This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/0/0EED1B7B26C35D22B50C5D0CD85544BE88DD8F23.mft File: 0EED1B7B26C35D22B50C5D0CD85544BE88DD8F23.mft (raw, json) Hash identifier: n60e2m6NCJCJ/69AQ6VhG8PufZrdcaHdhhkMOlU2Nu8= Subject key identifier: 8E:CD:4C:07:90:55:B0:EC:E6:74:FE:C4:E8:C0:3A:DC:81:4B:34:9A Authority key identifier: 0E:ED:1B:7B:26:C3:5D:22:B5:0C:5D:0C:D8:55:44:BE:88:DD:8F:23 Certificate issuer: /CN=0eed1b7b26c35d22b50c5d0cd85544be88dd8f23 Certificate serial: 0E8D197E335344F6D503955256992B29D50F7266 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Du0beybDXSK1DF0M2FVEvojdjyM.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/0/0EED1B7B26C35D22B50C5D0CD85544BE88DD8F23.mft Manifest number: 04C5 Signing time: Fri 05 Dec 2025 14:55:00 +0000 Manifest this update: Fri 05 Dec 2025 14:50:00 +0000 Manifest next update: Sat 06 Dec 2025 18:18:00 +0000 Files and hashes: 1: 0EED1B7B26C35D22B50C5D0CD85544BE88DD8F23.crl (hash: TlOPY5MyN3RcMJvjywPSrOACpzH47wgz/qZkH3g8L1s=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/0/0EED1B7B26C35D22B50C5D0CD85544BE88DD8F23.crl rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/0/0EED1B7B26C35D22B50C5D0CD85544BE88DD8F23.mft rsync://rpki.ripe.net/repository/DEFAULT/Du0beybDXSK1DF0M2FVEvojdjyM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 18:18:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:8d:19:7e:33:53:44:f6:d5:03:95:52:56:99:2b:29:d5:0f:72:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0eed1b7b26c35d22b50c5d0cd85544be88dd8f23 Validity Not Before: Dec 5 14:50:00 2025 GMT Not After : Dec 6 18:18:00 2025 GMT Subject: CN=8ECD4C079055B0ECE674FEC4E8C03ADC814B349A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:cd:c8:31:ce:74:f1:06:c1:20:f6:5c:29:78: e9:cf:8e:01:32:c3:8b:2d:c4:d4:49:e7:20:1c:f9: 0c:04:74:50:15:cb:22:bc:41:84:9c:65:f1:c0:d5: d0:d3:78:b2:75:5a:d0:fa:1f:cb:0b:31:b9:69:a6: 5b:50:ad:fe:41:ed:28:cf:2a:da:16:7d:a8:31:71: b9:ef:4b:b1:88:dc:de:35:7c:ae:f5:18:4b:6b:32: 9c:13:00:a9:3e:96:99:fd:f0:f8:3d:46:52:74:79: 25:00:d2:31:44:ca:72:b0:86:88:01:6e:f4:79:cf: 47:85:70:e2:45:60:46:45:7e:54:f3:9e:14:48:bc: b8:26:7d:fb:78:e1:c5:d1:09:94:5c:ce:44:96:9b: 50:1d:3d:c5:88:83:eb:c3:fa:4b:76:d9:b2:de:06: fa:8e:bf:ac:10:db:55:8b:9e:6a:dc:93:de:9c:8a: 9e:30:57:75:a3:6c:1e:6b:ba:f7:33:7c:12:7d:f3: bc:f8:17:36:04:b1:66:cb:0e:b4:bc:f3:b6:a3:fe: c2:e5:9c:73:ba:ed:13:26:aa:2a:f2:7a:1b:32:9c: ef:12:a5:ba:46:42:8c:fc:fc:aa:a9:1d:45:e5:f1: 95:23:1b:09:26:11:1c:69:be:23:cc:ab:5b:27:26: c6:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:CD:4C:07:90:55:B0:EC:E6:74:FE:C4:E8:C0:3A:DC:81:4B:34:9A X509v3 Authority Key Identifier: keyid:0E:ED:1B:7B:26:C3:5D:22:B5:0C:5D:0C:D8:55:44:BE:88:DD:8F:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/0/0EED1B7B26C35D22B50C5D0CD85544BE88DD8F23.