This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/97b5f6f4-24be-4ae0-82a8-e5d82842e229/0/A0BBB954570CFA6E856937043DD2C1745A0A05C2.mft File: A0BBB954570CFA6E856937043DD2C1745A0A05C2.mft (raw, json) Hash identifier: YeTqVhOg/iPfRP8IykAoMc6NGoVb56EjXVkgta036RU= Subject key identifier: E2:0D:6A:E4:17:7A:51:F3:95:90:42:47:F1:5F:2E:13:DF:A0:34:F5 Authority key identifier: A0:BB:B9:54:57:0C:FA:6E:85:69:37:04:3D:D2:C1:74:5A:0A:05:C2 Certificate issuer: /CN=a0bbb954570cfa6e856937043dd2c1745a0a05c2 Certificate serial: 66F2DA87689175D4FA800E1F06342F29B2AF8C70 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oLu5VFcM-m6FaTcEPdLBdFoKBcI.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/97b5f6f4-24be-4ae0-82a8-e5d82842e229/0/A0BBB954570CFA6E856937043DD2C1745A0A05C2.mft Manifest number: 6C Signing time: Sat 06 Dec 2025 00:59:35 +0000 Manifest this update: Sat 06 Dec 2025 00:54:35 +0000 Manifest next update: Sun 07 Dec 2025 02:34:35 +0000 Files and hashes: 1: AS214757.asa (hash: jL3ZHZO2rDPBy7IkoORDXI20p2/dpY2J7HmBqd/Xf+4=) 2: A0BBB954570CFA6E856937043DD2C1745A0A05C2.crl (hash: jkpiLxsmoP5ouuT64GSJ5MRXWUhVtmle9A0xSpn2ajA=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/97b5f6f4-24be-4ae0-82a8-e5d82842e229/0/A0BBB954570CFA6E856937043DD2C1745A0A05C2.crl rsync://rsync.paas.rpki.ripe.net/repository/97b5f6f4-24be-4ae0-82a8-e5d82842e229/0/A0BBB954570CFA6E856937043DD2C1745A0A05C2.mft rsync://rpki.ripe.net/repository/DEFAULT/oLu5VFcM-m6FaTcEPdLBdFoKBcI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:f2:da:87:68:91:75:d4:fa:80:0e:1f:06:34:2f:29:b2:af:8c:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a0bbb954570cfa6e856937043dd2c1745a0a05c2 Validity Not Before: Dec 6 00:54:35 2025 GMT Not After : Dec 7 02:34:35 2025 GMT Subject: CN=E20D6AE4177A51F395904247F15F2E13DFA034F5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:20:b3:87:d9:93:1c:a6:1f:84:d3:91:d8:10: aa:61:82:46:bb:5a:fc:27:cf:40:60:99:65:d3:dc: b7:e2:61:bc:48:cd:b8:ae:ad:32:70:72:5a:7f:5d: 23:e9:dc:3c:fa:1b:8d:6c:e9:17:d7:5c:b4:12:94: 1d:3c:0b:47:7b:95:17:cb:a5:77:b9:58:7f:36:d2: 99:a4:a5:0d:4e:d7:80:db:7b:0c:ac:77:cb:9c:c3: 80:cc:c3:48:9d:53:ab:28:a2:a4:41:11:65:bc:59: 76:80:ad:34:0a:46:30:52:05:17:92:7f:ad:de:cb: b3:12:77:3b:da:ad:f3:31:7e:b6:b0:71:59:5d:38: 4d:c9:dc:7b:f1:47:45:b2:be:42:cb:58:00:f1:29: 26:68:5f:fe:67:5e:ad:a8:11:e2:41:6b:63:b3:7f: ce:cc:f1:1b:c4:4f:83:9f:30:84:0d:e3:22:ad:db: 06:e9:36:ba:ba:28:ee:cf:dd:c4:9f:92:8a:c6:ea: ac:1b:48:e0:e7:2f:6c:db:e4:c4:23:56:32:8f:98: d0:f8:a7:45:53:25:13:34:83:d2:ed:f5:97:7c:32: 0f:99:10:54:74:a5:bb:ae:ea:ea:ae:50:88:b0:a6: 03:ee:03:11:6e:29:40:e6:56:28:d4:24:46:1b:f9: cc:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:0D:6A:E4:17:7A:51:F3:95:90:42:47:F1:5F:2E:13:DF:A0:34:F5 X509v3 Authority Key Identifier: keyid:A0:BB:B9:54:57:0C:FA:6E:85:69:37:04:3D:D2:C1:74:5A:0A:05:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/97b5f6f4-24be-4ae0-82a8-e5d82842e229/0/A0BBB954570CFA6E856937043DD2C1745A0A05C2.