This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.mft File: A6C509BA48E5B50494572E05C45C58E7E16D87FB.mft (raw, json) Hash identifier: aIEsZsDjq4OQ/DP4kOx7l3Ny5u5wv+O4+8YvSQOTaWc= Subject key identifier: A4:3D:62:EB:FF:A4:8F:30:A2:E9:45:EB:52:75:04:8D:BB:1A:12:A9 Authority key identifier: A6:C5:09:BA:48:E5:B5:04:94:57:2E:05:C4:5C:58:E7:E1:6D:87:FB Certificate issuer: /CN=a6c509ba48e5b50494572e05c45c58e7e16d87fb Certificate serial: 058FA626B9FC7E23DBA7957401937C038EAAEBBD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/psUJukjltQSUVy4FxFxY5-Fth_s.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.mft Manifest number: 0598 Signing time: Sat 20 Dec 2025 10:02:34 +0000 Manifest this update: Sat 20 Dec 2025 09:57:34 +0000 Manifest next update: Sun 21 Dec 2025 10:49:34 +0000 Files and hashes: 1: 326130323a326262383a3a2f33322d3332203d3e203234383531.roa (hash: TbGFvgtgWSAZHxb3hPH46QipjihxuX4FrvDSW9hazIY=) 2: A6C509BA48E5B50494572E05C45C58E7E16D87FB.crl (hash: 0CYqAfRH4YNQ3oiCiX7ZX6D4QI7GA64qxifXiK90PYE=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.crl rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.mft rsync://rpki.ripe.net/repository/DEFAULT/psUJukjltQSUVy4FxFxY5-Fth_s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:8f:a6:26:b9:fc:7e:23:db:a7:95:74:01:93:7c:03:8e:aa:eb:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a6c509ba48e5b50494572e05c45c58e7e16d87fb Validity Not Before: Dec 20 09:57:34 2025 GMT Not After : Dec 21 10:49:34 2025 GMT Subject: CN=A43D62EBFFA48F30A2E945EB5275048DBB1A12A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:5a:53:08:68:33:32:e8:9b:40:4a:fe:e8:78: 7d:18:c7:4f:75:6e:0d:de:3c:14:43:e2:f2:74:90: e8:a8:db:01:f1:cf:ab:70:d5:05:59:86:eb:3f:a1: d4:ae:b2:32:66:cc:b3:35:f4:54:04:96:9a:96:3f: fe:be:6a:a7:e3:eb:a6:66:ee:77:ab:33:e0:96:f2: 20:e4:e6:5c:4f:51:f2:44:ec:a3:4c:56:45:00:d0: 8f:71:51:67:c3:3d:2d:5f:a0:4a:31:63:0b:4b:b0: 4f:ad:1c:05:c2:c4:e4:5e:44:53:23:42:b2:f8:cb: df:6d:3b:33:c0:86:fc:ad:71:a7:d1:e6:fd:bb:2a: fa:7a:d6:8a:f8:53:81:46:46:2b:e0:4b:29:a0:40: 7a:35:06:5a:ba:11:1e:bc:87:65:bf:2c:1d:aa:b1: e9:84:5e:b5:85:22:b4:f9:d4:87:df:a2:7b:ba:6d: 93:d9:74:ff:70:33:78:68:61:ba:90:2a:01:97:51: 9f:35:e5:d2:4a:55:74:39:09:36:d1:bd:10:65:f1: 51:cf:2e:e9:9a:fb:c1:4f:50:35:3c:7d:4a:2a:1a: 30:2e:34:d3:fd:12:25:30:3c:a4:9a:f5:4f:ec:ea: 4b:5e:a8:6d:23:d4:5c:70:a0:f4:db:e5:95:b4:65: 5d:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:3D:62:EB:FF:A4:8F:30:A2:E9:45:EB:52:75:04:8D:BB:1A:12:A9 X509v3 Authority Key Identifier: keyid:A6:C5:09:BA:48:E5:B5:04:94:57:2E:05:C4:5C:58:E7:E1:6D:87:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/psUJukjltQSUVy4FxFxY5-Fth_s.