This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/2/ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.mft File: ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.mft (raw, json) Hash identifier: qRRycw3Yr/fto0PRIAGAkraDH/CjlIIzcrihsizyaEU= Subject key identifier: F7:D7:DF:9F:81:98:3C:69:72:9B:24:BC:DE:69:F6:5B:B5:20:EC:1D Authority key identifier: AD:FF:D4:77:85:7D:1E:9B:E9:5B:82:71:7A:42:7F:35:AF:A9:A7:D6 Certificate issuer: /CN=adffd477857d1e9be95b82717a427f35afa9a7d6 Certificate serial: 3FF6CB4BF2C8BE506EB62881A7AE731CE749484B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rf_Ud4V9HpvpW4JxekJ_Na-pp9Y.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/2/ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.mft Manifest number: 0280 Signing time: Sat 20 Dec 2025 08:15:16 +0000 Manifest this update: Sat 20 Dec 2025 08:10:16 +0000 Manifest next update: Mon 22 Dec 2025 09:50:16 +0000 Files and hashes: 1: AS44355.asa (hash: noT3NQk7rtD6jNk1GY90L8a80oYtiLLuAlQV7OyslJk=) 2: ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.crl (hash: 6xDjIX9PSDsv1+oQom+TMwiiK3uapbBcuhrKA4BoZ6c=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/2/ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.crl rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/2/ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.mft rsync://rpki.ripe.net/repository/DEFAULT/rf_Ud4V9HpvpW4JxekJ_Na-pp9Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:f6:cb:4b:f2:c8:be:50:6e:b6:28:81:a7:ae:73:1c:e7:49:48:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=adffd477857d1e9be95b82717a427f35afa9a7d6 Validity Not Before: Dec 20 08:10:16 2025 GMT Not After : Dec 22 09:50:16 2025 GMT Subject: CN=F7D7DF9F81983C69729B24BCDE69F65BB520EC1D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:89:ab:4d:13:28:f2:ac:b1:95:f9:e7:77:25: 65:5a:2e:5d:7b:a6:15:ac:93:12:45:74:c2:c9:9d: 27:45:40:d4:62:ac:2f:ad:c9:b5:1d:65:73:4d:da: 51:04:42:da:87:f8:c0:ea:17:cc:d8:dc:4d:ef:db: 4f:37:b3:a1:8f:e2:41:72:84:61:1d:a5:d1:6e:11: 5e:b1:d4:05:ac:20:7f:7b:1e:5a:f8:41:8c:43:d9: 07:c1:e4:ed:82:b6:c0:cb:f1:f7:ba:4a:af:da:1b: 19:22:cb:3c:cf:8a:3a:10:d5:3f:b1:82:b9:94:98: 13:bd:10:70:9d:67:cf:04:23:7c:f1:7d:54:66:1e: 60:10:41:07:ec:73:ab:80:d7:4b:6c:1a:bb:e5:b6: 19:15:79:37:b2:b7:e1:ba:bf:ac:97:9b:57:63:c4: 43:f3:51:99:38:2f:ac:1b:0d:a4:6f:29:f2:7f:50: f7:92:f7:94:e3:8e:76:51:2e:65:8e:79:1c:84:3f: 92:f2:fd:3f:6f:e6:a3:1f:dc:03:d3:0c:9b:d7:5b: b9:64:1c:e2:f3:40:cb:d5:b8:47:b5:b7:1a:db:01: 27:ad:42:c6:90:d9:b9:8f:21:71:be:3e:68:4e:b2: b1:82:22:cc:31:17:14:0a:3f:5d:66:d0:9c:21:fe: 0e:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:D7:DF:9F:81:98:3C:69:72:9B:24:BC:DE:69:F6:5B:B5:20:EC:1D X509v3 Authority Key Identifier: keyid:AD:FF:D4:77:85:7D:1E:9B:E9:5B:82:71:7A:42:7F:35:AF:A9:A7:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/2/ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rf_Ud4V9HpvpW4JxekJ_Na-pp9Y.