This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.mft File: DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.mft (raw, json) Hash identifier: lqgDcg3XJwNSyqQhgizYz9sFE6B6mxqJlTX9Jez3Xuw= Subject key identifier: 1B:76:37:90:25:04:75:46:7D:49:EE:6B:9F:35:1D:9B:63:A2:B4:47 Authority key identifier: DD:C2:5A:D2:F1:A4:89:24:77:13:EE:39:B1:C0:3E:A2:FD:DA:41:18 Certificate issuer: /CN=DDC25AD2F1A489247713EE39B1C03EA2FDDA4118 Certificate serial: 5609873BA737724B6EBAEF5536BD9E5BBF4971E3 Authority info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.mft Manifest number: 0198 Signing time: Fri 05 Dec 2025 22:38:07 +0000 Manifest this update: Fri 05 Dec 2025 22:33:07 +0000 Manifest next update: Sun 07 Dec 2025 12:46:07 +0000 Files and hashes: 1: DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.crl (hash: g82EuGrcHYDLth+r0XhTH4lEpJznJk3l0kAzi3PcVok=) 2: 326130623a346530373a363030303a3a2f34302d3438203d3e20323134373031.roa (hash: mhaYla+UsHdOX7ijGa8kmFH/Ey3jwcszbuWBzNvxxRw=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.crl rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.mft rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.cer rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 00:22:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:09:87:3b:a7:37:72:4b:6e:ba:ef:55:36:bd:9e:5b:bf:49:71:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DDC25AD2F1A489247713EE39B1C03EA2FDDA4118 Validity Not Before: Dec 5 22:33:07 2025 GMT Not After : Dec 7 12:46:07 2025 GMT Subject: CN=1B763790250475467D49EE6B9F351D9B63A2B447 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:02:cb:c9:20:c4:e0:ce:0f:a9:6e:a0:8a:fa: a3:ad:aa:f6:a4:0d:92:8f:da:4e:54:3b:ab:05:22: cd:7a:00:6a:9d:9b:f2:14:da:bb:7d:46:f6:6b:e1: 89:fb:ec:39:3c:77:17:3d:e9:89:53:f4:50:23:d8: bb:87:46:66:95:a8:ca:98:b6:9c:c9:af:d5:e0:51: 1b:df:4e:17:55:ba:82:dc:da:56:bb:5a:83:a4:6e: a1:f8:e5:23:5a:c6:ed:1c:6a:b2:70:91:b5:9a:de: 56:b3:e9:6c:86:a1:8c:ea:6a:b3:31:bd:93:64:b9: e7:57:b0:eb:cb:be:42:49:ca:f9:16:99:90:35:bc: 02:9f:be:f4:73:f0:20:84:ea:e9:6f:36:3b:19:de: cd:1e:55:28:77:f3:8b:07:01:69:82:f3:b8:b6:29: 97:1d:f7:bd:5d:8e:d2:c9:c8:e5:4d:70:4f:b3:1b: 5a:a2:f9:0c:fd:c2:11:b9:09:fb:fe:aa:8d:69:b5: da:a7:4f:10:70:59:ac:1b:9d:b2:96:c8:9f:d3:df: a3:a8:8f:23:23:7b:d2:bd:c0:5d:d0:81:04:e2:ec: f0:06:b7:01:cd:bc:26:6a:e6:59:b7:20:6b:9b:64: 6a:41:50:f9:78:e4:7d:3f:ac:63:60:7b:81:10:52: 9a:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:76:37:90:25:04:75:46:7D:49:EE:6B:9F:35:1D:9B:63:A2:B4:47 X509v3 Authority Key Identifier: