This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/02a9e8a5-c8f4-47b3-80c9-f1e02a8aaa89/0/FA9B54C77884D87579E661822CB46BEDD39FA5D3.mft File: FA9B54C77884D87579E661822CB46BEDD39FA5D3.mft (raw, json) Hash identifier: D1IePcVZ9ogCop7Qscx+ubeQOBlyPr9+1FUz80ZAThI= Subject key identifier: E8:F7:37:8A:2A:57:D5:5B:8F:F9:72:E4:6C:3D:A2:50:46:DB:31:95 Authority key identifier: FA:9B:54:C7:78:84:D8:75:79:E6:61:82:2C:B4:6B:ED:D3:9F:A5:D3 Certificate issuer: /CN=FA9B54C77884D87579E661822CB46BEDD39FA5D3 Certificate serial: 4925E93D126B33F863A932D9D522F4A72FA2AE3E Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/FA9B54C77884D87579E661822CB46BEDD39FA5D3.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/02a9e8a5-c8f4-47b3-80c9-f1e02a8aaa89/0/FA9B54C77884D87579E661822CB46BEDD39FA5D3.mft Manifest number: 1F Signing time: Sun 21 Dec 2025 07:06:02 +0000 Manifest this update: Sun 21 Dec 2025 07:01:02 +0000 Manifest next update: Mon 22 Dec 2025 09:54:02 +0000 Files and hashes: 1: FA9B54C77884D87579E661822CB46BEDD39FA5D3.crl (hash: kPDp8L2FgWuyceUgZnshUDikgGkQ2tZKmN3r4nqZc5A=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/02a9e8a5-c8f4-47b3-80c9-f1e02a8aaa89/0/FA9B54C77884D87579E661822CB46BEDD39FA5D3.crl rsync://rsync.paas.rpki.ripe.net/repository/02a9e8a5-c8f4-47b3-80c9-f1e02a8aaa89/0/FA9B54C77884D87579E661822CB46BEDD39FA5D3.mft rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/FA9B54C77884D87579E661822CB46BEDD39FA5D3.cer rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/75A838E02C61800F73D3019DE0A51F567B64BC0E.crl rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/75A838E02C61800F73D3019DE0A51F567B64BC0E.mft rsync://rpki.ripe.net/repository/DEFAULT/dag44CxhgA9z0wGd4KUfVntkvA4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 23:25:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:25:e9:3d:12:6b:33:f8:63:a9:32:d9:d5:22:f4:a7:2f:a2:ae:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FA9B54C77884D87579E661822CB46BEDD39FA5D3 Validity Not Before: Dec 21 07:01:02 2025 GMT Not After : Dec 22 09:54:02 2025 GMT Subject: CN=E8F7378A2A57D55B8FF972E46C3DA25046DB3195 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d7:3f:89:a7:1e:6d:23:b4:15:92:a8:f1:fd: b8:26:12:f0:1f:7c:46:79:eb:86:44:69:d7:5b:11: 28:85:89:00:d5:ce:95:35:6c:cc:de:e3:45:5d:e2: b6:26:3d:f4:d8:55:d4:34:54:ac:e9:13:52:a8:62: 8a:af:98:ca:94:66:fa:4d:a6:74:d7:03:c0:fa:a4: 98:e2:c7:af:d7:1f:8f:3b:5c:da:ee:bb:f3:69:79: 53:13:09:36:ac:ab:27:43:d2:dc:1b:a0:3c:32:64: 6a:bc:6f:5f:41:e3:58:8f:88:ed:0c:2d:d6:7f:58: 5c:c9:3b:fe:34:94:85:ba:6a:56:ee:9a:50:43:ac: 0a:98:18:e1:ed:71:19:8a:41:78:aa:e3:cb:c9:71: dd:63:b8:20:fd:0a:94:24:89:4f:70:aa:72:3e:d2: e9:7a:2e:91:1e:c4:ba:4e:27:1d:61:d0:fc:5c:91: ce:6a:91:fa:8a:f2:00:1f:09:62:66:9c:00:b9:58: aa:4e:70:b3:9c:cb:8a:94:04:11:a7:b7:0e:a8:a1: df:18:4a:93:a7:94:05:ac:9c:65:bf:85:f0:15:3d: b9:e5:bf:ed:a7:29:0b:8b:a6:53:d4:75:55:08:99: c9:54:92:ad:d8:eb:06:c1:c6:2f:01:c9:74:58:1b: f5:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:F7:37:8A:2A:57:D5:5B:8F:F9:72:E4:6C:3D:A2:50:46:DB:31:95 X509v3 Authority Key Identifier: keyid:FA:9B:54:C7:78:84:D8:75:79:E6:61:82:2C:B4:6B:ED:D3:9F:A5:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/02a9e8a5-c8f4-47b3-80c9-f1e02a8aaa89/0/FA9B54C77884D87579E661822CB46BEDD39FA5D3.