This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b54fd736-bbc0-4882-84e9-44cc86795dad/0/8FBAB13DB123C5D63DBBC550D214B3E10C091998.mft File: 8FBAB13DB123C5D63DBBC550D214B3E10C091998.mft (raw, json) Hash identifier: f79XJWiBx1LY1UVT1djmMkfmJMPhGWZaNVDTxUwXisk= Subject key identifier: 4A:95:E7:E2:70:3C:7E:2E:C2:23:3F:29:01:A0:68:E0:08:20:9C:B9 Authority key identifier: 8F:BA:B1:3D:B1:23:C5:D6:3D:BB:C5:50:D2:14:B3:E1:0C:09:19:98 Certificate issuer: /CN=8fbab13db123c5d63dbbc550d214b3e10c091998 Certificate serial: 72A4EDDD071E03F66B1DD45C8CAA5D04E6064ADC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j7qxPbEjxdY9u8VQ0hSz4QwJGZg.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b54fd736-bbc0-4882-84e9-44cc86795dad/0/8FBAB13DB123C5D63DBBC550D214B3E10C091998.mft Manifest number: 0156 Signing time: Fri 05 Dec 2025 19:13:24 +0000 Manifest this update: Fri 05 Dec 2025 19:08:24 +0000 Manifest next update: Sat 06 Dec 2025 23:09:24 +0000 Files and hashes: 1: 8FBAB13DB123C5D63DBBC550D214B3E10C091998.crl (hash: tz1gq0RFZWqHbzoWnfvffssbcQX4hEmDMrN1j/Gf5Lw=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b54fd736-bbc0-4882-84e9-44cc86795dad/0/8FBAB13DB123C5D63DBBC550D214B3E10C091998.crl rsync://rsync.paas.rpki.ripe.net/repository/b54fd736-bbc0-4882-84e9-44cc86795dad/0/8FBAB13DB123C5D63DBBC550D214B3E10C091998.mft rsync://rpki.ripe.net/repository/DEFAULT/j7qxPbEjxdY9u8VQ0hSz4QwJGZg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:09:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:a4:ed:dd:07:1e:03:f6:6b:1d:d4:5c:8c:aa:5d:04:e6:06:4a:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8fbab13db123c5d63dbbc550d214b3e10c091998 Validity Not Before: Dec 5 19:08:24 2025 GMT Not After : Dec 6 23:09:24 2025 GMT Subject: CN=4A95E7E2703C7E2EC2233F2901A068E008209CB9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:4d:c4:ea:03:ab:84:35:48:8f:9f:d2:c5:6b: aa:f6:f3:b4:49:05:08:42:df:ed:e2:9b:f5:d4:f1: 9f:4c:8d:e7:89:d6:72:96:ed:ca:ae:28:73:44:21: df:c5:2d:e0:df:a4:89:93:b8:3b:68:d3:71:c9:3c: ed:49:f2:66:18:b2:af:c5:de:b1:66:e9:8f:a6:ee: d2:56:48:15:41:28:c3:1a:86:a3:ac:63:e3:5e:63: be:12:c7:24:bf:9f:89:b9:48:32:9f:2a:70:a7:94: 8c:bd:75:c2:8b:43:a5:f6:cd:5a:18:f4:10:ee:fe: 39:c3:eb:e3:34:97:66:23:b3:df:a8:f6:6c:db:7b: 03:dc:e1:ec:16:ba:08:76:2f:f2:24:0f:09:9f:4a: 20:30:31:86:7b:13:45:8b:17:51:b2:de:26:43:8b: 20:24:ff:9e:2f:0b:79:48:ab:dc:34:fe:a1:0d:17: d1:28:67:19:c8:40:98:7e:46:a6:62:12:d7:6b:ac: 19:06:9f:44:a5:bc:12:c3:54:ee:75:58:d2:42:24: 4c:c9:27:60:f3:f5:2b:47:2f:23:d0:11:a6:1e:b5: 1c:da:5d:20:2f:a7:5b:95:4f:05:cb:c0:34:15:25: 50:51:6f:8b:a5:d4:8e:c8:b8:e5:1e:03:4e:22:67: 39:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:95:E7:E2:70:3C:7E:2E:C2:23:3F:29:01:A0:68:E0:08:20:9C:B9 X509v3 Authority Key Identifier: keyid:8F:BA:B1:3D:B1:23:C5:D6:3D:BB:C5:50:D2:14:B3:E1:0C:09:19:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b54fd736-bbc0-4882-84e9-44cc86795dad/0/8FBAB13DB123C5D63DBBC550D214B3E10C091998.