This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.mft File: D8219647415018E4FFD3F11C27A807530D7B7CF1.mft (raw, json) Hash identifier: ZkAU56HqGmqamPoWu1ZXNLn8JGhzo//4baJomF+e/js= Subject key identifier: 90:BE:45:41:92:F5:EF:9F:68:92:87:61:76:DC:56:D4:8D:30:8F:BF Authority key identifier: D8:21:96:47:41:50:18:E4:FF:D3:F1:1C:27:A8:07:53:0D:7B:7C:F1 Certificate issuer: /CN=d8219647415018e4ffd3f11c27a807530d7b7cf1 Certificate serial: 29E03BDC3D3AF6B7A2EFDB9EEFD649F7522F614C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2CGWR0FQGOT_0_EcJ6gHUw17fPE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.mft Manifest number: 0329 Signing time: Fri 05 Dec 2025 21:34:25 +0000 Manifest this update: Fri 05 Dec 2025 21:29:25 +0000 Manifest next update: Sat 06 Dec 2025 22:01:25 +0000 Files and hashes: 1: D8219647415018E4FFD3F11C27A807530D7B7CF1.crl (hash: 0JaeW4opEY/UgIvYAQOzb5afyrplV0MXP7CAZPgd3kQ=) 2: AS215828.asa (hash: gn0zvNq0jqiLUYK3MJlHlnirErp0oB8cq8E7u3vxlhE=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.crl rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.mft rsync://rpki.ripe.net/repository/DEFAULT/2CGWR0FQGOT_0_EcJ6gHUw17fPE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:e0:3b:dc:3d:3a:f6:b7:a2:ef:db:9e:ef:d6:49:f7:52:2f:61:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d8219647415018e4ffd3f11c27a807530d7b7cf1 Validity Not Before: Dec 5 21:29:25 2025 GMT Not After : Dec 6 22:01:25 2025 GMT Subject: CN=90BE454192F5EF9F6892876176DC56D48D308FBF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:5c:7f:3a:e7:08:e3:d5:a1:74:c9:0c:ce:82: e2:96:22:f7:3a:69:2b:13:92:b0:5c:fc:c9:37:cc: 46:4d:71:75:61:e8:98:39:1a:fe:94:a9:9a:4d:9c: d8:3a:1e:bd:c8:43:91:7a:0b:6d:9b:57:75:ac:2f: 9a:b1:e2:d5:1e:fe:75:9b:82:b0:e1:7f:59:68:24: 6c:3c:07:83:82:c5:67:3a:55:63:c6:34:37:46:df: 81:3d:3c:5c:63:c5:a1:38:ce:08:21:e8:3b:6f:b3: 81:5d:4c:6f:65:d1:31:65:43:e3:f8:b6:ee:2d:6b: f2:24:3f:b6:2f:eb:03:33:33:15:42:0c:5c:a3:04: 0b:06:66:c3:4e:78:4b:8a:30:22:2d:ed:51:4f:01: ef:25:af:f0:58:6d:63:0a:e1:1c:7d:1f:6a:49:13: 8f:e9:84:ef:fd:f7:d6:bb:21:91:79:89:7b:48:94: 21:d1:ae:97:2a:fc:21:6c:77:83:69:fb:4e:22:48: 68:fd:62:9c:f5:62:f4:98:50:97:6a:1e:9d:42:fb: 9d:2e:86:38:e9:eb:5b:29:f0:19:4b:ea:3f:3a:7c: 85:14:68:92:9c:f8:70:d7:74:ad:18:0d:de:26:83: c7:43:94:05:7a:b9:b2:a0:c5:17:35:c6:d9:9a:4c: 1e:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:BE:45:41:92:F5:EF:9F:68:92:87:61:76:DC:56:D4:8D:30:8F:BF X509v3 Authority Key Identifier: keyid:D8:21:96:47:41:50:18:E4:FF:D3:F1:1C:27:A8:07:53:0D:7B:7C:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2CGWR0FQGOT_0_EcJ6gHUw17fPE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:07:86:28:04:bd:21:e4:62:ba:03:6d:97:a6:78:f2:f2:42: 4c:e5:57:ee:93:8e:21:2e:55:fa:b0:75:57:b3:be:1f:c2:c4: ef:06:3c:6c:d1:10:5b:d9:13:6e:38:f6:ad:0c:89:ec:fc:3a: d3:48:9d:e8:ad:33:15:90:b7:5f:1a:5e:6b:c8:6d:cd:8c:b1: 5a:d5:4d:4a:d9:c2:a5:08:b3:8f:b7:be:23:04:ab:fe:04:61: 9d:d0:2b:1b:2e:71:9c:38:33:b9:92:51:3a:02:22:56:85:3a: 13:bb:37:ab:b0:92:22:83:78:73:1c:69:02:c4:d4:71:94:ae: 09:40:b6:79:07:ce:68:64:c3:56:0d:7d:6b:9a:5f:37:8a:ed: d6:60:1b:60:cc:ff:70:6b:29:8e:2c:db:60:d9:a0:a8:18:23: ac:2b:cf:a6:bd:e4:0a:62:d6:e1:8d:56:4a:0d:56:eb:6b:6a: 86:f4:78:f2:35:ac:f5:7f:d7:95:d4:09:89:df:3d:81:48:99: f3:e1:64:72:66:d6:a0:e5:32:77:a1:7d:6e:18:67:67:49:b6: 26:49:5f:d2:3f:30:fd:9f:1b:a7:6b:23:b0:9b:98:cb:0d:7a: 62:13:41:5c:1a:32:f9:9a:9b:3d:54:1f:b4:d8:eb:ae:3b:7f: 99:73:2b:d0 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUKeA73D069rei79ue79ZJ91IvYUwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZDgyMTk2NDc0MTUwMThlNGZmZDNmMTFjMjdhODA3NTMw ZDdiN2NmMTAeFw0yNTEyMDUyMTI5MjVaFw0yNTEyMDYyMjAxMjVaMDMxMTAvBgNV BAMTKDkwQkU0NTQxOTJGNUVGOUY2ODkyODc2MTc2REM1NkQ0OEQzMDhGQkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIXH865wjj1aF0yQzOguKWIvc6 aSsTkrBc/Mk3zEZNcXVh6Jg5Gv6UqZpNnNg6Hr3IQ5F6C22bV3WsL5qx4tUe/nWb grDhf1loJGw8B4OCxWc6VWPGNDdG34E9PFxjxaE4zggh6Dtvs4FdTG9l0TFlQ+P4 tu4ta/IkP7Yv6wMzMxVCDFyjBAsGZsNOeEuKMCIt7VFPAe8lr/BYbWMK4Rx9H2pJ E4/phO/999a7IZF5iXtIlCHRrpcq/CFsd4Np+04iSGj9Ypz1YvSYUJdqHp1C+50u hjjp61sp8BlL6j86fIUUaJKc+HDXdK0YDd4mg8dDlAV6ubKgxRc1xtmaTB7PAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUkL5FQZL1759okodhdtxW1I0wj78wHwYDVR0j BBgwFoAU2CGWR0FQGOT/0/EcJ6gHUw17fPEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWMwZWQwNDYtZmE5NS00NWMzLTkxNDYtOTcxZGI4YTll OGJiLzAvRDgyMTk2NDc0MTUwMThFNEZGRDNGMTFDMjdBODA3NTMwRDdCN0NGMS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJDR1dSMEZRR09UXzBfRWNKNmdIVXcx N2ZQRS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85YzBlZDA0Ni1m YTk1LTQ1YzMtOTE0Ni05NzFkYjhhOWU4YmIvMC9EODIxOTY0NzQxNTAxOEU0RkZE M0YxMUMyN0E4MDc1MzBEN0I3Q0YxLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAggeGKAS9IeRiugNtl6Z4 8vJCTOVX7pOOIS5V+rB1V7O+H8LE7wY8bNEQW9kTbjj2rQyJ7Pw600id6K0zFZC3 Xxpea8htzYyxWtVNStnCpQizj7e+IwSr/gRhndArGy5xnDgzuZJROgIiVoU6E7s3 q7CSIoN4cxxpAsTUcZSuCUC2eQfOaGTDVg19a5pfN4rt1mAbYMz/cGspjizbYNmg qBgjrCvPpr3kCmLW4Y1WSg1W62tqhvR48jWs9X/XldQJid89gUiZ8+FkcmbWoOUy d6F9bhhnZ0m2Jklf0j8w/Z8bp2sjsJuYyw16YhNBXBoy+ZqbPVQftNjrrjt/mXMr 0A== -----END CERTIFICATE-----Generated at Sat Dec 6 04:58:32 2025 by rpki-client