This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/188078EA8ABD561E7C13EFCE9131BC671DE29F96.mft File: 188078EA8ABD561E7C13EFCE9131BC671DE29F96.mft (raw, json) Hash identifier: YsFCFP1dWW77D7H2hdiGZv/Rk3l1hyGM2MAyrDyBb/c= Subject key identifier: 99:C3:AF:7B:8D:55:44:0A:5E:C4:F8:75:AA:6F:4C:1B:02:C8:63:2D Authority key identifier: 18:80:78:EA:8A:BD:56:1E:7C:13:EF:CE:91:31:BC:67:1D:E2:9F:96 Certificate issuer: /CN=188078EA8ABD561E7C13EFCE9131BC671DE29F96 Certificate serial: 4E2EC1CD02FFAD12341622A5466F23BC285EB217 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/188078EA8ABD561E7C13EFCE9131BC671DE29F96.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/188078EA8ABD561E7C13EFCE9131BC671DE29F96.mft Manifest number: 40 Signing time: Sat 20 Dec 2025 14:33:40 +0000 Manifest this update: Sat 20 Dec 2025 14:28:40 +0000 Manifest next update: Sun 21 Dec 2025 18:01:40 +0000 Files and hashes: 1: 188078EA8ABD561E7C13EFCE9131BC671DE29F96.crl (hash: ihUmlHY5Ii+bPFWjtJ/fyWvJqvr0f6jCJ52dUjwyBJs=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/188078EA8ABD561E7C13EFCE9131BC671DE29F96.crl rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/188078EA8ABD561E7C13EFCE9131BC671DE29F96.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/188078EA8ABD561E7C13EFCE9131BC671DE29F96.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 18:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:2e:c1:cd:02:ff:ad:12:34:16:22:a5:46:6f:23:bc:28:5e:b2:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=188078EA8ABD561E7C13EFCE9131BC671DE29F96 Validity Not Before: Dec 20 14:28:40 2025 GMT Not After : Dec 21 18:01:40 2025 GMT Subject: CN=99C3AF7B8D55440A5EC4F875AA6F4C1B02C8632D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:f1:76:62:17:85:8c:e5:7a:46:f7:2b:89:c5: 36:a5:5f:5a:13:36:d3:17:68:37:b7:68:d3:5e:43: ac:fc:fa:1f:bf:39:92:11:8c:e3:ad:dd:cd:d6:c8: d0:0e:96:17:78:bf:80:fd:db:be:26:10:77:dc:f3: 1b:a3:35:33:aa:53:64:d6:98:69:7a:c6:51:84:63: e5:c4:2c:f2:f3:76:25:e7:cf:fa:57:fe:2a:13:46: 15:86:a9:3e:31:f9:88:99:36:40:68:a3:2c:aa:76: e6:c0:ab:92:a0:ae:42:66:87:6d:2b:1c:6a:dc:31: a9:b0:c6:c3:b7:88:ec:a4:14:d5:ed:df:a3:b7:a8: d3:02:ee:fc:65:16:44:45:ff:b3:2a:37:96:16:b2: ff:e3:74:ed:84:7f:20:f2:fa:7d:f3:41:09:59:63: 1f:63:e6:77:67:8f:09:75:b5:64:24:e2:73:6f:f5: 77:6b:76:38:95:1e:b2:70:41:e1:b4:7b:72:e4:8d: 34:46:5c:b6:ce:6a:f0:a4:21:a9:d8:a9:6b:56:5b: 2a:fa:c6:a2:eb:5c:38:dc:9e:34:98:47:67:4a:c4: 91:5e:d5:52:90:0f:0e:35:7d:62:2e:20:db:5f:71: 75:c3:fb:f7:78:13:a6:60:06:c0:7c:b9:89:31:72: ca:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:C3:AF:7B:8D:55:44:0A:5E:C4:F8:75:AA:6F:4C:1B:02:C8:63:2D X509v3 Authority Key Identifier: keyid:18:80:78:EA:8A:BD:56:1E:7C:13:EF:CE:91:31:BC:67:1D:E2:9F:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/188078EA8ABD561E7C13EFCE9131BC671DE29F96.