This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/3/63F7B29371E814336C52D9C43D1AF4F9FA33E855.mft File: 63F7B29371E814336C52D9C43D1AF4F9FA33E855.mft (raw, json) Hash identifier: aRY+dZvT5Z2CPXs4HRE0IMyzSjfw7Nzyy54Rk6wSN4M= Subject key identifier: 7E:00:9E:D4:CE:5A:82:AE:E0:4D:6F:E7:30:04:B5:C3:06:07:8E:67 Authority key identifier: 63:F7:B2:93:71:E8:14:33:6C:52:D9:C4:3D:1A:F4:F9:FA:33:E8:55 Certificate issuer: /CN=63f7b29371e814336c52d9c43d1af4f9fa33e855 Certificate serial: 4FF509580992A7B0575921A447C68556C3E1B012 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y_eyk3HoFDNsUtnEPRr0-foz6FU.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/3/63F7B29371E814336C52D9C43D1AF4F9FA33E855.mft Manifest number: 031F Signing time: Fri 19 Dec 2025 07:26:19 +0000 Manifest this update: Fri 19 Dec 2025 07:21:19 +0000 Manifest next update: Sat 20 Dec 2025 11:16:19 +0000 Files and hashes: 1: 63F7B29371E814336C52D9C43D1AF4F9FA33E855.crl (hash: 7/JDG60fRtTJIPqSpciLPX8xKMpy6FvBW4Tl05ogogc=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/3/63F7B29371E814336C52D9C43D1AF4F9FA33E855.crl rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/3/63F7B29371E814336C52D9C43D1AF4F9FA33E855.mft rsync://rpki.ripe.net/repository/DEFAULT/Y_eyk3HoFDNsUtnEPRr0-foz6FU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:f5:09:58:09:92:a7:b0:57:59:21:a4:47:c6:85:56:c3:e1:b0:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63f7b29371e814336c52d9c43d1af4f9fa33e855 Validity Not Before: Dec 19 07:21:19 2025 GMT Not After : Dec 20 11:16:19 2025 GMT Subject: CN=7E009ED4CE5A82AEE04D6FE73004B5C306078E67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:fa:74:0d:f1:14:51:77:c3:2f:87:08:cb:7a: b1:a3:59:9d:9d:05:83:b0:9f:bb:dc:e4:cd:c6:0d: 26:16:db:f0:f2:c3:d1:67:af:4e:90:65:e8:9c:2e: 74:68:17:f2:c7:ae:27:07:c2:9d:ca:b1:38:46:b1: 76:43:30:2c:c7:1c:d5:a3:a6:ec:1a:e0:6a:66:4b: 29:2f:e6:f4:1f:6b:3f:5b:5f:b6:32:18:25:34:e6: 9e:91:60:59:69:2a:7e:ed:6f:5a:93:db:bf:7b:ba: 85:55:99:89:94:f6:8f:e0:d8:d8:ba:67:dc:c4:4d: a6:c7:81:06:27:5f:d9:b2:64:ef:67:4e:54:88:bb: 80:1a:93:9c:0a:3d:da:d9:31:bc:89:b8:50:b2:08: 00:d5:ae:b9:94:eb:0b:5f:9c:42:dd:67:64:71:d2: 25:16:59:af:3d:d2:4f:e5:52:86:11:a0:a3:5b:70: a2:d1:b0:46:be:48:7c:dd:7f:c1:92:79:77:e5:3a: 50:9b:d3:89:af:a8:e1:eb:dc:86:e0:76:d4:61:03: db:0e:69:4b:2b:19:98:70:3d:df:92:ea:04:2b:3c: 8f:cb:b6:b0:12:53:a5:00:71:37:d2:3e:41:e9:5e: b9:d1:ee:89:72:00:30:3a:02:cb:9a:22:f5:e0:3a: 0f:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:00:9E:D4:CE:5A:82:AE:E0:4D:6F:E7:30:04:B5:C3:06:07:8E:67 X509v3 Authority Key Identifier: keyid:63:F7:B2:93:71:E8:14:33:6C:52:D9:C4:3D:1A:F4:F9:FA:33:E8:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/3/63F7B29371E814336C52D9C43D1AF4F9FA33E855.