This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/1/D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.mft File: D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.mft (raw, json) Hash identifier: MdSd5GVTRl2eynSIG1Ei1MTes1Kjr+urxtuZqcugFmM= Subject key identifier: 0D:67:D0:AD:92:F6:E5:6B:42:5E:20:C0:75:3E:E9:9E:93:D8:77:88 Authority key identifier: D0:2B:BB:44:0B:9D:D4:40:88:DB:68:4E:E8:2F:A2:A7:DA:06:FC:F6 Certificate issuer: /CN=d02bbb440b9dd44088db684ee82fa2a7da06fcf6 Certificate serial: 5E0B9C50CAA5BFCCCA2585ACEC63187FDA3FE425 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Cu7RAud1ECI22hO6C-ip9oG_PY.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/1/D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.mft Manifest number: 0437 Signing time: Sat 20 Dec 2025 17:25:16 +0000 Manifest this update: Sat 20 Dec 2025 17:20:16 +0000 Manifest next update: Sun 21 Dec 2025 18:37:16 +0000 Files and hashes: 1: D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.crl (hash: ICeOR0/3tqmf/r6w0Vf6vZDiIlbqr+1D/YS8dO0ESLg=) 2: AS203843.asa (hash: GVjcEElWVcaHaV2bppgVpXszuN2GI++jaQIYET3p6Tg=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/1/D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.crl rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/1/D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.mft rsync://rpki.ripe.net/repository/DEFAULT/0Cu7RAud1ECI22hO6C-ip9oG_PY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 18:37:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:0b:9c:50:ca:a5:bf:cc:ca:25:85:ac:ec:63:18:7f:da:3f:e4:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d02bbb440b9dd44088db684ee82fa2a7da06fcf6 Validity Not Before: Dec 20 17:20:16 2025 GMT Not After : Dec 21 18:37:16 2025 GMT Subject: CN=0D67D0AD92F6E56B425E20C0753EE99E93D87788 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:88:45:83:69:13:71:f3:54:0c:41:ec:07:a9: ff:d7:f9:ac:b2:92:6b:45:49:b4:a8:09:85:00:cc: e1:3d:3d:c6:03:40:7e:b3:05:fe:aa:7a:e9:7a:c4: 03:9a:ec:6b:39:a8:b0:7b:da:52:bd:65:00:f8:4e: 13:51:2c:69:8e:42:36:b6:7d:3f:20:c4:59:b7:d1: 5a:28:dd:15:54:d4:28:5e:c1:71:ba:68:39:6b:ec: c6:0d:a0:ce:42:ae:83:93:15:7c:cf:9a:6c:0b:be: e1:98:54:38:34:e0:a1:76:bd:51:f4:ae:a4:c5:e5: 21:45:4a:7e:96:57:3e:f8:f7:50:72:71:fe:2a:fa: d5:69:4c:41:5d:97:b1:cb:7e:23:14:9b:a0:30:63: 59:a0:27:af:a3:fd:de:1c:71:14:6a:89:77:b5:8c: 9b:44:3f:87:ef:f7:fb:2b:e1:99:24:66:75:92:35: 1c:1d:ac:b1:ec:0b:1a:aa:38:e2:fb:a0:cf:0a:54: 78:16:03:64:3b:8b:e9:5e:32:33:f6:f6:78:c5:62: b9:d9:37:a2:cc:af:ac:aa:86:68:69:09:b2:76:06: 84:2b:85:b8:95:f1:08:aa:a5:ae:92:80:a2:fd:ba: a6:30:1c:9a:15:89:cc:fe:28:36:84:4e:9b:4c:49: 8e:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:67:D0:AD:92:F6:E5:6B:42:5E:20:C0:75:3E:E9:9E:93:D8:77:88 X509v3 Authority Key Identifier: keyid:D0:2B:BB:44:0B:9D:D4:40:88:DB:68:4E:E8:2F:A2:A7:DA:06:FC:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/1/D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Cu7RAud1ECI22hO6C-ip9oG_PY.