This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/A715A7C4243DFD5608AC7C5962055125B94D1763.mft File: A715A7C4243DFD5608AC7C5962055125B94D1763.mft (raw, json) Hash identifier: fHzB+ZDmpiMJ+/RfRSV3oW+n2YgnhBU1jQyHEq1wofE= Subject key identifier: FD:B9:05:85:DC:A0:BC:2C:87:64:2B:DB:43:10:89:C7:42:46:51:43 Authority key identifier: A7:15:A7:C4:24:3D:FD:56:08:AC:7C:59:62:05:51:25:B9:4D:17:63 Certificate issuer: /CN=a715a7c4243dfd5608ac7c5962055125b94d1763 Certificate serial: 0C99B38169FF7DDC2EF1EA7E88603274CF1890F3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pxWnxCQ9_VYIrHxZYgVRJblNF2M.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/A715A7C4243DFD5608AC7C5962055125B94D1763.mft Manifest number: 0625 Signing time: Thu 18 Dec 2025 08:24:15 +0000 Manifest this update: Thu 18 Dec 2025 08:19:15 +0000 Manifest next update: Fri 19 Dec 2025 09:41:15 +0000 Files and hashes: 1: A715A7C4243DFD5608AC7C5962055125B94D1763.crl (hash: asaPW17sUrJVEzvEMFCg8et0bBkyPZWLRUl+UyZhCvI=) 2: 698CBB9E641A60FE66E1B58C92ACD281637ED767.cer (hash: tNwFc0wxK30edc2dJgBKjPLV9///2mnITAEpNIZ0d8k=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/A715A7C4243DFD5608AC7C5962055125B94D1763.crl rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/A715A7C4243DFD5608AC7C5962055125B94D1763.mft rsync://rpki.ripe.net/repository/DEFAULT/pxWnxCQ9_VYIrHxZYgVRJblNF2M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 09:41:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:99:b3:81:69:ff:7d:dc:2e:f1:ea:7e:88:60:32:74:cf:18:90:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a715a7c4243dfd5608ac7c5962055125b94d1763 Validity Not Before: Dec 18 08:19:15 2025 GMT Not After : Dec 19 09:41:15 2025 GMT Subject: CN=FDB90585DCA0BC2C87642BDB431089C742465143 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:2c:e1:d9:90:cd:40:4c:79:a4:e5:c3:ff:2c: f1:45:6e:d4:c8:65:69:6b:f8:10:95:df:04:2a:89: 53:70:12:71:1a:bb:4a:02:90:91:ef:9a:18:68:60: 2a:b9:be:00:38:43:10:ca:aa:7b:a7:71:33:5e:5f: 1e:83:4d:9f:e8:7f:c1:ea:93:c9:69:04:5b:96:2c: e9:f7:b0:96:b3:26:83:5e:30:1a:0d:73:0b:3c:d8: b5:1d:23:42:25:b7:52:42:b9:34:18:48:ce:3b:aa: d5:cd:76:e9:59:f9:07:24:8d:77:46:3d:9a:70:ae: b7:50:10:75:53:83:cd:f5:28:db:a3:74:ed:ae:e7: a5:c4:bf:be:fd:4b:30:db:22:a0:1f:cf:23:ff:43: 64:c2:cc:95:78:6e:95:9e:91:30:5f:69:19:04:ab: 4e:27:79:1a:93:c1:96:26:70:5b:f4:a2:d0:07:04: f9:fd:76:e6:3c:78:66:c0:39:54:09:85:60:d3:f8: a2:da:17:97:91:d8:99:c1:a6:cc:83:9f:ce:b4:5b: 0f:77:5c:fb:18:d7:d0:5c:96:93:a1:b3:5e:1c:d4: fa:74:91:6a:01:4f:38:43:63:0d:ff:4b:fb:b1:67: a7:a1:76:aa:c1:49:86:2e:ae:91:af:d7:66:6d:4f: f1:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:B9:05:85:DC:A0:BC:2C:87:64:2B:DB:43:10:89:C7:42:46:51:43 X509v3 Authority Key Identifier: keyid:A7:15:A7:C4:24:3D:FD:56:08:AC:7C:59:62:05:51:25:B9:4D:17:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/A715A7C4243DFD5608AC7C5962055125B94D1763.