:27 2025 GMT Subject: CN=2CD30A10A7FF959C443AEE45E3556EACA3A07782 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:d1:62:8b:81:89:95:ad:5f:d8:8d:6b:05:ce: b2:91:18:72:c5:e6:6c:c9:aa:f3:7e:1d:20:d7:24: 38:6b:8f:9a:92:8a:72:36:b7:8c:7a:57:09:69:61: cc:32:ea:b3:c4:08:9f:79:a0:06:58:74:3b:e8:1d: 57:3d:fd:82:1a:36:0d:68:d4:93:03:5a:71:46:d3: 29:dc:d5:67:08:b0:eb:be:90:cb:69:07:a4:71:81: 0b:66:29:40:fa:f1:39:d6:d3:45:a9:48:d7:46:be: 3e:d5:d7:e7:a0:d4:f0:29:29:22:83:6a:c7:9c:f8: 55:2f:c0:7b:ba:94:1b:1f:08:9c:7c:8e:f4:e3:86: 06:0d:a6:6e:ef:b7:b6:e2:05:0f:be:2d:1a:12:5a: 70:76:6d:35:8a:2e:f6:53:da:8a:98:6a:79:f3:56: 85:bf:11:27:80:fb:61:57:14:d2:02:e6:d9:04:0f: 66:1b:50:36:98:10:5f:94:fc:b8:be:7d:b8:77:c1: 1f:0a:34:1a:42:c1:17:27:cb:3f:c1:06:3d:72:d6: 05:b1:bd:d8:96:83:68:b0:51:79:29:55:6d:a0:02: 91:75:f6:97:f9:79:7d:28:bd:58:45:1a:88:f7:a1: e5:c0:1a:4c:dc:00:d1:de:e7:ae:1b:33:03:81:30: 71:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:D3:0A:10:A7:FF:95:9C:44:3A:EE:45:E3:55:6E:AC:A3:A0:77:82 X509v3 Authority Key Identifier: keyid:D2:EA:62:80:FF:27:EA:14:BC:73:A6:B2:67:95:3C:A1:E6:F9:F5:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/87d8db71-a5be-464c-a8b9-8b7b374ae3fa/0/D2EA6280FF27EA14BC73A6B267953CA1E6F9F507.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0upigP8n6hS8c6ayZ5U8oeb59Qc.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/87d8db71-a5be-464c-a8b9-8b7b374ae3fa/0/D2EA6280FF27EA14BC73A6B267953CA1E6F9F507.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:f6:98:99:14:40:d7:41:5f:87:76:19:72:6d:5d:cf:22:29: cd:61:3c:42:e7:c9:e7:0d:91:58:79:50:ec:ac:dd:52:26:0d: f1:b6:28:a2:22:2a:c4:d2:62:1c:c3:4a:9f:35:71:96:fe:5c: 2d:f6:c2:57:2b:b5:53:5b:fa:f1:5e:36:7e:7d:d9:f4:44:3d: 5f:a0:2a:24:f5:db:b6:00:25:08:d4:e1:df:f6:16:ed:01:8e: c7:76:40:ce:54:94:0a:35:43:e0:d1:a2:5b:5e:74:ca:cb:b7: 4a:1c:6b:6b:e8:bc:d0:ae:c7:ea:5d:f9:a9:a9:17:45:d7:1e: 2a:5d:ac:c5:26:1a:c2:31:02:c7:e7:29:52:39:6e:81:ea:1d: 3b:8c:ab:48:b3:59:d0:73:93:83:8b:c5:da:b3:9b:47:4d:de: 20:5d:83:28:ef:6f:74:20:86:c7:88:e9:c0:32:50:b1:cc:3c: 46:e4:5c:78:97:65:bd:94:2f:ca:76:4a:61:fc:b2:ff:c3:f7: ab:ea:f4:26:61:6d:93:74:f8:ee:50:28:7f:92:20:e3:eb:d0: 16:ea:69:e6:84:22:4d:01:9f:eb:d9:8f:6a:c6:07:ef:9c:50: fe:10:b2:dd:04:3b:e6:13:d1:51:93:cd:9e:37:9e:2a:ed:03: 4c:c8:76:8f -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUTuZNrw4CPUJPDNKQ7/wrTFRrIagwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZDJlYTYyODBmZjI3ZWExNGJjNzNhNmIyNjc5NTNjYTFl NmY5ZjUwNzAeFw0yNTEyMDUxNjQzMjdaFw0yNTEyMDYxOTA3MjdaMDMxMTAvBgNV BAMTKDJDRDMwQTEwQTdGRjk1OUM0NDNBRUU0NUUzNTU2RUFDQTNBMDc3ODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC00WKLgYmVrV/YjWsFzrKRGHLF 5mzJqvN+HSDXJDhrj5qSinI2t4x6VwlpYcwy6rPECJ95oAZYdDvoHVc9/YIaNg1o 1JMDWnFG0ync1WcIsOu+kMtpB6RxgQtmKUD68TnW00WpSNdGvj7V1+eg1PApKSKD asec+FUvwHu6lBsfCJx8jvTjhgYNpm7vt7biBQ++LRoSWnB2bTWKLvZT2oqYannz VoW/ESeA+2FXFNIC5tkED2YbUDaYEF+U/Li+fbh3wR8KNBpCwRcnyz/BBj1y1gWx vdiWg2iwUXkpVW2gApF19pf5eX0ovVhFGoj3oeXAGkzcANHe564bMwOBMHHzAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQULNMKEKf/lZxEOu5F41VurKOgd4IwHwYDVR0j BBgwFoAU0upigP8n6hS8c6ayZ5U8oeb59QcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODdkOGRiNzEtYTViZS00NjRjLWE4YjktOGI3YjM3NGFl M2ZhLzAvRDJFQTYyODBGRjI3RUExNEJDNzNBNkIyNjc5NTNDQTFFNkY5RjUwNy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzB1cGlnUDhuNmhTOGM2YXlaNVU4b2Vi NTlRYy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84N2Q4ZGI3MS1h NWJlLTQ2NGMtYThiOS04YjdiMzc0YWUzZmEvMC9EMkVBNjI4MEZGMjdFQTE0QkM3 M0E2QjI2Nzk1M0NBMUU2RjlGNTA3Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP/aYmRRA10Ffh3YZcm1d zyIpzWE8QufJ5w2RWHlQ7KzdUiYN8bYooiIqxNJiHMNKnzVxlv5cLfbCVyu1U1v6 8V42fn3Z9EQ9X6AqJPXbtgAlCNTh3/YW7QGOx3ZAzlSUCjVD4NGiW150ysu3Shxr a+i80K7H6l35qakXRdceKl2sxSYawjECx+cpUjlugeodO4yrSLNZ0HOTg4vF2rOb R03eIF2DKO9vdCCGx4jpwDJQscw8RuRceJdlvZQvynZKYfyy/8P3q+r0JmFtk3T4 7lAof5Ig4+vQFupp5oQiTQGf69mPasYH75xQ/hCy3QQ75hPRUZPNnjeeKu0DTMh2 jw== -----END CERTIFICATE-----Generated at Sat Dec 6 05:05:15 2025 by rpki-client