This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/553623c4-33bd-438a-a93e-018d65c4e837/0/5EDBD6E79C689C56A84FA46CD7C9FA3151DFE0BB.mft File: 5EDBD6E79C689C56A84FA46CD7C9FA3151DFE0BB.mft (raw, json) Hash identifier: 4tzyyNy6UCsJg0Lc0FD7eSEjpo4rV0j8vtha2zpN3JE= Subject key identifier: 00:6F:F1:E5:B9:24:B4:E4:3B:C2:8B:47:7C:B5:09:10:50:3B:B0:A7 Authority key identifier: 5E:DB:D6:E7:9C:68:9C:56:A8:4F:A4:6C:D7:C9:FA:31:51:DF:E0:BB Certificate issuer: /CN=5edbd6e79c689c56a84fa46cd7c9fa3151dfe0bb Certificate serial: 2042E8F3B8794FF469FD4082F45EFE1FF5D731D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XtvW55xonFaoT6Rs18n6MVHf4Ls.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/553623c4-33bd-438a-a93e-018d65c4e837/0/5EDBD6E79C689C56A84FA46CD7C9FA3151DFE0BB.mft Manifest number: 0220 Signing time: Thu 18 Dec 2025 12:14:58 +0000 Manifest this update: Thu 18 Dec 2025 12:09:58 +0000 Manifest next update: Fri 19 Dec 2025 15:28:58 +0000 Files and hashes: 1: 5EDBD6E79C689C56A84FA46CD7C9FA3151DFE0BB.crl (hash: wHbR22y7fBWGYemOKdYEF/Rw3ketzGB4Mp6hngGnt40=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/553623c4-33bd-438a-a93e-018d65c4e837/0/5EDBD6E79C689C56A84FA46CD7C9FA3151DFE0BB.crl rsync://rsync.paas.rpki.ripe.net/repository/553623c4-33bd-438a-a93e-018d65c4e837/0/5EDBD6E79C689C56A84FA46CD7C9FA3151DFE0BB.mft rsync://rpki.ripe.net/repository/DEFAULT/XtvW55xonFaoT6Rs18n6MVHf4Ls.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 15:28:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:42:e8:f3:b8:79:4f:f4:69:fd:40:82:f4:5e:fe:1f:f5:d7:31:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5edbd6e79c689c56a84fa46cd7c9fa3151dfe0bb Validity Not Before: Dec 18 12:09:58 2025 GMT Not After : Dec 19 15:28:58 2025 GMT Subject: CN=006FF1E5B924B4E43BC28B477CB50910503BB0A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:70:e2:44:31:52:89:15:90:1d:7f:dd:44:ea: 06:02:f7:ac:c5:48:7c:a9:85:36:2f:f3:19:e0:0f: dd:1a:41:4e:38:3c:b9:8e:b8:65:56:19:9c:8c:39: 41:d8:29:ac:73:ed:27:54:95:87:00:5a:03:8b:3c: 72:6c:84:43:c3:b4:84:d1:eb:49:b8:dc:a1:d4:b0: c5:71:77:55:b4:32:4b:2c:06:59:c2:b9:ec:47:c3: 31:b4:e6:48:8c:59:6a:7e:21:79:f2:3d:22:92:f9: 86:50:81:9e:84:59:2e:f8:3b:8d:83:63:3b:4c:9e: 8a:05:38:4e:a7:38:d5:98:43:ba:e5:c5:a0:03:40: df:29:9a:f4:3b:e3:3d:b2:2c:7c:32:28:e7:eb:f6: 3d:8d:b6:f0:79:dd:1f:29:30:b4:06:ed:6d:cd:d8: 46:46:75:07:55:98:27:38:02:2c:aa:75:68:5b:b9: 5d:7d:de:4e:d4:d8:7c:33:e8:b6:bd:45:0f:2b:68: d1:0c:e6:d2:9d:e5:1e:5d:25:ab:97:6e:2d:3c:39: ab:c1:0c:11:3f:36:5b:e0:80:d0:64:7f:ab:e2:e3: d2:44:59:73:91:9f:dd:99:48:e2:77:2f:23:bd:75: 1f:b2:42:31:68:62:06:87:ca:47:cb:06:46:29:5b: d9:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:6F:F1:E5:B9:24:B4:E4:3B:C2:8B:47:7C:B5:09:10:50:3B:B0:A7 X509v3 Authority Key Identifier: keyid:5E:DB:D6:E7:9C:68:9C:56:A8:4F:A4:6C:D7:C9:FA:31:51:DF:E0:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/553623c4-33bd-438a-a93e-018d65c4e837/0/5EDBD6E79C689C56A84FA46CD7C9FA3151DFE0BB.