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/FA9B54C77884D87579E661822CB46BEDD39FA5D3.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/02a9e8a5-c8f4-47b3-80c9-f1e02a8aaa89/0/FA9B54C77884D87579E661822CB46BEDD39FA5D3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:8d:6c:b4:91:b0:b9:f5:3c:4a:04:e9:8f:2d:28:6e:4e:74: bb:57:84:a5:3b:af:53:d4:59:b6:93:12:43:ef:f3:b8:6c:6c: 61:03:62:c6:a3:67:0c:a2:83:d4:ad:e0:8b:60:09:0d:67:af: 7b:03:52:83:9e:f7:70:f6:e1:14:c5:54:c9:3e:16:c4:29:3a: ae:47:70:52:ab:bc:d7:b0:08:7d:59:7a:94:94:b0:17:13:c9: 48:b1:dd:3c:f9:4f:df:ed:0a:07:90:12:1d:7b:9c:31:60:1c: 02:43:f4:33:98:88:88:3e:94:a7:14:38:dd:5e:60:aa:27:4c: 35:ec:2f:4f:1f:e7:33:b1:65:34:9d:76:0b:2e:dd:a5:73:67: ac:48:1d:e3:6a:74:db:42:12:9e:85:e7:65:ce:aa:01:7c:41: 2f:ba:33:ea:80:4c:f7:72:79:72:2d:f6:7b:de:61:69:25:af: a0:ce:d4:3e:59:d6:10:be:5d:24:ae:36:5e:a1:8e:c4:9a:2d: 9c:42:18:08:32:5c:3c:f4:a8:d0:be:9c:c3:71:b4:ee:b6:1e: e9:2d:21:cf:da:27:eb:0c:8f:78:3b:3c:35:6c:cf:a9:a0:4e: 9e:8d:f4:b6:7f:be:01:3f:4f:4a:a5:df:c4:96:c3:99:e8:79: 90:24:5d:9a -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUSSXpPRJrM/hjqTLZ1SL0py+irj4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkE5QjU0Qzc3ODg0RDg3NTc5RTY2MTgyMkNCNDZCRURE MzlGQTVEMzAeFw0yNTEyMjEwNzAxMDJaFw0yNTEyMjIwOTU0MDJaMDMxMTAvBgNV BAMTKEU4RjczNzhBMkE1N0Q1NUI4RkY5NzJFNDZDM0RBMjUwNDZEQjMxOTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu1z+Jpx5tI7QVkqjx/bgmEvAf fEZ564ZEaddbESiFiQDVzpU1bMze40Vd4rYmPfTYVdQ0VKzpE1KoYoqvmMqUZvpN pnTXA8D6pJjix6/XH487XNruu/NpeVMTCTasqydD0twboDwyZGq8b19B41iPiO0M LdZ/WFzJO/40lIW6albumlBDrAqYGOHtcRmKQXiq48vJcd1juCD9CpQkiU9wqnI+ 0ul6LpEexLpOJx1h0Pxckc5qkfqK8gAfCWJmnAC5WKpOcLOcy4qUBBGntw6ood8Y SpOnlAWsnGW/hfAVPbnlv+2nKQuLplPUdVUImclUkq3Y6wbBxi8ByXRYG/VzAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU6Pc3iipX1VuP+XLkbD2iUEbbMZUwHwYDVR0j BBgwFoAU+ptUx3iE2HV55mGCLLRr7dOfpdMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDJhOWU4YTUtYzhmNC00N2IzLTgwYzktZjFlMDJhOGFh YTg5LzAvRkE5QjU0Qzc3ODg0RDg3NTc5RTY2MTgyMkNCNDZCRUREMzlGQTVEMy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lMjZlYjEzNi00ZmU1LTRl NjEtYTRkOC1mMzQ1ZjUyYmMyNWQvMC9GQTlCNTRDNzc4ODREODc1NzlFNjYxODIy Q0I0NkJFREQzOUZBNUQzLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzAyYTllOGE1LWM4ZjQtNDdiMy04MGM5LWYxZTAyYThhYWE4OS8wL0ZBOUI1NEM3 Nzg4NEQ4NzU3OUU2NjE4MjJDQjQ2QkVERDM5RkE1RDMubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBajWy0 kbC59TxKBOmPLShuTnS7V4SlO69T1Fm2kxJD7/O4bGxhA2LGo2cMooPUreCLYAkN Z697A1KDnvdw9uEUxVTJPhbEKTquR3BSq7zXsAh9WXqUlLAXE8lIsd08+U/f7QoH kBIde5wxYBwCQ/QzmIiIPpSnFDjdXmCqJ0w17C9PH+czsWU0nXYLLt2lc2esSB3j anTbQhKehedlzqoBfEEvujPqgEz3cnlyLfZ73mFpJa+gztQ+WdYQvl0krjZeoY7E mi2cQhgIMlw89KjQvpzDcbTuth7pLSHP2ifrDI94Ozw1bM+poE6ejfS2f74BP09K pd/ElsOZ6HmQJF2a -----END CERTIFICATE-----Generated at Sun Dec 21 08:13:12 2025 by rpki-client