This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ebb6890d-0d6b-4ea9-a2ef-92d34a3ae64d/1/9C2CB2B4BEC601B3E9A4740215E1DED211722D64.mft File: 9C2CB2B4BEC601B3E9A4740215E1DED211722D64.mft (raw, json) Hash identifier: QwFSy9iW3L788pXZBHJYL6yA8CfwqM3ZAr5yfqJPbe8= Subject key identifier: 7D:59:FE:65:0E:83:4A:9E:6C:30:9D:07:12:3F:27:2B:21:73:61:86 Authority key identifier: 9C:2C:B2:B4:BE:C6:01:B3:E9:A4:74:02:15:E1:DE:D2:11:72:2D:64 Certificate issuer: /CN=9c2cb2b4bec601b3e9a4740215e1ded211722d64 Certificate serial: 64193E0DE9A9308D32659DC34587C7E05008560C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nCyytL7GAbPppHQCFeHe0hFyLWQ.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ebb6890d-0d6b-4ea9-a2ef-92d34a3ae64d/1/9C2CB2B4BEC601B3E9A4740215E1DED211722D64.mft Manifest number: 48 Signing time: Sat 06 Dec 2025 07:15:30 +0000 Manifest this update: Sat 06 Dec 2025 07:10:30 +0000 Manifest next update: Sun 07 Dec 2025 10:38:30 +0000 Files and hashes: 1: 9C2CB2B4BEC601B3E9A4740215E1DED211722D64.crl (hash: kA0MKtsE9L264tWRgyBxfK342FLNvSgjSBh4KKb5km8=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ebb6890d-0d6b-4ea9-a2ef-92d34a3ae64d/1/9C2CB2B4BEC601B3E9A4740215E1DED211722D64.crl rsync://rsync.paas.rpki.ripe.net/repository/ebb6890d-0d6b-4ea9-a2ef-92d34a3ae64d/1/9C2CB2B4BEC601B3E9A4740215E1DED211722D64.mft rsync://rpki.ripe.net/repository/DEFAULT/nCyytL7GAbPppHQCFeHe0hFyLWQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:38:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:19:3e:0d:e9:a9:30:8d:32:65:9d:c3:45:87:c7:e0:50:08:56:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c2cb2b4bec601b3e9a4740215e1ded211722d64 Validity Not Before: Dec 6 07:10:30 2025 GMT Not After : Dec 7 10:38:30 2025 GMT Subject: CN=7D59FE650E834A9E6C309D07123F272B21736186 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:cc:ec:c6:1f:d3:5d:5c:7b:29:52:20:9b:a6: c6:d8:09:15:53:1f:49:6c:08:2e:13:f8:34:d2:15: 2b:b6:b9:85:ae:43:f9:24:85:e9:ec:58:3a:7f:22: eb:b3:8a:ed:27:6a:cc:63:d0:6b:59:c3:e5:77:e9: b1:b9:48:3c:a6:00:22:f1:00:29:db:c6:c8:ac:41: dc:48:9c:a8:86:b4:f1:c8:f6:01:8d:c9:12:74:7e: f5:cf:67:a5:4f:bb:4a:1b:ca:50:1e:f1:7f:4e:0e: 17:7c:5b:56:0a:cc:b1:1f:70:23:0f:4e:41:8c:cd: e5:9b:87:99:1b:3d:45:70:8e:ce:09:fe:0e:7b:71: c6:3b:e4:cd:e6:3e:9d:a0:9a:31:50:a2:11:5d:9b: a9:19:ae:2a:82:ae:f5:a2:d5:6e:5a:69:c8:1f:6a: d3:22:96:69:e0:82:95:52:20:32:55:3d:a9:8b:5a: ad:57:18:58:e5:a7:81:fa:f1:33:b4:8a:b9:a3:4b: 16:5f:db:d6:e5:15:13:37:88:c5:f4:e9:b2:f9:b5: d9:c3:15:99:4c:c5:e0:b0:69:e6:bd:15:22:5e:39: 36:be:9d:e7:e1:9d:88:88:09:2e:ae:b5:6a:51:d9: 3f:86:d9:d9:a4:92:ca:2f:b4:f6:c7:03:61:98:0c: 3b:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:59:FE:65:0E:83:4A:9E:6C:30:9D:07:12:3F:27:2B:21:73:61:86 X509v3 Authority Key Identifier: keyid:9C:2C:B2:B4:BE:C6:01:B3:E9:A4:74:02:15:E1:DE:D2:11:72:2D:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ebb6890d-0d6b-4ea9-a2ef-92d34a3ae64d/1/9C2CB2B4BEC601B3E9A4740215E1DED211722D64.