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XtvW55xonFaoT6Rs18n6MVHf4Ls.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/553623c4-33bd-438a-a93e-018d65c4e837/0/5EDBD6E79C689C56A84FA46CD7C9FA3151DFE0BB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:d4:92:84:ca:63:78:d9:7e:47:cb:29:07:42:6b:98:63:84: fe:f5:aa:6e:36:46:21:9c:cc:fd:c9:76:00:ac:c8:8b:d0:69: 98:37:65:20:76:e1:89:21:7c:a1:28:7f:f7:53:67:06:06:ca: 2a:01:d5:8e:31:20:7e:6f:b9:f0:0b:80:e2:fa:8d:72:d5:fa: 28:1d:1b:7e:cd:57:61:d5:f5:58:ba:c3:57:f1:74:e2:52:0f: 22:2a:ad:e8:91:b6:3e:c5:30:a5:cc:6b:bf:6f:80:20:c7:0d: 29:91:41:3a:ed:b4:fb:6c:71:29:5f:9c:4d:0c:5a:27:c6:bf: 4f:e3:1b:50:e9:8c:20:49:58:bb:ae:07:d4:5a:61:90:3b:14: 9c:30:63:f8:d3:72:bc:59:35:79:3d:b9:1a:a6:5e:2b:53:d8: b4:9b:a6:37:d2:cb:9a:ad:f7:eb:ac:91:30:ff:da:27:88:b8: 3a:17:ef:35:77:ab:7f:51:0b:56:c8:18:18:f4:e9:70:ad:e6: 5b:f4:83:df:93:cc:46:5b:b9:56:a4:25:32:54:e2:b7:88:71: 5b:88:44:fc:1a:bc:1b:d2:4e:68:2f:73:fb:dd:3b:d7:a3:97: 8a:d2:6a:10:54:90:ee:bc:bc:fd:e3:94:ff:97:c5:72:10:b1: 4f:c6:8c:bd -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUIELo87h5T/Rp/UCC9F7+H/XXMdUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNWVkYmQ2ZTc5YzY4OWM1NmE4NGZhNDZjZDdjOWZhMzE1 MWRmZTBiYjAeFw0yNTEyMTgxMjA5NThaFw0yNTEyMTkxNTI4NThaMDMxMTAvBgNV BAMTKDAwNkZGMUU1QjkyNEI0RTQzQkMyOEI0NzdDQjUwOTEwNTAzQkIwQTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzcOJEMVKJFZAdf91E6gYC96zF SHyphTYv8xngD90aQU44PLmOuGVWGZyMOUHYKaxz7SdUlYcAWgOLPHJshEPDtITR 60m43KHUsMVxd1W0MkssBlnCuexHwzG05kiMWWp+IXnyPSKS+YZQgZ6EWS74O42D YztMnooFOE6nONWYQ7rlxaADQN8pmvQ74z2yLHwyKOfr9j2NtvB53R8pMLQG7W3N 2EZGdQdVmCc4AiyqdWhbuV193k7U2Hwz6La9RQ8raNEM5tKd5R5dJauXbi08OavB DBE/NlvggNBkf6vi49JEWXORn92ZSOJ3LyO9dR+yQjFoYgaHykfLBkYpW9ljAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUAG/x5bkktOQ7wotHfLUJEFA7sKcwHwYDVR0j BBgwFoAUXtvW55xonFaoT6Rs18n6MVHf4LswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTUzNjIzYzQtMzNiZC00MzhhLWE5M2UtMDE4ZDY1YzRl ODM3LzAvNUVEQkQ2RTc5QzY4OUM1NkE4NEZBNDZDRDdDOUZBMzE1MURGRTBCQi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1h0dlc1NXhvbkZhb1Q2UnMxOG42TVZI ZjRMcy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS81NTM2MjNjNC0z M2JkLTQzOGEtYTkzZS0wMThkNjVjNGU4MzcvMC81RURCRDZFNzlDNjg5QzU2QTg0 RkE0NkNEN0M5RkEzMTUxREZFMEJCLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANNSShMpjeNl+R8spB0Jr mGOE/vWqbjZGIZzM/cl2AKzIi9BpmDdlIHbhiSF8oSh/91NnBgbKKgHVjjEgfm+5 8AuA4vqNctX6KB0bfs1XYdX1WLrDV/F04lIPIiqt6JG2PsUwpcxrv2+AIMcNKZFB Ou20+2xxKV+cTQxaJ8a/T+MbUOmMIElYu64H1FphkDsUnDBj+NNyvFk1eT25GqZe K1PYtJumN9LLmq3366yRMP/aJ4i4OhfvNXerf1ELVsgYGPTpcK3mW/SD35PMRlu5 VqQlMlTit4hxW4hE/Bq8G9JOaC9z+90716OXitJqEFSQ7ry8/eOU/5fFchCxT8aM vQ== -----END CERTIFICATE-----Generated at Fri Dec 19 00:49:57 2025 by rpki-client