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/1/D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:4e:aa:ff:a8:eb:59:1b:66:dc:9d:11:90:dd:52:06:c8:42: 09:56:7f:b1:1c:8d:56:c4:56:09:83:e9:19:9c:4e:70:b8:f8: c5:4c:fd:93:00:a4:0f:0f:52:b3:2f:c5:5c:4a:5d:65:59:99: d2:aa:a1:66:12:4c:58:49:f7:0b:28:e9:bb:0c:92:a3:76:89: 13:6e:de:1f:4b:09:79:48:9b:0f:a3:91:8f:1c:c2:83:c6:54: c2:2e:20:19:58:c8:ef:8e:ad:25:ed:94:e5:f5:6a:c9:7b:e9: a8:ec:ac:08:a8:f6:9e:97:f8:79:e4:26:75:98:15:61:a6:63: a3:91:25:c9:3d:81:c2:7a:15:26:20:0f:b3:ac:51:4e:fb:d4: f5:b4:3b:02:55:35:bb:2b:53:24:99:27:9e:5f:8c:95:70:f1: e3:c5:51:65:c1:4c:64:90:c6:1b:d2:f3:4b:60:4d:f4:1b:b5: 9c:aa:3e:76:c3:1f:45:1e:fe:e3:ae:07:ae:71:a2:9a:f1:98: 89:65:f9:4c:9a:16:16:ba:da:cd:36:02:e2:3c:f7:41:3e:85: c8:d2:c6:f7:8b:0a:24:17:26:15:36:d5:ae:64:f3:5c:de:0b: dd:ba:26:65:d3:5b:c6:a9:24:da:a4:bf:40:6b:5f:60:e8:33: 1b:e1:e6:47 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUXgucUMqlv8zKJYWs7GMYf9o/5CUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZDAyYmJiNDQwYjlkZDQ0MDg4ZGI2ODRlZTgyZmEyYTdk YTA2ZmNmNjAeFw0yNTEyMjAxNzIwMTZaFw0yNTEyMjExODM3MTZaMDMxMTAvBgNV BAMTKDBENjdEMEFEOTJGNkU1NkI0MjVFMjBDMDc1M0VFOTlFOTNEODc3ODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyiEWDaRNx81QMQewHqf/X+ayy kmtFSbSoCYUAzOE9PcYDQH6zBf6qeul6xAOa7Gs5qLB72lK9ZQD4ThNRLGmOQja2 fT8gxFm30Voo3RVU1ChewXG6aDlr7MYNoM5CroOTFXzPmmwLvuGYVDg04KF2vVH0 rqTF5SFFSn6WVz7491Bycf4q+tVpTEFdl7HLfiMUm6AwY1mgJ6+j/d4ccRRqiXe1 jJtEP4fv9/sr4ZkkZnWSNRwdrLHsCxqqOOL7oM8KVHgWA2Q7i+leMjP29njFYrnZ N6LMr6yqhmhpCbJ2BoQrhbiV8Qiqpa6SgKL9uqYwHJoVicz+KDaETptMSY5LAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUDWfQrZL25WtCXiDAdT7pnpPYd4gwHwYDVR0j BBgwFoAU0Cu7RAud1ECI22hO6C+ip9oG/PYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTNmNjg1NjEtMGE3NC00Y2NhLWJmOGYtMTJmYWFhZmM4 ZWI4LzEvRDAyQkJCNDQwQjlERDQ0MDg4REI2ODRFRTgyRkEyQTdEQTA2RkNGNi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBDdTdSQXVkMUVDSTIyaE82Qy1pcDlv R19QWS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xM2Y2ODU2MS0w YTc0LTRjY2EtYmY4Zi0xMmZhYWFmYzhlYjgvMS9EMDJCQkI0NDBCOURENDQwODhE QjY4NEVFODJGQTJBN0RBMDZGQ0Y2Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf06q/6jrWRtm3J0RkN1S BshCCVZ/sRyNVsRWCYPpGZxOcLj4xUz9kwCkDw9Ssy/FXEpdZVmZ0qqhZhJMWEn3 CyjpuwySo3aJE27eH0sJeUibD6ORjxzCg8ZUwi4gGVjI746tJe2U5fVqyXvpqOys CKj2npf4eeQmdZgVYaZjo5ElyT2BwnoVJiAPs6xRTvvU9bQ7AlU1uytTJJknnl+M lXDx48VRZcFMZJDGG9LzS2BN9Bu1nKo+dsMfRR7+464HrnGimvGYiWX5TJoWFrra zTYC4jz3QT6FyNLG94sKJBcmFTbVrmTzXN4L3bomZdNbxqkk2qS/QGtfYOgzG+Hm Rw== -----END CERTIFICATE-----Generated at Sun Dec 21 12:26:50 2025 by rpki-client