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oLu5VFcM-m6FaTcEPdLBdFoKBcI.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/97b5f6f4-24be-4ae0-82a8-e5d82842e229/0/A0BBB954570CFA6E856937043DD2C1745A0A05C2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d7:73:66:6f:10:a1:b7:56:32:95:06:2c:88:5b:3b:1a:7f:56: 42:cf:fa:7f:fc:29:26:16:25:ea:1c:8e:af:e4:c3:08:fb:02: be:23:46:b2:2b:c5:34:bf:64:b8:76:72:75:7f:6b:fb:26:9c: 1d:30:d2:f2:bc:47:c6:3c:2f:05:3e:0d:53:d7:3d:f8:d7:4b: de:9f:ac:28:92:75:89:11:08:be:70:63:9b:48:de:07:17:32: a5:53:ab:a8:b5:9e:3d:57:0f:b1:9b:42:bc:23:46:9f:ba:db: fa:f0:33:5b:3d:15:d5:0d:17:5a:73:43:d0:fc:e1:7c:4a:af: 99:a3:ef:7e:d3:00:fb:d1:a3:79:b3:8f:c1:8a:fd:c4:e3:9d: 1a:7e:be:7e:bf:c2:20:55:f0:d0:fb:78:00:45:00:2e:5a:58: f2:08:b8:ee:ab:00:0a:d8:07:7f:4f:e6:90:f1:89:fb:52:76: 80:c8:d6:6d:2e:2a:ae:74:92:b1:96:0e:3f:6d:6e:85:0a:0d: 62:1d:dd:c3:94:26:1d:2d:df:fd:8e:db:ab:1d:80:5f:e4:b6: 70:85:73:a9:de:2a:06:e0:a9:fb:77:f0:00:7e:8a:8c:17:40: 55:b4:27:32:e6:89:b7:28:cf:4a:a3:33:bb:89:ec:40:b4:ac: 66:f3:06:05 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUZvLah2iRddT6gA4fBjQvKbKvjHAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYTBiYmI5NTQ1NzBjZmE2ZTg1NjkzNzA0M2RkMmMxNzQ1 YTBhMDVjMjAeFw0yNTEyMDYwMDU0MzVaFw0yNTEyMDcwMjM0MzVaMDMxMTAvBgNV BAMTKEUyMEQ2QUU0MTc3QTUxRjM5NTkwNDI0N0YxNUYyRTEzREZBMDM0RjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXILOH2ZMcph+E05HYEKphgka7 Wvwnz0BgmWXT3LfiYbxIzbiurTJwclp/XSPp3Dz6G41s6RfXXLQSlB08C0d7lRfL pXe5WH820pmkpQ1O14Dbewysd8ucw4DMw0idU6sooqRBEWW8WXaArTQKRjBSBReS f63ey7MSdzvarfMxfrawcVldOE3J3HvxR0WyvkLLWADxKSZoX/5nXq2oEeJBa2Oz f87M8RvET4OfMIQN4yKt2wbpNrq6KO7P3cSfkorG6qwbSODnL2zb5MQjVjKPmND4 p0VTJRM0g9Lt9Zd8Mg+ZEFR0pbuu6uquUIiwpgPuAxFuKUDmVijUJEYb+cxhAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU4g1q5Bd6UfOVkEJH8V8uE9+gNPUwHwYDVR0j BBgwFoAUoLu5VFcM+m6FaTcEPdLBdFoKBcIwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOTdiNWY2ZjQtMjRiZS00YWUwLTgyYTgtZTVkODI4NDJl MjI5LzAvQTBCQkI5NTQ1NzBDRkE2RTg1NjkzNzA0M0REMkMxNzQ1QTBBMDVDMi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL29MdTVWRmNNLW02RmFUY0VQZExCZEZv S0JjSS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85N2I1ZjZmNC0y NGJlLTRhZTAtODJhOC1lNWQ4Mjg0MmUyMjkvMC9BMEJCQjk1NDU3MENGQTZFODU2 OTM3MDQzREQyQzE3NDVBMEEwNUMyLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA13NmbxCht1YylQYsiFs7 Gn9WQs/6f/wpJhYl6hyOr+TDCPsCviNGsivFNL9kuHZydX9r+yacHTDS8rxHxjwv BT4NU9c9+NdL3p+sKJJ1iREIvnBjm0jeBxcypVOrqLWePVcPsZtCvCNGn7rb+vAz Wz0V1Q0XWnND0PzhfEqvmaPvftMA+9GjebOPwYr9xOOdGn6+fr/CIFXw0Pt4AEUA LlpY8gi47qsACtgHf0/mkPGJ+1J2gMjWbS4qrnSSsZYOP21uhQoNYh3dw5QmHS3f /Y7bqx2AX+S2cIVzqd4qBuCp+3fwAH6KjBdAVbQnMuaJtyjPSqMzu4nsQLSsZvMG BQ== -----END CERTIFICATE-----Generated at Sat Dec 6 05:49:17 2025 by rpki-client