This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/0/C678CC0A7BAA95891441AD80954491DFED87D33A.mft File: C678CC0A7BAA95891441AD80954491DFED87D33A.mft (raw, json) Hash identifier: SlOj6Y/d8ENQ71VHN56clKT4HPs4q0cESeNCxHp/eXc= Subject key identifier: AB:6A:2C:F8:B8:58:8D:49:AA:B7:25:BC:9D:3C:56:11:73:A4:FD:E3 Authority key identifier: C6:78:CC:0A:7B:AA:95:89:14:41:AD:80:95:44:91:DF:ED:87:D3:3A Certificate issuer: /CN=c678cc0a7baa95891441ad80954491dfed87d33a Certificate serial: 48728D69973099E5A705BC481123660140338BDB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xnjMCnuqlYkUQa2AlUSR3-2H0zo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/0/C678CC0A7BAA95891441AD80954491DFED87D33A.mft Manifest number: 0317 Signing time: Sat 06 Dec 2025 16:10:51 +0000 Manifest this update: Sat 06 Dec 2025 16:05:51 +0000 Manifest next update: Sun 07 Dec 2025 16:42:51 +0000 Files and hashes: 1: C678CC0A7BAA95891441AD80954491DFED87D33A.crl (hash: 5rBm+6Ri+dc/YkfbNziUr/uk9dp+lDBC2xPiZOh8wnk=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/0/C678CC0A7BAA95891441AD80954491DFED87D33A.crl rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/0/C678CC0A7BAA95891441AD80954491DFED87D33A.mft rsync://rpki.ripe.net/repository/DEFAULT/xnjMCnuqlYkUQa2AlUSR3-2H0zo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:72:8d:69:97:30:99:e5:a7:05:bc:48:11:23:66:01:40:33:8b:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c678cc0a7baa95891441ad80954491dfed87d33a Validity Not Before: Dec 6 16:05:51 2025 GMT Not After : Dec 7 16:42:51 2025 GMT Subject: CN=AB6A2CF8B8588D49AAB725BC9D3C561173A4FDE3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:e4:ad:af:a0:b3:fe:51:e2:2c:90:b1:b3:f3: d6:f8:84:74:04:57:54:37:50:65:56:dd:b7:1b:e1: 86:91:d3:a8:85:76:95:9a:d2:3f:85:72:91:86:2d: fa:6e:e4:22:23:13:62:a3:41:24:d1:b2:e0:b2:c3: 68:71:e3:05:6d:bc:12:e7:3d:d7:52:31:35:82:87: 86:05:9c:d2:f5:ae:04:e5:3d:93:09:97:50:31:f6: 88:19:b7:4f:f1:40:87:74:83:46:c9:a8:e8:34:98: 8f:b8:34:02:b3:34:99:be:5d:20:2a:f1:5f:54:42: 07:28:1e:89:8b:92:ef:f8:da:1a:b6:ba:a6:c7:fb: df:6a:58:11:ab:de:14:d3:af:f5:07:61:1a:8d:75: be:f4:20:30:78:95:12:47:95:6e:eb:8d:78:8f:ad: 53:73:7e:66:d5:9a:30:48:55:b6:17:f2:94:af:5f: ba:88:ee:4f:39:36:f1:c1:4a:00:02:b3:00:21:81: 5b:0f:ce:09:91:2b:e1:b7:69:30:b5:e3:c6:80:7b: b4:31:ce:14:a4:3f:e4:67:0f:23:ee:65:d0:01:e4: 8a:fc:55:4f:6f:38:9a:90:d8:f6:e1:41:a2:2b:b7: e7:49:8f:5c:3c:3b:61:56:4a:38:48:4c:73:4e:bc: 37:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:6A:2C:F8:B8:58:8D:49:AA:B7:25:BC:9D:3C:56:11:73:A4:FD:E3 X509v3 Authority Key Identifier: keyid:C6:78:CC:0A:7B:AA:95:89:14:41:AD:80:95:44:91:DF:ED:87:D3:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/0/C678CC0A7BAA95891441AD80954491DFED87D33A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xnjMCnuqlYkUQa2AlUSR3-2H0zo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/0/C678CC0A7BAA95891441AD80954491DFED87D33A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:f6:60:26:e5:c8:de:73:cc:da:b4:a5:e2:eb:c9:ce:21:c9: 13:1a:b7:34:38:d2:b7:3d:50:2f:0d:db:40:5d:8c:a1:21:ee: 78:9d:e5:ef:b6:05:b7:75:b7:f0:63:d4:88:fd:ff:ad:33:8d: a0:60:b5:2f:fe:27:d0:6c:59:2a:3d:f1:86:5e:0f:1c:d7:61: 7b:44:17:a1:44:3c:be:fe:ad:d3:0e:59:61:cd:f3:e1:af:18: 35:44:e7:a9:a9:3f:1a:8e:e9:f9:f3:80:a3:6b:8a:02:be:f9: 63:9e:5d:bd:29:7c:b9:b6:59:4e:45:76:a6:f0:b5:67:a8:8c: 42:c8:56:af:b2:48:9e:8c:c6:c8:b2:0d:0d:55:29:dd:60:c8: 21:42:8c:d3:1c:d4:c4:70:b6:3d:8b:b9:84:6c:02:46:bd:e7: d7:b3:e7:86:99:11:86:32:f8:b6:7f:68:36:a7:d0:c8:cc:e6: 35:41:53:da:83:73:d8:6e:a6:4e:87:92:0c:22:43:23:1a:80: 79:4f:19:52:51:79:d5:aa:e8:4d:0a:68:f0:1a:f7:23:d8:a7: c5:5e:e8:6f:2f:0e:d9:b5:c2:df:0d:6c:77:a3:d5:cc:86:fa: 17:36:20:43:c0:3f:1a:54:c8:06:88:40:52:fd:ac:64:9e:e1: 05:e2:45:50 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUSHKNaZcwmeWnBbxIESNmAUAzi9swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYzY3OGNjMGE3YmFhOTU4OTE0NDFhZDgwOTU0NDkxZGZl ZDg3ZDMzYTAeFw0yNTEyMDYxNjA1NTFaFw0yNTEyMDcxNjQyNTFaMDMxMTAvBgNV BAMTKEFCNkEyQ0Y4Qjg1ODhENDlBQUI3MjVCQzlEM0M1NjExNzNBNEZERTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC15K2voLP+UeIskLGz89b4hHQE V1Q3UGVW3bcb4YaR06iFdpWa0j+FcpGGLfpu5CIjE2KjQSTRsuCyw2hx4wVtvBLn PddSMTWCh4YFnNL1rgTlPZMJl1Ax9ogZt0/xQId0g0bJqOg0mI+4NAKzNJm+XSAq 8V9UQgcoHomLku/42hq2uqbH+99qWBGr3hTTr/UHYRqNdb70IDB4lRJHlW7rjXiP rVNzfmbVmjBIVbYX8pSvX7qI7k85NvHBSgACswAhgVsPzgmRK+G3aTC148aAe7Qx zhSkP+RnDyPuZdAB5Ir8VU9vOJqQ2PbhQaIrt+dJj1w8O2FWSjhITHNOvDcTAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUq2os+LhYjUmqtyW8nTxWEXOk/eMwHwYDVR0j BBgwFoAUxnjMCnuqlYkUQa2AlUSR3+2H0zowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDA2MzMzYzYtOTQ2ZC00YjBiLTk1ZWYtZGFiYTI2MmE0 MmUxLzAvQzY3OENDMEE3QkFBOTU4OTE0NDFBRDgwOTU0NDkxREZFRDg3RDMzQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3huak1DbnVxbFlrVVFhMkFsVVNSMy0y SDB6by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kMDYzMzNjNi05 NDZkLTRiMGItOTVlZi1kYWJhMjYyYTQyZTEvMC9DNjc4Q0MwQTdCQUE5NTg5MTQ0 MUFEODA5NTQ0OTFERkVEODdEMzNBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEvZgJuXI3nPM2rSl4uvJ ziHJExq3NDjStz1QLw3bQF2MoSHueJ3l77YFt3W38GPUiP3/rTONoGC1L/4n0GxZ Kj3xhl4PHNdhe0QXoUQ8vv6t0w5ZYc3z4a8YNUTnqak/Go7p+fOAo2uKAr75Y55d vSl8ubZZTkV2pvC1Z6iMQshWr7JInozGyLINDVUp3WDIIUKM0xzUxHC2PYu5hGwC Rr3n17PnhpkRhjL4tn9oNqfQyMzmNUFT2oNz2G6mToeSDCJDIxqAeU8ZUlF51aro TQpo8Br3I9inxV7oby8O2bXC3w1sd6PVzIb6FzYgQ8A/GlTIBohAUv2sZJ7hBeJF UA== -----END CERTIFICATE-----Generated at Sat Dec 6 19:03:45 2025 by rpki-client