This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/2/0452A7B37267CE42DC95A34621BC7026A222B005.mft File: 0452A7B37267CE42DC95A34621BC7026A222B005.mft (raw, json) Hash identifier: WDnoUzY/RpqYuE1rr99Q8r/X9AinwU8xbWv296/yYvw= Subject key identifier: CA:38:CC:B7:23:7A:61:52:F2:3B:54:1A:96:20:FE:C9:36:90:D3:0D Authority key identifier: 04:52:A7:B3:72:67:CE:42:DC:95:A3:46:21:BC:70:26:A2:22:B0:05 Certificate issuer: /CN=0452a7b37267ce42dc95a34621bc7026a222b005 Certificate serial: 63357A0D12D205412C8D45886B14A4D3B0D28649 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BFKns3JnzkLclaNGIbxwJqIisAU.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/2/0452A7B37267CE42DC95A34621BC7026A222B005.mft Manifest number: 54 Signing time: Fri 05 Dec 2025 12:52:23 +0000 Manifest this update: Fri 05 Dec 2025 12:47:23 +0000 Manifest next update: Sat 06 Dec 2025 16:33:23 +0000 Files and hashes: 1: AS204518.asa (hash: 6ZPueaHQ51DeRfsY/NQlxbJfSs8ftM3igYNB7N59JcA=) 2: 0452A7B37267CE42DC95A34621BC7026A222B005.crl (hash: +0ors9HilF0Wo++50N3+byxeUo3vTzkHKYIKdFk9/fo=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/2/0452A7B37267CE42DC95A34621BC7026A222B005.crl rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/2/0452A7B37267CE42DC95A34621BC7026A222B005.mft rsync://rpki.ripe.net/repository/DEFAULT/BFKns3JnzkLclaNGIbxwJqIisAU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 16:33:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:35:7a:0d:12:d2:05:41:2c:8d:45:88:6b:14:a4:d3:b0:d2:86:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0452a7b37267ce42dc95a34621bc7026a222b005 Validity Not Before: Dec 5 12:47:23 2025 GMT Not After : Dec 6 16:33:23 2025 GMT Subject: CN=CA38CCB7237A6152F23B541A9620FEC93690D30D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:e8:00:d5:a7:91:17:62:c2:bf:ac:f2:19:02: d5:c5:06:b8:6e:9b:24:ef:5c:cf:7e:16:76:fe:28: b4:cb:1f:67:b1:b1:5d:3e:45:62:61:6d:89:e2:61: 41:ad:44:1f:6b:d8:d3:25:74:fb:0e:40:97:a5:bc: d9:50:f4:2b:03:11:bc:9d:c6:39:1a:5d:1e:47:93: 29:50:8e:ab:f7:87:74:5f:9b:f6:ee:b9:0f:19:2e: 84:18:2a:42:52:f9:74:d7:99:62:92:1f:64:6a:86: 70:05:a8:71:03:bf:57:fa:af:af:b1:49:2e:d1:ac: 3c:47:68:f9:0e:88:16:c4:9f:4c:15:10:71:07:3d: 28:06:45:2e:f8:02:1c:d7:8c:51:2e:12:b1:61:af: bf:25:69:17:53:18:6e:7d:8c:bb:07:d5:30:a7:49: 95:77:89:aa:e7:50:a1:05:67:24:bc:5b:ab:fd:6c: d1:db:b9:16:8b:35:94:93:6d:c6:7e:78:47:1d:0a: 59:24:5e:04:00:a8:56:f9:b2:26:9e:c4:f4:e0:5c: 22:ac:b3:69:27:a7:64:57:ef:a1:f5:4b:d9:84:6f: 93:84:f4:84:65:f6:d9:d1:02:16:cd:e3:37:9c:51: 71:2b:70:2b:a0:f0:c0:53:01:97:b5:9b:7e:42:ce: 80:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:38:CC:B7:23:7A:61:52:F2:3B:54:1A:96:20:FE:C9:36:90:D3:0D X509v3 Authority Key Identifier: keyid:04:52:A7:B3:72:67:CE:42:DC:95:A3:46:21:BC:70:26:A2:22:B0:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/2/0452A7B37267CE42DC95A34621BC7026A222B005.