This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6cfa4a2c-e145-414d-a62f-09a3f9b575fd/0/EDB9F3E6D8E4B57C49301AA621EF1F90389E057A.mft File: EDB9F3E6D8E4B57C49301AA621EF1F90389E057A.mft (raw, json) Hash identifier: 9KHYsYyj64ztdtcIo2uu+lihnCnRtB3jZzAIzOOMszY= Subject key identifier: 91:FD:90:C0:24:36:02:FD:BE:53:0A:B9:25:52:11:02:64:44:55:D4 Authority key identifier: ED:B9:F3:E6:D8:E4:B5:7C:49:30:1A:A6:21:EF:1F:90:38:9E:05:7A Certificate issuer: /CN=edb9f3e6d8e4b57c49301aa621ef1f90389e057a Certificate serial: 1FC538D70EF0716D37D029BEAFA751DD5375B2E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7bnz5tjktXxJMBqmIe8fkDieBXo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6cfa4a2c-e145-414d-a62f-09a3f9b575fd/0/EDB9F3E6D8E4B57C49301AA621EF1F90389E057A.mft Manifest number: 0453 Signing time: Wed 17 Dec 2025 21:07:31 +0000 Manifest this update: Wed 17 Dec 2025 21:02:31 +0000 Manifest next update: Thu 18 Dec 2025 22:23:31 +0000 Files and hashes: 1: EDB9F3E6D8E4B57C49301AA621EF1F90389E057A.crl (hash: LnvCIYoYQ8UmFU/s8F4eVo3GMUiI22fqNiW79t0FD2U=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6cfa4a2c-e145-414d-a62f-09a3f9b575fd/0/EDB9F3E6D8E4B57C49301AA621EF1F90389E057A.crl rsync://rsync.paas.rpki.ripe.net/repository/6cfa4a2c-e145-414d-a62f-09a3f9b575fd/0/EDB9F3E6D8E4B57C49301AA621EF1F90389E057A.mft rsync://rpki.ripe.net/repository/DEFAULT/7bnz5tjktXxJMBqmIe8fkDieBXo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 22:23:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:c5:38:d7:0e:f0:71:6d:37:d0:29:be:af:a7:51:dd:53:75:b2:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=edb9f3e6d8e4b57c49301aa621ef1f90389e057a Validity Not Before: Dec 17 21:02:31 2025 GMT Not After : Dec 18 22:23:31 2025 GMT Subject: CN=91FD90C0243602FDBE530AB925521102644455D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:f9:45:e4:cc:10:b5:57:8f:a3:01:5f:f1:38: 12:02:f1:dc:05:76:6a:43:bd:e3:9a:75:58:72:da: b0:32:29:ba:f2:c1:5b:1d:c2:38:01:cd:a3:72:38: bc:68:80:7a:93:ec:77:06:09:96:53:18:21:3c:56: 80:d4:1a:2d:19:d6:9d:48:ca:e5:58:07:56:fc:26: 98:18:7b:0b:17:67:0b:7c:db:bf:3c:bf:b9:83:e9: ca:da:6a:1f:8d:58:61:a6:a4:b0:59:54:36:31:e5: b9:65:f1:41:47:1e:07:69:ae:e9:96:eb:02:86:e4: db:16:c7:9d:0c:ff:10:35:fa:a6:9b:62:e5:da:23: 48:c9:51:2b:dc:d6:1f:68:d8:ab:69:83:79:c6:f0: a1:fe:ec:0d:9f:ec:81:26:02:9e:92:73:bb:a0:5c: 24:48:e7:88:6b:ac:00:f8:95:37:07:c5:da:4a:43: ed:0a:de:fd:3f:a4:dc:69:94:61:01:33:32:0b:70: cf:1d:9a:b9:30:01:8a:96:00:53:9d:14:a6:0f:5b: 1e:fd:7f:1a:b7:be:06:39:07:ae:93:54:f9:fb:fb: ae:f9:94:c5:32:bf:9e:ea:58:a0:ec:d4:e4:31:10: c4:45:0e:2a:6c:6d:95:62:d8:50:08:2e:d4:89:54: 5f:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:FD:90:C0:24:36:02:FD:BE:53:0A:B9:25:52:11:02:64:44:55:D4 X509v3 Authority Key Identifier: keyid:ED:B9:F3:E6:D8:E4:B5:7C:49:30:1A:A6:21:EF:1F:90:38:9E:05:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/6cfa4a2c-e145-414d-a62f-09a3f9b575fd/0/EDB9F3E6D8E4B57C49301AA621EF1F90389E057A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7bnz5tjktXxJMBqmIe8fkDieBXo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6cfa4a2c-e145-414d-a62f-09a3f9b575fd/0/EDB9F3E6D8E4B57C49301AA621EF1F90389E057A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:e8:31:e1:ec:8c:2d:5e:bc:f0:99:a5:b8:99:3f:a4:67:bf: f5:d2:f6:49:0c:cd:3f:ea:0a:38:3a:f6:0c:6a:b9:1e:60:d6: 38:15:a0:bf:eb:37:96:2a:d3:06:be:eb:55:9a:e9:49:b9:b9: 93:3e:d5:80:aa:ae:97:48:81:27:9a:50:1e:88:bc:4c:21:4e: be:b4:ba:54:e7:8a:ab:e2:ca:6b:7e:08:7e:04:6a:75:5e:97: b0:b8:c3:b3:92:23:17:fa:2c:72:0e:d1:d3:f8:b3:d0:92:a5: cf:60:42:76:bf:ed:54:3e:e2:dd:89:7c:cf:f5:70:07:ab:af: 62:f4:c7:94:ad:f7:34:fb:72:6b:c2:6c:60:6f:b6:13:88:89: 03:ea:e7:b5:77:57:b8:5c:3d:27:77:ed:83:38:79:6e:38:81: 57:49:a4:46:58:28:2a:88:ef:e2:3d:49:71:d1:fb:58:aa:38: 07:b0:ca:af:af:d7:87:14:35:60:c9:56:7f:46:b7:8c:90:dc: 79:df:4a:07:19:8e:86:86:2d:b3:1c:73:dc:0c:ae:84:95:41: 92:9b:3f:2e:17:14:d9:43:8f:62:7c:fd:e8:fb:5f:51:48:95: a5:7f:90:37:76:01:7c:f2:12:d9:76:b5:a9:df:e2:d8:60:30: 81:9f:72:fb -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUH8U41w7wcW030Cm+r6dR3VN1suAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZWRiOWYzZTZkOGU0YjU3YzQ5MzAxYWE2MjFlZjFmOTAz ODllMDU3YTAeFw0yNTEyMTcyMTAyMzFaFw0yNTEyMTgyMjIzMzFaMDMxMTAvBgNV BAMTKDkxRkQ5MEMwMjQzNjAyRkRCRTUzMEFCOTI1NTIxMTAyNjQ0NDU1RDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCh+UXkzBC1V4+jAV/xOBIC8dwF dmpDveOadVhy2rAyKbrywVsdwjgBzaNyOLxogHqT7HcGCZZTGCE8VoDUGi0Z1p1I yuVYB1b8JpgYewsXZwt82788v7mD6craah+NWGGmpLBZVDYx5bll8UFHHgdprumW 6wKG5NsWx50M/xA1+qabYuXaI0jJUSvc1h9o2Ktpg3nG8KH+7A2f7IEmAp6Sc7ug XCRI54hrrAD4lTcHxdpKQ+0K3v0/pNxplGEBMzILcM8dmrkwAYqWAFOdFKYPWx79 fxq3vgY5B66TVPn7+675lMUyv57qWKDs1OQxEMRFDipsbZVi2FAILtSJVF+TAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUkf2QwCQ2Av2+Uwq5JVIRAmREVdQwHwYDVR0j BBgwFoAU7bnz5tjktXxJMBqmIe8fkDieBXowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNmNmYTRhMmMtZTE0NS00MTRkLWE2MmYtMDlhM2Y5YjU3 NWZkLzAvRURCOUYzRTZEOEU0QjU3QzQ5MzAxQUE2MjFFRjFGOTAzODlFMDU3QS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdibno1dGprdFh4Sk1CcW1JZThma0Rp ZUJYby5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82Y2ZhNGEyYy1l MTQ1LTQxNGQtYTYyZi0wOWEzZjliNTc1ZmQvMC9FREI5RjNFNkQ4RTRCNTdDNDkz MDFBQTYyMUVGMUY5MDM4OUUwNTdBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANugx4eyMLV688JmluJk/ pGe/9dL2SQzNP+oKODr2DGq5HmDWOBWgv+s3lirTBr7rVZrpSbm5kz7VgKqul0iB J5pQHoi8TCFOvrS6VOeKq+LKa34IfgRqdV6XsLjDs5IjF/oscg7R0/iz0JKlz2BC dr/tVD7i3Yl8z/VwB6uvYvTHlK33NPtya8JsYG+2E4iJA+rntXdXuFw9J3ftgzh5 bjiBV0mkRlgoKojv4j1JcdH7WKo4B7DKr6/XhxQ1YMlWf0a3jJDced9KBxmOhoYt sxxz3AyuhJVBkps/LhcU2UOPYnz96PtfUUiVpX+QN3YBfPIS2Xa1qd/i2GAwgZ9y +w== -----END CERTIFICATE-----Generated at Thu Dec 18 12:43:24 2025 by rpki-client