This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1b22759c-d097-4faa-9dce-dd46c1d30ec8/0/C456BB1AEAE2E7345F13EB23CF8DF80F31246F67.mft File: C456BB1AEAE2E7345F13EB23CF8DF80F31246F67.mft (raw, json) Hash identifier: O7VbZs7gwtVncCmFwKTa5NAI4DU/hUWgUKDNQIhdVEI= Subject key identifier: F9:39:67:DA:8C:89:31:75:52:85:C2:C7:F0:1F:18:5A:9B:B5:9B:F2 Authority key identifier: C4:56:BB:1A:EA:E2:E7:34:5F:13:EB:23:CF:8D:F8:0F:31:24:6F:67 Certificate issuer: /CN=c456bb1aeae2e7345f13eb23cf8df80f31246f67 Certificate serial: 2794697A84AB4E36991821B8A0EE9E667956E93D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xFa7Guri5zRfE-sjz434DzEkb2c.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1b22759c-d097-4faa-9dce-dd46c1d30ec8/0/C456BB1AEAE2E7345F13EB23CF8DF80F31246F67.mft Manifest number: 08 Signing time: Mon 15 Dec 2025 18:30:05 +0000 Manifest this update: Mon 15 Dec 2025 18:25:05 +0000 Manifest next update: Tue 16 Dec 2025 20:48:05 +0000 Files and hashes: 1: C456BB1AEAE2E7345F13EB23CF8DF80F31246F67.crl (hash: Q1VCJVguYQBfNh7LThvlOLECnMOFzF0Vfd6AijCxjlI=) 2: AS210352.asa (hash: uZtezO2yBf6zKpBoUYQIzx5W0PuLJVpNKT+VEu9tmM8=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1b22759c-d097-4faa-9dce-dd46c1d30ec8/0/C456BB1AEAE2E7345F13EB23CF8DF80F31246F67.crl rsync://rsync.paas.rpki.ripe.net/repository/1b22759c-d097-4faa-9dce-dd46c1d30ec8/0/C456BB1AEAE2E7345F13EB23CF8DF80F31246F67.mft rsync://rpki.ripe.net/repository/DEFAULT/xFa7Guri5zRfE-sjz434DzEkb2c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 20:48:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:94:69:7a:84:ab:4e:36:99:18:21:b8:a0:ee:9e:66:79:56:e9:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c456bb1aeae2e7345f13eb23cf8df80f31246f67 Validity Not Before: Dec 15 18:25:05 2025 GMT Not After : Dec 16 20:48:05 2025 GMT Subject: CN=F93967DA8C8931755285C2C7F01F185A9BB59BF2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:4b:11:7c:48:a7:dd:4a:58:17:61:79:10:cc: 7c:1f:54:6b:0d:00:8b:42:6d:6c:d8:d2:69:cc:77: c0:b2:2d:03:b6:1a:b3:81:3a:20:47:57:5d:53:9b: 88:9e:78:d9:ac:00:09:ba:82:a4:1d:9f:57:0e:e6: 13:9c:0f:d5:19:b5:69:17:03:0d:75:02:93:e3:7e: c0:f2:8d:d7:40:f1:e5:9a:41:5c:5a:b0:cc:bb:da: a9:44:5e:a3:e0:6e:be:c7:7d:49:7d:d6:8a:9e:99: 89:2f:2f:e1:38:31:d7:18:1b:6f:06:06:b2:bc:14: 92:9c:c9:e5:e7:7b:46:e8:d8:0f:bb:0b:2e:18:d4: 4a:9d:d5:bc:05:6e:47:4f:3c:2c:0a:e3:4c:f5:b2: df:ec:27:45:11:44:53:e8:57:19:b8:7e:db:06:cc: 62:50:bd:c1:84:17:24:75:ce:ce:75:a6:9c:75:79: 30:dd:29:39:92:9a:7b:28:6c:6e:e3:f5:06:14:35: a4:ad:8d:25:ec:a2:10:b4:64:64:cd:aa:f2:25:52: 0b:bc:d1:7c:98:22:33:70:53:d5:f5:5e:82:f5:35: 8d:60:12:8f:57:fb:39:9f:17:88:02:e0:96:06:4d: 6a:15:17:72:84:e4:f2:cb:71:75:3f:09:fa:9e:68: 46:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:39:67:DA:8C:89:31:75:52:85:C2:C7:F0:1F:18:5A:9B:B5:9B:F2 X509v3 Authority Key Identifier: keyid:C4:56:BB:1A:EA:E2:E7:34:5F:13:EB:23:CF:8D:F8:0F:31:24:6F:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1b22759c-d097-4faa-9dce-dd46c1d30ec8/0/C456BB1AEAE2E7345F13EB23CF8DF80F31246F67.