This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ed81477e-510b-4d37-a229-ed4e88fbe65a/0/922085CFF3657FA2AEC6F91D91BBF0CD4DD24418.mft File: 922085CFF3657FA2AEC6F91D91BBF0CD4DD24418.mft (raw, json) Hash identifier: CbE5ETPgVMrP0AvV7fJqqCVNZXVe4+Jccho8vEZDcsA= Subject key identifier: 9B:06:43:F2:4F:27:5F:32:6B:55:02:92:8D:62:00:83:30:36:53:02 Authority key identifier: 92:20:85:CF:F3:65:7F:A2:AE:C6:F9:1D:91:BB:F0:CD:4D:D2:44:18 Certificate issuer: /CN=922085cff3657fa2aec6f91d91bbf0cd4dd24418 Certificate serial: 4BC0F648E8464FD8DABFEEA43126E82DA14C579C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kiCFz_Nlf6KuxvkdkbvwzU3SRBg.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ed81477e-510b-4d37-a229-ed4e88fbe65a/0/922085CFF3657FA2AEC6F91D91BBF0CD4DD24418.mft Manifest number: 036A Signing time: Sat 06 Dec 2025 06:11:17 +0000 Manifest this update: Sat 06 Dec 2025 06:06:17 +0000 Manifest next update: Sun 07 Dec 2025 07:49:17 +0000 Files and hashes: 1: 922085CFF3657FA2AEC6F91D91BBF0CD4DD24418.crl (hash: lZyAZCGOupNr6KHyic0LLMK2JauLsK+LNOOizGZIk0I=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ed81477e-510b-4d37-a229-ed4e88fbe65a/0/922085CFF3657FA2AEC6F91D91BBF0CD4DD24418.crl rsync://rsync.paas.rpki.ripe.net/repository/ed81477e-510b-4d37-a229-ed4e88fbe65a/0/922085CFF3657FA2AEC6F91D91BBF0CD4DD24418.mft rsync://rpki.ripe.net/repository/DEFAULT/kiCFz_Nlf6KuxvkdkbvwzU3SRBg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:c0:f6:48:e8:46:4f:d8:da:bf:ee:a4:31:26:e8:2d:a1:4c:57:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=922085cff3657fa2aec6f91d91bbf0cd4dd24418 Validity Not Before: Dec 6 06:06:17 2025 GMT Not After : Dec 7 07:49:17 2025 GMT Subject: CN=9B0643F24F275F326B5502928D62008330365302 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:6b:7d:ea:15:da:cb:28:2f:0d:4d:d7:1b:48: 7a:68:85:44:7f:58:49:75:4c:e0:20:a7:8d:d4:87: 78:18:2a:54:22:1f:e3:de:48:c3:41:46:bc:87:32: 72:9b:d7:0f:fb:d1:40:4c:60:6f:48:e9:54:17:9a: 50:71:82:10:87:d2:c4:68:ea:28:33:35:98:f5:e2: 2b:fb:4c:d9:f3:32:c1:70:ca:2f:8a:81:17:22:78: 27:99:a3:f5:d1:23:d9:03:0f:87:b8:5b:24:cb:70: ac:91:5f:0b:f9:80:84:eb:8b:cf:92:70:e6:82:5a: c1:8a:4f:0d:0e:2d:1c:f9:0d:47:7e:cc:a6:4a:04: 3d:5e:97:2f:2a:a4:1d:65:b7:82:25:6a:5b:f5:4f: 7f:a9:f7:2a:55:bd:8c:3d:f4:f3:be:13:9f:7c:5e: d7:92:59:ce:34:40:8b:1b:76:23:10:42:96:ed:60: a1:78:8f:ed:80:db:9f:d4:0b:7c:86:67:fd:9d:d6: c1:13:44:0e:b7:39:cd:88:6f:0e:1e:e9:69:0c:c7: 80:a0:e4:be:a8:58:b9:31:4b:68:e1:08:65:c5:70: d3:45:04:0c:60:6d:f7:a8:6e:52:e7:b2:b4:d3:0d: 04:4a:34:06:88:a1:ed:f6:a5:c9:81:12:7d:cb:8a: e5:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:06:43:F2:4F:27:5F:32:6B:55:02:92:8D:62:00:83:30:36:53:02 X509v3 Authority Key Identifier: keyid:92:20:85:CF:F3:65:7F:A2:AE:C6:F9:1D:91:BB:F0:CD:4D:D2:44:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ed81477e-510b-4d37-a229-ed4e88fbe65a/0/922085CFF3657FA2AEC6F91D91BBF0CD4DD24418.