This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/0/94521D5EA7B7900080F6E66836D4DEDA347054FD.mft File: 94521D5EA7B7900080F6E66836D4DEDA347054FD.mft (raw, json) Hash identifier: jU8zgQQJ0Kmkd7ZpwrLQt3Wk76xHdM0wyCoPUZS7rwA= Subject key identifier: 17:F9:7A:78:4B:BC:DE:3B:09:81:62:DA:D2:09:52:44:2A:CE:BA:CA Authority key identifier: 94:52:1D:5E:A7:B7:90:00:80:F6:E6:68:36:D4:DE:DA:34:70:54:FD Certificate issuer: /CN=94521d5ea7b7900080f6e66836d4deda347054fd Certificate serial: 0FE56B01F21EA9259F0A0F48C66805C9197852BD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lFIdXqe3kACA9uZoNtTe2jRwVP0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/0/94521D5EA7B7900080F6E66836D4DEDA347054FD.mft Manifest number: 01EE Signing time: Sat 06 Dec 2025 01:28:07 +0000 Manifest this update: Sat 06 Dec 2025 01:23:07 +0000 Manifest next update: Sun 07 Dec 2025 15:22:07 +0000 Files and hashes: 1: 94521D5EA7B7900080F6E66836D4DEDA347054FD.crl (hash: 7tMKzK8JPuNnx/oCJudFrzlL3OTXs7SW4ggTW59ZcN8=) 2: AS214701.asa (hash: EwiuTDTlJzzW3BaZbT2OcjZ0BGKln2twmg9+cBCEmTw=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/0/94521D5EA7B7900080F6E66836D4DEDA347054FD.crl rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/0/94521D5EA7B7900080F6E66836D4DEDA347054FD.mft rsync://rpki.ripe.net/repository/DEFAULT/lFIdXqe3kACA9uZoNtTe2jRwVP0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:e5:6b:01:f2:1e:a9:25:9f:0a:0f:48:c6:68:05:c9:19:78:52:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94521d5ea7b7900080f6e66836d4deda347054fd Validity Not Before: Dec 6 01:23:07 2025 GMT Not After : Dec 7 15:22:07 2025 GMT Subject: CN=17F97A784BBCDE3B098162DAD20952442ACEBACA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:d1:05:d0:a2:81:81:60:ee:33:b1:54:f2:dc: cb:f4:71:1f:63:d5:3f:2a:ea:28:4a:02:7a:40:fa: 29:0e:2c:fa:3e:c8:21:45:80:45:bb:29:91:14:70: 07:21:fb:cf:fa:b0:be:5e:21:d8:90:e3:1b:f0:ee: dc:86:db:c5:c0:28:04:b4:fe:22:08:32:2f:6a:17: ba:0e:f9:b4:d2:fe:d9:87:f7:05:4a:25:00:6d:ed: bc:f0:62:01:6a:86:5d:c1:5c:d3:52:d4:e4:c4:97: ff:cd:dc:36:74:01:5f:70:48:6d:de:ad:aa:8e:e6: 9d:af:1c:e4:d5:39:51:72:cb:8d:c1:f4:5e:b8:f0: 1f:4b:44:4a:e8:10:59:d0:46:23:7c:52:4a:c4:07: a4:4d:81:67:7e:01:b6:f1:12:3a:c2:5f:b6:7c:2a: 07:08:22:62:4f:ce:35:26:27:82:40:8d:6c:d4:45: a7:7c:65:dd:cc:a5:b6:b0:c3:31:a5:23:b9:69:c6: 3a:6e:8c:a6:4d:9f:9d:81:78:07:67:51:bf:91:c6: 81:2c:d0:19:29:7b:04:c5:6b:55:9f:6f:e6:36:7a: 50:a9:bc:79:b6:34:1a:d2:65:bf:55:ff:f4:b2:59: d4:3f:b6:11:c6:6b:9c:3d:b7:2e:e7:8f:28:3c:b2: ae:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:F9:7A:78:4B:BC:DE:3B:09:81:62:DA:D2:09:52:44:2A:CE:BA:CA X509v3 Authority Key Identifier: keyid:94:52:1D:5E:A7:B7:90:00:80:F6:E6:68:36:D4:DE:DA:34:70:54:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/0/94521D5EA7B7900080F6E66836D4DEDA347054FD.