This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.mft File: DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.mft (raw, json) Hash identifier: 70GrM7bgPHIzkwkxVwdmmIusWPhmShsnM1oFLTfJMV4= Subject key identifier: F8:A4:8C:21:D2:8A:A6:41:D9:B9:08:C7:66:58:BA:9F:3F:9C:74:F3 Authority key identifier: DA:B7:E2:0B:EA:5C:CB:84:F8:26:C6:4D:A1:75:7D:1D:F5:B6:FF:62 Certificate issuer: /CN=dab7e20bea5ccb84f826c64da1757d1df5b6ff62 Certificate serial: 6BFDE9EB49604F8211A17728ADB518863383B341 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2rfiC-pcy4T4JsZNoXV9HfW2_2I.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.mft Manifest number: 028D Signing time: Sat 20 Dec 2025 23:04:35 +0000 Manifest this update: Sat 20 Dec 2025 22:59:35 +0000 Manifest next update: Mon 22 Dec 2025 02:56:35 +0000 Files and hashes: 1: AS215085.asa (hash: sCI+W8+X4W620uBxNueenYbQpWLmlL4f7e78KHbgIKI=) 2: DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.crl (hash: y7XbP3SuzHlpxolzTP3d3WibQGoOC2B2KGlUJNOTSGU=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.crl rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.mft rsync://rpki.ripe.net/repository/DEFAULT/2rfiC-pcy4T4JsZNoXV9HfW2_2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:fd:e9:eb:49:60:4f:82:11:a1:77:28:ad:b5:18:86:33:83:b3:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dab7e20bea5ccb84f826c64da1757d1df5b6ff62 Validity Not Before: Dec 20 22:59:35 2025 GMT Not After : Dec 22 02:56:35 2025 GMT Subject: CN=F8A48C21D28AA641D9B908C76658BA9F3F9C74F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:18:8f:2c:6f:5f:a7:f6:36:d7:e7:3a:2b:ce: 0f:f2:19:56:03:5e:36:64:1b:71:63:d0:4a:92:cd: 74:e6:d2:cb:36:30:73:54:0d:47:93:e1:a2:6d:fe: 58:8e:11:de:e3:65:24:69:8a:cf:38:ea:ac:af:fe: 55:f7:2e:54:da:51:1c:8b:6c:0f:8f:a1:c6:17:e2: be:29:19:62:dc:ef:37:1d:d1:8d:8a:c1:84:dc:69: 3e:a8:ae:ec:0a:72:d8:3f:ef:60:54:d6:c3:cd:3e: 8d:65:ae:a0:30:36:4f:76:ac:be:13:c4:fc:62:9f: a4:7c:a6:ed:58:dc:75:fd:84:ae:ba:ee:93:02:01: 1a:73:fd:a3:27:a1:91:48:26:2d:3a:bc:56:aa:d7: 6a:a1:f6:41:83:6b:e3:66:e4:93:84:05:2f:7b:59: 7a:e1:42:5e:30:4e:56:c8:04:fe:7e:5b:f3:4b:a2: f9:7f:36:10:95:c3:58:02:f3:18:74:a8:d7:62:d0: 2e:4f:b9:36:04:71:ce:1f:ff:8f:cb:17:e5:11:9a: f7:a5:14:24:be:2a:57:8b:d8:ac:9d:10:ae:21:46: ed:d6:80:86:66:64:37:90:d6:7e:7c:5f:23:e9:ba: f1:0d:4f:5e:fd:b4:58:fd:e3:95:69:48:42:cd:98: a1:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:A4:8C:21:D2:8A:A6:41:D9:B9:08:C7:66:58:BA:9F:3F:9C:74:F3 X509v3 Authority Key Identifier: keyid:DA:B7:E2:0B:EA:5C:CB:84:F8:26:C6:4D:A1:75:7D:1D:F5:B6:FF:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2rfiC-pcy4T4JsZNoXV9HfW2_2I.