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pxWnxCQ9_VYIrHxZYgVRJblNF2M.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/A715A7C4243DFD5608AC7C5962055125B94D1763.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:53:37:a3:16:c0:44:ad:a5:ae:42:18:a5:c1:0c:ce:b8:93: c0:89:f4:8f:0e:d1:42:96:c4:19:dc:80:79:99:53:a6:19:0e: de:47:19:05:10:be:45:21:79:a4:51:32:e5:f0:bc:bb:44:2e: fa:f5:dc:be:78:a8:fc:cc:a0:f5:89:28:45:08:a0:9f:90:4f: 94:33:c7:06:83:06:90:d1:37:2b:3d:84:00:97:d0:4a:62:55: 8a:6d:5a:14:91:6c:64:68:58:38:03:23:55:38:ae:f3:8c:ef: c8:5a:d1:ec:6c:ab:ba:1a:09:1e:13:cc:71:9a:34:01:27:c4: b0:29:3a:59:01:b6:ce:bc:72:e9:57:50:e2:db:f5:06:12:fc: b7:c5:06:76:4d:d1:e5:51:37:71:97:3c:ae:a6:a2:da:38:6d: e7:74:04:26:68:39:f8:e4:4a:f5:af:65:48:b0:a8:17:d2:b6: af:84:a9:04:5a:d5:03:9a:80:25:0f:07:f8:a2:42:5b:2e:01: ba:1c:21:93:c0:06:97:d8:2d:d6:0f:df:7b:24:db:1a:e3:19: 50:c0:41:7d:2f:48:f7:52:a8:12:5a:f3:23:ae:82:ff:66:0c: 8c:fb:c6:97:cf:57:8d:cc:ca:c0:f6:87:c0:dc:52:15:d6:fa: 2c:95:86:2c -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUDJmzgWn/fdwu8ep+iGAydM8YkPMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYTcxNWE3YzQyNDNkZmQ1NjA4YWM3YzU5NjIwNTUxMjVi OTRkMTc2MzAeFw0yNTEyMTgwODE5MTVaFw0yNTEyMTkwOTQxMTVaMDMxMTAvBgNV BAMTKEZEQjkwNTg1RENBMEJDMkM4NzY0MkJEQjQzMTA4OUM3NDI0NjUxNDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXLOHZkM1ATHmk5cP/LPFFbtTI ZWlr+BCV3wQqiVNwEnEau0oCkJHvmhhoYCq5vgA4QxDKqnuncTNeXx6DTZ/of8Hq k8lpBFuWLOn3sJazJoNeMBoNcws82LUdI0Ilt1JCuTQYSM47qtXNdulZ+QckjXdG PZpwrrdQEHVTg831KNujdO2u56XEv779SzDbIqAfzyP/Q2TCzJV4bpWekTBfaRkE q04neRqTwZYmcFv0otAHBPn9duY8eGbAOVQJhWDT+KLaF5eR2JnBpsyDn860Ww93 XPsY19BclpOhs14c1Pp0kWoBTzhDYw3/S/uxZ6ehdqrBSYYurpGv12ZtT/GzAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU/bkFhdygvCyHZCvbQxCJx0JGUUMwHwYDVR0j BBgwFoAUpxWnxCQ9/VYIrHxZYgVRJblNF2MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMWJmOGU5NzctNzI3OC00NmNmLWFiZDEtOTljZDFmZDJi ZTRlLzEvQTcxNUE3QzQyNDNERkQ1NjA4QUM3QzU5NjIwNTUxMjVCOTREMTc2My5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3B4V254Q1E5X1ZZSXJIeFpZZ1ZSSmJs TkYyTS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xYmY4ZTk3Ny03 Mjc4LTQ2Y2YtYWJkMS05OWNkMWZkMmJlNGUvMS9BNzE1QTdDNDI0M0RGRDU2MDhB QzdDNTk2MjA1NTEyNUI5NEQxNzYzLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHFM3oxbARK2lrkIYpcEM zriTwIn0jw7RQpbEGdyAeZlTphkO3kcZBRC+RSF5pFEy5fC8u0Qu+vXcvnio/Myg 9YkoRQign5BPlDPHBoMGkNE3Kz2EAJfQSmJVim1aFJFsZGhYOAMjVTiu84zvyFrR 7GyruhoJHhPMcZo0ASfEsCk6WQG2zrxy6VdQ4tv1BhL8t8UGdk3R5VE3cZc8rqai 2jht53QEJmg5+ORK9a9lSLCoF9K2r4SpBFrVA5qAJQ8H+KJCWy4Buhwhk8AGl9gt 1g/feyTbGuMZUMBBfS9I91KoElrzI66C/2YMjPvGl89XjczKwPaHwNxSFdb6LJWG LA== -----END CERTIFICATE-----Generated at Fri Dec 19 00:15:48 2025 by rpki-client