This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/0/C746AC47360523A8D817C5EA638AE186912619C1.mft File: C746AC47360523A8D817C5EA638AE186912619C1.mft (raw, json) Hash identifier: EabUfKaKh0QKFdWa4g+zdbHR66i5jIV61GFE2YR8nS0= Subject key identifier: 5A:47:61:B3:AF:88:83:F4:4C:A1:93:44:90:4F:E7:6A:DB:2C:AD:45 Authority key identifier: C7:46:AC:47:36:05:23:A8:D8:17:C5:EA:63:8A:E1:86:91:26:19:C1 Certificate issuer: /CN=c746ac47360523a8d817c5ea638ae186912619c1 Certificate serial: 3FAB4608920B00244D6E8F65A16008DBD1D9C4B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x0asRzYFI6jYF8XqY4rhhpEmGcE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/0/C746AC47360523A8D817C5EA638AE186912619C1.mft Manifest number: 01CD Signing time: Sun 21 Dec 2025 07:57:08 +0000 Manifest this update: Sun 21 Dec 2025 07:52:08 +0000 Manifest next update: Mon 22 Dec 2025 08:03:08 +0000 Files and hashes: 1: C746AC47360523A8D817C5EA638AE186912619C1.crl (hash: IXUPIywbb2kgJVuPRHvALfVdw0Y2dCaEStQ+5lw20Fo=) 2: AS199310.asa (hash: +j8XG7hcbWjLyxNHQFsSA0wfaG3LYTZh6+/zD0quwjA=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/0/C746AC47360523A8D817C5EA638AE186912619C1.crl rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/0/C746AC47360523A8D817C5EA638AE186912619C1.mft rsync://rpki.ripe.net/repository/DEFAULT/x0asRzYFI6jYF8XqY4rhhpEmGcE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 08:03:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:ab:46:08:92:0b:00:24:4d:6e:8f:65:a1:60:08:db:d1:d9:c4:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c746ac47360523a8d817c5ea638ae186912619c1 Validity Not Before: Dec 21 07:52:08 2025 GMT Not After : Dec 22 08:03:08 2025 GMT Subject: CN=5A4761B3AF8883F44CA19344904FE76ADB2CAD45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:7c:a7:eb:d5:8b:e5:b4:a1:f1:5a:c3:ea:1f: 1c:88:87:11:9e:30:76:ae:5f:cc:58:fa:23:a2:d8: 35:8c:bd:71:e8:44:ed:10:0f:e8:f1:7c:4b:37:c3: ae:f5:43:f7:6a:bb:fd:e4:8c:30:8a:54:f6:49:67: 57:1b:12:9b:50:d7:a3:0e:76:bc:d5:51:8d:25:2c: 00:40:a7:d2:5b:05:c7:c2:94:a5:9a:a9:22:8c:a0: 41:9e:91:9a:27:7a:2a:ab:1f:b1:b4:aa:99:e7:6f: 7d:ef:00:4a:fc:18:99:0a:4a:00:42:1b:07:01:69: 5d:f5:26:de:a2:4e:6c:f1:c0:89:d1:b2:f9:49:9c: 5b:55:4a:54:be:01:62:fe:67:21:3d:af:09:82:51: 19:0e:e7:67:04:27:b3:69:44:81:8f:67:d7:33:d8: d8:cb:e9:6e:8e:b1:4f:27:30:fc:da:2f:0f:4d:28: db:26:24:94:50:31:0b:a1:b2:7f:c0:eb:0e:e2:9a: 83:d2:7d:84:59:a4:e3:bf:88:3f:bf:43:1f:78:07: 74:fd:fb:ee:73:3e:39:66:6c:88:c3:36:e7:b1:ff: 9b:c8:13:a7:0b:fb:97:b6:8a:bb:38:fe:5d:23:50: 17:c6:3a:b1:3f:72:b8:ec:31:77:82:f7:3b:bf:82: 8e:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:47:61:B3:AF:88:83:F4:4C:A1:93:44:90:4F:E7:6A:DB:2C:AD:45 X509v3 Authority Key Identifier: keyid:C7:46:AC:47:36:05:23:A8:D8:17:C5:EA:63:8A:E1:86:91:26:19:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/0/C746AC47360523A8D817C5EA638AE186912619C1.