This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/0/35ACA6262E13FCF885902051522BBE65379AE61D.mft File: 35ACA6262E13FCF885902051522BBE65379AE61D.mft (raw, json) Hash identifier: snuXXAEK5oRQTa7uEhbimMVCWSN1Lx7kE3+0NABTNUE= Subject key identifier: F8:8A:D2:CA:5C:33:2F:5C:F9:50:50:D9:29:15:5C:21:25:CC:95:6B Authority key identifier: 35:AC:A6:26:2E:13:FC:F8:85:90:20:51:52:2B:BE:65:37:9A:E6:1D Certificate issuer: /CN=35aca6262e13fcf885902051522bbe65379ae61d Certificate serial: 6F92E3CE373B75E3184DBC284970AED3973416BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NaymJi4T_PiFkCBRUiu-ZTea5h0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/0/35ACA6262E13FCF885902051522BBE65379AE61D.mft Manifest number: 0139 Signing time: Sat 06 Dec 2025 05:04:17 +0000 Manifest this update: Sat 06 Dec 2025 04:59:17 +0000 Manifest next update: Sun 07 Dec 2025 06:10:17 +0000 Files and hashes: 1: 35ACA6262E13FCF885902051522BBE65379AE61D.crl (hash: JeTxX1ZSRRiG7Ednb8ERQda5gYGPDFiIKfYN9ubwr5A=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/0/35ACA6262E13FCF885902051522BBE65379AE61D.crl rsync://rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/0/35ACA6262E13FCF885902051522BBE65379AE61D.mft rsync://rpki.ripe.net/repository/DEFAULT/NaymJi4T_PiFkCBRUiu-ZTea5h0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:92:e3:ce:37:3b:75:e3:18:4d:bc:28:49:70:ae:d3:97:34:16:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35aca6262e13fcf885902051522bbe65379ae61d Validity Not Before: Dec 6 04:59:17 2025 GMT Not After : Dec 7 06:10:17 2025 GMT Subject: CN=F88AD2CA5C332F5CF95050D929155C2125CC956B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:20:8b:49:95:17:aa:40:82:ce:8f:b1:ec:14: c1:bf:22:bf:ca:80:9a:b5:b2:e9:ce:1e:74:51:f9: e6:f6:41:8d:f6:85:e7:00:82:c0:8d:15:f6:cc:19: 13:ae:cf:6c:b3:4d:bd:59:10:ca:fb:21:0a:14:08: b7:67:d1:53:99:2a:b3:50:7e:e3:62:fe:df:5d:6f: ac:05:75:8d:00:a2:fe:a4:81:2f:f9:a0:96:b6:87: 68:50:1c:db:af:17:2b:05:58:1a:cb:22:31:8d:40: 4d:e5:d1:73:34:47:06:94:25:4f:ac:1e:58:73:b0: 7c:b8:1c:14:98:6b:05:c8:a0:83:d7:52:e7:48:08: 0f:d5:a7:7f:46:59:1d:d8:0d:f0:79:f1:34:1c:fc: f2:96:ae:14:ae:4e:54:39:24:48:1c:c2:7c:e2:eb: 9e:e3:bb:64:26:b7:1b:a3:63:6d:ea:77:2f:fb:c1: 26:8a:f7:ff:5a:3a:34:8b:52:33:59:44:65:58:8f: ff:6a:c1:da:83:c7:d3:72:39:f7:89:54:33:22:b7: 61:6f:44:36:c6:0c:c2:7d:a8:23:1d:b7:61:7e:e6: 1c:2c:b1:98:98:77:ff:67:ce:5e:39:ae:ed:c9:42: b7:b7:5d:3a:1e:0d:88:1e:01:24:e7:d1:5b:55:5b: db:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:8A:D2:CA:5C:33:2F:5C:F9:50:50:D9:29:15:5C:21:25:CC:95:6B X509v3 Authority Key Identifier: keyid:35:AC:A6:26:2E:13:FC:F8:85:90:20:51:52:2B:BE:65:37:9A:E6:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/0/35ACA6262E13FCF885902051522BBE65379AE61D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NaymJi4T_PiFkCBRUiu-ZTea5h0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/0/35ACA6262E13FCF885902051522BBE65379AE61D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:43:f4:b9:c8:40:58:4b:f7:b2:85:3d:47:4d:67:84:12:5b: 53:50:5e:86:cf:5a:aa:36:c2:75:f1:18:88:d6:2d:41:ba:47: d6:b8:5d:b6:f4:4b:2c:9f:d5:49:a4:36:f4:d6:6a:be:c9:9f: 10:74:20:80:9b:03:30:82:f1:f1:b1:6e:ea:17:13:f5:68:8b: 7e:85:cd:b1:9a:b0:fc:45:6f:88:49:58:a6:42:b4:45:5d:0c: f6:9b:ec:c3:91:4e:eb:ab:54:e0:27:c1:9e:64:5d:1a:02:50: c8:9b:0c:fc:1e:e8:33:6e:3e:52:03:a5:c2:4b:3e:f3:5b:b5: b2:a6:c8:6b:d2:be:14:f6:3a:d1:2e:ac:a1:12:08:61:28:3c: a5:ab:8e:5e:e2:86:42:44:f8:0f:41:45:ba:3b:5b:31:c3:80: d8:d6:45:37:06:cc:e5:23:54:48:7c:a3:d2:ac:3d:3d:01:9d: ac:e6:f5:ea:70:64:3e:95:6b:df:c2:d3:62:69:83:8f:07:5f: a6:95:a1:66:e2:db:84:d4:79:b0:4a:db:da:68:78:3c:11:d8: 5a:3a:ca:57:11:20:50:62:5c:c2:cf:40:69:ba:6a:41:d9:61: 25:4a:7e:11:83:0d:a4:b8:98:f2:a7:e7:05:4e:3d:1f:2b:b3: 6c:2c:86:90 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUb5Ljzjc7deMYTbwoSXCu05c0Fr8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzVhY2E2MjYyZTEzZmNmODg1OTAyMDUxNTIyYmJlNjUz NzlhZTYxZDAeFw0yNTEyMDYwNDU5MTdaFw0yNTEyMDcwNjEwMTdaMDMxMTAvBgNV BAMTKEY4OEFEMkNBNUMzMzJGNUNGOTUwNTBEOTI5MTU1QzIxMjVDQzk1NkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8IItJlReqQILOj7HsFMG/Ir/K gJq1sunOHnRR+eb2QY32hecAgsCNFfbMGROuz2yzTb1ZEMr7IQoUCLdn0VOZKrNQ fuNi/t9db6wFdY0Aov6kgS/5oJa2h2hQHNuvFysFWBrLIjGNQE3l0XM0RwaUJU+s HlhzsHy4HBSYawXIoIPXUudICA/Vp39GWR3YDfB58TQc/PKWrhSuTlQ5JEgcwnzi 657ju2QmtxujY23qdy/7wSaK9/9aOjSLUjNZRGVYj/9qwdqDx9NyOfeJVDMit2Fv RDbGDMJ9qCMdt2F+5hwssZiYd/9nzl45ru3JQre3XToeDYgeASTn0VtVW9tlAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU+IrSylwzL1z5UFDZKRVcISXMlWswHwYDVR0j BBgwFoAUNaymJi4T/PiFkCBRUiu+ZTea5h0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTVkNGMwMGItZDEwNS00OTA2LWI5ODEtMWQwMzQzZTMw MWRhLzAvMzVBQ0E2MjYyRTEzRkNGODg1OTAyMDUxNTIyQkJFNjUzNzlBRTYxRC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL05heW1KaTRUX1BpRmtDQlJVaXUtWlRl YTVoMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hNWQ0YzAwYi1k MTA1LTQ5MDYtYjk4MS0xZDAzNDNlMzAxZGEvMC8zNUFDQTYyNjJFMTNGQ0Y4ODU5 MDIwNTE1MjJCQkU2NTM3OUFFNjFELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ0P0uchAWEv3soU9R01n hBJbU1Behs9aqjbCdfEYiNYtQbpH1rhdtvRLLJ/VSaQ29NZqvsmfEHQggJsDMILx 8bFu6hcT9WiLfoXNsZqw/EVviElYpkK0RV0M9pvsw5FO66tU4CfBnmRdGgJQyJsM /B7oM24+UgOlwks+81u1sqbIa9K+FPY60S6soRIIYSg8pauOXuKGQkT4D0FFujtb McOA2NZFNwbM5SNUSHyj0qw9PQGdrOb16nBkPpVr38LTYmmDjwdfppWhZuLbhNR5 sErb2mh4PBHYWjrKVxEgUGJcws9AabpqQdlhJUp+EYMNpLiY8qfnBU49HyuzbCyG kA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:17:42 2025 by rpki-client