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/188078EA8ABD561E7C13EFCE9131BC671DE29F96.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/188078EA8ABD561E7C13EFCE9131BC671DE29F96.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:a1:78:c1:a0:29:bb:07:c7:6a:82:3a:ef:16:11:6c:59:ed: 87:39:00:5d:f3:58:8d:9c:bc:6b:c3:ab:da:ef:1d:49:f1:09: 47:00:0d:72:ac:08:36:9a:ac:92:99:8d:0b:2c:22:f7:d9:68: ae:24:82:84:b9:b0:74:a2:d2:6d:4e:b3:45:c5:14:e3:dd:5b: 19:b7:7b:36:85:5a:3c:32:3e:9c:5a:e6:09:fc:8b:b3:27:19: 57:fc:2c:a4:49:0d:96:65:ac:5c:2f:b4:1f:c7:b0:5c:bf:c9: 5e:55:9b:6f:3c:30:df:4d:eb:9a:01:8c:aa:9f:f2:c8:4f:d5: dd:75:3e:6a:71:00:58:10:4d:57:88:f9:08:0a:df:61:52:d7: ee:54:c0:e6:63:04:6a:5f:9a:23:54:fc:a1:c8:c7:ea:20:45: 46:31:9f:3a:78:2b:39:73:3d:32:3b:80:d3:ba:7d:f4:5f:84: 3d:15:28:52:f8:d2:29:9a:0f:c5:6b:ef:e1:cf:8f:15:4e:62: f1:76:d6:60:b8:9d:9f:56:16:7a:a2:d0:aa:8f:f7:43:0e:f4: c8:d3:1d:18:75:b1:b2:30:d9:95:08:9c:53:d8:34:ee:24:9d: 09:aa:50:9b:4c:3a:7f:62:da:5a:5c:fa:15:6e:53:0e:0b:ca: 44:9d:04:a9 -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUTi7BzQL/rRI0FiKlRm8jvCheshcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTg4MDc4RUE4QUJENTYxRTdDMTNFRkNFOTEzMUJDNjcx REUyOUY5NjAeFw0yNTEyMjAxNDI4NDBaFw0yNTEyMjExODAxNDBaMDMxMTAvBgNV BAMTKDk5QzNBRjdCOEQ1NTQ0MEE1RUM0Rjg3NUFBNkY0QzFCMDJDODYzMkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDS8XZiF4WM5XpG9yuJxTalX1oT NtMXaDe3aNNeQ6z8+h+/OZIRjOOt3c3WyNAOlhd4v4D9274mEHfc8xujNTOqU2TW mGl6xlGEY+XELPLzdiXnz/pX/ioTRhWGqT4x+YiZNkBooyyqdubAq5KgrkJmh20r HGrcMamwxsO3iOykFNXt36O3qNMC7vxlFkRF/7MqN5YWsv/jdO2EfyDy+n3zQQlZ Yx9j5ndnjwl1tWQk4nNv9XdrdjiVHrJwQeG0e3LkjTRGXLbOavCkIanYqWtWWyr6 xqLrXDjcnjSYR2dKxJFe1VKQDw41fWIuINtfcXXD+/d4E6ZgBsB8uYkxcsoDAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUmcOve41VRApexPh1qm9MGwLIYy0wHwYDVR0j BBgwFoAUGIB46oq9Vh58E+/OkTG8Zx3in5YwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjhhYmFiYmItZjA0OC00ZGUxLTkyMDYtOGQ0MGYwNzE4 MDhiLzUvMTg4MDc4RUE4QUJENTYxRTdDMTNFRkNFOTEzMUJDNjcxREUyOUY5Ni5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvMTg4MDc4RUE4QUJENTYxRTdDMTNFRkNFOTEzMUJDNjcxREUy OUY5Ni5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82OGFiYWJiYi1m MDQ4LTRkZTEtOTIwNi04ZDQwZjA3MTgwOGIvNS8xODgwNzhFQThBQkQ1NjFFN0Mx M0VGQ0U5MTMxQkM2NzFERTI5Rjk2Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADaF4waApuwfHaoI67xYR bFnthzkAXfNYjZy8a8Or2u8dSfEJRwANcqwINpqskpmNCywi99loriSChLmwdKLS bU6zRcUU491bGbd7NoVaPDI+nFrmCfyLsycZV/wspEkNlmWsXC+0H8ewXL/JXlWb bzww303rmgGMqp/yyE/V3XU+anEAWBBNV4j5CArfYVLX7lTA5mMEal+aI1T8ocjH 6iBFRjGfOngrOXM9MjuA07p99F+EPRUoUvjSKZoPxWvv4c+PFU5i8XbWYLidn1YW eqLQqo/3Qw70yNMdGHWxsjDZlQicU9g07iSdCapQm0w6f2LaWlz6FW5TDgvKRJ0E qQ== -----END CERTIFICATE-----Generated at Sun Dec 21 06:26:16 2025 by rpki-client