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Du0beybDXSK1DF0M2FVEvojdjyM.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/0/0EED1B7B26C35D22B50C5D0CD85544BE88DD8F23.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:4e:fd:3a:19:65:48:e6:24:03:5a:92:ef:83:5d:d2:80:9a: 15:9d:bd:f4:ca:d7:22:db:13:7d:82:e7:4c:00:81:76:d0:86: 85:1d:b2:4c:c1:18:33:af:db:41:3a:47:3e:8c:63:a1:ad:83: 06:31:b1:8a:bc:87:e7:5d:84:78:4a:83:66:26:f4:34:6f:d6: d0:dd:26:89:9b:80:89:63:18:b8:94:5a:53:89:6d:24:ee:9d: 9f:4d:41:00:12:f5:26:0f:8b:f9:62:95:63:79:3a:9d:d0:88: dc:1f:e9:c9:6c:76:bc:74:9a:df:1d:0e:fc:be:65:ce:7e:1b: 19:c1:2c:13:09:9f:60:bf:d4:52:bd:8f:77:5e:1e:11:6b:32: 2b:53:06:b5:0e:6d:16:df:35:59:4e:34:9c:80:a8:a7:b5:42: 33:da:3a:bc:83:f9:b6:92:9f:07:69:92:62:49:e6:0f:73:da: 22:b5:81:8b:e6:e1:05:68:5f:16:af:ea:4c:a7:4c:72:c6:ab: 9f:bd:0e:28:55:cb:35:33:78:dc:12:e3:ca:23:da:42:f0:7e: 93:f4:6d:68:5a:6f:01:82:ab:de:61:0b:76:ea:db:40:b2:0f: a3:38:90:12:3d:da:58:28:bd:c1:0b:ed:85:33:33:a2:28:55: 2f:2e:c8:98 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUDo0ZfjNTRPbVA5VSVpkrKdUPcmYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMGVlZDFiN2IyNmMzNWQyMmI1MGM1ZDBjZDg1NTQ0YmU4 OGRkOGYyMzAeFw0yNTEyMDUxNDUwMDBaFw0yNTEyMDYxODE4MDBaMDMxMTAvBgNV BAMTKDhFQ0Q0QzA3OTA1NUIwRUNFNjc0RkVDNEU4QzAzQURDODE0QjM0OUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuzcgxznTxBsEg9lwpeOnPjgEy w4stxNRJ5yAc+QwEdFAVyyK8QYScZfHA1dDTeLJ1WtD6H8sLMblppltQrf5B7SjP KtoWfagxcbnvS7GI3N41fK71GEtrMpwTAKk+lpn98Pg9RlJ0eSUA0jFEynKwhogB bvR5z0eFcOJFYEZFflTznhRIvLgmfft44cXRCZRczkSWm1AdPcWIg+vD+kt22bLe BvqOv6wQ21WLnmrck96cip4wV3WjbB5ruvczfBJ987z4FzYEsWbLDrS887aj/sLl nHO67RMmqiryehsynO8SpbpGQoz8/KqpHUXl8ZUjGwkmERxpviPMq1snJsa/AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUjs1MB5BVsOzmdP7E6MA63IFLNJowHwYDVR0j BBgwFoAUDu0beybDXSK1DF0M2FVEvojdjyMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzEyODI3MWUtYzI2OS00OTU0LTg3ZGItZDE4NGRmMTdm ODVjLzAvMEVFRDFCN0IyNkMzNUQyMkI1MEM1RDBDRDg1NTQ0QkU4OEREOEYyMy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0R1MGJleWJEWFNLMURGME0yRlZFdm9q ZGp5TS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9jMTI4MjcxZS1j MjY5LTQ5NTQtODdkYi1kMTg0ZGYxN2Y4NWMvMC8wRUVEMUI3QjI2QzM1RDIyQjUw QzVEMENEODU1NDRCRTg4REQ4RjIzLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ079OhllSOYkA1qS74Nd 0oCaFZ299MrXItsTfYLnTACBdtCGhR2yTMEYM6/bQTpHPoxjoa2DBjGxiryH512E eEqDZib0NG/W0N0miZuAiWMYuJRaU4ltJO6dn01BABL1Jg+L+WKVY3k6ndCI3B/p yWx2vHSa3x0O/L5lzn4bGcEsEwmfYL/UUr2Pd14eEWsyK1MGtQ5tFt81WU40nICo p7VCM9o6vIP5tpKfB2mSYknmD3PaIrWBi+bhBWhfFq/qTKdMcsarn70OKFXLNTN4 3BLjyiPaQvB+k/RtaFpvAYKr3mELdurbQLIPoziQEj3aWCi9wQvthTMzoihVLy7I mA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:59:18 2025 by rpki-client