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/2/ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:53:75:25:71:28:c2:e9:25:58:53:23:35:6d:be:0f:9d:01: be:aa:12:b4:ee:fc:c9:6b:41:cd:39:d5:16:fe:81:11:5c:45: 18:26:0b:ea:98:8a:ee:1f:5a:d2:c3:27:e4:4a:67:01:4a:df: ba:ff:b9:2d:c2:2b:75:60:5b:d6:95:a8:32:13:7a:a8:51:a1: ec:a2:b9:f5:b0:1a:4f:c0:e0:15:4c:3b:b2:90:cb:c8:e1:1f: b5:45:ef:a1:1e:ac:af:8d:94:5c:a3:66:93:48:a5:0e:33:f3: 6e:a0:9c:70:ea:76:2d:be:06:cf:37:eb:20:6e:a4:93:e2:4c: 50:ce:f7:13:9a:b7:91:b1:62:31:43:e5:71:72:cd:70:b4:5a: a4:7f:d7:14:68:f7:22:7e:2f:1a:04:42:93:d7:ef:0e:00:40: d3:d2:70:a3:36:df:33:77:1e:46:b7:33:00:5c:50:90:34:f3: 4c:a7:4a:5e:0f:d9:27:9d:d4:43:27:fa:da:04:d1:bf:70:30: 48:c7:9d:59:d5:db:dd:df:99:51:64:1c:f9:c7:9e:43:fd:2b: f1:f6:e4:9c:10:32:d5:7b:ec:62:95:eb:37:be:c5:a6:be:54: 9e:90:67:08:b8:8e:bd:8c:6d:17:53:19:50:4f:e9:6a:a2:c0: ee:8b:80:26 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUP/bLS/LIvlButiiBp65zHOdJSEswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWRmZmQ0Nzc4NTdkMWU5YmU5NWI4MjcxN2E0MjdmMzVh ZmE5YTdkNjAeFw0yNTEyMjAwODEwMTZaFw0yNTEyMjIwOTUwMTZaMDMxMTAvBgNV BAMTKEY3RDdERjlGODE5ODNDNjk3MjlCMjRCQ0RFNjlGNjVCQjUyMEVDMUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+iatNEyjyrLGV+ed3JWVaLl17 phWskxJFdMLJnSdFQNRirC+tybUdZXNN2lEEQtqH+MDqF8zY3E3v2083s6GP4kFy hGEdpdFuEV6x1AWsIH97Hlr4QYxD2QfB5O2CtsDL8fe6Sq/aGxkiyzzPijoQ1T+x grmUmBO9EHCdZ88EI3zxfVRmHmAQQQfsc6uA10tsGrvlthkVeTeyt+G6v6yXm1dj xEPzUZk4L6wbDaRvKfJ/UPeS95TjjnZRLmWOeRyEP5Ly/T9v5qMf3APTDJvXW7lk HOLzQMvVuEe1txrbASetQsaQ2bmPIXG+PmhOsrGCIswxFxQKP11m0Jwh/g7lAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU99ffn4GYPGlymyS83mn2W7Ug7B0wHwYDVR0j BBgwFoAUrf/Ud4V9HpvpW4JxekJ/Na+pp9YwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODRkNTE4MTAtMTk4Ny00NzAxLThmMWYtODQyNTExMTk2 NGY0LzIvQURGRkQ0Nzc4NTdEMUU5QkU5NUI4MjcxN0E0MjdGMzVBRkE5QTdENi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3JmX1VkNFY5SHB2cFc0Snhla0pfTmEt cHA5WS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84NGQ1MTgxMC0x OTg3LTQ3MDEtOGYxZi04NDI1MTExOTY0ZjQvMi9BREZGRDQ3Nzg1N0QxRTlCRTk1 QjgyNzE3QTQyN0YzNUFGQTlBN0Q2Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACFN1JXEowuklWFMjNW2+ D50BvqoStO78yWtBzTnVFv6BEVxFGCYL6piK7h9a0sMn5EpnAUrfuv+5LcIrdWBb 1pWoMhN6qFGh7KK59bAaT8DgFUw7spDLyOEftUXvoR6sr42UXKNmk0ilDjPzbqCc cOp2Lb4GzzfrIG6kk+JMUM73E5q3kbFiMUPlcXLNcLRapH/XFGj3In4vGgRCk9fv DgBA09JwozbfM3ceRrczAFxQkDTzTKdKXg/ZJ53UQyf62gTRv3AwSMedWdXb3d+Z UWQc+ceeQ/0r8fbknBAy1XvsYpXrN77Fpr5UnpBnCLiOvYxtF1MZUE/paqLA7ouA Jg== -----END CERTIFICATE-----Generated at Sat Dec 20 14:12:35 2025 by rpki-client