This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/553623c4-33bd-438a-a93e-018d65c4e837/0/5EDBD6E79C689C56A84FA46CD7C9FA3151DFE0BB.mft File: 5EDBD6E79C689C56A84FA46CD7C9FA3151DFE0BB.mft (raw, json) Hash identifier: 14JeU2PSrlCWLfs197+KhWqfGkXBrJ0Anfwj8TG+2UE= Subject key identifier: 96:E2:9D:2C:42:66:72:A9:25:AA:E1:3B:DA:9E:DD:04:F8:77:9B:1B Authority key identifier: 5E:DB:D6:E7:9C:68:9C:56:A8:4F:A4:6C:D7:C9:FA:31:51:DF:E0:BB Certificate issuer: /CN=5edbd6e79c689c56a84fa46cd7c9fa3151dfe0bb Certificate serial: 4553239B5344877ADF11030CA5D836FAD96C57DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XtvW55xonFaoT6Rs18n6MVHf4Ls.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/553623c4-33bd-438a-a93e-018d65c4e837/0/5EDBD6E79C689C56A84FA46CD7C9FA3151DFE0BB.mft Manifest number: 0226 Signing time: Mon 22 Dec 2025 22:10:05 +0000 Manifest this update: Mon 22 Dec 2025 22:05:05 +0000 Manifest next update: Tue 23 Dec 2025 23:53:05 +0000 Files and hashes: 1: 5EDBD6E79C689C56A84FA46CD7C9FA3151DFE0BB.crl (hash: yQH+xNlTXV4QxpxDYufHvQ77DGJhE5zL98RoL7JwlQs=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/553623c4-33bd-438a-a93e-018d65c4e837/0/5EDBD6E79C689C56A84FA46CD7C9FA3151DFE0BB.crl rsync://rsync.paas.rpki.ripe.net/repository/553623c4-33bd-438a-a93e-018d65c4e837/0/5EDBD6E79C689C56A84FA46CD7C9FA3151DFE0BB.mft rsync://rpki.ripe.net/repository/DEFAULT/XtvW55xonFaoT6Rs18n6MVHf4Ls.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 23:53:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:53:23:9b:53:44:87:7a:df:11:03:0c:a5:d8:36:fa:d9:6c:57:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5edbd6e79c689c56a84fa46cd7c9fa3151dfe0bb Validity Not Before: Dec 22 22:05:05 2025 GMT Not After : Dec 23 23:53:05 2025 GMT Subject: CN=96E29D2C426672A925AAE13BDA9EDD04F8779B1B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:6e:ee:3b:74:53:76:8a:2e:80:68:43:9d:06: 18:89:85:42:63:f4:27:85:f9:68:66:1c:27:fc:92: 58:a9:23:7e:59:15:46:5d:15:8c:5e:d5:6b:02:e3: ab:57:04:8a:95:c3:62:ac:e3:65:e8:00:dd:e1:76: 37:62:42:c1:cf:c8:55:9c:dc:6a:0f:86:3b:3e:d1: 78:cc:53:59:d7:a1:31:97:c8:48:62:81:29:3e:0d: 32:76:f0:23:e0:c3:88:90:f7:63:2b:49:26:b3:59: c7:11:42:a9:60:b7:26:f9:20:db:6d:55:fa:43:09: 32:e9:0a:d8:71:64:94:c6:93:76:cb:9a:47:b2:b8: ec:f1:46:30:29:27:c2:ab:24:44:5f:44:59:28:56: 48:95:9d:ce:d7:59:e5:86:fa:23:77:7d:bc:c5:5d: 67:84:dc:70:2e:89:0f:6c:49:c5:3d:84:ba:4b:3c: 0c:ea:75:13:e8:a8:4c:21:de:2b:db:d8:43:0e:a7: 34:07:1f:b7:74:ed:c1:6f:64:c5:2b:e4:bb:6e:b8: 9d:b9:c2:8e:6b:ca:0b:69:8d:0a:ed:da:de:ba:39: f2:49:0b:32:5b:85:b6:e0:b5:f7:7b:73:50:c7:1e: 03:d1:dd:60:56:e2:5d:00:1a:ef:73:73:93:47:61: 3a:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:E2:9D:2C:42:66:72:A9:25:AA:E1:3B:DA:9E:DD:04:F8:77:9B:1B X509v3 Authority Key Identifier: keyid:5E:DB:D6:E7:9C:68:9C:56:A8:4F:A4:6C:D7:C9:FA:31:51:DF:E0:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/553623c4-33bd-438a-a93e-018d65c4e837/0/5EDBD6E79C689C56A84FA46CD7C9FA3151DFE0BB.