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j7qxPbEjxdY9u8VQ0hSz4QwJGZg.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b54fd736-bbc0-4882-84e9-44cc86795dad/0/8FBAB13DB123C5D63DBBC550D214B3E10C091998.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:b8:b3:be:f3:9a:0c:0a:c2:e4:77:ea:ce:c3:cc:f7:3d:d2: 28:60:3a:ff:32:9d:d2:27:0e:73:0a:a2:6a:0e:5c:73:bf:a0: ca:8a:32:37:b5:6f:31:21:ea:25:2e:2e:87:28:53:ca:f9:6e: d8:36:c2:52:ad:6a:31:2f:09:29:cb:63:1c:e3:13:1d:0f:12: 9b:7e:5f:69:b9:49:69:ad:83:e5:96:10:ae:6d:df:7a:3f:fb: 1a:62:43:9a:52:41:9f:3b:88:7e:2a:d3:0a:c9:c0:bb:a1:a5: 59:5a:bf:dd:51:3a:15:d4:69:e5:57:31:cb:42:8c:05:9d:cb: 4d:c5:63:1b:e9:d9:fa:72:bb:9a:15:7b:54:cf:d1:59:b4:2a: 5b:09:7a:cc:cc:14:f4:e7:17:87:d9:05:d9:10:b8:ae:07:76: b7:37:25:af:15:29:75:ee:e5:17:23:c6:95:ac:ca:b0:1a:65: 8c:da:31:8b:3a:7c:e7:b9:de:eb:8e:53:61:b1:70:26:5b:a1: f9:f7:9e:79:0c:56:d0:76:dc:c3:76:93:9d:1b:60:9d:32:76: 15:df:7d:31:f8:8f:a6:d8:41:70:75:14:60:57:88:d7:29:c0: 4c:3f:a7:ff:4c:fd:06:36:1a:0c:c4:ee:43:f9:50:e9:d2:d0: 5c:26:aa:8d -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUcqTt3QceA/ZrHdRcjKpdBOYGStwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGZiYWIxM2RiMTIzYzVkNjNkYmJjNTUwZDIxNGIzZTEw YzA5MTk5ODAeFw0yNTEyMDUxOTA4MjRaFw0yNTEyMDYyMzA5MjRaMDMxMTAvBgNV BAMTKDRBOTVFN0UyNzAzQzdFMkVDMjIzM0YyOTAxQTA2OEUwMDgyMDlDQjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDATcTqA6uENUiPn9LFa6r287RJ BQhC3+3im/XU8Z9MjeeJ1nKW7cquKHNEId/FLeDfpImTuDto03HJPO1J8mYYsq/F 3rFm6Y+m7tJWSBVBKMMahqOsY+NeY74SxyS/n4m5SDKfKnCnlIy9dcKLQ6X2zVoY 9BDu/jnD6+M0l2Yjs9+o9mzbewPc4ewWugh2L/IkDwmfSiAwMYZ7E0WLF1Gy3iZD iyAk/54vC3lIq9w0/qENF9EoZxnIQJh+RqZiEtdrrBkGn0SlvBLDVO51WNJCJEzJ J2Dz9StHLyPQEaYetRzaXSAvp1uVTwXLwDQVJVBRb4ul1I7IuOUeA04iZznjAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUSpXn4nA8fi7CIz8pAaBo4AggnLkwHwYDVR0j BBgwFoAUj7qxPbEjxdY9u8VQ0hSz4QwJGZgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYjU0ZmQ3MzYtYmJjMC00ODgyLTg0ZTktNDRjYzg2Nzk1 ZGFkLzAvOEZCQUIxM0RCMTIzQzVENjNEQkJDNTUwRDIxNEIzRTEwQzA5MTk5OC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2o3cXhQYkVqeGRZOXU4VlEwaFN6NFF3 SkdaZy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iNTRmZDczNi1i YmMwLTQ4ODItODRlOS00NGNjODY3OTVkYWQvMC84RkJBQjEzREIxMjNDNUQ2M0RC QkM1NTBEMjE0QjNFMTBDMDkxOTk4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqLizvvOaDArC5HfqzsPM 9z3SKGA6/zKd0icOcwqiag5cc7+gyooyN7VvMSHqJS4uhyhTyvlu2DbCUq1qMS8J KctjHOMTHQ8Sm35fablJaa2D5ZYQrm3fej/7GmJDmlJBnzuIfirTCsnAu6GlWVq/ 3VE6FdRp5Vcxy0KMBZ3LTcVjG+nZ+nK7mhV7VM/RWbQqWwl6zMwU9OcXh9kF2RC4 rgd2tzclrxUpde7lFyPGlazKsBpljNoxizp857ne645TYbFwJluh+feeeQxW0Hbc w3aTnRtgnTJ2Fd99MfiPpthBcHUUYFeI1ynATD+n/0z9BjYaDMTuQ/lQ6dLQXCaq jQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:25:20 2025 by rpki-client