This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/1/25BB542055398CAC21DB2407FD8E7D795A10F5ED.mft File: 25BB542055398CAC21DB2407FD8E7D795A10F5ED.mft (raw, json) Hash identifier: sK2vw585zz6T2/+ptu+p+Z1Ylsba73E2YOA5RX2zy/s= Subject key identifier: FF:E7:72:59:DC:AA:C5:17:C6:4D:E0:1E:13:69:26:0E:67:9B:0D:B8 Authority key identifier: 25:BB:54:20:55:39:8C:AC:21:DB:24:07:FD:8E:7D:79:5A:10:F5:ED Certificate issuer: /CN=25bb542055398cac21db2407fd8e7d795a10f5ed Certificate serial: 27D8DB884F908813B4C3DBCEA63D71CAD743D10D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JbtUIFU5jKwh2yQH_Y59eVoQ9e0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/1/25BB542055398CAC21DB2407FD8E7D795A10F5ED.mft Manifest number: 0124 Signing time: Sun 28 Dec 2025 06:07:47 +0000 Manifest this update: Sun 28 Dec 2025 06:02:47 +0000 Manifest next update: Mon 29 Dec 2025 09:38:47 +0000 Files and hashes: 1: 25BB542055398CAC21DB2407FD8E7D795A10F5ED.crl (hash: vnAMtARcu+UoQQluBGcjuTbRFrkMa3Zu5+Z/3Vw44RA=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/1/25BB542055398CAC21DB2407FD8E7D795A10F5ED.crl rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/1/25BB542055398CAC21DB2407FD8E7D795A10F5ED.mft rsync://rpki.ripe.net/repository/DEFAULT/JbtUIFU5jKwh2yQH_Y59eVoQ9e0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 09:38:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:d8:db:88:4f:90:88:13:b4:c3:db:ce:a6:3d:71:ca:d7:43:d1:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25bb542055398cac21db2407fd8e7d795a10f5ed Validity Not Before: Dec 28 06:02:47 2025 GMT Not After : Dec 29 09:38:47 2025 GMT Subject: CN=FFE77259DCAAC517C64DE01E1369260E679B0DB8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:e7:c7:2e:64:7e:df:18:e9:a1:28:fb:5c:0c: 38:b2:e5:09:c9:7f:cc:9a:01:2a:1a:26:64:42:b8: 6c:0a:95:22:99:2d:52:24:d7:b6:57:fd:a4:c7:1f: 02:11:2e:1b:f8:d7:89:b8:5f:b8:1e:bf:1c:76:f5: 3b:62:60:aa:54:1b:4d:9b:86:a6:a8:bb:18:0a:40: 93:3d:ab:33:80:59:fb:92:d4:fd:fc:94:17:1e:a2: 2f:95:2c:1b:f2:1d:17:f1:04:32:19:24:08:c1:e0: 4e:ba:04:1b:88:14:fa:a2:90:d8:d9:6a:e9:d0:97: 30:7e:a1:25:06:87:b4:20:01:29:ff:34:b3:d3:c0: f0:3c:fa:ba:85:aa:b6:a7:52:ba:f8:7a:fa:86:d0: d9:70:12:78:66:1e:9d:0c:c3:81:a5:a8:fa:35:7c: d3:f4:8a:95:c4:d9:b2:98:62:21:76:73:01:1c:14: 65:2f:36:c4:14:34:80:a5:43:1a:0e:1c:db:9e:15: f0:b2:8d:b7:d7:3a:f6:9c:97:21:2e:46:db:df:ed: a0:5a:59:8a:94:4d:eb:17:02:0e:7c:f5:43:52:5f: 66:a5:ad:3a:c5:19:a9:e9:d9:f5:05:ab:6f:91:40: ec:7a:ea:2a:45:d6:32:f8:3b:93:70:90:8a:6b:90: 7b:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:E7:72:59:DC:AA:C5:17:C6:4D:E0:1E:13:69:26:0E:67:9B:0D:B8 X509v3 Authority Key Identifier: keyid:25:BB:54:20:55:39:8C:AC:21:DB:24:07:FD:8E:7D:79:5A:10:F5:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/1/25BB542055398CAC21DB2407FD8E7D795A10F5ED.