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XtvW55xonFaoT6Rs18n6MVHf4Ls.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/553623c4-33bd-438a-a93e-018d65c4e837/0/5EDBD6E79C689C56A84FA46CD7C9FA3151DFE0BB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:a5:70:08:c5:32:4d:cf:65:0f:bb:b9:53:17:32:b5:85:0d: 8a:3c:af:9d:fa:53:8d:ff:30:b6:d5:9c:b5:82:07:5d:16:64: f6:71:84:d8:81:1d:1c:ef:1d:41:68:f1:32:1b:4e:03:8c:aa: 84:8e:ac:02:1c:00:e0:50:e7:01:dd:e3:93:98:89:61:10:a9: 0d:4c:26:4b:5d:ae:27:3c:c2:81:62:40:e8:41:ac:d5:07:bd: e6:62:ac:2a:3c:f8:a1:18:39:36:a5:40:4e:58:30:e3:00:c8: 20:a8:06:36:46:79:32:5c:cb:6b:b0:d8:78:af:eb:bb:88:d0: 18:2d:7c:aa:45:d0:bc:23:cb:aa:ba:39:4c:38:24:f4:0a:5b: 52:92:42:e5:f2:e8:18:ff:4b:76:08:d5:38:d0:3f:e8:12:c4: ff:e6:37:ea:8c:51:c0:28:6d:f5:53:29:ce:11:9c:3d:9f:c3: 93:25:e0:e0:2c:98:a3:22:0c:fa:ef:c6:d7:db:b4:ae:93:79: d3:0e:94:26:83:72:18:42:42:ad:54:10:dc:7e:ba:04:74:f4: 9f:c7:e1:86:0e:4b:c8:14:4c:c4:c4:7c:a7:a7:58:7d:0f:b4: 82:70:ce:a0:5c:75:e9:4c:5b:7a:d7:f5:e6:d3:d2:64:bb:d3: 4c:b4:50:bf -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIURVMjm1NEh3rfEQMMpdg2+tlsV98wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNWVkYmQ2ZTc5YzY4OWM1NmE4NGZhNDZjZDdjOWZhMzE1 MWRmZTBiYjAeFw0yNTEyMjIyMjA1MDVaFw0yNTEyMjMyMzUzMDVaMDMxMTAvBgNV BAMTKDk2RTI5RDJDNDI2NjcyQTkyNUFBRTEzQkRBOUVERDA0Rjg3NzlCMUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnbu47dFN2ii6AaEOdBhiJhUJj 9CeF+WhmHCf8klipI35ZFUZdFYxe1WsC46tXBIqVw2Ks42XoAN3hdjdiQsHPyFWc 3GoPhjs+0XjMU1nXoTGXyEhigSk+DTJ28CPgw4iQ92MrSSazWccRQqlgtyb5INtt VfpDCTLpCthxZJTGk3bLmkeyuOzxRjApJ8KrJERfRFkoVkiVnc7XWeWG+iN3fbzF XWeE3HAuiQ9sScU9hLpLPAzqdRPoqEwh3ivb2EMOpzQHH7d07cFvZMUr5LtuuJ25 wo5rygtpjQrt2t66OfJJCzJbhbbgtfd7c1DHHgPR3WBW4l0AGu9zc5NHYTqBAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUluKdLEJmcqklquE72p7dBPh3mxswHwYDVR0j BBgwFoAUXtvW55xonFaoT6Rs18n6MVHf4LswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTUzNjIzYzQtMzNiZC00MzhhLWE5M2UtMDE4ZDY1YzRl ODM3LzAvNUVEQkQ2RTc5QzY4OUM1NkE4NEZBNDZDRDdDOUZBMzE1MURGRTBCQi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1h0dlc1NXhvbkZhb1Q2UnMxOG42TVZI ZjRMcy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS81NTM2MjNjNC0z M2JkLTQzOGEtYTkzZS0wMThkNjVjNGU4MzcvMC81RURCRDZFNzlDNjg5QzU2QTg0 RkE0NkNEN0M5RkEzMTUxREZFMEJCLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHqVwCMUyTc9lD7u5Uxcy tYUNijyvnfpTjf8wttWctYIHXRZk9nGE2IEdHO8dQWjxMhtOA4yqhI6sAhwA4FDn Ad3jk5iJYRCpDUwmS12uJzzCgWJA6EGs1Qe95mKsKjz4oRg5NqVATlgw4wDIIKgG NkZ5MlzLa7DYeK/ru4jQGC18qkXQvCPLqro5TDgk9ApbUpJC5fLoGP9LdgjVONA/ 6BLE/+Y36oxRwCht9VMpzhGcPZ/DkyXg4CyYoyIM+u/G19u0rpN50w6UJoNyGEJC rVQQ3H66BHT0n8fhhg5LyBRMxMR8p6dYfQ+0gnDOoFx16Uxbetf15tPSZLvTTLRQ vw== -----END CERTIFICATE-----Generated at Tue Dec 23 09:14:26 2025 by rpki-client