This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/1/4EC249B7AF3EE69C5BBDF3C7F4CBEE1EAAEC494F.mft File: 4EC249B7AF3EE69C5BBDF3C7F4CBEE1EAAEC494F.mft (raw, json) Hash identifier: Y4nrKgCv9bMOcQTTmzOFb2kEMYu4CSPxgGNrdv7OqAE= Subject key identifier: 24:94:8D:D9:A7:76:5B:57:5E:E5:33:00:7B:FF:B8:D0:AF:0B:FE:14 Authority key identifier: 4E:C2:49:B7:AF:3E:E6:9C:5B:BD:F3:C7:F4:CB:EE:1E:AA:EC:49:4F Certificate issuer: /CN=4ec249b7af3ee69c5bbdf3c7f4cbee1eaaec494f Certificate serial: 6AD379655197115EB3E7245944C8DF72532E104A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TsJJt68-5pxbvfPH9MvuHqrsSU8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/1/4EC249B7AF3EE69C5BBDF3C7F4CBEE1EAAEC494F.mft Manifest number: 0A Signing time: Sat 27 Dec 2025 18:57:56 +0000 Manifest this update: Sat 27 Dec 2025 18:52:56 +0000 Manifest next update: Sun 28 Dec 2025 20:21:56 +0000 Files and hashes: 1: AS216299.asa (hash: oVJRfuuC2/zjjySrwwFLZolSVN/C1Q8awE+NnUf1KTE=) 2: 4EC249B7AF3EE69C5BBDF3C7F4CBEE1EAAEC494F.crl (hash: AxG7WHGWFAwXilwchzia7WnQ5pWnC+7IaiAxN1DTCkM=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/1/4EC249B7AF3EE69C5BBDF3C7F4CBEE1EAAEC494F.crl rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/1/4EC249B7AF3EE69C5BBDF3C7F4CBEE1EAAEC494F.mft rsync://rpki.ripe.net/repository/DEFAULT/TsJJt68-5pxbvfPH9MvuHqrsSU8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 20:21:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:d3:79:65:51:97:11:5e:b3:e7:24:59:44:c8:df:72:53:2e:10:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ec249b7af3ee69c5bbdf3c7f4cbee1eaaec494f Validity Not Before: Dec 27 18:52:56 2025 GMT Not After : Dec 28 20:21:56 2025 GMT Subject: CN=24948DD9A7765B575EE533007BFFB8D0AF0BFE14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:4f:e5:c2:8a:ed:a4:56:25:4e:fa:c8:f7:8f: dd:d3:5e:81:f3:7b:75:65:6d:36:8b:28:30:5d:61: 16:f9:0e:0c:60:46:30:ff:3e:c0:95:1e:84:ba:df: c0:35:93:62:df:a6:12:a3:fa:8f:01:ae:21:64:5a: c1:b5:67:c2:74:f4:e6:25:0f:5a:8b:b3:89:24:41: 84:1d:2e:a8:b0:26:8b:ec:dc:d9:18:7b:11:f3:f3: cf:62:32:f3:65:30:96:8e:cd:6a:3b:61:bc:57:7c: 47:63:70:ad:4c:3f:51:eb:19:c1:bf:6c:e8:0f:f4: 5c:8c:85:fa:fc:55:98:cd:27:2b:ef:d1:f7:c7:5b: 41:f0:fd:4d:3f:19:d1:4a:42:ee:37:85:f0:29:c7: 3f:42:37:31:53:b6:61:be:1e:2b:51:15:6d:8b:53: 33:e1:09:8f:16:2f:91:f8:d4:11:57:d8:55:c0:5e: 5a:10:4b:48:87:f5:da:32:c1:f4:32:67:50:dc:67: 07:1d:55:e3:b7:81:fc:e3:e1:d0:8f:c4:53:c2:5c: 3c:61:9c:c0:31:64:0e:c1:36:e9:33:9c:72:11:c9: 7c:41:db:a3:7b:fa:1b:ff:c8:d9:d8:df:36:b7:4d: fd:ea:c2:6d:a4:2b:99:06:b9:7d:23:89:8d:94:4d: 97:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:94:8D:D9:A7:76:5B:57:5E:E5:33:00:7B:FF:B8:D0:AF:0B:FE:14 X509v3 Authority Key Identifier: keyid:4E:C2:49:B7:AF:3E:E6:9C:5B:BD:F3:C7:F4:CB:EE:1E:AA:EC:49:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/1/4EC249B7AF3EE69C5BBDF3C7F4CBEE1EAAEC494F.