This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/dec36210-f6cf-4c4f-a155-78a8eb5bf0bf/0/25C73DFC868C3F62CB7FF971AF477671CAF380AA.mft File: 25C73DFC868C3F62CB7FF971AF477671CAF380AA.mft (raw, json) Hash identifier: NkKAujwRLwKwwv7EGVeYIcyqxGbTZrVp//dr/58eZVY= Subject key identifier: D9:89:22:A0:F6:74:38:94:77:30:9D:01:48:95:38:EF:F9:DF:99:1A Authority key identifier: 25:C7:3D:FC:86:8C:3F:62:CB:7F:F9:71:AF:47:76:71:CA:F3:80:AA Certificate issuer: /CN=25c73dfc868c3f62cb7ff971af477671caf380aa Certificate serial: 5D626BE24A1521908087CC23718C05D51CA8CA60 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jcc9_IaMP2LLf_lxr0d2ccrzgKo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/dec36210-f6cf-4c4f-a155-78a8eb5bf0bf/0/25C73DFC868C3F62CB7FF971AF477671CAF380AA.mft Manifest number: 04A8 Signing time: Fri 05 Dec 2025 10:16:45 +0000 Manifest this update: Fri 05 Dec 2025 10:11:45 +0000 Manifest next update: Sat 06 Dec 2025 13:55:45 +0000 Files and hashes: 1: 25C73DFC868C3F62CB7FF971AF477671CAF380AA.crl (hash: mSa8YhOUlSXzlzyPLsKiYVTW0zwi26/dNU6LKjHr5Rk=) 2: AS205603.asa (hash: hilS75f+xThcKc+nN214Mi4BwyvAFPo1c2Y0cUS3H24=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/dec36210-f6cf-4c4f-a155-78a8eb5bf0bf/0/25C73DFC868C3F62CB7FF971AF477671CAF380AA.crl rsync://rsync.paas.rpki.ripe.net/repository/dec36210-f6cf-4c4f-a155-78a8eb5bf0bf/0/25C73DFC868C3F62CB7FF971AF477671CAF380AA.mft rsync://rpki.ripe.net/repository/DEFAULT/Jcc9_IaMP2LLf_lxr0d2ccrzgKo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 13:55:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:62:6b:e2:4a:15:21:90:80:87:cc:23:71:8c:05:d5:1c:a8:ca:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25c73dfc868c3f62cb7ff971af477671caf380aa Validity Not Before: Dec 5 10:11:45 2025 GMT Not After : Dec 6 13:55:45 2025 GMT Subject: CN=D98922A0F674389477309D01489538EFF9DF991A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:49:30:0d:0c:53:c3:6c:90:6b:21:85:88:c6: d9:0c:c1:b0:77:82:44:cd:eb:61:66:8d:a5:31:2e: aa:2e:b6:b1:4e:93:65:49:bf:95:1e:a7:7c:e2:ad: b6:37:43:0c:52:1a:7e:9d:8e:98:97:28:90:e3:6e: a0:7c:d5:d9:f5:27:1d:bd:8d:f9:d1:77:c1:ab:53: 07:10:d7:89:65:7e:96:56:c7:56:3e:67:44:2b:9a: bb:6c:89:b2:a5:f8:f7:07:54:1b:2a:c5:3e:88:5c: ed:ef:a3:30:87:eb:f0:78:31:86:d1:91:fb:8e:a2: f4:1b:3c:fe:c7:f2:05:9d:6e:8d:38:f2:5e:77:6e: e6:b0:98:f9:8a:55:dd:37:62:c5:6b:84:ce:e8:24: 21:47:c9:ca:2b:b4:0f:ad:40:ae:50:27:ee:48:78: 32:b5:d7:3c:1f:89:f1:02:fd:1f:2b:e0:5c:4c:d8: 28:79:ec:bd:59:e9:47:d8:20:3d:91:55:f1:42:4f: f9:1a:ae:63:0b:5e:f1:ae:f4:96:4e:a2:7c:53:92: 3e:d4:6f:87:2e:9e:e8:9d:a1:a3:c5:2b:f1:90:47: 70:9d:2b:4c:cb:d8:96:6b:9d:e8:ec:57:af:86:59: 7d:a4:e9:81:bd:f5:be:1a:b7:48:39:46:16:d2:87: b7:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:89:22:A0:F6:74:38:94:77:30:9D:01:48:95:38:EF:F9:DF:99:1A X509v3 Authority Key Identifier: keyid:25:C7:3D:FC:86:8C:3F:62:CB:7F:F9:71:AF:47:76:71:CA:F3:80:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/dec36210-f6cf-4c4f-a155-78a8eb5bf0bf/0/25C73DFC868C3F62CB7FF971AF477671CAF380AA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jcc9_IaMP2LLf_lxr0d2ccrzgKo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/dec36210-f6cf-4c4f-a155-78a8eb5bf0bf/0/25C73DFC868C3F62CB7FF971AF477671CAF380AA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:61:91:51:61:3c:66:51:61:5e:d8:25:55:f8:72:54:60:92: 94:84:4a:b2:02:b6:65:45:2e:2e:90:bd:67:7b:2d:3a:b0:47: 9b:de:27:59:b8:82:8c:14:3f:cd:6a:c9:9e:71:e0:eb:e4:a5: f4:05:c4:54:57:24:19:e7:01:54:36:1c:6f:7d:6c:41:a8:c3: a0:a9:04:ef:2e:70:82:13:25:0a:44:d5:38:41:b4:da:01:48: 63:9b:1f:23:2a:84:6f:56:14:a3:b6:2f:03:32:79:66:6c:8a: 5d:1a:4d:46:5f:86:6b:f8:72:72:64:1b:72:ae:e6:d3:90:cd: 83:78:a7:f6:e8:03:c6:a3:8d:e7:4d:26:c6:95:8b:ae:ae:f6: 84:24:5f:fc:a9:66:43:e9:54:d9:3a:f7:e5:15:83:b6:95:e1: c8:93:d2:54:94:a3:d2:a0:2d:52:eb:05:6d:98:d9:46:3f:33: aa:6a:d2:f2:40:88:a9:45:8b:73:ba:13:be:44:e1:2d:ee:70: 8e:8d:d3:ef:6f:55:1a:2f:15:9d:0b:4b:aa:1d:d1:2a:e0:d9: 55:76:14:1f:c2:7b:ab:32:fc:a9:e0:b6:d4:33:63:66:6a:2f: ff:c5:5e:1e:10:3c:05:34:7e:6a:c7:b2:db:fe:bc:0b:6d:b6: fc:9f:94:f8 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUXWJr4koVIZCAh8wjcYwF1RyoymAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjVjNzNkZmM4NjhjM2Y2MmNiN2ZmOTcxYWY0Nzc2NzFj YWYzODBhYTAeFw0yNTEyMDUxMDExNDVaFw0yNTEyMDYxMzU1NDVaMDMxMTAvBgNV BAMTKEQ5ODkyMkEwRjY3NDM4OTQ3NzMwOUQwMTQ4OTUzOEVGRjlERjk5MUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQSTANDFPDbJBrIYWIxtkMwbB3 gkTN62FmjaUxLqoutrFOk2VJv5Uep3zirbY3QwxSGn6djpiXKJDjbqB81dn1Jx29 jfnRd8GrUwcQ14llfpZWx1Y+Z0QrmrtsibKl+PcHVBsqxT6IXO3vozCH6/B4MYbR kfuOovQbPP7H8gWdbo048l53buawmPmKVd03YsVrhM7oJCFHycortA+tQK5QJ+5I eDK11zwfifEC/R8r4FxM2Ch57L1Z6UfYID2RVfFCT/karmMLXvGu9JZOonxTkj7U b4cunuidoaPFK/GQR3CdK0zL2JZrnejsV6+GWX2k6YG99b4at0g5RhbSh7crAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU2YkioPZ0OJR3MJ0BSJU47/nfmRowHwYDVR0j BBgwFoAUJcc9/IaMP2LLf/lxr0d2ccrzgKowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZGVjMzYyMTAtZjZjZi00YzRmLWExNTUtNzhhOGViNWJm MGJmLzAvMjVDNzNERkM4NjhDM0Y2MkNCN0ZGOTcxQUY0Nzc2NzFDQUYzODBBQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0pjYzlfSWFNUDJMTGZfbHhyMGQyY2Ny emdLby5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZWMzNjIxMC1m NmNmLTRjNGYtYTE1NS03OGE4ZWI1YmYwYmYvMC8yNUM3M0RGQzg2OEMzRjYyQ0I3 RkY5NzFBRjQ3NzY3MUNBRjM4MEFBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFmGRUWE8ZlFhXtglVfhy VGCSlIRKsgK2ZUUuLpC9Z3stOrBHm94nWbiCjBQ/zWrJnnHg6+Sl9AXEVFckGecB VDYcb31sQajDoKkE7y5wghMlCkTVOEG02gFIY5sfIyqEb1YUo7YvAzJ5ZmyKXRpN Rl+Ga/hycmQbcq7m05DNg3in9ugDxqON500mxpWLrq72hCRf/KlmQ+lU2Tr35RWD tpXhyJPSVJSj0qAtUusFbZjZRj8zqmrS8kCIqUWLc7oTvkThLe5wjo3T729VGi8V nQtLqh3RKuDZVXYUH8J7qzL8qeC21DNjZmov/8VeHhA8BTR+asey2/68C222/J+U +A== -----END CERTIFICATE-----Generated at Sat Dec 6 05:05:25 2025 by rpki-client