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0asRzYFI6jYF8XqY4rhhpEmGcE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/0/C746AC47360523A8D817C5EA638AE186912619C1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:6e:b6:15:7b:a9:4c:7e:2a:e1:63:66:e1:9a:d5:99:94:aa: c3:a6:83:24:84:04:92:c5:b8:13:bd:2b:12:8a:1f:e8:41:82: ef:7a:59:a2:92:49:63:e3:6d:ad:6a:bb:9d:38:7f:9c:88:6d: ae:4d:01:54:ae:39:94:87:bf:a4:00:da:8d:c0:2a:20:8b:11: ca:a2:92:ed:f0:5f:c7:57:d2:50:9e:1c:78:63:b7:95:74:76: ff:24:6e:0f:e5:b6:19:60:92:8e:78:52:bc:17:75:59:c8:8d: 39:cf:9e:0c:22:93:d6:94:69:e0:26:a9:7c:93:ea:39:97:f1: 33:79:4a:65:45:77:af:35:93:e6:50:9a:84:16:d4:b6:82:c6: 96:0c:78:9d:c7:68:4f:ee:23:41:f0:85:da:aa:0f:01:a3:e6: 2e:c8:62:9b:12:b3:b2:71:9f:81:e2:4b:b0:cf:d3:dd:cd:17: 35:93:85:4e:39:c8:83:f2:a8:ea:cc:ba:1d:ca:5c:40:c0:40: 8b:e5:2f:6c:4d:7f:68:51:7d:bc:df:1b:fc:e1:7d:a7:da:65: 04:5a:3d:2b:d1:d0:b5:ee:78:ba:bb:6b:27:b5:76:1e:19:cc: ca:f5:52:82:af:ef:75:9b:c8:95:3f:01:4e:4b:81:f1:71:6a: 91:c0:78:81 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUP6tGCJILACRNbo9loWAI29HZxLIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYzc0NmFjNDczNjA1MjNhOGQ4MTdjNWVhNjM4YWUxODY5 MTI2MTljMTAeFw0yNTEyMjEwNzUyMDhaFw0yNTEyMjIwODAzMDhaMDMxMTAvBgNV BAMTKDVBNDc2MUIzQUY4ODgzRjQ0Q0ExOTM0NDkwNEZFNzZBREIyQ0FENDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwfKfr1YvltKHxWsPqHxyIhxGe MHauX8xY+iOi2DWMvXHoRO0QD+jxfEs3w671Q/dqu/3kjDCKVPZJZ1cbEptQ16MO drzVUY0lLABAp9JbBcfClKWaqSKMoEGekZoneiqrH7G0qpnnb33vAEr8GJkKSgBC GwcBaV31Jt6iTmzxwInRsvlJnFtVSlS+AWL+ZyE9rwmCURkO52cEJ7NpRIGPZ9cz 2NjL6W6OsU8nMPzaLw9NKNsmJJRQMQuhsn/A6w7imoPSfYRZpOO/iD+/Qx94B3T9 ++5zPjlmbIjDNuex/5vIE6cL+5e2irs4/l0jUBfGOrE/crjsMXeC9zu/go4bAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUWkdhs6+Ig/RMoZNEkE/natssrUUwHwYDVR0j BBgwFoAUx0asRzYFI6jYF8XqY4rhhpEmGcEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDE1NzY0N2MtOTFkNi00YTA0LThhOTEtZDE1Mzg1ZDFm YWIyLzAvQzc0NkFDNDczNjA1MjNBOEQ4MTdDNUVBNjM4QUUxODY5MTI2MTlDMS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3gwYXNSellGSTZqWUY4WHFZNHJoaHBF bUdjRS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8wMTU3NjQ3Yy05 MWQ2LTRhMDQtOGE5MS1kMTUzODVkMWZhYjIvMC9DNzQ2QUM0NzM2MDUyM0E4RDgx N0M1RUE2MzhBRTE4NjkxMjYxOUMxLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOW62FXupTH4q4WNm4ZrV mZSqw6aDJIQEksW4E70rEoof6EGC73pZopJJY+NtrWq7nTh/nIhtrk0BVK45lIe/ pADajcAqIIsRyqKS7fBfx1fSUJ4ceGO3lXR2/yRuD+W2GWCSjnhSvBd1WciNOc+e DCKT1pRp4CapfJPqOZfxM3lKZUV3rzWT5lCahBbUtoLGlgx4ncdoT+4jQfCF2qoP AaPmLshimxKzsnGfgeJLsM/T3c0XNZOFTjnIg/Ko6sy6HcpcQMBAi+UvbE1/aFF9 vN8b/OF9p9plBFo9K9HQte54urtrJ7V2HhnMyvVSgq/vdZvIlT8BTkuB8XFqkcB4 gQ== -----END CERTIFICATE-----Generated at Sun Dec 21 15:43:11 2025 by rpki-client