This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/0/193B972646653C886D4001CDAD73EC4E473DA173.mft File: 193B972646653C886D4001CDAD73EC4E473DA173.mft (raw, json) Hash identifier: 1j3/yDK+kqsUkHBO7eO9G81wSidFkWFNaE926E5OIE8= Subject key identifier: FA:27:2F:F6:61:15:EA:4E:66:28:40:DF:9B:82:1C:DA:62:1F:4A:58 Authority key identifier: 19:3B:97:26:46:65:3C:88:6D:40:01:CD:AD:73:EC:4E:47:3D:A1:73 Certificate issuer: /CN=193b972646653c886d4001cdad73ec4e473da173 Certificate serial: 2134A30E32B0CAD69EAAD5376132226D7F5A2BC6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GTuXJkZlPIhtQAHNrXPsTkc9oXM.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/0/193B972646653C886D4001CDAD73EC4E473DA173.mft Manifest number: 02A0 Signing time: Sat 20 Dec 2025 06:05:33 +0000 Manifest this update: Sat 20 Dec 2025 06:00:33 +0000 Manifest next update: Sun 21 Dec 2025 09:57:33 +0000 Files and hashes: 1: 193B972646653C886D4001CDAD73EC4E473DA173.crl (hash: 8vpnUFDhgJUUEcCC839z2e1NWPAivWZuyL29MgJOKaw=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/0/193B972646653C886D4001CDAD73EC4E473DA173.crl rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/0/193B972646653C886D4001CDAD73EC4E473DA173.mft rsync://rpki.ripe.net/repository/DEFAULT/GTuXJkZlPIhtQAHNrXPsTkc9oXM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:57:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:34:a3:0e:32:b0:ca:d6:9e:aa:d5:37:61:32:22:6d:7f:5a:2b:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=193b972646653c886d4001cdad73ec4e473da173 Validity Not Before: Dec 20 06:00:33 2025 GMT Not After : Dec 21 09:57:33 2025 GMT Subject: CN=FA272FF66115EA4E662840DF9B821CDA621F4A58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:21:66:95:3e:9f:a1:66:ae:37:5e:c8:29:73: 7d:90:8b:ec:1a:54:2c:2a:9e:d1:e5:fa:4c:e5:8c: 0a:46:e2:93:da:84:69:a1:ca:03:58:bf:08:36:d8: fa:6b:1d:75:b1:1d:93:52:c3:98:ac:f2:16:c2:73: 5a:14:0d:c1:29:8d:f4:8b:d3:c9:c6:4e:6a:0c:6b: ad:4b:b8:b3:2e:ce:05:c0:8a:41:51:72:1c:55:fe: 04:ce:da:41:af:a9:e7:2f:05:50:64:74:51:9c:2a: cb:4e:d6:9e:e4:3f:f8:ff:03:21:c7:82:b7:8f:c4: 94:65:d0:22:7c:56:5a:fa:8c:76:e4:43:bf:00:2d: bf:5a:bf:81:6b:86:24:eb:fa:57:54:92:4c:8d:03: 89:ff:90:5a:8d:e9:df:8c:4b:b9:ac:3c:e1:c7:9f: 13:38:15:02:10:47:76:ea:8c:fb:03:0b:d4:97:1e: 70:ac:14:72:8b:51:c7:aa:3f:52:ad:71:e9:49:3e: 92:5f:eb:20:6d:22:ff:51:63:75:25:59:fb:31:74: 07:ff:6a:7f:b9:4d:46:cc:a0:38:b8:51:97:28:4f: 63:9d:b3:f2:c1:7c:d5:cc:88:b1:c5:06:11:37:e8: 66:be:69:ac:b2:12:3f:53:0c:77:18:8a:58:b2:ef: f2:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:27:2F:F6:61:15:EA:4E:66:28:40:DF:9B:82:1C:DA:62:1F:4A:58 X509v3 Authority Key Identifier: keyid:19:3B:97:26:46:65:3C:88:6D:40:01:CD:AD:73:EC:4E:47:3D:A1:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/0/193B972646653C886D4001CDAD73EC4E473DA173.