This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/1/C18020BDC5E6BA4A5474D3AA0DA4A962A68D98AB.mft File: C18020BDC5E6BA4A5474D3AA0DA4A962A68D98AB.mft (raw, json) Hash identifier: PEkhBp12fcCHlDdr6a3Kedl+m957+UG6uADVlD7cazU= Subject key identifier: FA:F6:1B:8E:95:A2:5F:5C:8D:CC:4B:72:61:D4:E3:F8:C5:D6:D2:B9 Authority key identifier: C1:80:20:BD:C5:E6:BA:4A:54:74:D3:AA:0D:A4:A9:62:A6:8D:98:AB Certificate issuer: /CN=c18020bdc5e6ba4a5474d3aa0da4a962a68d98ab Certificate serial: 2DBDA64439F5462667CD017187B5D78C02558F0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wYAgvcXmukpUdNOqDaSpYqaNmKs.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/1/C18020BDC5E6BA4A5474D3AA0DA4A962A68D98AB.mft Manifest number: 36 Signing time: Sat 06 Dec 2025 03:58:21 +0000 Manifest this update: Sat 06 Dec 2025 03:53:21 +0000 Manifest next update: Sun 07 Dec 2025 07:22:21 +0000 Files and hashes: 1: AS204211.asa (hash: ZDlDbDMTT9D+MhXu8pICSi7lwFfW7ZmscjudW0Qp6As=) 2: C18020BDC5E6BA4A5474D3AA0DA4A962A68D98AB.crl (hash: 6w7XnhHf8B18oL3JRBXIC+wie+3A2MbO5iCcQIrKUpU=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/1/C18020BDC5E6BA4A5474D3AA0DA4A962A68D98AB.crl rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/1/C18020BDC5E6BA4A5474D3AA0DA4A962A68D98AB.mft rsync://rpki.ripe.net/repository/DEFAULT/wYAgvcXmukpUdNOqDaSpYqaNmKs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:bd:a6:44:39:f5:46:26:67:cd:01:71:87:b5:d7:8c:02:55:8f:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c18020bdc5e6ba4a5474d3aa0da4a962a68d98ab Validity Not Before: Dec 6 03:53:21 2025 GMT Not After : Dec 7 07:22:21 2025 GMT Subject: CN=FAF61B8E95A25F5C8DCC4B7261D4E3F8C5D6D2B9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:dd:3e:d3:b7:9e:54:81:16:83:06:ee:db:9c: 19:8b:74:fb:98:e6:d1:2c:f2:9b:cb:7a:d9:d2:a1: 14:c6:7e:f4:8f:cb:c1:f2:38:10:2d:8b:7e:c6:16: 77:f3:cb:33:0c:44:82:57:ef:ec:32:03:54:9e:63: 88:f8:e1:c6:ce:b5:8f:e1:ba:13:21:77:89:5e:cf: f4:1d:93:59:dd:5e:2e:9c:0c:15:1f:a8:da:a6:af: c6:96:bb:dd:e5:46:44:e1:c4:1e:90:59:dc:2c:40: fb:dd:e7:58:ae:2b:e1:d2:e6:1b:bd:ee:f0:8c:bd: 6b:6e:0d:f1:88:56:bf:29:5d:01:93:8b:d7:be:de: da:36:71:af:af:34:22:e7:4f:d3:ab:5b:3e:0c:e6: ec:de:e7:08:bf:e0:26:dc:7f:e2:34:a2:e4:0c:3b: 8c:4e:93:d5:de:0f:85:61:8b:b3:a6:ee:77:4b:ea: 95:ae:a6:7b:47:dc:b9:b4:4c:18:ec:d4:90:54:5c: 9f:42:7a:47:7b:74:4b:3d:1c:2c:0e:a5:56:89:46: 29:3e:6f:9f:ab:ef:e6:d5:97:24:cf:56:09:b5:80: 50:d3:10:56:02:34:1d:92:7d:fb:28:60:28:e8:23: fb:e4:2b:77:10:99:3a:59:43:9e:18:93:22:a4:3e: a8:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:F6:1B:8E:95:A2:5F:5C:8D:CC:4B:72:61:D4:E3:F8:C5:D6:D2:B9 X509v3 Authority Key Identifier: keyid:C1:80:20:BD:C5:E6:BA:4A:54:74:D3:AA:0D:A4:A9:62:A6:8D:98:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/1/C18020BDC5E6BA4A5474D3AA0DA4A962A68D98AB.