This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/3/6019C116C8AE318AFD4B822E9F4EEEA0C34BAACA.mft File: 6019C116C8AE318AFD4B822E9F4EEEA0C34BAACA.mft (raw, json) Hash identifier: H0Je9OH+qxr1vpWZsOOGhYJs5KDAAKCc7rJJEJK0Ops= Subject key identifier: E9:9B:C4:56:53:C3:A3:4B:6D:9C:5B:C7:AC:65:46:9E:C2:62:2F:67 Authority key identifier: 60:19:C1:16:C8:AE:31:8A:FD:4B:82:2E:9F:4E:EE:A0:C3:4B:AA:CA Certificate issuer: /CN=6019c116c8ae318afd4b822e9f4eeea0c34baaca Certificate serial: 65C14958E9D69918B2802BC1C3C0D2DD45001B55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YBnBFsiuMYr9S4Iun07uoMNLqso.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/3/6019C116C8AE318AFD4B822E9F4EEEA0C34BAACA.mft Manifest number: 02FA Signing time: Sat 20 Dec 2025 17:57:13 +0000 Manifest this update: Sat 20 Dec 2025 17:52:13 +0000 Manifest next update: Sun 21 Dec 2025 19:52:13 +0000 Files and hashes: 1: 6019C116C8AE318AFD4B822E9F4EEEA0C34BAACA.crl (hash: Kia1DTs23lhyC8tjYgy0G8Blofi8mcFCHcVn3JAhc2o=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/3/6019C116C8AE318AFD4B822E9F4EEEA0C34BAACA.crl rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/3/6019C116C8AE318AFD4B822E9F4EEEA0C34BAACA.mft rsync://rpki.ripe.net/repository/DEFAULT/YBnBFsiuMYr9S4Iun07uoMNLqso.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:c1:49:58:e9:d6:99:18:b2:80:2b:c1:c3:c0:d2:dd:45:00:1b:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6019c116c8ae318afd4b822e9f4eeea0c34baaca Validity Not Before: Dec 20 17:52:13 2025 GMT Not After : Dec 21 19:52:13 2025 GMT Subject: CN=E99BC45653C3A34B6D9C5BC7AC65469EC2622F67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:0e:9d:51:74:0b:f3:48:e8:88:0f:4b:d8:9a: fd:71:25:70:a6:83:6a:20:f8:e5:a8:75:52:71:85: 0f:c6:ab:e4:f3:70:12:d4:84:eb:b8:65:90:a7:a6: bb:b1:4e:39:1a:4c:07:af:54:f1:a9:39:5d:3c:0d: f1:5a:97:9b:66:8d:15:16:c2:d2:88:28:af:02:6d: ee:1e:a3:a5:86:ec:8e:bd:e8:36:d2:a0:a6:b7:16: 5f:fb:4c:29:5f:53:f1:3a:1d:c1:62:d9:fc:16:c3: 4a:f6:47:e3:7b:83:37:5b:49:bb:db:28:73:9c:95: f8:ce:9f:38:a3:5a:95:f7:b6:d8:f3:bb:fa:37:ae: 60:eb:e3:03:55:f3:bf:23:ea:d7:d0:f3:ed:3f:24: e4:1c:90:2e:c9:2d:b6:e4:1c:d5:4c:7d:a0:96:03: f2:d6:18:c5:60:5d:43:5f:7d:45:10:0c:45:e3:b6: 3f:dd:23:71:fb:78:d9:d1:6d:20:4f:7a:77:54:ad: 99:b8:ef:34:c9:b4:29:42:68:84:62:04:4c:09:68: d5:c3:e6:49:c8:9f:4d:c9:c8:03:67:77:88:3b:83: 77:e0:cf:90:4f:b3:79:64:bc:f1:85:46:98:70:91: 3f:71:91:0d:26:fc:59:84:28:73:a7:1f:b2:ed:3b: ad:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:9B:C4:56:53:C3:A3:4B:6D:9C:5B:C7:AC:65:46:9E:C2:62:2F:67 X509v3 Authority Key Identifier: keyid:60:19:C1:16:C8:AE:31:8A:FD:4B:82:2E:9F:4E:EE:A0:C3:4B:AA:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/3/6019C116C8AE318AFD4B822E9F4EEEA0C34BAACA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YBnBFsiuMYr9S4Iun07uoMNLqso.