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BFKns3JnzkLclaNGIbxwJqIisAU.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/2/0452A7B37267CE42DC95A34621BC7026A222B005.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:1e:9c:20:08:be:8d:25:21:79:73:b8:e9:35:a7:00:60:11: 5b:ef:e9:2e:d2:fb:93:a6:fa:6e:df:89:48:a6:5f:f2:f2:92: 01:7b:d2:dc:2d:b3:ab:37:30:33:7b:30:28:39:41:0c:dd:70: 9a:c8:6c:df:c6:66:85:71:35:fb:46:23:be:50:02:fe:b8:3e: 05:f0:ba:73:0f:13:84:1a:5a:a8:54:cf:0f:1b:73:11:d4:51: a4:d1:ab:37:8c:11:33:35:df:61:1d:c2:49:92:e1:7c:c5:1a: 6c:96:a5:a5:89:9b:1f:07:92:9d:fe:56:68:6d:f7:a6:f4:42: a9:8f:e2:ae:d1:8a:ae:de:86:69:9d:18:39:c4:18:74:88:f2: a2:8b:50:01:99:a5:ec:e6:62:8d:91:a9:74:88:0e:75:51:3b: e7:5d:f2:b6:42:c0:11:2a:4d:5a:35:b2:09:6b:47:ef:4a:13: 44:35:27:c6:63:85:50:a4:62:74:b5:e5:c9:ec:d7:1c:8f:2e: cc:7b:c8:ff:b5:15:41:03:16:3a:6b:b9:9e:df:d4:5e:30:89: f5:bb:c2:12:45:1a:7c:35:62:09:a1:3e:d8:9e:f5:c3:ed:da: bf:56:b2:f8:46:e8:c2:7a:0d:1f:06:03:44:c0:5a:99:62:3c: 05:b2:b2:1b -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUYzV6DRLSBUEsjUWIaxSk07DShkkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDQ1MmE3YjM3MjY3Y2U0MmRjOTVhMzQ2MjFiYzcwMjZh MjIyYjAwNTAeFw0yNTEyMDUxMjQ3MjNaFw0yNTEyMDYxNjMzMjNaMDMxMTAvBgNV BAMTKENBMzhDQ0I3MjM3QTYxNTJGMjNCNTQxQTk2MjBGRUM5MzY5MEQzMEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC16ADVp5EXYsK/rPIZAtXFBrhu myTvXM9+Fnb+KLTLH2exsV0+RWJhbYniYUGtRB9r2NMldPsOQJelvNlQ9CsDEbyd xjkaXR5HkylQjqv3h3Rfm/buuQ8ZLoQYKkJS+XTXmWKSH2RqhnAFqHEDv1f6r6+x SS7RrDxHaPkOiBbEn0wVEHEHPSgGRS74AhzXjFEuErFhr78laRdTGG59jLsH1TCn SZV3iarnUKEFZyS8W6v9bNHbuRaLNZSTbcZ+eEcdClkkXgQAqFb5siaexPTgXCKs s2knp2RX76H1S9mEb5OE9IRl9tnRAhbN4zecUXErcCug8MBTAZe1m35CzoDDAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUyjjMtyN6YVLyO1QaliD+yTaQ0w0wHwYDVR0j BBgwFoAUBFKns3JnzkLclaNGIbxwJqIisAUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZTI2ZWIxMzYtNGZlNS00ZTYxLWE0ZDgtZjM0NWY1MmJj MjVkLzIvMDQ1MkE3QjM3MjY3Q0U0MkRDOTVBMzQ2MjFCQzcwMjZBMjIyQjAwNS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0JGS25zM0puemtMY2xhTkdJYnh3SnFJ aXNBVS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lMjZlYjEzNi00 ZmU1LTRlNjEtYTRkOC1mMzQ1ZjUyYmMyNWQvMi8wNDUyQTdCMzcyNjdDRTQyREM5 NUEzNDYyMUJDNzAyNkEyMjJCMDA1Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJB6cIAi+jSUheXO46TWn AGARW+/pLtL7k6b6bt+JSKZf8vKSAXvS3C2zqzcwM3swKDlBDN1wmshs38ZmhXE1 +0YjvlAC/rg+BfC6cw8ThBpaqFTPDxtzEdRRpNGrN4wRMzXfYR3CSZLhfMUabJal pYmbHweSnf5WaG33pvRCqY/irtGKrt6GaZ0YOcQYdIjyootQAZml7OZijZGpdIgO dVE7513ytkLAESpNWjWyCWtH70oTRDUnxmOFUKRidLXlyezXHI8uzHvI/7UVQQMW Omu5nt/UXjCJ9bvCEkUafDViCaE+2J71w+3av1ay+EbownoNHwYDRMBamWI8BbKy Gw== -----END CERTIFICATE-----Generated at Sat Dec 6 06:37:16 2025 by rpki-client