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wYAgvcXmukpUdNOqDaSpYqaNmKs.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/1/C18020BDC5E6BA4A5474D3AA0DA4A962A68D98AB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:4b:b6:a6:37:c9:37:b2:d3:57:c9:c8:e7:6a:4d:e8:c0:f4: 66:b6:88:f1:a2:6c:53:1a:a3:97:21:1e:7b:d6:7c:2c:2c:b5: 6c:ab:4c:bd:8d:f2:17:52:03:18:4b:bd:43:af:10:ec:23:0d: 71:f1:50:29:98:3e:3a:f8:6d:43:47:93:79:c9:a1:80:58:d0: 80:2c:25:00:b1:b3:68:cb:3d:e6:7f:e7:d6:ab:a0:b2:f1:0a: 1a:1d:b7:d2:9f:78:12:c3:7f:86:20:3d:ee:61:57:f3:8d:3d: 45:d9:62:c5:75:98:ea:34:bd:9e:ee:66:d6:fa:27:76:04:0e: 44:ce:30:87:f0:24:64:3b:d0:32:98:5d:3f:fe:e1:f8:b4:aa: 82:2a:e3:3a:1b:25:1e:5a:df:29:42:bf:81:e2:a8:99:c8:3c: 3d:f6:13:c8:a0:7b:e7:d6:f3:18:06:a3:e8:68:d9:8a:a5:e3: 0e:23:bd:33:e3:c8:7c:1f:ba:32:d9:3a:e7:2f:5f:82:18:d5: 51:12:6d:ef:d0:71:73:1b:59:8e:c3:1a:63:44:45:ad:96:c1: 8e:ba:ad:6e:ce:15:2d:d4:49:35:71:21:17:35:99:2f:a2:dd: 2c:99:96:60:71:75:e7:3c:0a:c2:92:b5:c4:92:86:11:35:1f: 94:45:4b:a1 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIULb2mRDn1RiZnzQFxh7XXjAJVjw8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYzE4MDIwYmRjNWU2YmE0YTU0NzRkM2FhMGRhNGE5NjJh NjhkOThhYjAeFw0yNTEyMDYwMzUzMjFaFw0yNTEyMDcwNzIyMjFaMDMxMTAvBgNV BAMTKEZBRjYxQjhFOTVBMjVGNUM4RENDNEI3MjYxRDRFM0Y4QzVENkQyQjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB3T7Tt55UgRaDBu7bnBmLdPuY 5tEs8pvLetnSoRTGfvSPy8HyOBAti37GFnfzyzMMRIJX7+wyA1SeY4j44cbOtY/h uhMhd4lez/Qdk1ndXi6cDBUfqNqmr8aWu93lRkThxB6QWdwsQPvd51iuK+HS5hu9 7vCMvWtuDfGIVr8pXQGTi9e+3to2ca+vNCLnT9OrWz4M5uze5wi/4Cbcf+I0ouQM O4xOk9XeD4Vhi7Om7ndL6pWupntH3Lm0TBjs1JBUXJ9Cekd7dEs9HCwOpVaJRik+ b5+r7+bVlyTPVgm1gFDTEFYCNB2SffsoYCjoI/vkK3cQmTpZQ54YkyKkPqiXAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU+vYbjpWiX1yNzEtyYdTj+MXW0rkwHwYDVR0j BBgwFoAUwYAgvcXmukpUdNOqDaSpYqaNmKswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZjUzMmI5ZWItMmZhZS00OGE4LTk3OTMtMzNlZWMwNjdj ZTM5LzEvQzE4MDIwQkRDNUU2QkE0QTU0NzREM0FBMERBNEE5NjJBNjhEOThBQi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3dZQWd2Y1htdWtwVWROT3FEYVNwWXFh Tm1Lcy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mNTMyYjllYi0y ZmFlLTQ4YTgtOTc5My0zM2VlYzA2N2NlMzkvMS9DMTgwMjBCREM1RTZCQTRBNTQ3 NEQzQUEwREE0QTk2MkE2OEQ5OEFCLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkEu2pjfJN7LTV8nI52pN 6MD0ZraI8aJsUxqjlyEee9Z8LCy1bKtMvY3yF1IDGEu9Q68Q7CMNcfFQKZg+Ovht Q0eTecmhgFjQgCwlALGzaMs95n/n1qugsvEKGh230p94EsN/hiA97mFX8409Rdli xXWY6jS9nu5m1vondgQORM4wh/AkZDvQMphdP/7h+LSqgirjOhslHlrfKUK/geKo mcg8PfYTyKB759bzGAaj6GjZiqXjDiO9M+PIfB+6Mtk65y9fghjVURJt79BxcxtZ jsMaY0RFrZbBjrqtbs4VLdRJNXEhFzWZL6LdLJmWYHF15zwKwpK1xJKGETUflEVL oQ== -----END CERTIFICATE-----Generated at Sat Dec 6 05:37:22 2025 by rpki-client