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JbtUIFU5jKwh2yQH_Y59eVoQ9e0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/1/25BB542055398CAC21DB2407FD8E7D795A10F5ED.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c6:83:27:81:c9:e7:cb:8f:fd:99:85:c4:d1:ab:88:fb:09:6b: bd:f8:55:53:b1:3d:fe:8d:e1:39:5d:b5:4a:16:8f:92:e6:bf: 0b:22:de:73:ae:6f:e2:ac:f8:25:c7:df:fd:02:48:62:1d:4a: 43:b4:c9:15:2a:14:33:55:04:c4:a5:8d:17:09:e7:ae:6b:b0: 8f:49:20:42:61:6c:5e:d6:c9:dc:73:38:f4:9b:b4:f8:8d:2d: 15:8e:bf:f3:f9:0b:70:a6:31:79:ac:64:93:84:ae:c3:36:27: 62:a6:06:c9:db:b9:bd:b9:0d:9f:8e:c4:b2:8d:09:8e:91:f4: f8:ce:96:46:8d:0f:78:87:54:25:ec:c0:cd:66:1e:7c:87:55: 2a:00:1b:5d:6d:ab:fc:b5:d7:57:9e:91:5e:16:ed:69:1b:3f: 0d:b0:73:12:38:a0:c1:3d:5e:a4:c5:ca:09:7d:dd:3b:aa:23: e4:24:b0:c5:de:aa:82:3e:3b:2d:05:90:c0:50:a7:bc:39:f5: fe:6a:f6:9a:7c:b6:8b:ec:df:a9:6c:58:ed:96:10:28:3d:e7: 4c:ac:44:d4:ba:cf:b2:ea:96:b0:1f:9b:f7:5f:14:94:85:bb: 4a:72:74:37:e9:ba:8b:c0:e5:5a:c5:7b:cd:53:1a:62:c4:3a: 5f:ce:04:ec -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUJ9jbiE+QiBO0w9vOpj1xytdD0Q0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjViYjU0MjA1NTM5OGNhYzIxZGIyNDA3ZmQ4ZTdkNzk1 YTEwZjVlZDAeFw0yNTEyMjgwNjAyNDdaFw0yNTEyMjkwOTM4NDdaMDMxMTAvBgNV BAMTKEZGRTc3MjU5RENBQUM1MTdDNjRERTAxRTEzNjkyNjBFNjc5QjBEQjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC58cuZH7fGOmhKPtcDDiy5QnJ f8yaASoaJmRCuGwKlSKZLVIk17ZX/aTHHwIRLhv414m4X7gevxx29TtiYKpUG02b hqaouxgKQJM9qzOAWfuS1P38lBceoi+VLBvyHRfxBDIZJAjB4E66BBuIFPqikNjZ aunQlzB+oSUGh7QgASn/NLPTwPA8+rqFqranUrr4evqG0NlwEnhmHp0Mw4GlqPo1 fNP0ipXE2bKYYiF2cwEcFGUvNsQUNIClQxoOHNueFfCyjbfXOvaclyEuRtvf7aBa WYqUTesXAg589UNSX2alrTrFGanp2fUFq2+RQOx66ipF1jL4O5NwkIprkHt7AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU/+dyWdyqxRfGTeAeE2kmDmebDbgwHwYDVR0j BBgwFoAUJbtUIFU5jKwh2yQH/Y59eVoQ9e0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMWJkMzA2YjQtZTVjMy00OGY5LWIyZWUtMzZhOWJkZGVk OGM0LzEvMjVCQjU0MjA1NTM5OENBQzIxREIyNDA3RkQ4RTdENzk1QTEwRjVFRC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0pidFVJRlU1akt3aDJ5UUhfWTU5ZVZv UTllMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xYmQzMDZiNC1l NWMzLTQ4ZjktYjJlZS0zNmE5YmRkZWQ4YzQvMS8yNUJCNTQyMDU1Mzk4Q0FDMjFE QjI0MDdGRDhFN0Q3OTVBMTBGNUVELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxoMngcnny4/9mYXE0auI +wlrvfhVU7E9/o3hOV21ShaPkua/CyLec65v4qz4Jcff/QJIYh1KQ7TJFSoUM1UE xKWNFwnnrmuwj0kgQmFsXtbJ3HM49Ju0+I0tFY6/8/kLcKYxeaxkk4SuwzYnYqYG ydu5vbkNn47Eso0JjpH0+M6WRo0PeIdUJezAzWYefIdVKgAbXW2r/LXXV56RXhbt aRs/DbBzEjigwT1epMXKCX3dO6oj5CSwxd6qgj47LQWQwFCnvDn1/mr2mny2i+zf qWxY7ZYQKD3nTKxE1LrPsuqWsB+b918UlIW7SnJ0N+m6i8DlWsV7zVMaYsQ6X84E 7A== -----END CERTIFICATE-----Generated at Mon Dec 29 00:46:20 2025 by rpki-client