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TsJJt68-5pxbvfPH9MvuHqrsSU8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/1/4EC249B7AF3EE69C5BBDF3C7F4CBEE1EAAEC494F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:a6:6f:92:e0:03:4e:aa:9f:c9:ae:6d:5a:ff:47:76:f7:e8: 8a:4b:1c:9a:92:8d:b4:19:8d:8f:70:fc:f6:c8:94:8c:c0:9a: 22:9f:8e:6a:50:ab:c5:3f:01:d5:f3:37:f5:05:e5:d8:7f:12: 9d:3f:6c:90:7b:76:78:89:6c:55:fb:2f:9c:60:b1:83:c9:fb: 28:e8:32:2f:de:c7:9d:72:ae:ec:1e:ac:70:e0:59:69:bf:9f: fc:21:8d:42:e6:d5:99:95:16:07:20:95:75:ff:9d:ea:35:94: 60:2e:5d:97:e1:58:f9:04:5f:82:6a:cf:d5:0b:71:cc:d0:04: 61:e9:dd:66:0c:a6:a3:f0:4e:4e:db:16:29:c5:d5:5c:b7:70: 71:a3:f7:9f:a2:96:d1:b6:0b:ac:6b:3a:48:4a:ac:2d:03:03: 0f:dc:f2:f5:ee:e4:d8:1b:47:7a:f7:08:41:4c:f4:41:a9:5f: a2:28:e1:f8:79:76:43:01:03:ae:5e:e5:9e:8d:00:e6:0f:52: 03:57:7e:ad:4d:ea:41:7a:ee:91:86:e7:82:95:c1:4a:9e:53: 3a:02:e0:cb:a5:cb:79:54:29:68:5b:ff:b5:a6:0f:21:a2:82: dd:55:c1:51:ab:04:5c:df:76:38:c5:c3:0c:86:7e:0c:bb:d6: 18:a7:78:d2 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUatN5ZVGXEV6z5yRZRMjfclMuEEowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGVjMjQ5YjdhZjNlZTY5YzViYmRmM2M3ZjRjYmVlMWVh YWVjNDk0ZjAeFw0yNTEyMjcxODUyNTZaFw0yNTEyMjgyMDIxNTZaMDMxMTAvBgNV BAMTKDI0OTQ4REQ5QTc3NjVCNTc1RUU1MzMwMDdCRkZCOEQwQUYwQkZFMTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBT+XCiu2kViVO+sj3j93TXoHz e3VlbTaLKDBdYRb5DgxgRjD/PsCVHoS638A1k2LfphKj+o8BriFkWsG1Z8J09OYl D1qLs4kkQYQdLqiwJovs3NkYexHz889iMvNlMJaOzWo7YbxXfEdjcK1MP1HrGcG/ bOgP9FyMhfr8VZjNJyvv0ffHW0Hw/U0/GdFKQu43hfApxz9CNzFTtmG+HitRFW2L UzPhCY8WL5H41BFX2FXAXloQS0iH9doywfQyZ1DcZwcdVeO3gfzj4dCPxFPCXDxh nMAxZA7BNukznHIRyXxB26N7+hv/yNnY3za3Tf3qwm2kK5kGuX0jiY2UTZd7AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUJJSN2ad2W1de5TMAe/+40K8L/hQwHwYDVR0j BBgwFoAUTsJJt68+5pxbvfPH9MvuHqrsSU8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTJiODQxNTYtOTU5Ny00NGI0LWJkMjQtNjVkZTJjMzU1 ZWZjLzEvNEVDMjQ5QjdBRjNFRTY5QzVCQkRGM0M3RjRDQkVFMUVBQUVDNDk0Ri5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1RzSkp0NjgtNXB4YnZmUEg5TXZ1SHFy c1NVOC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS81MmI4NDE1Ni05 NTk3LTQ0YjQtYmQyNC02NWRlMmMzNTVlZmMvMS80RUMyNDlCN0FGM0VFNjlDNUJC REYzQzdGNENCRUUxRUFBRUM0OTRGLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW6ZvkuADTqqfya5tWv9H dvfoikscmpKNtBmNj3D89siUjMCaIp+OalCrxT8B1fM39QXl2H8SnT9skHt2eIls VfsvnGCxg8n7KOgyL97HnXKu7B6scOBZab+f/CGNQubVmZUWByCVdf+d6jWUYC5d l+FY+QRfgmrP1QtxzNAEYendZgymo/BOTtsWKcXVXLdwcaP3n6KW0bYLrGs6SEqs LQMDD9zy9e7k2BtHevcIQUz0Qalfoijh+Hl2QwEDrl7lno0A5g9SA1d+rU3qQXru kYbngpXBSp5TOgLgy6XLeVQpaFv/taYPIaKC3VXBUasEXN92OMXDDIZ+DLvWGKd4 0g== -----END CERTIFICATE-----Generated at Sun Dec 28 09:03:31 2025 by rpki-client