This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/2/90E57142D4347C73111C714D4AC1199136EFCEF2.mft File: 90E57142D4347C73111C714D4AC1199136EFCEF2.mft (raw, json) Hash identifier: O5MytT/mZ5hpGwmEm8EkYhVjPwBLA5idfAzHpelXX1c= Subject key identifier: A8:E7:09:B4:B9:64:CC:34:32:66:B7:54:A0:83:87:9E:27:68:4E:49 Authority key identifier: 90:E5:71:42:D4:34:7C:73:11:1C:71:4D:4A:C1:19:91:36:EF:CE:F2 Certificate issuer: /CN=90E57142D4347C73111C714D4AC1199136EFCEF2 Certificate serial: 60A30F55000F19F63F49AF1E58EC9A54FE9AB60C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/90E57142D4347C73111C714D4AC1199136EFCEF2.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/2/90E57142D4347C73111C714D4AC1199136EFCEF2.mft Manifest number: 0A Signing time: Sat 06 Dec 2025 00:24:17 +0000 Manifest this update: Sat 06 Dec 2025 00:19:17 +0000 Manifest next update: Sun 07 Dec 2025 02:29:17 +0000 Files and hashes: 1: 90E57142D4347C73111C714D4AC1199136EFCEF2.crl (hash: eUJOYKymqhAdz4m2kESWykPQqUNYDqygiYowhp7BWIk=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/2/90E57142D4347C73111C714D4AC1199136EFCEF2.crl rsync://rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/2/90E57142D4347C73111C714D4AC1199136EFCEF2.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/90E57142D4347C73111C714D4AC1199136EFCEF2.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:45:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:a3:0f:55:00:0f:19:f6:3f:49:af:1e:58:ec:9a:54:fe:9a:b6:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90E57142D4347C73111C714D4AC1199136EFCEF2 Validity Not Before: Dec 6 00:19:17 2025 GMT Not After : Dec 7 02:29:17 2025 GMT Subject: CN=A8E709B4B964CC343266B754A083879E27684E49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:ea:47:39:7b:f1:2d:e1:90:3f:f6:c7:aa:79: a7:0b:d3:15:df:62:f2:ee:2e:c3:08:10:94:9a:7a: 9d:88:7e:15:06:33:c2:c5:15:c0:14:07:c9:ab:44: a5:c2:bc:ec:60:a7:67:e0:37:30:a7:aa:ea:b5:70: c8:fe:46:68:c3:e1:cf:17:d6:14:05:ba:30:48:b7: e8:a2:28:6d:c8:de:e2:fb:ba:6c:48:b0:4d:27:88: 7b:96:4f:d2:77:1b:84:4d:2b:32:79:d3:7a:c2:b4: b5:b1:4a:e3:ab:42:d0:a9:01:e1:ee:4c:b0:70:e2: 31:a4:87:c4:9d:b1:65:73:ad:8b:ee:98:e9:71:36: 5f:76:17:53:45:19:80:b8:bc:35:dd:a9:e7:72:73: eb:71:09:d1:fc:11:de:ba:c7:4c:34:14:59:b3:c1: f9:1c:32:9e:a9:8b:a4:76:2a:f8:52:18:8c:e5:73: ab:e7:28:6f:82:21:01:f5:2c:35:18:90:44:b0:51: 50:07:6a:45:e5:bc:6e:e1:8c:bf:fe:b4:e1:0e:48: e3:10:13:6e:cc:d8:34:89:06:0c:30:ed:03:ad:9b: aa:08:92:39:84:1b:4b:10:51:79:b9:19:a6:bb:68: 3c:64:50:36:f8:bb:e4:fc:d5:67:44:0b:4e:cc:8d: 54:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:E7:09:B4:B9:64:CC:34:32:66:B7:54:A0:83:87:9E:27:68:4E:49 X509v3 Authority Key Identifier: keyid:90:E5:71:42:D4:34:7C:73:11:1C:71:4D:4A:C1:19:91:36:EF:CE:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/2/90E57142D4347C73111C714D4AC1199136EFCEF2.