This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9bb77c8a-2d69-4325-b4fa-603388c96bb3/1/AD51B4FA37D423844399722D5240A94674496236.mft File: AD51B4FA37D423844399722D5240A94674496236.mft (raw, json) Hash identifier: qO5AtudydIAfywJQp0q/Fvx189AjLgJYgnP+eIWRT6U= Subject key identifier: 10:C6:3D:76:81:70:56:54:F3:9B:61:25:69:63:EF:5D:D5:EA:DB:BA Authority key identifier: AD:51:B4:FA:37:D4:23:84:43:99:72:2D:52:40:A9:46:74:49:62:36 Certificate issuer: /CN=AD51B4FA37D423844399722D5240A94674496236 Certificate serial: 5CEB68E087BB45F193EB5A55A4F53E672BE5458D Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AD51B4FA37D423844399722D5240A94674496236.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9bb77c8a-2d69-4325-b4fa-603388c96bb3/1/AD51B4FA37D423844399722D5240A94674496236.mft Manifest number: 0D Signing time: Sat 06 Dec 2025 08:33:17 +0000 Manifest this update: Sat 06 Dec 2025 08:28:17 +0000 Manifest next update: Sun 07 Dec 2025 08:53:17 +0000 Files and hashes: 1: AD51B4FA37D423844399722D5240A94674496236.crl (hash: DS8M/OZffJSHw/3unpCiBd5p274c4upcXDMWD2z6oUA=) 2: 326131343a373538333a333030303a3a2f33362d3438203d3e20323034353335.roa (hash: wa3x+YdBz4iMqCjU1AX+bNH8GFDW/LR3zugaLxxd1vE=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9bb77c8a-2d69-4325-b4fa-603388c96bb3/1/AD51B4FA37D423844399722D5240A94674496236.crl rsync://rsync.paas.rpki.ripe.net/repository/9bb77c8a-2d69-4325-b4fa-603388c96bb3/1/AD51B4FA37D423844399722D5240A94674496236.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AD51B4FA37D423844399722D5240A94674496236.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:45:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:eb:68:e0:87:bb:45:f1:93:eb:5a:55:a4:f5:3e:67:2b:e5:45:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AD51B4FA37D423844399722D5240A94674496236 Validity Not Before: Dec 6 08:28:17 2025 GMT Not After : Dec 7 08:53:17 2025 GMT Subject: CN=10C63D7681705654F39B61256963EF5DD5EADBBA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:2e:44:6e:dd:50:aa:4b:2f:ee:6b:c2:b8:28: 30:7c:ae:97:60:55:e7:41:ce:ab:d1:7d:25:2d:57: 26:cd:43:70:62:fe:e2:f4:de:9e:ed:25:54:ea:4b: 60:3b:e7:3e:5e:2a:43:57:e5:e9:0c:40:9b:0f:c8: 0a:a3:3f:db:fc:fb:38:1b:71:c1:1d:38:e8:ad:de: 69:15:72:a5:53:9f:0e:1a:e1:e5:69:cd:1e:b9:52: f7:28:87:66:9d:40:d1:17:62:c4:b5:69:ef:cb:02: 55:d3:36:6e:5a:3b:d7:36:57:79:28:26:59:1d:89: 35:3a:cf:f6:15:bc:7d:df:84:ce:94:54:8a:89:e9: 5b:42:ae:7a:c5:e6:49:3b:98:93:3e:5e:b0:b4:7e: 49:57:bd:b4:7c:d6:ba:c2:5c:38:88:e4:74:e8:c1: 64:09:b0:f2:b9:c5:81:3e:5b:d6:6a:95:8c:e2:2c: 2a:ee:48:b0:9b:2d:b4:5e:45:cf:a7:3e:e3:32:cc: 39:18:e2:78:2b:9d:0d:fe:8f:7d:42:c9:b1:70:2f: 48:19:b3:58:88:30:bc:f0:73:91:2b:b7:48:70:96: ce:5c:fa:40:d5:8b:9a:dc:49:28:3f:ce:6c:18:11: 6e:3f:10:b3:cb:4e:f5:16:3c:f3:cb:64:92:b3:37: aa:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:C6:3D:76:81:70:56:54:F3:9B:61:25:69:63:EF:5D:D5:EA:DB:BA X509v3 Authority Key Identifier: keyid:AD:51:B4:FA:37:D4:23:84:43:99:72:2D:52:40:A9:46:74:49:62:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9bb77c8a-2d69-4325-b4fa-603388c96bb3/1/AD51B4FA37D423844399722D5240A94674496236.