This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513.mft File: 2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513.mft (raw, json) Hash identifier: rwdYTLOQ6e6XF4a5aTkUFNNRLmKVombECmvNqSzh16k= Subject key identifier: 6E:E6:AD:B9:5B:96:6C:A8:0C:5B:E4:F5:AE:08:A4:AC:E0:1A:A0:79 Authority key identifier: 2D:6D:8B:17:B6:3C:09:8C:A2:2D:8B:13:EA:1E:8D:DC:43:AA:F5:13 Certificate issuer: /CN=2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513 Certificate serial: 4C227C072B1699C7B7D9D664F7C59FC8DBA4802A Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513.mft Manifest number: 40 Signing time: Sat 20 Dec 2025 13:17:21 +0000 Manifest this update: Sat 20 Dec 2025 13:12:21 +0000 Manifest next update: Sun 21 Dec 2025 16:28:21 +0000 Files and hashes: 1: 2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513.crl (hash: jsCvABvG3esUb4FbYxQNwth61OtI4zM0+VEBACkPnn8=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513.crl rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513.mft rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513.cer rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 16:28:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:22:7c:07:2b:16:99:c7:b7:d9:d6:64:f7:c5:9f:c8:db:a4:80:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513 Validity Not Before: Dec 20 13:12:21 2025 GMT Not After : Dec 21 16:28:21 2025 GMT Subject: CN=6EE6ADB95B966CA80C5BE4F5AE08A4ACE01AA079 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d1:2b:0c:c7:62:da:2b:ed:4d:a5:cc:fa:b9: 68:43:77:f7:26:5d:ae:e4:5e:ba:5c:bd:32:b7:df: 90:5c:09:ad:2a:6b:65:4c:df:bb:f2:01:de:3b:69: f6:be:df:da:be:9e:c0:d8:ca:0b:53:a1:70:c2:a6: e8:db:03:3c:01:6e:5a:5b:92:30:2c:9e:e1:86:c8: 5f:de:3f:76:7f:d1:70:22:7e:4e:8b:45:33:47:dc: 09:88:a1:09:dc:7d:86:0c:cb:dc:18:94:5a:63:cc: 55:0b:9b:8e:cf:d2:73:c2:15:fd:a3:d9:69:30:18: 02:52:fa:57:a7:5d:dc:f9:70:59:53:94:32:14:c4: 2d:dc:de:7b:8f:ac:eb:8d:10:33:81:ad:70:7b:b3: 71:ca:0c:b8:73:f8:ec:6b:8d:93:8f:9b:c2:7c:d8: 8a:e4:51:74:76:94:57:7d:96:79:cf:28:d3:f1:2b: a0:39:8a:cc:19:c8:31:2c:05:24:44:ab:84:ac:49: 9f:5b:15:f1:d4:55:1c:52:f5:04:fa:c8:2a:ef:74: dd:83:db:59:6d:86:a2:be:89:10:43:22:8a:f7:72: 06:a4:14:58:e6:c7:38:2c:64:8c:a3:95:28:9f:bf: 52:a3:47:7e:99:12:e4:be:c0:db:50:65:ea:bb:8e: 21:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:E6:AD:B9:5B:96:6C:A8:0C:5B:E4:F5:AE:08:A4:AC:E0:1A:A0:79 X509v3 Authority Key Identifier: keyid:2D:6D:8B:17:B6:3C:09:8C:A2:2D:8B:13:EA:1E:8D:DC:43:AA:F5:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:7e:bf:bf:86:a8:c6:c7:d2:aa:64:a8:dd:29:80:8b:46:2d: