This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/1/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.mft File: 4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.mft (raw, json) Hash identifier: ykvbcMzJXYuLZRfhaJ2uVw2yoC9hnknrsREtMRh9xQQ= Subject key identifier: 48:B7:8A:A1:39:D8:8D:0E:B3:13:24:4C:36:1F:FE:85:8A:FC:C7:77 Authority key identifier: 40:50:A1:7B:AE:1C:5F:37:63:D4:5A:38:DC:FE:AC:E0:FE:22:2B:D6 Certificate issuer: /CN=4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6 Certificate serial: 50498EDEFFF1AF85D0F541533111A4C61100BE75 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/1/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.mft Manifest number: 01F4 Signing time: Sat 06 Dec 2025 12:58:03 +0000 Manifest this update: Sat 06 Dec 2025 12:53:03 +0000 Manifest next update: Sun 07 Dec 2025 13:34:03 +0000 Files and hashes: 1: 4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.crl (hash: PXLf2xWtypF+LAWaVYceVAwOY6h0Cft48M5qRBnkABY=) 2: 326131343a373538313a396632303a3a2f34342d3434203d3e20323135323838.roa (hash: Si3nvIvR6vlJSP9N899TEpLNTv8CH8Xf9C307NCghTQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/1/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.crl rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/1/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:45:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:49:8e:de:ff:f1:af:85:d0:f5:41:53:31:11:a4:c6:11:00:be:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6 Validity Not Before: Dec 6 12:53:03 2025 GMT Not After : Dec 7 13:34:03 2025 GMT Subject: CN=48B78AA139D88D0EB313244C361FFE858AFCC777 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:31:d2:d7:a8:d5:38:03:a2:0a:39:c2:30:5d: 2a:82:af:44:b7:ec:66:79:dc:c0:f1:ba:97:c8:53: d1:0f:db:43:c3:b2:76:c9:31:8b:16:af:b9:bc:b8: 10:d6:d6:22:b7:81:ea:e9:e2:7a:54:da:c6:ce:ac: 97:2c:3b:dd:42:eb:19:f7:41:09:8d:74:59:33:e7: 5c:00:3d:73:b6:ce:67:bd:d6:70:5d:7b:86:30:e6: 3c:3d:c6:44:08:3a:0f:60:06:dd:7a:65:64:22:e8: 31:78:57:6b:ad:5c:ec:2f:42:d8:19:ed:58:a9:ef: e8:c2:9b:eb:eb:48:67:8e:5b:44:f2:cb:ac:4b:fc: 33:33:20:14:1f:d7:5d:74:50:26:84:13:98:a2:92: 81:88:52:bb:df:ae:fa:65:96:05:d9:19:4b:f3:da: d5:e1:40:60:aa:21:01:a9:de:8e:68:1c:3c:76:c3: e2:ea:79:2c:88:d3:8b:46:82:47:94:6c:08:48:b9: eb:5e:98:aa:f0:84:38:58:2b:88:b4:31:df:b5:06: b5:93:f3:fc:32:5e:25:96:a9:85:c9:43:cc:f7:d7: c2:ff:a7:69:13:6e:a0:12:68:73:3f:ed:18:40:64: 84:80:64:6e:67:6e:e7:d6:15:2c:43:be:0e:1c:34: 01:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:B7:8A:A1:39:D8:8D:0E:B3:13:24:4C:36:1F:FE:85:8A:FC:C7:77 X509v3 Authority Key Identifier: keyid:40:50:A1:7B:AE:1C:5F:37:63:D4:5A:38:DC:FE:AC:E0:FE:22:2B:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/1/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/1/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:40:d9:47:3b:4a:29:80:f4:d6:86:88:c9:6f:45:0d:87:99: f3:6b:fc:75:f7:ff:f2:76:ed:d8:a0:81:7c:c6:39:c3:76:ea: 47:46:e6:27:6f:43:86:98:1d:73:02:ce:d6:21:6d:76:bc:02: 35:38:ec:4f:30:b0:27:d3:f1:1d:72:04:3c:4f:e0:80:18:2e: 9f:11:6e:b4:8b:40:0a:3d:20:13:12:5f:54:b3:01:da:d7:d1: 56:8f:41:33:9d:c8:46:de:58:35:55:9f:e0:45:af:c0:1d:00: 0e:c8:05:e8:c0:7a:0c:ca:db:e8:b4:86:e6:03:69:b6:7c:77: d7:fb:7a:1b:4e:39:4e:eb:73:c7:22:24:22:4e:eb:28:c0:25: 04:70:9c:9e:d8:fe:cd:c4:86:ce:ed:d0:c3:07:5c:bb:81:b8: ea:87:53:e7:80:0b:6c:c1:7c:ce:a1:43:51:be:39:3c:ec:39: 67:d8:6a:cb:19:be:64:c8:b8:b1:a5:cc:58:e3:6a:de:6f:56: 98:d8:00:2f:9c:e9:ba:fc:43:a6:6f:6f:f4:d1:4c:05:a3:44: 73:a2:a7:ad:f6:a3:64:1c:87:e3:cb:17:c1:ff:91:13:0e:b9: f3:3d:95:b1:e3:55:58:73:8f:f9:b2:ad:78:3b:f0:41:ab:2f: df:48:61:9b -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUUEmO3v/xr4XQ9UFTMRGkxhEAvnUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDA1MEExN0JBRTFDNUYzNzYzRDQ1QTM4RENGRUFDRTBG RTIyMkJENjAeFw0yNTEyMDYxMjUzMDNaFw0yNTEyMDcxMzM0MDNaMDMxMTAvBgNV BAMTKDQ4Qjc4QUExMzlEODhEMEVCMzEzMjQ0QzM2MUZGRTg1OEFGQ0M3NzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmMdLXqNU4A6IKOcIwXSqCr0S3 7GZ53MDxupfIU9EP20PDsnbJMYsWr7m8uBDW1iK3gerp4npU2sbOrJcsO91C6xn3 QQmNdFkz51wAPXO2zme91nBde4Yw5jw9xkQIOg9gBt16ZWQi6DF4V2utXOwvQtgZ 7Vip7+jCm+vrSGeOW0Tyy6xL/DMzIBQf1110UCaEE5iikoGIUrvfrvpllgXZGUvz 2tXhQGCqIQGp3o5oHDx2w+LqeSyI04tGgkeUbAhIuetemKrwhDhYK4i0Md+1BrWT 8/wyXiWWqYXJQ8z318L/p2kTbqASaHM/7RhAZISAZG5nbufWFSxDvg4cNAG1AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUSLeKoTnYjQ6zEyRMNh/+hYr8x3cwHwYDVR0j BBgwFoAUQFChe64cXzdj1Fo43P6s4P4iK9YwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzg2YjY1YjEtNDVlOS00ZmIyLWFkYzUtODdiYTcxMWUy MWI3LzEvNDA1MEExN0JBRTFDNUYzNzYzRDQ1QTM4RENGRUFDRTBGRTIyMkJENi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC80MDUwQTE3QkFFMUM1RjM3NjNENDVBMzhE Q0ZFQUNFMEZFMjIyQkQ2LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2M4NmI2NWIxLTQ1ZTktNGZiMi1hZGM1LTg3YmE3MTFlMjFiNy8xLzQwNTBBMTdC QUUxQzVGMzc2M0Q0NUEzOERDRkVBQ0UwRkUyMjJCRDYubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA8QNlH O0opgPTWhojJb0UNh5nza/x19//ydu3YoIF8xjnDdupHRuYnb0OGmB1zAs7WIW12 vAI1OOxPMLAn0/EdcgQ8T+CAGC6fEW60i0AKPSATEl9UswHa19FWj0EznchG3lg1 VZ/gRa/AHQAOyAXowHoMytvotIbmA2m2fHfX+3obTjlO63PHIiQiTusowCUEcJye 2P7NxIbO7dDDB1y7gbjqh1PngAtswXzOoUNRvjk87Dln2GrLGb5kyLixpcxY42re b1aY2AAvnOm6/EOmb2/00UwFo0Rzoqet9qNkHIfjyxfB/5ETDrnzPZWx41VYc4/5 sq14O/BBqy/fSGGb -----END CERTIFICATE-----Generated at Sat Dec 6 17:32:36 2025 by rpki-client