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lFIdXqe3kACA9uZoNtTe2jRwVP0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/0/94521D5EA7B7900080F6E66836D4DEDA347054FD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:cc:0a:a1:9c:ef:01:d2:c1:ef:ab:75:26:7e:d6:b0:af:cf: c3:06:8a:9d:3f:64:2b:50:53:18:f3:cd:ff:69:92:2a:37:1a: f9:ff:5a:83:db:1e:2c:49:55:c7:a9:61:f0:74:19:ec:39:71: cf:43:2b:69:3f:0b:ee:aa:8d:f7:4c:68:2d:21:0f:26:2d:6e: 8b:c9:45:d9:a1:a9:6b:6e:03:d2:5f:82:3c:da:67:a6:b9:3e: ec:70:5d:5d:30:59:fe:62:f1:1e:29:df:f8:bd:3a:e9:be:b8: e5:e8:03:c7:4b:fa:9f:46:fa:25:ef:18:9c:8d:b2:46:a3:92: 44:45:b7:78:32:5c:10:ca:67:56:a5:7a:80:bf:bd:d6:83:ae: 69:eb:92:37:4f:b0:b0:06:9e:b5:f0:e7:fa:54:33:74:49:51: 6b:f0:b6:ee:22:c8:de:62:0e:31:82:07:4f:3b:b2:54:b2:b3: 46:74:05:ba:2d:e6:c8:b9:e5:8a:f6:20:27:c5:08:fa:aa:b4: 80:ae:81:48:0e:cc:3e:d3:bd:cf:ee:d5:4f:9f:22:83:c1:6e: 7d:a0:ff:05:08:00:64:5f:15:14:2b:a7:54:10:36:82:ec:37: 01:6f:b4:b7:05:94:7d:e6:f2:43:b4:02:4e:95:20:18:e8:38: be:e8:53:3f -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUD+VrAfIeqSWfCg9IxmgFyRl4Ur0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTQ1MjFkNWVhN2I3OTAwMDgwZjZlNjY4MzZkNGRlZGEz NDcwNTRmZDAeFw0yNTEyMDYwMTIzMDdaFw0yNTEyMDcxNTIyMDdaMDMxMTAvBgNV BAMTKDE3Rjk3QTc4NEJCQ0RFM0IwOTgxNjJEQUQyMDk1MjQ0MkFDRUJBQ0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDi0QXQooGBYO4zsVTy3Mv0cR9j 1T8q6ihKAnpA+ikOLPo+yCFFgEW7KZEUcAch+8/6sL5eIdiQ4xvw7tyG28XAKAS0 /iIIMi9qF7oO+bTS/tmH9wVKJQBt7bzwYgFqhl3BXNNS1OTEl//N3DZ0AV9wSG3e raqO5p2vHOTVOVFyy43B9F648B9LREroEFnQRiN8UkrEB6RNgWd+AbbxEjrCX7Z8 KgcIImJPzjUmJ4JAjWzURad8Zd3MpbawwzGlI7lpxjpujKZNn52BeAdnUb+RxoEs 0BkpewTFa1Wfb+Y2elCpvHm2NBrSZb9V//SyWdQ/thHGa5w9ty7njyg8sq6rAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUF/l6eEu83jsJgWLa0glSRCrOusowHwYDVR0j BBgwFoAUlFIdXqe3kACA9uZoNtTe2jRwVP0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYmVhZDJkY2YtZWFkNS00OTU0LWFkODQtNjU4MGNkMmE5 YzUwLzAvOTQ1MjFENUVBN0I3OTAwMDgwRjZFNjY4MzZENERFREEzNDcwNTRGRC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2xGSWRYcWUza0FDQTl1Wm9OdFRlMmpS d1ZQMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iZWFkMmRjZi1l YWQ1LTQ5NTQtYWQ4NC02NTgwY2QyYTljNTAvMC85NDUyMUQ1RUE3Qjc5MDAwODBG NkU2NjgzNkQ0REVEQTM0NzA1NEZELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF8wKoZzvAdLB76t1Jn7W sK/PwwaKnT9kK1BTGPPN/2mSKjca+f9ag9seLElVx6lh8HQZ7Dlxz0MraT8L7qqN 90xoLSEPJi1ui8lF2aGpa24D0l+CPNpnprk+7HBdXTBZ/mLxHinf+L066b645egD x0v6n0b6Je8YnI2yRqOSREW3eDJcEMpnVqV6gL+91oOuaeuSN0+wsAaetfDn+lQz dElRa/C27iLI3mIOMYIHTzuyVLKzRnQFui3myLnlivYgJ8UI+qq0gK6BSA7MPtO9 z+7VT58ig8FufaD/BQgAZF8VFCunVBA2guw3AW+0twWUfebyQ7QCTpUgGOg4vuhT Pw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:50:25 2025 by rpki-client