This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/0/C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.mft File: C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.mft (raw, json) Hash identifier: Foj7VUnaTejN6O8xchqEMOomjWP+4wsQhT9M7vyijAo= Subject key identifier: AA:73:CB:74:07:8F:B1:F5:5E:E9:5B:CD:6E:0D:75:6D:BC:3A:31:C0 Authority key identifier: C4:CA:D0:EF:CB:E3:05:B4:49:4E:D2:74:7B:B4:F8:2F:43:AC:8C:81 Certificate issuer: /CN=c4cad0efcbe305b4494ed2747bb4f82f43ac8c81 Certificate serial: 7329271EA9CC67723FFCFE3AD8427A78F8FB73EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xMrQ78vjBbRJTtJ0e7T4L0OsjIE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/0/C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.mft Manifest number: 02E4 Signing time: Sun 21 Dec 2025 04:06:27 +0000 Manifest this update: Sun 21 Dec 2025 04:01:27 +0000 Manifest next update: Mon 22 Dec 2025 07:47:27 +0000 Files and hashes: 1: C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.crl (hash: 8i05trNaw4AxAWYofDKFIGBpWqsJxLO12AXAbA+Xe+4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/0/C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.crl rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/0/C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.mft rsync://rpki.ripe.net/repository/DEFAULT/xMrQ78vjBbRJTtJ0e7T4L0OsjIE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 07:47:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:29:27:1e:a9:cc:67:72:3f:fc:fe:3a:d8:42:7a:78:f8:fb:73:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c4cad0efcbe305b4494ed2747bb4f82f43ac8c81 Validity Not Before: Dec 21 04:01:27 2025 GMT Not After : Dec 22 07:47:27 2025 GMT Subject: CN=AA73CB74078FB1F55EE95BCD6E0D756DBC3A31C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:48:1a:37:48:54:eb:8a:c7:a2:e7:e6:cc:84: 21:49:3c:75:34:ee:7d:fd:67:eb:f3:5c:e9:e5:6b: e5:e3:5c:98:fe:4b:55:5a:a6:49:52:7f:b2:6a:3a: be:cf:4b:3e:7a:91:97:e4:e1:fe:8a:12:58:70:78: 7e:7b:6f:63:07:1e:d0:6e:41:dd:5b:8d:ef:1e:1d: 7f:e2:47:c8:d5:d5:5e:a8:b7:f7:e2:e1:9d:77:10: 89:90:2c:3f:cc:57:95:05:08:50:78:5d:22:54:ba: c0:9e:ce:1e:42:6d:d0:dd:42:2f:a9:98:86:a3:40: b5:2f:4d:27:7d:3c:f1:5e:68:54:c3:5f:63:f1:dc: fc:6e:93:3d:15:23:89:ef:2c:41:e3:3d:fe:7f:07: 78:40:06:aa:37:6a:72:5e:6c:af:ee:39:67:21:5c: aa:cd:c9:80:92:2f:12:7c:41:26:42:7a:68:9d:2a: 1b:66:10:f1:3d:0d:33:12:fc:98:51:60:24:aa:67: bf:48:e4:ee:ba:39:0e:b7:6d:52:d9:79:b6:1b:94: d7:60:d7:8b:d2:55:d5:71:d9:b1:1b:3a:5b:b5:f2: cd:8e:14:77:3e:7c:80:1e:3c:7a:82:f0:02:e5:c1: d0:83:27:66:c8:e0:fa:fb:db:27:4a:61:22:5d:5b: 8a:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:73:CB:74:07:8F:B1:F5:5E:E9:5B:CD:6E:0D:75:6D:BC:3A:31:C0 X509v3 Authority Key Identifier: keyid:C4:CA:D0:EF:CB:E3:05:B4:49:4E:D2:74:7B:B4:F8:2F:43:AC:8C:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/0/C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xMrQ78vjBbRJTtJ0e7T4L0OsjIE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/0/C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:b0:b2:4c:c4:c1:19:e2:1d:7e:be:b4:d6:6d:1f:31:51:d7: e2:5c:f3:5e:79:7b:27:0f:4d:e9:fc:9e:2c:df:40:bd:e3:21: 06:7b:d8:a6:6c:72:38:7f:38:64:a2:28:e5:fe:b2:b8:25:2e: f7:e6:74:83:c2:85:a0:e3:8d:29:f0:7b:f4:12:ce:96:d5:b7: 49:e6:98:c7:63:e8:c1:4d:e0:01:e9:4b:f9:51:16:4d:05:0b: 3e:5f:00:8d:a5:7f:3a:1a:48:a9:d8:be:ea:16:a1:94:78:13: 27:ee:34:7a:6a:01:cd:a7:6a:1c:c2:fa:ff:ac:a0:74:19:f1: fd:f9:df:00:4d:4d:4e:3c:ee:50:13:79:cb:2b:b3:a3:73:9e: 97:70:25:41:17:92:fc:2f:d7:39:38:40:59:68:d7:64:b6:43: 69:3d:12:65:c9:ec:d1:6d:c8:4a:7d:58:bd:9f:76:d4:94:fb: 44:8e:65:40:0d:12:9b:dc:15:b3:21:a5:44:c4:8b:9c:da:88: e8:2e:3e:62:d8:b2:d4:d7:e8:14:e9:83:5a:3c:7f:2a:78:ab: 86:86:1a:f8:03:b2:49:f7:15:aa:72:8d:87:32:53:35:cb:8f: 4d:f9:09:8a:1d:f9:b7:80:40:09:7b:4e:fe:e2:b8:f9:2d:e5: ab:9b:a8:65 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUcyknHqnMZ3I//P462EJ6ePj7c+8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYzRjYWQwZWZjYmUzMDViNDQ5NGVkMjc0N2JiNGY4MmY0 M2FjOGM4MTAeFw0yNTEyMjEwNDAxMjdaFw0yNTEyMjIwNzQ3MjdaMDMxMTAvBgNV BAMTKEFBNzNDQjc0MDc4RkIxRjU1RUU5NUJDRDZFMEQ3NTZEQkMzQTMxQzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoSBo3SFTrisei5+bMhCFJPHU0 7n39Z+vzXOnla+XjXJj+S1VapklSf7JqOr7PSz56kZfk4f6KElhweH57b2MHHtBu Qd1bje8eHX/iR8jV1V6ot/fi4Z13EImQLD/MV5UFCFB4XSJUusCezh5CbdDdQi+p mIajQLUvTSd9PPFeaFTDX2Px3Pxukz0VI4nvLEHjPf5/B3hABqo3anJebK/uOWch XKrNyYCSLxJ8QSZCemidKhtmEPE9DTMS/JhRYCSqZ79I5O66OQ63bVLZebYblNdg 14vSVdVx2bEbOlu18s2OFHc+fIAePHqC8ALlwdCDJ2bI4Pr72ydKYSJdW4oXAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUqnPLdAePsfVe6VvNbg11bbw6McAwHwYDVR0j BBgwFoAUxMrQ78vjBbRJTtJ0e7T4L0OsjIEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDdlNDU5MmUtMjNjMC00Y2NjLTk0ZGEtNmM5NTgwN2Y4 M2U3LzAvQzRDQUQwRUZDQkUzMDVCNDQ5NEVEMjc0N0JCNEY4MkY0M0FDOEM4MS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3hNclE3OHZqQmJSSlR0SjBlN1Q0TDBP c2pJRS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kN2U0NTkyZS0y M2MwLTRjY2MtOTRkYS02Yzk1ODA3ZjgzZTcvMC9DNENBRDBFRkNCRTMwNUI0NDk0 RUQyNzQ3QkI0RjgyRjQzQUM4QzgxLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnrCyTMTBGeIdfr601m0f MVHX4lzzXnl7Jw9N6fyeLN9AveMhBnvYpmxyOH84ZKIo5f6yuCUu9+Z0g8KFoOON KfB79BLOltW3SeaYx2PowU3gAelL+VEWTQULPl8AjaV/OhpIqdi+6hahlHgTJ+40 emoBzadqHML6/6ygdBnx/fnfAE1NTjzuUBN5yyuzo3Oel3AlQReS/C/XOThAWWjX ZLZDaT0SZcns0W3ISn1YvZ921JT7RI5lQA0Sm9wVsyGlRMSLnNqI6C4+Ytiy1Nfo FOmDWjx/KnirhoYa+AOySfcVqnKNhzJTNcuPTfkJih35t4BACXtO/uK4+S3lq5uo ZQ== -----END CERTIFICATE-----Generated at Sun Dec 21 23:42:20 2025 by rpki-client