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/90E57142D4347C73111C714D4AC1199136EFCEF2.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/2/90E57142D4347C73111C714D4AC1199136EFCEF2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:ca:db:9b:7a:aa:8d:9c:3d:41:53:da:de:34:bb:70:c1:30: af:6a:b6:21:68:0a:b0:5d:bc:39:e9:bd:93:5d:25:87:e8:b4: be:e7:04:b1:f2:bd:1e:f6:6b:20:c2:3d:66:ce:da:1d:62:18: 73:a8:bf:d9:37:52:c2:5b:90:b0:50:66:c2:4b:44:70:64:a4: a2:26:ea:96:61:f7:22:2a:58:5b:70:94:9f:f1:2b:62:21:85: f8:f0:09:df:96:42:00:b4:ab:13:d4:db:6e:4b:76:1e:e4:fa: fb:14:19:b6:ad:d3:f8:ff:22:9a:3b:9a:f2:be:13:97:29:a2: 94:52:27:8f:20:b6:ea:46:2b:71:44:99:5c:fa:4a:e8:ab:94: 60:f5:5f:62:92:a7:13:8b:cb:26:17:3e:43:a4:42:34:f4:d6: b8:f2:cf:09:64:46:e0:7f:2f:7d:de:cf:aa:03:d0:c2:1d:77: d1:4f:1d:c8:bd:86:35:d7:9f:e8:fb:d4:d3:e6:38:e3:75:3b: bc:0f:b1:bb:5b:61:cd:dc:d7:c2:12:61:cb:5a:d2:42:9d:59: 93:b6:33:5f:72:55:22:8b:72:15:d0:75:36:16:ba:0d:72:43: 52:74:ad:6c:3f:b8:53:64:0d:36:50:c0:6b:99:16:b0:13:c0: 60:07:98:5f -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUYKMPVQAPGfY/Sa8eWOyaVP6atgwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTBFNTcxNDJENDM0N0M3MzExMUM3MTRENEFDMTE5OTEz NkVGQ0VGMjAeFw0yNTEyMDYwMDE5MTdaFw0yNTEyMDcwMjI5MTdaMDMxMTAvBgNV BAMTKEE4RTcwOUI0Qjk2NENDMzQzMjY2Qjc1NEEwODM4NzlFMjc2ODRFNDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDa6kc5e/Et4ZA/9seqeacL0xXf YvLuLsMIEJSaep2IfhUGM8LFFcAUB8mrRKXCvOxgp2fgNzCnquq1cMj+RmjD4c8X 1hQFujBIt+iiKG3I3uL7umxIsE0niHuWT9J3G4RNKzJ503rCtLWxSuOrQtCpAeHu TLBw4jGkh8SdsWVzrYvumOlxNl92F1NFGYC4vDXdqedyc+txCdH8Ed66x0w0FFmz wfkcMp6pi6R2KvhSGIzlc6vnKG+CIQH1LDUYkESwUVAHakXlvG7hjL/+tOEOSOMQ E27M2DSJBgww7QOtm6oIkjmEG0sQUXm5Gaa7aDxkUDb4u+T81WdEC07MjVQfAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUqOcJtLlkzDQyZrdUoIOHnidoTkkwHwYDVR0j BBgwFoAUkOVxQtQ0fHMRHHFNSsEZkTbvzvIwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTVkNGMwMGItZDEwNS00OTA2LWI5ODEtMWQwMzQzZTMw MWRhLzIvOTBFNTcxNDJENDM0N0M3MzExMUM3MTRENEFDMTE5OTEzNkVGQ0VGMi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC85MEU1NzE0MkQ0MzQ3QzczMTExQzcxNEQ0 QUMxMTk5MTM2RUZDRUYyLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2E1ZDRjMDBiLWQxMDUtNDkwNi1iOTgxLTFkMDM0M2UzMDFkYS8yLzkwRTU3MTQy RDQzNDdDNzMxMTFDNzE0RDRBQzExOTkxMzZFRkNFRjIubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAmytub eqqNnD1BU9reNLtwwTCvarYhaAqwXbw56b2TXSWH6LS+5wSx8r0e9msgwj1mztod YhhzqL/ZN1LCW5CwUGbCS0RwZKSiJuqWYfciKlhbcJSf8StiIYX48AnflkIAtKsT 1NtuS3Ye5Pr7FBm2rdP4/yKaO5ryvhOXKaKUUiePILbqRitxRJlc+kroq5Rg9V9i kqcTi8smFz5DpEI09Na48s8JZEbgfy993s+qA9DCHXfRTx3IvYY115/o+9TT5jjj dTu8D7G7W2HN3NfCEmHLWtJCnVmTtjNfclUii3IV0HU2FroNckNSdK1sP7hTZA02 UMBrmRawE8BgB5hf -----END CERTIFICATE-----Generated at Sat Dec 6 15:35:14 2025 by rpki-client