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y_eyk3HoFDNsUtnEPRr0-foz6FU.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/3/63F7B29371E814336C52D9C43D1AF4F9FA33E855.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:52:74:f4:21:d6:d8:e5:cc:30:95:14:72:61:c5:d8:8b:d4: 49:2c:5a:cf:88:26:15:6d:6c:6d:0a:53:b3:3e:12:e0:d3:0a: cd:74:48:48:5f:5a:80:96:7f:aa:ae:cb:13:c8:74:2c:ca:e3: 20:de:4a:1a:88:bf:4b:c8:8e:e8:6d:35:be:25:5b:5c:0a:cb: f4:f0:3b:4c:6a:5c:06:1d:ee:05:9f:8d:59:c6:fa:78:43:34: 42:80:ed:4a:0c:a7:dd:51:ca:63:81:0a:0e:12:93:62:85:47: 22:d0:b7:d8:23:be:a3:06:50:41:a2:41:a3:0e:5c:bd:e3:c8: 52:e1:89:9d:9b:3c:ba:7f:47:9c:91:a0:54:64:dc:4d:26:4a: 2e:3d:56:30:aa:bc:a6:aa:ed:da:8e:93:5d:97:37:4c:c2:fc: a0:f3:73:56:12:c9:d5:c0:63:f3:f2:88:9f:50:b1:9d:a8:f1: 39:56:62:5c:c1:7d:f9:93:1a:77:e0:62:26:8e:d9:a3:49:d4: c2:e3:0c:54:d0:78:e1:2c:50:b9:da:a7:30:bf:f2:23:12:e3: fb:54:be:26:d7:78:4a:fc:54:78:a5:1b:28:bc:1c:61:50:2e: 2f:c1:9d:25:b9:4e:a9:c7:c8:f3:36:cf:95:48:5b:5e:13:c2: e3:7c:b6:92 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUT/UJWAmSp7BXWSGkR8aFVsPhsBIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjNmN2IyOTM3MWU4MTQzMzZjNTJkOWM0M2QxYWY0Zjlm YTMzZTg1NTAeFw0yNTEyMTkwNzIxMTlaFw0yNTEyMjAxMTE2MTlaMDMxMTAvBgNV BAMTKDdFMDA5RUQ0Q0U1QTgyQUVFMDRENkZFNzMwMDRCNUMzMDYwNzhFNjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDw+nQN8RRRd8MvhwjLerGjWZ2d BYOwn7vc5M3GDSYW2/Dyw9Fnr06QZeicLnRoF/LHricHwp3KsThGsXZDMCzHHNWj puwa4GpmSykv5vQfaz9bX7YyGCU05p6RYFlpKn7tb1qT2797uoVVmYmU9o/g2Ni6 Z9zETabHgQYnX9myZO9nTlSIu4Aak5wKPdrZMbyJuFCyCADVrrmU6wtfnELdZ2Rx 0iUWWa890k/lUoYRoKNbcKLRsEa+SHzdf8GSeXflOlCb04mvqOHr3IbgdtRhA9sO aUsrGZhwPd+S6gQrPI/LtrASU6UAcTfSPkHpXrnR7olyADA6AsuaIvXgOg/fAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUfgCe1M5agq7gTW/nMAS1wwYHjmcwHwYDVR0j BBgwFoAUY/eyk3HoFDNsUtnEPRr0+foz6FUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDA2MzMzYzYtOTQ2ZC00YjBiLTk1ZWYtZGFiYTI2MmE0 MmUxLzMvNjNGN0IyOTM3MUU4MTQzMzZDNTJEOUM0M0QxQUY0RjlGQTMzRTg1NS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1lfZXlrM0hvRkROc1V0bkVQUnIwLWZv ejZGVS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kMDYzMzNjNi05 NDZkLTRiMGItOTVlZi1kYWJhMjYyYTQyZTEvMy82M0Y3QjI5MzcxRTgxNDMzNkM1 MkQ5QzQzRDFBRjRGOUZBMzNFODU1Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqFJ09CHW2OXMMJUUcmHF 2IvUSSxaz4gmFW1sbQpTsz4S4NMKzXRISF9agJZ/qq7LE8h0LMrjIN5KGoi/S8iO 6G01viVbXArL9PA7TGpcBh3uBZ+NWcb6eEM0QoDtSgyn3VHKY4EKDhKTYoVHItC3 2CO+owZQQaJBow5cvePIUuGJnZs8un9HnJGgVGTcTSZKLj1WMKq8pqrt2o6TXZc3 TML8oPNzVhLJ1cBj8/KIn1CxnajxOVZiXMF9+ZMad+BiJo7Zo0nUwuMMVNB44SxQ udqnML/yIxLj+1S+Jtd4SvxUeKUbKLwcYVAuL8GdJblOqcfI8zbPlUhbXhPC43y2 kg== -----END CERTIFICATE-----Generated at Fri Dec 19 14:15:51 2025 by rpki-client