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AD51B4FA37D423844399722D5240A94674496236.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9bb77c8a-2d69-4325-b4fa-603388c96bb3/1/AD51B4FA37D423844399722D5240A94674496236.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:b1:9d:c8:3b:9d:05:df:d6:47:cd:3a:be:ce:5c:b1:4c:55: ef:0a:c3:fb:77:c8:76:73:96:94:13:21:53:83:ad:4f:f4:e7: e9:60:f5:a0:28:7f:46:d3:37:14:44:08:b8:d4:13:52:0b:00: 04:54:75:ee:38:c9:77:ed:f4:3d:46:d8:49:79:08:0a:49:a1: 13:c7:5d:c9:b5:3b:6d:53:bc:6e:60:e8:d2:00:5c:e8:0c:0e: 07:0a:40:a2:c5:80:c0:98:fb:89:76:72:7d:f3:6c:fa:60:ed: 00:9d:16:03:60:86:5e:72:d1:33:66:c7:9c:8e:34:be:b0:7b: 0a:75:22:d3:de:f5:73:bf:99:31:99:7f:d0:9a:b9:c1:96:b6: 2f:f1:2f:9d:c5:7d:9e:e8:ea:3d:ae:06:8c:2d:13:2f:4b:7c: ec:14:7b:24:1f:4d:3d:64:08:f4:6f:c1:61:0a:69:07:4a:65: c2:3a:fa:9f:bf:5f:f0:c2:26:96:61:bd:64:63:9a:1b:a3:91: 32:26:5b:e9:e5:4f:2d:14:cf:7b:a5:5c:0d:62:23:f0:05:6f: 0b:82:ae:10:26:80:80:7a:ef:04:2c:be:d4:74:a6:2e:f2:08: 56:a1:f3:66:ab:e4:d7:fe:55:34:b0:3f:5f:d1:91:1b:0e:7d: 10:09:c4:03 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUXOto4Ie7RfGT61pVpPU+ZyvlRY0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUQ1MUI0RkEzN0Q0MjM4NDQzOTk3MjJENTI0MEE5NDY3 NDQ5NjIzNjAeFw0yNTEyMDYwODI4MTdaFw0yNTEyMDcwODUzMTdaMDMxMTAvBgNV BAMTKDEwQzYzRDc2ODE3MDU2NTRGMzlCNjEyNTY5NjNFRjVERDVFQURCQkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkLkRu3VCqSy/ua8K4KDB8rpdg VedBzqvRfSUtVybNQ3Bi/uL03p7tJVTqS2A75z5eKkNX5ekMQJsPyAqjP9v8+zgb ccEdOOit3mkVcqVTnw4a4eVpzR65Uvcoh2adQNEXYsS1ae/LAlXTNm5aO9c2V3ko JlkdiTU6z/YVvH3fhM6UVIqJ6VtCrnrF5kk7mJM+XrC0fklXvbR81rrCXDiI5HTo wWQJsPK5xYE+W9ZqlYziLCruSLCbLbReRc+nPuMyzDkY4ngrnQ3+j31CybFwL0gZ s1iIMLzwc5Ert0hwls5c+kDVi5rcSSg/zmwYEW4/ELPLTvUWPPPLZJKzN6o9AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUEMY9doFwVlTzm2ElaWPvXdXq27owHwYDVR0j BBgwFoAUrVG0+jfUI4RDmXItUkCpRnRJYjYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWJiNzdjOGEtMmQ2OS00MzI1LWI0ZmEtNjAzMzg4Yzk2 YmIzLzEvQUQ1MUI0RkEzN0Q0MjM4NDQzOTk3MjJENTI0MEE5NDY3NDQ5NjIzNi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9BRDUxQjRGQTM3RDQyMzg0NDM5OTcyMkQ1 MjQwQTk0Njc0NDk2MjM2LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzliYjc3YzhhLTJkNjktNDMyNS1iNGZhLTYwMzM4OGM5NmJiMy8xL0FENTFCNEZB MzdENDIzODQ0Mzk5NzIyRDUyNDBBOTQ2NzQ0OTYyMzYubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAdsZ3I O50F39ZHzTq+zlyxTFXvCsP7d8h2c5aUEyFTg61P9OfpYPWgKH9G0zcURAi41BNS CwAEVHXuOMl37fQ9RthJeQgKSaETx13JtTttU7xuYOjSAFzoDA4HCkCixYDAmPuJ dnJ982z6YO0AnRYDYIZectEzZsecjjS+sHsKdSLT3vVzv5kxmX/QmrnBlrYv8S+d xX2e6Oo9rgaMLRMvS3zsFHskH009ZAj0b8FhCmkHSmXCOvqfv1/wwiaWYb1kY5ob o5EyJlvp5U8tFM97pVwNYiPwBW8Lgq4QJoCAeu8ELL7UdKYu8ghWofNmq+TX/lU0 sD9f0ZEbDn0QCcQD -----END CERTIFICATE-----Generated at Sat Dec 6 10:51:43 2025 by rpki-client