This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/0/7FD1DD522F6134F070195C5C0E2D4C11CFA6A97D.mft File: 7FD1DD522F6134F070195C5C0E2D4C11CFA6A97D.mft (raw, json) Hash identifier: KCKnmRRyMrcIBP/GfQFoYD4YhVrDF7vlvrEk78Oj3xw= Subject key identifier: 1D:92:E0:B4:81:1F:AC:EF:86:41:06:00:CE:E2:8C:00:0B:75:C3:22 Authority key identifier: 7F:D1:DD:52:2F:61:34:F0:70:19:5C:5C:0E:2D:4C:11:CF:A6:A9:7D Certificate issuer: /CN=7fd1dd522f6134f070195c5c0e2d4c11cfa6a97d Certificate serial: 4DC851533BD6D93048DFA3E5BD229112BD24523C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f9HdUi9hNPBwGVxcDi1MEc-mqX0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/0/7FD1DD522F6134F070195C5C0E2D4C11CFA6A97D.mft Manifest number: 01F5 Signing time: Sat 06 Dec 2025 09:38:03 +0000 Manifest this update: Sat 06 Dec 2025 09:33:03 +0000 Manifest next update: Sun 07 Dec 2025 12:42:03 +0000 Files and hashes: 1: 7FD1DD522F6134F070195C5C0E2D4C11CFA6A97D.crl (hash: S8TJH03MiOsrI1/Qo7ufCrFx7IN4nX8GtPC9eDmb7RM=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/0/7FD1DD522F6134F070195C5C0E2D4C11CFA6A97D.crl rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/0/7FD1DD522F6134F070195C5C0E2D4C11CFA6A97D.mft rsync://rpki.ripe.net/repository/DEFAULT/f9HdUi9hNPBwGVxcDi1MEc-mqX0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:c8:51:53:3b:d6:d9:30:48:df:a3:e5:bd:22:91:12:bd:24:52:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7fd1dd522f6134f070195c5c0e2d4c11cfa6a97d Validity Not Before: Dec 6 09:33:03 2025 GMT Not After : Dec 7 12:42:03 2025 GMT Subject: CN=1D92E0B4811FACEF86410600CEE28C000B75C322 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:40:83:31:89:49:c9:66:54:39:52:40:d2:14: 6e:dc:f6:21:ee:2c:38:c3:2f:24:fe:5c:77:3c:3f: ee:6f:4f:54:2b:9d:ee:50:42:64:02:ff:1e:71:38: a9:ec:4e:6b:3e:af:b6:7f:b9:0a:a4:6b:1a:a7:a9: 3d:7b:ce:fe:6c:f0:e8:41:35:66:e9:b2:c8:6e:d4: 75:c4:7f:47:4a:92:1f:d5:c2:09:3b:44:97:05:9f: b3:a9:7d:39:90:08:d5:b7:b7:fe:21:c1:00:97:bc: 1e:62:29:67:6e:e9:fe:b9:17:74:b4:ad:db:ba:58: c8:57:a1:0e:fb:de:92:9e:82:4e:cf:a6:e7:be:c6: 66:4a:b1:a5:12:c6:a6:d7:39:01:8f:09:23:e7:ae: 09:4c:16:ce:5c:2f:12:f5:ba:1c:f7:65:17:60:2a: 8f:89:51:90:9c:5f:8e:60:b1:12:76:dd:de:e0:c2: 68:b2:ea:7e:35:84:e6:53:37:58:bb:32:b6:ba:d2: d7:66:45:3b:fd:9e:85:65:b1:36:86:e2:8b:7f:be: a9:df:2a:16:5e:6a:f3:28:1f:1c:68:1c:14:06:e5: eb:d1:94:7d:89:5b:fb:a0:fd:64:2e:93:d3:28:76: ee:1f:cd:41:25:83:06:de:13:be:9f:97:a1:e6:ac: 9f:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:92:E0:B4:81:1F:AC:EF:86:41:06:00:CE:E2:8C:00:0B:75:C3:22 X509v3 Authority Key Identifier: keyid:7F:D1:DD:52:2F:61:34:F0:70:19:5C:5C:0E:2D:4C:11:CF:A6:A9:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/0/7FD1DD522F6134F070195C5C0E2D4C11CFA6A97D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9HdUi9hNPBwGVxcDi1MEc-mqX0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/0/7FD1DD522F6134F070195C5C0E2D4C11CFA6A97D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:a6:be:63:25:17:37:fb:3d:33:50:27:b6:1e:c5:b4:63:e8: 21:26:ef:66:7e:02:b5:06:b9:ba:84:e8:84:0c:83:e7:f2:df: b2:36:f6:bb:ef:0b:02:14:13:37:e1:b5:a2:22:db:a7:b2:90: cf:4a:4d:7f:db:57:68:b1:8e:28:53:95:29:50:7e:6c:6b:5d: ce:c3:2c:54:68:c3:46:47:f2:32:68:25:fe:91:5b:f6:d6:10: 34:e5:57:69:ea:10:97:a9:c1:54:32:e3:c9:b3:87:a8:9d:65: 18:51:41:6c:ab:91:b9:3e:c8:2a:93:76:ee:bc:49:a4:4d:7c: 8a:be:ae:14:1e:8b:3c:4e:d1:97:ef:7c:74:43:6e:d7:f7:73: 63:c2:9f:38:f3:1f:2e:d1:cb:5f:54:5f:cc:d9:24:d6:dc:45: c9:6d:58:fb:05:54:33:e8:2a:d9:48:6e:a6:e9:8a:36:e9:3f: 9a:fe:f6:b0:d7:a1:99:c7:fc:4f:b8:1e:f8:24:46:15:df:55: 83:f4:7b:8d:6c:a5:90:7e:ba:66:84:73:89:3f:49:18:a0:35: 71:5d:05:4e:0e:f3:51:ad:dc:29:8f:62:68:72:fa:bf:f1:0a: 95:3c:38:f7:db:dd:9f:dc:6a:fd:06:24:19:30:f6:78:77:96: b3:b4:14:6f -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUTchRUzvW2TBI36PlvSKREr0kUjwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN2ZkMWRkNTIyZjYxMzRmMDcwMTk1YzVjMGUyZDRjMTFj ZmE2YTk3ZDAeFw0yNTEyMDYwOTMzMDNaFw0yNTEyMDcxMjQyMDNaMDMxMTAvBgNV BAMTKDFEOTJFMEI0ODExRkFDRUY4NjQxMDYwMENFRTI4QzAwMEI3NUMzMjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLQIMxiUnJZlQ5UkDSFG7c9iHu LDjDLyT+XHc8P+5vT1Qrne5QQmQC/x5xOKnsTms+r7Z/uQqkaxqnqT17zv5s8OhB NWbpsshu1HXEf0dKkh/Vwgk7RJcFn7OpfTmQCNW3t/4hwQCXvB5iKWdu6f65F3S0 rdu6WMhXoQ773pKegk7Ppue+xmZKsaUSxqbXOQGPCSPnrglMFs5cLxL1uhz3ZRdg Ko+JUZCcX45gsRJ23d7gwmiy6n41hOZTN1i7Mra60tdmRTv9noVlsTaG4ot/vqnf KhZeavMoHxxoHBQG5evRlH2JW/ug/WQuk9Modu4fzUElgwbeE76fl6HmrJ85AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUHZLgtIEfrO+GQQYAzuKMAAt1wyIwHwYDVR0j BBgwFoAUf9HdUi9hNPBwGVxcDi1MEc+mqX0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzg2YjY1YjEtNDVlOS00ZmIyLWFkYzUtODdiYTcxMWUy MWI3LzAvN0ZEMURENTIyRjYxMzRGMDcwMTk1QzVDMEUyRDRDMTFDRkE2QTk3RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y5SGRVaTloTlBCd0dWeGNEaTFNRWMt bXFYMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9jODZiNjViMS00 NWU5LTRmYjItYWRjNS04N2JhNzExZTIxYjcvMC83RkQxREQ1MjJGNjEzNEYwNzAx OTVDNUMwRTJENEMxMUNGQTZBOTdELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeKa+YyUXN/s9M1Anth7F tGPoISbvZn4CtQa5uoTohAyD5/Lfsjb2u+8LAhQTN+G1oiLbp7KQz0pNf9tXaLGO KFOVKVB+bGtdzsMsVGjDRkfyMmgl/pFb9tYQNOVXaeoQl6nBVDLjybOHqJ1lGFFB bKuRuT7IKpN27rxJpE18ir6uFB6LPE7Rl+98dENu1/dzY8KfOPMfLtHLX1RfzNkk 1txFyW1Y+wVUM+gq2UhupumKNuk/mv72sNehmcf8T7ge+CRGFd9Vg/R7jWylkH66 ZoRziT9JGKA1cV0FTg7zUa3cKY9iaHL6v/EKlTw499vdn9xq/QYkGTD2eHeWs7QU bw== -----END CERTIFICATE-----Generated at Sat Dec 6 13:37:49 2025 by rpki-client