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:fc:1f:e5:fc:58:d1:92:20:b6:0d:85:9a:85:c1:ca:6b:ad: 79:ae:15:77:6c:91:14:fd:f3:da:8c:94:ad:f0:a4:e4:7b:98: 4a:7c:f1:a0:7c:d9:fd:e1:6f:37:3c:14:16:da:49:22:ac:e3: 49:92:87:b3:f9:1b:6b:20:5a:b4:25:6c:1d:8c:45:e7:aa:43: 9c:a0:37:c0:5c:b5:d9:7e:bc:25:83:b0:cf:e5:60:c9:17:3b: 6e:4b:02:d2:b5:23:aa:f5:4e:54:83:9c:39:0b:a8:e6:27:6a: 63:60:5d:3d:84:ad:49:95:54:98:e4:80:c4:e2:f0:ac:29:9c: 4b:04:6d:5c:8d:a8:58:fb:da:0c:1d:60:42:a8:52:9d:22:81: 94:6b:78:a1:f2:05:ee:29:ca:3d:1a:55:56:6c:87:6e:d9:6b: 2a:c9:f9:4c:b7:f9:b0:0b:56:20:2e:b0:70:c3:ee:f4:3c:ee: fc:3a:f2:b1:49:64:75:70:ac:3d:6a:e1:82:9c:e5:aa:ee:d7: e2:78:a0:f4:d1:ff:93:fb:59:10:f8:c5:74:b9:3b:20:b3:3a: e9:60:92:06:30:5a:a0:c9:70:50:b4:a1:fa:0c:60:64:17:86: 6e:4e:3d:14:f9:b0:31:eb:c7:41:8b:39:11:57:0e:2c:6f:45: 83:96:07:bf -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUBY+mJrn8fiPbp5V0AZN8A46q670wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYTZjNTA5YmE0OGU1YjUwNDk0NTcyZTA1YzQ1YzU4ZTdl MTZkODdmYjAeFw0yNTEyMjAwOTU3MzRaFw0yNTEyMjExMDQ5MzRaMDMxMTAvBgNV BAMTKEE0M0Q2MkVCRkZBNDhGMzBBMkU5NDVFQjUyNzUwNDhEQkIxQTEyQTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSWlMIaDMy6JtASv7oeH0Yx091 bg3ePBRD4vJ0kOio2wHxz6tw1QVZhus/odSusjJmzLM19FQElpqWP/6+aqfj66Zm 7nerM+CW8iDk5lxPUfJE7KNMVkUA0I9xUWfDPS1foEoxYwtLsE+tHAXCxOReRFMj QrL4y99tOzPAhvytcafR5v27Kvp61or4U4FGRivgSymgQHo1Blq6ER68h2W/LB2q semEXrWFIrT51Iffonu6bZPZdP9wM3hoYbqQKgGXUZ815dJKVXQ5CTbRvRBl8VHP Luma+8FPUDU8fUoqGjAuNNP9EiUwPKSa9U/s6kteqG0j1FxwoPTb5ZW0ZV09AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUpD1i6/+kjzCi6UXrUnUEjbsaEqkwHwYDVR0j BBgwFoAUpsUJukjltQSUVy4FxFxY5+Fth/swDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMGM4YmI0NDYtOTFjMC00MTM4LWEzM2EtYjQ3ODY1ZGU1 NWM1LzEvQTZDNTA5QkE0OEU1QjUwNDk0NTcyRTA1QzQ1QzU4RTdFMTZEODdGQi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3BzVUp1a2psdFFTVVZ5NEZ4RnhZNS1G dGhfcy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8wYzhiYjQ0Ni05 MWMwLTQxMzgtYTMzYS1iNDc4NjVkZTU1YzUvMS9BNkM1MDlCQTQ4RTVCNTA0OTQ1 NzJFMDVDNDVDNThFN0UxNkQ4N0ZCLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXfwf5fxY0ZIgtg2FmoXB ymutea4Vd2yRFP3z2oyUrfCk5HuYSnzxoHzZ/eFvNzwUFtpJIqzjSZKHs/kbayBa tCVsHYxF56pDnKA3wFy12X68JYOwz+VgyRc7bksC0rUjqvVOVIOcOQuo5idqY2Bd PYStSZVUmOSAxOLwrCmcSwRtXI2oWPvaDB1gQqhSnSKBlGt4ofIF7inKPRpVVmyH btlrKsn5TLf5sAtWIC6wcMPu9Dzu/DrysUlkdXCsPWrhgpzlqu7X4nig9NH/k/tZ EPjFdLk7ILM66WCSBjBaoMlwULSh+gxgZBeGbk49FPmwMevHQYs5EVcOLG9Fg5YH vw== -----END CERTIFICATE-----Generated at Sat Dec 20 12:15:59 2025 by rpki-client