keyid:DD:C2:5A:D2:F1:A4:89:24:77:13:EE:39:B1:C0:3E:A2:FD:DA:41:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:1a:91:a5:25:ad:35:14:7e:78:6e:98:93:de:3c:5e:50:55: 3c:f0:98:ff:55:e0:ec:34:23:6d:6e:64:ab:75:b7:2b:5b:47: 14:b0:d0:b3:71:32:a9:2d:7a:a9:b1:b8:9d:fa:ce:a8:48:0f: dc:cd:e3:7b:f7:72:99:65:a4:0c:83:fc:8d:1a:cc:84:2f:1f: a9:d7:ee:36:61:07:eb:6d:1a:3f:c7:e7:6f:35:4a:63:c8:57: af:ef:52:53:36:f8:12:07:8f:d0:0a:a1:68:43:86:46:00:7c: ae:c3:25:66:9b:07:10:a5:2d:08:08:90:f6:b1:26:3b:c6:22: a1:c5:4c:8f:fe:78:2b:d3:90:a0:d1:02:a4:e9:5b:2e:89:7f: 1e:dc:97:a4:e1:09:d0:d2:d7:71:a5:b4:01:db:1b:c3:e2:d4: 88:23:08:63:89:2b:d0:96:4a:46:18:d0:17:9b:4f:fb:19:41: cb:09:69:26:d5:db:86:80:11:96:6a:01:da:7c:21:b5:93:14: b1:0e:b1:37:43:39:31:7f:67:ab:22:e7:c8:00:d9:e1:ee:38: 4e:a4:b7:23:99:d9:9e:82:93:21:65:ee:a5:5a:2c:01:9d:a3: d1:7e:4b:72:ee:c1:97:7b:14:7e:9e:6b:34:aa:2d:17:17:25: f7:68:c8:86 -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUVgmHO6c3cktuuu9VNr2eW79JceMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRERDMjVBRDJGMUE0ODkyNDc3MTNFRTM5QjFDMDNFQTJG RERBNDExODAeFw0yNTEyMDUyMjMzMDdaFw0yNTEyMDcxMjQ2MDdaMDMxMTAvBgNV BAMTKDFCNzYzNzkwMjUwNDc1NDY3RDQ5RUU2QjlGMzUxRDlCNjNBMkI0NDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDyAsvJIMTgzg+pbqCK+qOtqvak DZKP2k5UO6sFIs16AGqdm/IU2rt9RvZr4Yn77Dk8dxc96YlT9FAj2LuHRmaVqMqY tpzJr9XgURvfThdVuoLc2la7WoOkbqH45SNaxu0carJwkbWa3laz6WyGoYzqarMx vZNkuedXsOvLvkJJyvkWmZA1vAKfvvRz8CCE6ulvNjsZ3s0eVSh384sHAWmC87i2 KZcd971djtLJyOVNcE+zG1qi+Qz9whG5Cfv+qo1ptdqnTxBwWawbnbKWyJ/T36Oo jyMje9K9wF3QgQTi7PAGtwHNvCZq5lm3IGubZGpBUPl45H0/rGNge4EQUpoZAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUG3Y3kCUEdUZ9Se5rnzUdm2OitEcwHwYDVR0j BBgwFoAU3cJa0vGkiSR3E+45scA+ov3aQRgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYmVhZDJkY2YtZWFkNS00OTU0LWFkODQtNjU4MGNkMmE5 YzUwLzMvRERDMjVBRDJGMUE0ODkyNDc3MTNFRTM5QjFDMDNFQTJGRERBNDExOC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQz MDUzZjgyMGY1LzEvRERDMjVBRDJGMUE0ODkyNDc3MTNFRTM5QjFDMDNFQTJGRERB NDExOC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iZWFkMmRjZi1l YWQ1LTQ5NTQtYWQ4NC02NTgwY2QyYTljNTAvMy9EREMyNUFEMkYxQTQ4OTI0Nzcx M0VFMzlCMUMwM0VBMkZEREE0MTE4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJBqRpSWtNRR+eG6Yk948 XlBVPPCY/1Xg7DQjbW5kq3W3K1tHFLDQs3EyqS16qbG4nfrOqEgP3M3je/dymWWk DIP8jRrMhC8fqdfuNmEH620aP8fnbzVKY8hXr+9SUzb4EgeP0AqhaEOGRgB8rsMl ZpsHEKUtCAiQ9rEmO8YiocVMj/54K9OQoNECpOlbLol/HtyXpOEJ0NLXcaW0Adsb w+LUiCMIY4kr0JZKRhjQF5tP+xlBywlpJtXbhoARlmoB2nwhtZMUsQ6xN0M5MX9n qyLnyADZ4e44TqS3I5nZnoKTIWXupVosAZ2j0X5Lcu7Bl3sUfp5rNKotFxcl92jI hg== -----END CERTIFICATE-----Generated at Sat Dec 6 09:32:51 2025 by rpki-client