d5:e1:31:5e:55:c3:f6:8a:46:8a:93:5e:53:57:44:da:cd:72: b7:97:bf:71:cd:bc:4c:c9:09:a8:cd:fa:da:cc:de:ad:9a:30: 6e:54:ad:4c:a9:c4:3e:26:86:38:92:eb:f8:f0:88:9a:df:55: 09:97:63:db:c1:d5:9b:92:8b:73:f3:6e:96:0b:6b:80:43:96: ee:3e:d4:cf:71:e5:f4:49:89:b0:5a:27:4e:d9:2f:a7:25:7d: 21:6e:d5:7b:0d:8c:cf:9e:2b:dc:b9:c5:b3:d5:c3:54:87:4b: ac:d1:6f:fd:ed:f0:0f:cb:46:dc:c7:f5:b3:69:98:8d:49:7b: 29:e6:b6:c0:0a:68:93:a7:97:a6:cc:72:e5:dc:d2:28:cd:50: bf:f7:e5:7e:6a:97:9d:5f:fc:0c:41:21:41:52:63:4a:ce:76: 66:92:7b:a9:a6:59:91:b8:d7:f5:cf:9b:2c:76:2f:fd:b4:94: 60:19:9e:9c:53:31:1b:a3:28:e8:ec:39:db:59:29:c8:47:ca: 24:ad:aa:69:82:58:83:bd:a5:e1:8b:92:77:0b:78:96:84:5e: b3:c4:c6:b1:39:95:e8:da:0e:79:08:d4:a9:58:c7:da:00:42: c7:0f:05:f8 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUTCJ8BysWmce32dZk98WfyNukgCowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQ2RDhCMTdCNjNDMDk4Q0EyMkQ4QjEzRUExRThEREM0 M0FBRjUxMzAeFw0yNTEyMjAxMzEyMjFaFw0yNTEyMjExNjI4MjFaMDMxMTAvBgNV BAMTKDZFRTZBREI5NUI5NjZDQTgwQzVCRTRGNUFFMDhBNEFDRTAxQUEwNzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw0SsMx2LaK+1Npcz6uWhDd/cm Xa7kXrpcvTK335BcCa0qa2VM37vyAd47afa+39q+nsDYygtToXDCpujbAzwBblpb kjAsnuGGyF/eP3Z/0XAifk6LRTNH3AmIoQncfYYMy9wYlFpjzFULm47P0nPCFf2j 2WkwGAJS+lenXdz5cFlTlDIUxC3c3nuPrOuNEDOBrXB7s3HKDLhz+OxrjZOPm8J8 2IrkUXR2lFd9lnnPKNPxK6A5iswZyDEsBSREq4SsSZ9bFfHUVRxS9QT6yCrvdN2D 21lthqK+iRBDIor3cgakFFjmxzgsZIyjlSifv1KjR36ZEuS+wNtQZeq7jiFZAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUbuatuVuWbKgMW+T1rgikrOAaoHkwHwYDVR0j BBgwFoAULW2LF7Y8CYyiLYsT6h6N3EOq9RMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjhhYmFiYmItZjA0OC00ZGUxLTkyMDYtOGQ0MGYwNzE4 MDhiLzYvMkQ2RDhCMTdCNjNDMDk4Q0EyMkQ4QjEzRUExRThEREM0M0FBRjUxMy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yYWY3M2E5Yy0yMDU4LTQz YmItOWFjNi01YWI0MmRmYmY0MDkvNC8yRDZEOEIxN0I2M0MwOThDQTIyRDhCMTNF QTFFOEREQzQzQUFGNTEzLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzY4YWJhYmJiLWYwNDgtNGRlMS05MjA2LThkNDBmMDcxODA4Yi82LzJENkQ4QjE3 QjYzQzA5OENBMjJEOEIxM0VBMUU4RERDNDNBQUY1MTMubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAjfr+/ hqjGx9KqZKjdKYCLRi3V4TFeVcP2ikaKk15TV0TazXK3l79xzbxMyQmozfrazN6t mjBuVK1MqcQ+JoY4kuv48Iia31UJl2PbwdWbkotz826WC2uAQ5buPtTPceX0SYmw WidO2S+nJX0hbtV7DYzPnivcucWz1cNUh0us0W/97fAPy0bcx/WzaZiNSXsp5rbA CmiTp5emzHLl3NIozVC/9+V+apedX/wMQSFBUmNKznZmknupplmRuNf1z5ssdi/9 tJRgGZ6cUzEboyjo7DnbWSnIR8okrappgliDvaXhi5J3C3iWhF6zxMaxOZXo2g55 CNSpWMfaAELHDwX4 -----END CERTIFICATE-----Generated at Sun Dec 21 03:20:34 2025 by rpki-client