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nCyytL7GAbPppHQCFeHe0hFyLWQ.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ebb6890d-0d6b-4ea9-a2ef-92d34a3ae64d/1/9C2CB2B4BEC601B3E9A4740215E1DED211722D64.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:6f:34:ec:e4:69:ff:cf:0a:cb:73:1a:03:da:d6:da:c7:d7: 7c:cc:0d:fc:2f:8f:14:58:a3:07:2c:66:ab:3b:b7:23:56:2e: 8b:a3:10:c1:97:e0:4a:ea:51:3d:d7:29:9c:03:96:6e:fc:f5: ed:47:fa:d6:a4:65:62:7e:26:8d:b5:1f:97:44:34:69:ca:15: 73:55:b4:0e:c2:9b:a4:21:a2:56:54:2f:41:70:37:1e:bf:70: cc:3e:4f:d9:b2:5b:66:6e:19:f3:31:4b:61:19:f4:46:f3:cd: 7c:56:45:61:ef:40:ae:2b:8c:28:06:30:b6:1a:ec:36:44:16: d7:61:68:1b:b3:18:07:a9:f5:a2:6c:35:a4:80:c1:27:b0:d5: be:28:c2:bd:75:d8:11:d9:3b:fe:37:24:d7:94:e1:0c:8d:dc: 2c:75:aa:91:b6:49:0b:07:03:6f:26:89:fa:96:74:d3:8d:80: 10:88:14:22:a0:27:3e:64:0c:ae:2a:6f:52:af:cb:42:82:a7: 21:09:83:34:d9:50:a0:72:f7:f6:87:82:9b:d0:89:3c:b4:80: ba:0e:48:dc:36:69:13:f8:63:61:f0:ad:ad:75:de:ed:41:a1: 06:4e:70:a4:ec:d1:07:c0:b6:24:a8:95:71:01:b7:c3:db:a7: 62:3f:6f:26 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUZBk+DempMI0yZZ3DRYfH4FAIVgwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOWMyY2IyYjRiZWM2MDFiM2U5YTQ3NDAyMTVlMWRlZDIx MTcyMmQ2NDAeFw0yNTEyMDYwNzEwMzBaFw0yNTEyMDcxMDM4MzBaMDMxMTAvBgNV BAMTKDdENTlGRTY1MEU4MzRBOUU2QzMwOUQwNzEyM0YyNzJCMjE3MzYxODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDizOzGH9NdXHspUiCbpsbYCRVT H0lsCC4T+DTSFSu2uYWuQ/kkhensWDp/Iuuziu0nasxj0GtZw+V36bG5SDymACLx ACnbxsisQdxInKiGtPHI9gGNyRJ0fvXPZ6VPu0obylAe8X9ODhd8W1YKzLEfcCMP TkGMzeWbh5kbPUVwjs4J/g57ccY75M3mPp2gmjFQohFdm6kZriqCrvWi1W5aacgf atMilmnggpVSIDJVPamLWq1XGFjlp4H68TO0irmjSxZf29blFRM3iMX06bL5tdnD FZlMxeCwaea9FSJeOTa+nefhnYiICS6utWpR2T+G2dmkksovtPbHA2GYDDtvAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUfVn+ZQ6DSp5sMJ0HEj8nKyFzYYYwHwYDVR0j BBgwFoAUnCyytL7GAbPppHQCFeHe0hFyLWQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZWJiNjg5MGQtMGQ2Yi00ZWE5LWEyZWYtOTJkMzRhM2Fl NjRkLzEvOUMyQ0IyQjRCRUM2MDFCM0U5QTQ3NDAyMTVFMURFRDIxMTcyMkQ2NC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL25DeXl0TDdHQWJQcHBIUUNGZUhlMGhG eUxXUS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lYmI2ODkwZC0w ZDZiLTRlYTktYTJlZi05MmQzNGEzYWU2NGQvMS85QzJDQjJCNEJFQzYwMUIzRTlB NDc0MDIxNUUxREVEMjExNzIyRDY0Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcW807ORp/88Ky3MaA9rW 2sfXfMwN/C+PFFijByxmqzu3I1Yui6MQwZfgSupRPdcpnAOWbvz17Uf61qRlYn4m jbUfl0Q0acoVc1W0DsKbpCGiVlQvQXA3Hr9wzD5P2bJbZm4Z8zFLYRn0RvPNfFZF Ye9AriuMKAYwthrsNkQW12FoG7MYB6n1omw1pIDBJ7DVvijCvXXYEdk7/jck15Th DI3cLHWqkbZJCwcDbyaJ+pZ0042AEIgUIqAnPmQMripvUq/LQoKnIQmDNNlQoHL3 9oeCm9CJPLSAug5I3DZpE/hjYfCtrXXe7UGhBk5wpOzRB8C2JKiVcQG3w9unYj9v Jg== -----END CERTIFICATE-----Generated at Sat Dec 6 21:34:00 2025 by rpki-client