This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b8844318-35d7-482e-bbd5-b624cf0b2041/0/1215278DAD24717513E9235A15705AA467DD6205.mft File: 1215278DAD24717513E9235A15705AA467DD6205.mft (raw, json) Hash identifier: Rfk4+dNTmnyRlNGhlKqCNxdYNFME5sqDuWTmEn5oFis= Subject key identifier: 67:97:0D:EA:B9:AC:12:3A:43:F7:00:04:62:65:E3:12:67:72:DB:C3 Authority key identifier: 12:15:27:8D:AD:24:71:75:13:E9:23:5A:15:70:5A:A4:67:DD:62:05 Certificate issuer: /CN=1215278dad24717513e9235a15705aa467dd6205 Certificate serial: 6225CE11336574967A78E4AF7A98FBE12AB978B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EhUnja0kcXUT6SNaFXBapGfdYgU.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b8844318-35d7-482e-bbd5-b624cf0b2041/0/1215278DAD24717513E9235A15705AA467DD6205.mft Manifest number: 28 Signing time: Sat 06 Dec 2025 03:11:08 +0000 Manifest this update: Sat 06 Dec 2025 03:06:08 +0000 Manifest next update: Sun 07 Dec 2025 03:54:08 +0000 Files and hashes: 1: 1215278DAD24717513E9235A15705AA467DD6205.crl (hash: S/e32Hi2znBGhgvcGuwZKL1mwpSOkuOhdg9bvHNLjns=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b8844318-35d7-482e-bbd5-b624cf0b2041/0/1215278DAD24717513E9235A15705AA467DD6205.crl rsync://rsync.paas.rpki.ripe.net/repository/b8844318-35d7-482e-bbd5-b624cf0b2041/0/1215278DAD24717513E9235A15705AA467DD6205.mft rsync://rpki.ripe.net/repository/DEFAULT/EhUnja0kcXUT6SNaFXBapGfdYgU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:54:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:25:ce:11:33:65:74:96:7a:78:e4:af:7a:98:fb:e1:2a:b9:78:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1215278dad24717513e9235a15705aa467dd6205 Validity Not Before: Dec 6 03:06:08 2025 GMT Not After : Dec 7 03:54:08 2025 GMT Subject: CN=67970DEAB9AC123A43F700046265E3126772DBC3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:65:83:ed:4e:19:7d:26:63:6f:13:f0:34:de: ec:41:d1:24:87:f7:36:95:00:56:03:64:38:0b:d3: c3:11:a8:f0:60:0d:69:9a:98:a5:2b:6c:a0:ba:11: a1:ec:06:15:55:72:c6:a8:32:f2:20:96:b4:d8:66: 1e:32:db:10:49:61:96:98:d2:31:89:c9:15:9b:cd: 15:0e:50:c9:fa:ed:4d:ae:9c:a9:7c:4e:3e:a7:26: 6d:78:e7:67:a0:1a:93:1b:f0:f9:21:93:ef:5c:28: 58:4e:8c:ec:fd:a5:19:2f:f0:cb:b8:dc:11:f8:38: 9a:b5:6f:65:52:e4:25:6d:df:2c:b2:6e:3e:2d:dd: 23:5a:e7:ed:74:79:2e:b7:ab:a4:de:22:8f:37:7f: 53:ee:22:10:2a:cd:6a:37:64:f8:31:fb:94:57:87: 62:49:e6:b5:ab:80:08:a2:9e:e4:68:35:0a:32:65: b2:96:ba:2f:f5:8a:c3:be:e4:43:47:f3:ca:c7:68: 5e:30:ea:45:fa:83:62:3d:8d:4b:21:33:ec:70:25: f2:91:87:47:1c:6a:9f:58:40:04:e4:e6:68:6a:af: 6f:a7:d1:01:b9:eb:18:2e:54:b3:8c:48:00:b5:9f: 5a:5b:5a:87:58:c9:02:a5:a4:e6:0d:a4:52:1c:e3: 98:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:97:0D:EA:B9:AC:12:3A:43:F7:00:04:62:65:E3:12:67:72:DB:C3 X509v3 Authority Key Identifier: keyid:12:15:27:8D:AD:24:71:75:13:E9:23:5A:15:70:5A:A4:67:DD:62:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b8844318-35d7-482e-bbd5-b624cf0b2041/0/1215278DAD24717513E9235A15705AA467DD6205.