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GTuXJkZlPIhtQAHNrXPsTkc9oXM.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/0/193B972646653C886D4001CDAD73EC4E473DA173.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:b4:8e:bc:c0:7d:cd:d8:c2:28:42:79:20:29:69:e7:45:a7: 89:30:ad:2c:5f:d2:84:f5:83:09:69:bd:61:73:95:be:01:81: 70:bb:a3:57:6f:d0:a8:df:c2:9c:50:7d:48:31:c9:3a:8c:43: 50:1c:2e:88:0c:af:e5:a9:18:a5:7d:4b:ec:e8:b3:51:42:eb: d0:7e:4d:dc:8a:70:91:5d:ca:6f:6e:d1:0c:01:e8:22:2e:0e: 05:2d:11:f9:9b:b6:ab:ba:1c:d9:b0:00:ba:3c:50:8a:74:72: 7d:7d:b9:e5:fd:8b:2c:14:06:69:4f:d5:09:3f:ea:1a:ab:97: 3e:6a:96:7c:a1:01:8e:98:2d:f0:97:5c:ef:b0:0a:33:8e:ad: 95:05:5f:b9:6d:ec:3d:f5:29:20:70:47:8f:48:54:4c:fa:75: ce:2d:40:28:94:44:a7:67:4f:92:28:15:ed:9f:45:60:5d:25: cf:b9:6e:be:f3:e5:ca:76:aa:df:43:c2:d8:a3:62:7d:fd:0b: 2d:f8:5a:e1:7b:6e:01:22:aa:4c:a1:52:b2:63:4b:41:f6:31: 46:6d:9e:b2:1b:ad:28:39:48:39:cd:e3:18:02:45:96:88:5d: 84:12:76:4b:08:6a:04:6d:55:8d:92:4b:54:93:30:35:16:50: ab:4c:bd:45 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUITSjDjKwytaeqtU3YTIibX9aK8YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTkzYjk3MjY0NjY1M2M4ODZkNDAwMWNkYWQ3M2VjNGU0 NzNkYTE3MzAeFw0yNTEyMjAwNjAwMzNaFw0yNTEyMjEwOTU3MzNaMDMxMTAvBgNV BAMTKEZBMjcyRkY2NjExNUVBNEU2NjI4NDBERjlCODIxQ0RBNjIxRjRBNTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhIWaVPp+hZq43Xsgpc32Qi+wa VCwqntHl+kzljApG4pPahGmhygNYvwg22PprHXWxHZNSw5is8hbCc1oUDcEpjfSL 08nGTmoMa61LuLMuzgXAikFRchxV/gTO2kGvqecvBVBkdFGcKstO1p7kP/j/AyHH grePxJRl0CJ8Vlr6jHbkQ78ALb9av4FrhiTr+ldUkkyNA4n/kFqN6d+MS7msPOHH nxM4FQIQR3bqjPsDC9SXHnCsFHKLUceqP1KtcelJPpJf6yBtIv9RY3UlWfsxdAf/ an+5TUbMoDi4UZcoT2Ods/LBfNXMiLHFBhE36Ga+aayyEj9TDHcYiliy7/I/AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU+icv9mEV6k5mKEDfm4Ic2mIfSlgwHwYDVR0j BBgwFoAUGTuXJkZlPIhtQAHNrXPsTkc9oXMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzJjNDA1ZjEtYzMyZC00N2NlLTg5NDMtMDc1MmVkMTNk OGVmLzAvMTkzQjk3MjY0NjY1M0M4ODZENDAwMUNEQUQ3M0VDNEU0NzNEQTE3My5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0dUdVhKa1psUElodFFBSE5yWFBzVGtj OW9YTS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS83MmM0MDVmMS1j MzJkLTQ3Y2UtODk0My0wNzUyZWQxM2Q4ZWYvMC8xOTNCOTcyNjQ2NjUzQzg4NkQ0 MDAxQ0RBRDczRUM0RTQ3M0RBMTczLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMbSOvMB9zdjCKEJ5IClp 50WniTCtLF/ShPWDCWm9YXOVvgGBcLujV2/QqN/CnFB9SDHJOoxDUBwuiAyv5akY pX1L7OizUULr0H5N3IpwkV3Kb27RDAHoIi4OBS0R+Zu2q7oc2bAAujxQinRyfX25 5f2LLBQGaU/VCT/qGquXPmqWfKEBjpgt8Jdc77AKM46tlQVfuW3sPfUpIHBHj0hU TPp1zi1AKJREp2dPkigV7Z9FYF0lz7luvvPlynaq30PC2KNiff0LLfha4XtuASKq TKFSsmNLQfYxRm2eshutKDlIOc3jGAJFlohdhBJ2SwhqBG1VjZJLVJMwNRZQq0y9 RQ== -----END CERTIFICATE-----Generated at Sat Dec 20 23:55:25 2025 by rpki-client