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:fe:50:6f:b4:04:77:94:26:d7:02:43:70:0d:e7:35:38:f3: 74:de:17:9a:6f:74:9c:28:b0:f5:8e:ec:dd:c2:21:34:fb:64: 6f:03:6d:c8:ef:be:7c:cf:eb:c6:a2:b4:5e:ca:ed:9f:ea:60: de:fc:02:52:65:57:18:2a:b8:ef:00:ca:a8:ad:28:ef:c1:45: be:56:88:3c:e4:88:5f:e6:b1:f7:29:93:b4:89:70:80:4c:5c: 88:4c:e3:29:6b:b6:3c:e5:6d:75:14:58:83:69:77:39:3d:80: d2:54:70:42:8b:78:dd:dc:f6:82:bf:9a:e4:f1:22:62:74:e4: 1d:ba:20:eb:d0:f6:8a:8e:4e:65:06:a6:24:44:0e:90:91:d8: 8a:7c:85:29:39:a2:a1:50:29:b6:3c:98:28:a5:53:55:55:b9: d5:6e:97:e1:ac:c8:45:0f:e8:ca:6e:2c:5b:2e:cf:c1:78:35: aa:ca:b2:7a:11:a7:58:c1:10:e2:0c:70:5e:ea:a2:af:36:f2: 81:a1:4e:d4:31:ef:ee:19:5f:f8:71:cd:96:8a:8f:3a:a7:78: 1b:08:48:9b:37:25:97:a4:13:50:32:cf:52:fc:de:09:7e:ab: 73:e2:b7:1b:55:ec:52:3d:33:e4:25:98:6e:84:e0:f2:a9:6b: f2:8f:31:46 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUa/3p60lgT4IRoXcorbUYhjODs0EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZGFiN2UyMGJlYTVjY2I4NGY4MjZjNjRkYTE3NTdkMWRm NWI2ZmY2MjAeFw0yNTEyMjAyMjU5MzVaFw0yNTEyMjIwMjU2MzVaMDMxMTAvBgNV BAMTKEY4QTQ4QzIxRDI4QUE2NDFEOUI5MDhDNzY2NThCQTlGM0Y5Qzc0RjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXGI8sb1+n9jbX5zorzg/yGVYD XjZkG3Fj0EqSzXTm0ss2MHNUDUeT4aJt/liOEd7jZSRpis846qyv/lX3LlTaURyL bA+PocYX4r4pGWLc7zcd0Y2KwYTcaT6oruwKctg/72BU1sPNPo1lrqAwNk92rL4T xPxin6R8pu1Y3HX9hK667pMCARpz/aMnoZFIJi06vFaq12qh9kGDa+Nm5JOEBS97 WXrhQl4wTlbIBP5+W/NLovl/NhCVw1gC8xh0qNdi0C5PuTYEcc4f/4/LF+URmvel FCS+KleL2KydEK4hRu3WgIZmZDeQ1n58XyPpuvENT179tFj945VpSELNmKE7AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU+KSMIdKKpkHZuQjHZli6nz+cdPMwHwYDVR0j BBgwFoAU2rfiC+pcy4T4JsZNoXV9HfW2/2IwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMzAxMTk0NGQtN2ViMy00ZjYzLWExNTktY2ZmMDJjMDI2 YWJmLzAvREFCN0UyMEJFQTVDQ0I4NEY4MjZDNjREQTE3NTdEMURGNUI2RkY2Mi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJyZmlDLXBjeTRUNEpzWk5vWFY5SGZX Ml8ySS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zMDExOTQ0ZC03 ZWIzLTRmNjMtYTE1OS1jZmYwMmMwMjZhYmYvMC9EQUI3RTIwQkVBNUNDQjg0Rjgy NkM2NERBMTc1N0QxREY1QjZGRjYyLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYf5Qb7QEd5Qm1wJDcA3n NTjzdN4Xmm90nCiw9Y7s3cIhNPtkbwNtyO++fM/rxqK0Xsrtn+pg3vwCUmVXGCq4 7wDKqK0o78FFvlaIPOSIX+ax9ymTtIlwgExciEzjKWu2POVtdRRYg2l3OT2A0lRw Qot43dz2gr+a5PEiYnTkHbog69D2io5OZQamJEQOkJHYinyFKTmioVAptjyYKKVT VVW51W6X4azIRQ/oym4sWy7PwXg1qsqyehGnWMEQ4gxwXuqirzbygaFO1DHv7hlf +HHNloqPOqd4GwhImzcll6QTUDLPUvzeCX6rc+K3G1XsUj0z5CWYboTg8qlr8o8x Rg== -----END CERTIFICATE-----Generated at Sun Dec 21 07:40:14 2025 by rpki-client