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EhUnja0kcXUT6SNaFXBapGfdYgU.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b8844318-35d7-482e-bbd5-b624cf0b2041/0/1215278DAD24717513E9235A15705AA467DD6205.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:e9:25:3a:bc:5f:e0:0a:0f:35:ca:11:d7:a4:26:c1:b6:44: c8:14:f9:d6:5d:7d:06:34:c4:04:0f:54:c6:02:67:33:67:4e: 48:9e:9c:25:e4:17:10:bd:78:99:35:ef:5b:71:d3:7f:9b:78: 82:3f:6d:76:ab:b2:e2:c2:b1:b9:ab:9f:47:95:b6:d2:2c:cd: b2:dd:af:67:b5:db:4c:eb:d0:53:0e:73:9b:16:02:d2:19:c7: 41:c4:ac:0e:8e:ef:82:bc:e8:bd:49:3c:04:32:56:b6:6d:b3: e6:67:a0:7e:f1:4e:3b:93:9f:4a:a9:6b:ba:a4:96:7d:7b:96: 66:bb:f8:9b:f9:7d:02:6b:c9:bb:23:36:48:e9:17:d1:9d:e5: 76:fa:ce:f0:6a:da:e1:62:81:93:8d:a6:f9:b5:ab:b6:20:b0: f7:0f:18:07:70:ab:33:7d:94:ab:41:18:1b:07:40:f9:e1:c3: f3:0f:c0:ce:19:d3:70:d1:4f:64:b0:67:ad:c9:b1:3b:39:8e: 8c:5d:e8:3c:6a:21:12:1c:c8:57:26:6f:29:7d:47:b3:a2:f3: 10:be:80:31:76:35:f8:27:7b:e9:9f:85:dd:5f:d1:20:ec:c2: 47:10:50:a7:13:fd:97:81:ea:64:6e:b8:ce:09:91:f4:58:6e: af:10:bf:36 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUYiXOETNldJZ6eOSvepj74Sq5eLIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTIxNTI3OGRhZDI0NzE3NTEzZTkyMzVhMTU3MDVhYTQ2 N2RkNjIwNTAeFw0yNTEyMDYwMzA2MDhaFw0yNTEyMDcwMzU0MDhaMDMxMTAvBgNV BAMTKDY3OTcwREVBQjlBQzEyM0E0M0Y3MDAwNDYyNjVFMzEyNjc3MkRCQzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5ZYPtThl9JmNvE/A03uxB0SSH 9zaVAFYDZDgL08MRqPBgDWmamKUrbKC6EaHsBhVVcsaoMvIglrTYZh4y2xBJYZaY 0jGJyRWbzRUOUMn67U2unKl8Tj6nJm1452egGpMb8Pkhk+9cKFhOjOz9pRkv8Mu4 3BH4OJq1b2VS5CVt3yyybj4t3SNa5+10eS63q6TeIo83f1PuIhAqzWo3ZPgx+5RX h2JJ5rWrgAiinuRoNQoyZbKWui/1isO+5ENH88rHaF4w6kX6g2I9jUshM+xwJfKR h0ccap9YQATk5mhqr2+n0QG56xguVLOMSAC1n1pbWodYyQKlpOYNpFIc45g1AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUZ5cN6rmsEjpD9wAEYmXjEmdy28MwHwYDVR0j BBgwFoAUEhUnja0kcXUT6SNaFXBapGfdYgUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYjg4NDQzMTgtMzVkNy00ODJlLWJiZDUtYjYyNGNmMGIy MDQxLzAvMTIxNTI3OERBRDI0NzE3NTEzRTkyMzVBMTU3MDVBQTQ2N0RENjIwNS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0VoVW5qYTBrY1hVVDZTTmFGWEJhcEdm ZFlnVS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iODg0NDMxOC0z NWQ3LTQ4MmUtYmJkNS1iNjI0Y2YwYjIwNDEvMC8xMjE1Mjc4REFEMjQ3MTc1MTNF OTIzNUExNTcwNUFBNDY3REQ2MjA1Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUeklOrxf4AoPNcoR16Qm wbZEyBT51l19BjTEBA9UxgJnM2dOSJ6cJeQXEL14mTXvW3HTf5t4gj9tdquy4sKx uaufR5W20izNst2vZ7XbTOvQUw5zmxYC0hnHQcSsDo7vgrzovUk8BDJWtm2z5meg fvFOO5OfSqlruqSWfXuWZrv4m/l9AmvJuyM2SOkX0Z3ldvrO8Gra4WKBk42m+bWr tiCw9w8YB3CrM32Uq0EYGwdA+eHD8w/AzhnTcNFPZLBnrcmxOzmOjF3oPGohEhzI VyZvKX1Hs6LzEL6AMXY1+Cd76Z+F3V/RIOzCRxBQpxP9l4HqZG64zgmR9FhurxC/ Ng== -----END CERTIFICATE-----Generated at Sat Dec 6 18:24:16 2025 by rpki-client