This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/6/7D7059638411E3231E759E74A813BF9376209E77.mft File: 7D7059638411E3231E759E74A813BF9376209E77.mft (raw, json) Hash identifier: WDLJrLGBiQJi+zmMwNGuJGyfHc9WjLDkW+YpC8GHvnU= Subject key identifier: C6:33:37:0B:09:39:7B:B8:C9:0D:06:9E:0E:2E:16:96:21:40:0E:95 Authority key identifier: 7D:70:59:63:84:11:E3:23:1E:75:9E:74:A8:13:BF:93:76:20:9E:77 Certificate issuer: /CN=7d7059638411e3231e759e74a813bf9376209e77 Certificate serial: 0398C4DA6F27F8ADACC0628E18CEF0E883D3B585 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fXBZY4QR4yMedZ50qBO_k3Ygnnc.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/6/7D7059638411E3231E759E74A813BF9376209E77.mft Manifest number: 027D Signing time: Fri 05 Dec 2025 21:34:25 +0000 Manifest this update: Fri 05 Dec 2025 21:29:25 +0000 Manifest next update: Sun 07 Dec 2025 00:51:25 +0000 Files and hashes: 1: 7D7059638411E3231E759E74A813BF9376209E77.crl (hash: gpbTl3sjmsVsHPGg7z8gBVjO+ZbNbledSU+7soDYY98=) 2: AS215849.asa (hash: zDqRf1CmpsA1KFLVwsUM6m+4OIs88BLCSJXXlOwSvmc=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/6/7D7059638411E3231E759E74A813BF9376209E77.crl rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/6/7D7059638411E3231E759E74A813BF9376209E77.mft rsync://rpki.ripe.net/repository/DEFAULT/fXBZY4QR4yMedZ50qBO_k3Ygnnc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:98:c4:da:6f:27:f8:ad:ac:c0:62:8e:18:ce:f0:e8:83:d3:b5:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d7059638411e3231e759e74a813bf9376209e77 Validity Not Before: Dec 5 21:29:25 2025 GMT Not After : Dec 7 00:51:25 2025 GMT Subject: CN=C633370B09397BB8C90D069E0E2E169621400E95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:43:5a:d0:ca:b4:f5:9c:ec:fc:8d:42:b7:2e: 77:ab:8a:72:0b:2f:b4:81:15:1f:ed:c5:fc:b9:53: 11:5e:17:89:4c:86:7a:23:f0:e6:96:67:a6:b6:ea: f3:07:d7:9e:b4:1a:7d:ad:30:4b:cc:0d:4e:3e:35: c0:5f:18:69:42:e3:62:24:21:01:be:44:ff:ae:cb: da:a4:12:1e:99:47:41:c1:f9:8b:3b:f8:5b:2b:7f: 51:39:5f:54:64:e9:e3:e3:cf:47:dd:1d:c8:b4:8a: 37:53:1c:df:b7:2d:8e:e6:db:3d:0c:67:1d:1d:72: 68:92:ed:e0:1b:45:79:46:16:e0:d3:fd:af:a5:08: 5b:bb:1e:75:c9:18:37:c4:dc:95:2f:77:ad:d5:7f: 4d:cf:b4:69:b6:48:ad:e2:23:20:e8:cd:f5:f4:5b: e4:72:60:51:5f:51:de:84:27:ec:41:79:6c:2e:ad: 4d:0e:b7:33:51:51:6c:a7:2f:64:85:a3:ee:1f:f0: e2:df:79:cf:fd:be:a1:2f:2d:30:ff:bd:6d:a5:82: 25:81:1f:cb:89:9d:60:7b:07:d9:4a:c9:7b:6f:2d: ea:25:86:f9:d7:7a:f9:b6:e3:b2:65:9b:4f:5c:b3: 8f:e8:dc:0a:d4:28:7b:e5:cf:1e:16:ee:3c:68:0a: 5f:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:33:37:0B:09:39:7B:B8:C9:0D:06:9E:0E:2E:16:96:21:40:0E:95 X509v3 Authority Key Identifier: keyid:7D:70:59:63:84:11:E3:23:1E:75:9E:74:A8:13:BF:93:76:20:9E:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/6/7D7059638411E3231E759E74A813BF9376209E77.