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/3/6019C116C8AE318AFD4B822E9F4EEEA0C34BAACA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:14:d6:10:5a:ea:87:15:a7:c1:e5:cb:30:aa:87:ef:ba:ea: bd:ef:de:f3:ff:d4:1a:ab:3d:c5:0c:19:e9:69:26:91:28:1f: a6:de:8f:a1:e8:91:40:1e:92:74:a1:36:2f:1d:0c:7b:5e:df: 48:cf:bb:6c:5d:4c:b2:7c:0e:3c:6b:1a:3a:fd:4d:fb:a8:a3: cb:fe:bd:df:2d:e2:17:a6:a8:72:5c:0e:95:41:a3:4a:4a:04: 24:d7:eb:b4:27:67:36:a1:00:49:aa:8d:81:7a:96:5b:e4:5e: ad:29:3f:2c:f3:34:e2:88:29:0e:a1:7f:4c:9b:66:ec:2c:b5: 16:e9:0a:03:71:8f:0b:37:18:a6:17:f7:a6:e0:6f:96:f2:e5: d7:4a:76:63:b3:89:af:49:44:f2:c0:df:4b:f5:46:f5:13:de: 17:26:4d:81:7d:c7:a1:66:bf:ef:2b:e2:21:67:15:18:e1:c7: ed:bf:2d:3b:ab:21:f8:5b:2a:bc:21:49:29:df:97:1b:ad:ae: e3:27:01:80:d9:44:4c:c9:a2:cd:44:ca:fd:09:f8:c3:4f:31: b6:80:b6:b2:8a:9c:89:54:e3:83:2a:d3:08:94:23:ee:3d:7a: 7b:6f:1c:f9:ca:40:fc:d8:cb:f0:06:b0:a4:d4:7a:52:fc:56: f5:09:f4:cd -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUZcFJWOnWmRiygCvBw8DS3UUAG1UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjAxOWMxMTZjOGFlMzE4YWZkNGI4MjJlOWY0ZWVlYTBj MzRiYWFjYTAeFw0yNTEyMjAxNzUyMTNaFw0yNTEyMjExOTUyMTNaMDMxMTAvBgNV BAMTKEU5OUJDNDU2NTNDM0EzNEI2RDlDNUJDN0FDNjU0NjlFQzI2MjJGNjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvDp1RdAvzSOiID0vYmv1xJXCm g2og+OWodVJxhQ/Gq+TzcBLUhOu4ZZCnpruxTjkaTAevVPGpOV08DfFal5tmjRUW wtKIKK8Cbe4eo6WG7I696DbSoKa3Fl/7TClfU/E6HcFi2fwWw0r2R+N7gzdbSbvb KHOclfjOnzijWpX3ttjzu/o3rmDr4wNV878j6tfQ8+0/JOQckC7JLbbkHNVMfaCW A/LWGMVgXUNffUUQDEXjtj/dI3H7eNnRbSBPendUrZm47zTJtClCaIRiBEwJaNXD 5knIn03JyANnd4g7g3fgz5BPs3lkvPGFRphwkT9xkQ0m/FmEKHOnH7LtO63rAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU6ZvEVlPDo0ttnFvHrGVGnsJiL2cwHwYDVR0j BBgwFoAUYBnBFsiuMYr9S4Iun07uoMNLqsowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMmFmNzNhOWMtMjA1OC00M2JiLTlhYzYtNWFiNDJkZmJm NDA5LzMvNjAxOUMxMTZDOEFFMzE4QUZENEI4MjJFOUY0RUVFQTBDMzRCQUFDQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1lCbkJGc2l1TVlyOVM0SXVuMDd1b01O THFzby5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yYWY3M2E5Yy0y MDU4LTQzYmItOWFjNi01YWI0MmRmYmY0MDkvMy82MDE5QzExNkM4QUUzMThBRkQ0 QjgyMkU5RjRFRUVBMEMzNEJBQUNBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASxTWEFrqhxWnweXLMKqH 77rqve/e8//UGqs9xQwZ6WkmkSgfpt6PoeiRQB6SdKE2Lx0Me17fSM+7bF1MsnwO PGsaOv1N+6ijy/693y3iF6aoclwOlUGjSkoEJNfrtCdnNqEASaqNgXqWW+RerSk/ LPM04ogpDqF/TJtm7Cy1FukKA3GPCzcYphf3puBvlvLl10p2Y7OJr0lE8sDfS/VG 9RPeFyZNgX3HoWa/7yviIWcVGOHH7b8tO6sh+FsqvCFJKd+XG62u4ycBgNlETMmi zUTK/Qn4w08xtoC2soqciVTjgyrTCJQj7j16e28c+cpA/NjL8AawpNR6UvxW9Qn0 zQ== -----END CERTIFICATE-----Generated at Sun Dec 21 02:57:36 2025 by rpki-client