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xFa7Guri5zRfE-sjz434DzEkb2c.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1b22759c-d097-4faa-9dce-dd46c1d30ec8/0/C456BB1AEAE2E7345F13EB23CF8DF80F31246F67.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c8:68:ab:42:0e:f6:1c:d0:b5:c8:c3:6e:2e:49:b6:9b:2a:42: db:d5:11:df:52:ae:e2:91:ee:b2:ff:b2:cf:25:d0:51:c2:28: 86:75:85:17:38:a0:97:3e:9e:9d:44:12:f5:36:fe:55:37:18: 6d:b2:d5:29:a6:ef:4d:8b:da:1a:4b:19:ee:04:03:15:fb:b8: 84:f5:77:3a:5e:df:f8:db:5e:5e:81:a6:42:70:fc:61:8a:81: 92:cf:64:85:ff:31:8b:ae:14:ba:5c:74:11:1e:71:dc:b5:ba: e6:bb:58:ca:80:c7:8e:c2:96:9a:ab:f6:a4:2a:d2:8c:24:f5: 42:d5:45:9f:2e:ea:11:15:ed:6c:9e:71:5d:81:60:8f:01:cd: 1f:6a:d6:c2:a7:32:2b:3f:b7:f6:e4:b0:34:82:f9:db:72:57: d8:b3:2d:2c:b0:ee:78:3e:2e:3c:05:5a:05:f4:f0:42:99:3d: 7e:ca:c5:25:51:88:92:aa:ce:ba:e0:79:27:55:97:b6:97:84: 25:d8:01:7c:a8:b1:65:14:61:b1:0e:0d:f5:3a:2b:56:4f:02: 5d:fb:ab:d3:d8:8d:58:30:28:4b:7c:74:33:8e:8b:ed:f6:b7: 7a:46:49:f5:f6:95:20:15:8e:54:78:5a:aa:bd:d2:df:87:46: 6d:db:30:77 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUJ5RpeoSrTjaZGCG4oO6eZnlW6T0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYzQ1NmJiMWFlYWUyZTczNDVmMTNlYjIzY2Y4ZGY4MGYz MTI0NmY2NzAeFw0yNTEyMTUxODI1MDVaFw0yNTEyMTYyMDQ4MDVaMDMxMTAvBgNV BAMTKEY5Mzk2N0RBOEM4OTMxNzU1Mjg1QzJDN0YwMUYxODVBOUJCNTlCRjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWSxF8SKfdSlgXYXkQzHwfVGsN AItCbWzY0mnMd8CyLQO2GrOBOiBHV11Tm4ieeNmsAAm6gqQdn1cO5hOcD9UZtWkX Aw11ApPjfsDyjddA8eWaQVxasMy72qlEXqPgbr7HfUl91oqemYkvL+E4MdcYG28G BrK8FJKcyeXne0bo2A+7Cy4Y1Eqd1bwFbkdPPCwK40z1st/sJ0URRFPoVxm4ftsG zGJQvcGEFyR1zs51ppx1eTDdKTmSmnsobG7j9QYUNaStjSXsohC0ZGTNqvIlUgu8 0XyYIjNwU9X1XoL1NY1gEo9X+zmfF4gC4JYGTWoVF3KE5PLLcXU/CfqeaEb1AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU+Tln2oyJMXVShcLH8B8YWpu1m/IwHwYDVR0j BBgwFoAUxFa7Guri5zRfE+sjz434DzEkb2cwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMWIyMjc1OWMtZDA5Ny00ZmFhLTlkY2UtZGQ0NmMxZDMw ZWM4LzAvQzQ1NkJCMUFFQUUyRTczNDVGMTNFQjIzQ0Y4REY4MEYzMTI0NkY2Ny5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3hGYTdHdXJpNXpSZkUtc2p6NDM0RHpF a2IyYy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xYjIyNzU5Yy1k MDk3LTRmYWEtOWRjZS1kZDQ2YzFkMzBlYzgvMC9DNDU2QkIxQUVBRTJFNzM0NUYx M0VCMjNDRjhERjgwRjMxMjQ2RjY3Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyGirQg72HNC1yMNuLkm2 mypC29UR31Ku4pHusv+yzyXQUcIohnWFFziglz6enUQS9Tb+VTcYbbLVKabvTYva GksZ7gQDFfu4hPV3Ol7f+NteXoGmQnD8YYqBks9khf8xi64Uulx0ER5x3LW65rtY yoDHjsKWmqv2pCrSjCT1QtVFny7qERXtbJ5xXYFgjwHNH2rWwqcyKz+39uSwNIL5 23JX2LMtLLDueD4uPAVaBfTwQpk9fsrFJVGIkqrOuuB5J1WXtpeEJdgBfKixZRRh sQ4N9TorVk8CXfur09iNWDAoS3x0M46L7fa3ekZJ9faVIBWOVHhaqr3S34dGbdsw dw== -----END CERTIFICATE-----Generated at Tue Dec 16 12:37:21 2025 by rpki-client