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kiCFz_Nlf6KuxvkdkbvwzU3SRBg.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ed81477e-510b-4d37-a229-ed4e88fbe65a/0/922085CFF3657FA2AEC6F91D91BBF0CD4DD24418.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:fb:83:48:c7:bf:77:c1:02:78:64:a5:a8:8b:72:4e:e3:27: f5:ac:e7:45:b9:e9:80:a6:76:a4:9d:13:0f:f8:f3:50:83:5c: 44:56:07:2d:f5:66:bf:67:3d:a3:e7:e7:2a:73:5f:eb:4d:8b: 54:39:de:b8:d6:cb:cc:0f:18:05:ec:26:2b:06:1d:fa:f8:84: fd:5a:97:36:0d:df:80:f8:93:07:16:92:27:db:5a:dc:44:d0: f3:b3:f2:a7:14:a4:fd:b2:02:b0:6c:8a:34:d9:15:14:c5:09: 32:81:93:c3:3f:54:5c:f0:3b:20:72:a7:b3:53:fe:28:44:68: 99:ae:3c:ca:ec:a4:7b:78:04:43:69:cb:cc:0c:b8:3b:4b:a0: ce:60:01:a5:50:f2:ca:3e:3f:71:d5:40:2d:06:96:d1:08:23: 19:39:01:28:c5:fa:8b:d9:9e:25:67:ed:d7:1f:e7:29:7b:57: 33:f1:14:7c:6e:27:e3:f2:b1:bd:97:ad:9a:6b:f4:48:6e:30: 21:ec:5d:57:94:2a:73:ca:11:9d:de:0c:d2:31:17:5c:e3:de: 5e:34:8e:40:60:85:5a:99:ea:d4:51:00:d0:06:0c:41:51:6a: 03:27:48:be:41:d7:c0:24:15:04:46:ce:5d:6c:40:f2:70:f9: 43:4d:cf:ba -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUS8D2SOhGT9jav+6kMSboLaFMV5wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTIyMDg1Y2ZmMzY1N2ZhMmFlYzZmOTFkOTFiYmYwY2Q0 ZGQyNDQxODAeFw0yNTEyMDYwNjA2MTdaFw0yNTEyMDcwNzQ5MTdaMDMxMTAvBgNV BAMTKDlCMDY0M0YyNEYyNzVGMzI2QjU1MDI5MjhENjIwMDgzMzAzNjUzMDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEa33qFdrLKC8NTdcbSHpohUR/ WEl1TOAgp43Uh3gYKlQiH+PeSMNBRryHMnKb1w/70UBMYG9I6VQXmlBxghCH0sRo 6igzNZj14iv7TNnzMsFwyi+KgRcieCeZo/XRI9kDD4e4WyTLcKyRXwv5gITri8+S cOaCWsGKTw0OLRz5DUd+zKZKBD1ely8qpB1lt4Ilalv1T3+p9ypVvYw99PO+E598 XteSWc40QIsbdiMQQpbtYKF4j+2A25/UC3yGZ/2d1sETRA63Oc2Ibw4e6WkMx4Cg 5L6oWLkxS2jhCGXFcNNFBAxgbfeoblLnsrTTDQRKNAaIoe32pcmBEn3LiuWRAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUmwZD8k8nXzJrVQKSjWIAgzA2UwIwHwYDVR0j BBgwFoAUkiCFz/Nlf6KuxvkdkbvwzU3SRBgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZWQ4MTQ3N2UtNTEwYi00ZDM3LWEyMjktZWQ0ZTg4ZmJl NjVhLzAvOTIyMDg1Q0ZGMzY1N0ZBMkFFQzZGOTFEOTFCQkYwQ0Q0REQyNDQxOC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2tpQ0Z6X05sZjZLdXh2a2RrYnZ3elUz U1JCZy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lZDgxNDc3ZS01 MTBiLTRkMzctYTIyOS1lZDRlODhmYmU2NWEvMC85MjIwODVDRkYzNjU3RkEyQUVD NkY5MUQ5MUJCRjBDRDRERDI0NDE4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU/uDSMe/d8ECeGSlqIty TuMn9aznRbnpgKZ2pJ0TD/jzUINcRFYHLfVmv2c9o+fnKnNf602LVDneuNbLzA8Y BewmKwYd+viE/VqXNg3fgPiTBxaSJ9ta3ETQ87PypxSk/bICsGyKNNkVFMUJMoGT wz9UXPA7IHKns1P+KERoma48yuyke3gEQ2nLzAy4O0ugzmABpVDyyj4/cdVALQaW 0QgjGTkBKMX6i9meJWft1x/nKXtXM/EUfG4n4/KxvZetmmv0SG4wIexdV5Qqc8oR nd4M0jEXXOPeXjSOQGCFWpnq1FEA0AYMQVFqAydIvkHXwCQVBEbOXWxA8nD5Q03P ug== -----END CERTIFICATE-----Generated at Sat Dec 6 08:26:02 2025 by rpki-client