This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/0/74E91965A809D1AC5AA0F0D05506ACB0DDB02AB8.mft File: 74E91965A809D1AC5AA0F0D05506ACB0DDB02AB8.mft (raw, json) Hash identifier: HP5k60o7RlasEhkMQghLANQnnSr3Jk6a028BcHnnOSk= Subject key identifier: BD:85:9B:CF:3A:BF:97:47:49:7D:F2:F9:B9:39:A6:15:BF:6C:1D:48 Authority key identifier: 74:E9:19:65:A8:09:D1:AC:5A:A0:F0:D0:55:06:AC:B0:DD:B0:2A:B8 Certificate issuer: /CN=74e91965a809d1ac5aa0f0d05506acb0ddb02ab8 Certificate serial: 6AAE231700284DBFDDF73C3D510B07408A4A3902 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dOkZZagJ0axaoPDQVQassN2wKrg.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/0/74E91965A809D1AC5AA0F0D05506ACB0DDB02AB8.mft Manifest number: 023E Signing time: Sun 21 Dec 2025 07:55:41 +0000 Manifest this update: Sun 21 Dec 2025 07:50:41 +0000 Manifest next update: Mon 22 Dec 2025 07:55:41 +0000 Files and hashes: 1: 74E91965A809D1AC5AA0F0D05506ACB0DDB02AB8.crl (hash: Dv1o5Q+hUkUOtJG8bw/WfKdN+Oo+dV7zX5X0AytDppE=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/0/74E91965A809D1AC5AA0F0D05506ACB0DDB02AB8.crl rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/0/74E91965A809D1AC5AA0F0D05506ACB0DDB02AB8.mft rsync://rpki.ripe.net/repository/DEFAULT/dOkZZagJ0axaoPDQVQassN2wKrg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:ae:23:17:00:28:4d:bf:dd:f7:3c:3d:51:0b:07:40:8a:4a:39:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74e91965a809d1ac5aa0f0d05506acb0ddb02ab8 Validity Not Before: Dec 21 07:50:41 2025 GMT Not After : Dec 22 07:55:41 2025 GMT Subject: CN=BD859BCF3ABF9747497DF2F9B939A615BF6C1D48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:fc:56:74:5f:98:90:e7:f0:b7:1a:72:dd:21: 61:e3:c3:10:fe:4f:57:d4:d2:e4:c1:f1:cc:f8:ab: fc:0f:c8:be:0e:08:eb:b0:07:15:30:a3:51:3c:5e: ba:d6:4b:9a:06:0a:6b:46:d2:0e:c2:20:67:be:ce: 4d:4d:59:36:37:9a:5f:e3:7d:95:c7:15:49:87:2e: a6:7d:76:fd:42:0b:47:45:f2:58:7f:1f:0e:1a:8e: ab:5b:5a:78:62:b7:28:a0:78:ae:7f:5b:49:91:92: cf:5e:84:74:49:0e:36:a7:20:72:e0:78:e7:a6:3a: 33:86:80:a4:9c:45:5e:ff:38:f5:5f:0d:c2:7a:46: 29:ca:9b:d4:35:8d:12:4a:ab:d8:cd:a2:79:8e:0a: 23:93:35:bd:8d:ec:20:28:36:4a:61:ae:df:4e:a4: 8d:13:4b:b6:6e:77:ab:89:ed:84:b1:f2:6b:33:86: 58:72:fb:8e:20:72:77:c9:72:85:51:fe:5b:9f:63: dc:d2:a7:8d:fc:bc:ff:f2:eb:7d:a4:3c:f2:bf:20: a9:af:b3:a3:0f:3e:07:6e:20:9c:ad:c1:54:2d:90: 87:ce:4d:0f:a7:54:17:62:0a:5e:f8:93:69:16:25: f8:bf:e6:84:b9:00:be:a0:84:f5:45:7c:1d:88:b6: bb:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:85:9B:CF:3A:BF:97:47:49:7D:F2:F9:B9:39:A6:15:BF:6C:1D:48 X509v3 Authority Key Identifier: keyid:74:E9:19:65:A8:09:D1:AC:5A:A0:F0:D0:55:06:AC:B0:DD:B0:2A:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/0/74E91965A809D1AC5AA0F0D05506ACB0DDB02AB8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dOkZZagJ0axaoPDQVQassN2wKrg.