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fXBZY4QR4yMedZ50qBO_k3Ygnnc.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/6/7D7059638411E3231E759E74A813BF9376209E77.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:e2:fd:a3:c9:5e:02:25:6c:c2:8f:42:95:e6:a7:7c:7a:0b: b9:4f:e0:59:97:08:86:c7:88:aa:ef:69:a2:a9:5b:8c:9f:14: 42:2d:2e:60:d6:89:b5:95:f4:42:02:a4:d9:de:b0:a4:79:39: d7:58:bc:50:5c:ce:7a:a6:9b:b4:8f:1b:a7:72:a7:cb:f8:94: ce:b9:e0:17:12:cb:83:a3:35:72:65:13:24:7d:51:9c:f4:d6: 9a:f8:f3:5b:b7:13:d4:52:df:04:a9:8a:2d:2a:09:7c:00:d7: 7f:8b:c9:97:46:71:6b:e5:8d:f5:da:2b:1b:de:c5:c0:a2:2e: 9e:77:73:cf:53:4e:1b:71:e1:33:59:38:e2:0a:0c:64:f7:16: 46:61:a5:c7:04:50:13:6b:8a:1c:ae:47:47:74:3a:b9:28:eb: 08:e2:f2:35:75:df:41:53:1e:fd:8e:c8:58:26:f0:9a:17:e4: 10:33:97:97:db:8f:dd:e0:a0:f6:70:72:8e:a6:44:1a:5b:bd: e3:ae:2d:d0:85:5e:b8:d1:ce:cc:b9:e4:cf:9f:8b:50:68:88: 2f:ca:24:42:1d:6e:18:dc:e6:97:52:e2:66:c9:8b:23:c2:8c: e6:b0:fa:ab:f1:a7:17:b7:2f:e7:f1:77:f6:f9:1c:58:39:70: b1:bf:a0:84 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUA5jE2m8n+K2swGKOGM7w6IPTtYUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN2Q3MDU5NjM4NDExZTMyMzFlNzU5ZTc0YTgxM2JmOTM3 NjIwOWU3NzAeFw0yNTEyMDUyMTI5MjVaFw0yNTEyMDcwMDUxMjVaMDMxMTAvBgNV BAMTKEM2MzMzNzBCMDkzOTdCQjhDOTBEMDY5RTBFMkUxNjk2MjE0MDBFOTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeQ1rQyrT1nOz8jUK3LnerinIL L7SBFR/txfy5UxFeF4lMhnoj8OaWZ6a26vMH1560Gn2tMEvMDU4+NcBfGGlC42Ik IQG+RP+uy9qkEh6ZR0HB+Ys7+Fsrf1E5X1Rk6ePjz0fdHci0ijdTHN+3LY7m2z0M Zx0dcmiS7eAbRXlGFuDT/a+lCFu7HnXJGDfE3JUvd63Vf03PtGm2SK3iIyDozfX0 W+RyYFFfUd6EJ+xBeWwurU0OtzNRUWynL2SFo+4f8OLfec/9vqEvLTD/vW2lgiWB H8uJnWB7B9lKyXtvLeolhvnXevm247Jlm09cs4/o3ArUKHvlzx4W7jxoCl+nAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUxjM3Cwk5e7jJDQaeDi4WliFADpUwHwYDVR0j BBgwFoAUfXBZY4QR4yMedZ50qBO/k3YgnncwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWMwZWQwNDYtZmE5NS00NWMzLTkxNDYtOTcxZGI4YTll OGJiLzYvN0Q3MDU5NjM4NDExRTMyMzFFNzU5RTc0QTgxM0JGOTM3NjIwOUU3Ny5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZYQlpZNFFSNHlNZWRaNTBxQk9fazNZ Z25uYy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85YzBlZDA0Ni1m YTk1LTQ1YzMtOTE0Ni05NzFkYjhhOWU4YmIvNi83RDcwNTk2Mzg0MTFFMzIzMUU3 NTlFNzRBODEzQkY5Mzc2MjA5RTc3Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZeL9o8leAiVswo9Clean fHoLuU/gWZcIhseIqu9poqlbjJ8UQi0uYNaJtZX0QgKk2d6wpHk511i8UFzOeqab tI8bp3Kny/iUzrngFxLLg6M1cmUTJH1RnPTWmvjzW7cT1FLfBKmKLSoJfADXf4vJ l0Zxa+WN9dorG97FwKIunndzz1NOG3HhM1k44goMZPcWRmGlxwRQE2uKHK5HR3Q6 uSjrCOLyNXXfQVMe/Y7IWCbwmhfkEDOXl9uP3eCg9nByjqZEGlu9464t0IVeuNHO zLnkz5+LUGiIL8okQh1uGNzml1LiZsmLI8KM5rD6q/GnF7cv5/F39vkcWDlwsb+g hA== -----END CERTIFICATE-----Generated at Sat Dec 6 04:59:19 2025 by rpki-client