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/0/74E91965A809D1AC5AA0F0D05506ACB0DDB02AB8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:14:7d:8e:ce:d0:d7:0d:f1:3e:bc:00:89:8e:2e:19:b6:0c: 96:dc:c9:ba:d8:64:41:91:3a:27:d7:3a:10:8f:70:41:db:77: 65:0e:b2:6a:f5:63:b4:73:9f:c6:f6:38:f1:33:73:b6:20:04: c9:64:d7:e7:0f:a4:58:1c:31:19:66:83:ba:d3:cb:f8:9c:42: 74:af:82:0c:f6:96:04:43:0f:0d:30:88:d8:1d:7c:36:c1:96: bc:1b:2d:93:bf:40:2b:d6:e0:45:71:1c:fa:63:a9:2a:31:c4: 7b:a9:d5:2a:05:41:ec:c5:45:70:e9:47:bb:54:bb:0d:12:a2: b8:66:be:90:76:5c:ea:18:8a:04:29:a4:36:9b:8c:41:01:9b: 4c:77:36:b7:b4:2b:35:58:1e:b4:e0:38:98:22:09:a7:db:65: 5d:23:cb:89:e6:ad:a0:fb:a2:fb:fe:5f:61:2a:0c:43:66:a8: e5:21:28:17:5b:53:f8:7a:e2:d8:63:79:c1:38:82:be:01:6d: 69:23:43:1e:06:cc:2b:f4:92:1f:aa:2d:0f:51:ab:bc:63:de: e2:42:a3:49:3f:89:0a:8a:0c:71:ec:cd:8c:78:f7:f5:30:d3: 13:f7:80:5b:85:b0:e3:37:dc:05:5b:76:e4:eb:29:4a:33:8b: 83:63:01:9c -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUaq4jFwAoTb/d9zw9UQsHQIpKOQIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzRlOTE5NjVhODA5ZDFhYzVhYTBmMGQwNTUwNmFjYjBk ZGIwMmFiODAeFw0yNTEyMjEwNzUwNDFaFw0yNTEyMjIwNzU1NDFaMDMxMTAvBgNV BAMTKEJEODU5QkNGM0FCRjk3NDc0OTdERjJGOUI5MzlBNjE1QkY2QzFENDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCG/FZ0X5iQ5/C3GnLdIWHjwxD+ T1fU0uTB8cz4q/wPyL4OCOuwBxUwo1E8XrrWS5oGCmtG0g7CIGe+zk1NWTY3ml/j fZXHFUmHLqZ9dv1CC0dF8lh/Hw4ajqtbWnhityigeK5/W0mRks9ehHRJDjanIHLg eOemOjOGgKScRV7/OPVfDcJ6RinKm9Q1jRJKq9jNonmOCiOTNb2N7CAoNkphrt9O pI0TS7Zud6uJ7YSx8mszhlhy+44gcnfJcoVR/lufY9zSp438vP/y632kPPK/IKmv s6MPPgduIJytwVQtkIfOTQ+nVBdiCl74k2kWJfi/5oS5AL6ghPVFfB2ItrubAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUvYWbzzq/l0dJffL5uTmmFb9sHUgwHwYDVR0j BBgwFoAUdOkZZagJ0axaoPDQVQassN2wKrgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjJjZjhiYTctY2IwMi00MThiLWJlMDQtNGQ5ZjNhMDdl OTUwLzAvNzRFOTE5NjVBODA5RDFBQzVBQTBGMEQwNTUwNkFDQjBEREIwMkFCOC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RPa1paYWdKMGF4YW9QRFFWUWFzc04y d0tyZy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yMmNmOGJhNy1j YjAyLTQxOGItYmUwNC00ZDlmM2EwN2U5NTAvMC83NEU5MTk2NUE4MDlEMUFDNUFB MEYwRDA1NTA2QUNCMEREQjAyQUI4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAxR9js7Q1w3xPrwAiY4u GbYMltzJuthkQZE6J9c6EI9wQdt3ZQ6yavVjtHOfxvY48TNztiAEyWTX5w+kWBwx GWaDutPL+JxCdK+CDPaWBEMPDTCI2B18NsGWvBstk79AK9bgRXEc+mOpKjHEe6nV KgVB7MVFcOlHu1S7DRKiuGa+kHZc6hiKBCmkNpuMQQGbTHc2t7QrNVgetOA4mCIJ p9tlXSPLieatoPui+/5fYSoMQ2ao5SEoF1tT+Hri2GN5wTiCvgFtaSNDHgbMK/SS H6otD1GrvGPe4kKjST+JCooMcezNjHj39TDTE/eAW4Ww4zfcBVt25OspSjOLg2MB nA== -----END CERTIFICATE-----Generated at Sun Dec 21 13:55:12 2025 by rpki-client