This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/3/E2C9295CC1C31876C8554E8B60DC573CFEA7CB26.mft File: E2C9295CC1C31876C8554E8B60DC573CFEA7CB26.mft (raw, json) Hash identifier: KkFmrWrpuXaIvvJTaBpFKySyazEmodW71B4lqndnGUc= Subject key identifier: DB:A1:C8:3A:4D:2E:A4:E3:9F:BA:EB:00:68:B9:A3:3A:BB:5B:DC:71 Authority key identifier: E2:C9:29:5C:C1:C3:18:76:C8:55:4E:8B:60:DC:57:3C:FE:A7:CB:26 Certificate issuer: /CN=e2c9295cc1c31876c8554e8b60dc573cfea7cb26 Certificate serial: 6633541640658F5C0F9D7120E85D339D69965647 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4skpXMHDGHbIVU6LYNxXPP6nyyY.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/3/E2C9295CC1C31876C8554E8B60DC573CFEA7CB26.mft Manifest number: 028A Signing time: Tue 30 Dec 2025 11:08:15 +0000 Manifest this update: Tue 30 Dec 2025 11:03:15 +0000 Manifest next update: Thu 01 Jan 2026 13:27:15 +0000 Files and hashes: 1: E2C9295CC1C31876C8554E8B60DC573CFEA7CB26.crl (hash: zKtC8iNuuE23WJMxGW6yKttdSTmHa7ejyLAsBIs0ATs=) 2: AS215368.asa (hash: WPjfLrYhLr3BbA/Kt1sBzS/Meq/kNQBVQgd3rtboPnI=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/3/E2C9295CC1C31876C8554E8B60DC573CFEA7CB26.crl rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/3/E2C9295CC1C31876C8554E8B60DC573CFEA7CB26.mft rsync://rpki.ripe.net/repository/DEFAULT/4skpXMHDGHbIVU6LYNxXPP6nyyY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:33:54:16:40:65:8f:5c:0f:9d:71:20:e8:5d:33:9d:69:96:56:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2c9295cc1c31876c8554e8b60dc573cfea7cb26 Validity Not Before: Dec 30 11:03:15 2025 GMT Not After : Jan 1 13:27:15 2026 GMT Subject: CN=DBA1C83A4D2EA4E39FBAEB0068B9A33ABB5BDC71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:65:04:c8:8a:5a:27:50:ac:38:2f:f6:62:46: 4d:d4:2c:75:59:d7:d3:d7:9f:c5:90:ef:5a:e6:a7: 16:4b:51:42:81:63:29:6a:5e:82:69:ce:e8:18:ec: b5:70:c6:93:c6:d6:23:f2:f3:4c:6c:18:7c:c6:b3: c3:77:d2:e6:0a:a5:96:5e:01:6a:24:68:31:7c:ee: d4:8a:c6:88:f0:2d:14:5b:b1:09:59:70:bf:bc:fa: be:4a:e6:91:52:31:d1:ef:52:61:ec:e9:6c:cf:b2: d5:03:9d:31:5f:0a:97:ca:84:46:05:61:bd:57:a2: 9c:5d:93:73:ec:38:f1:44:10:f7:5e:ef:23:fa:53: d4:ce:e1:9d:4d:d0:99:c1:1f:3a:f1:46:f4:93:9e: 83:be:6f:16:a5:7a:44:81:4c:ce:f2:18:62:7a:95: 8f:36:dc:e1:a6:b9:3b:c3:d6:52:64:1b:34:57:46: e9:b6:06:a9:30:81:0a:4c:a0:26:1c:35:b3:7b:01: 71:6a:05:d0:8a:5c:4e:96:51:7c:f0:2e:94:f9:84: c8:8d:75:18:58:b0:17:98:97:46:21:b6:94:a0:75: 93:1e:fb:b1:d4:73:d8:e2:68:a2:56:0e:6f:cd:bc: de:dc:1a:bf:69:2b:c9:41:da:7b:97:cb:0a:7c:c3: ca:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:A1:C8:3A:4D:2E:A4:E3:9F:BA:EB:00:68:B9:A3:3A:BB:5B:DC:71 X509v3 Authority Key Identifier: keyid:E2:C9:29:5C:C1:C3:18:76:C8:55:4E:8B:60:DC:57:3C:FE:A7:CB:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/3/E2C9295CC1C31876C8554E8B60DC573CFEA7CB26.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4skpXMHDGHbIVU6LYNxXPP6nyyY.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/3/E2C9295CC1C31876C8554E8B60DC573CFEA7CB26.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:68:16:90:14:e1:4a:63:d7:a8:78:af:6b:56:32:ca:1e:2f: 9c:ff:9c:d5:10:a9:c0:91:ea:60:79:2b:b0:ea:e8:be:2b:66: e4:e0:d6:8d:96:94:0f:25:6c:20:4e:85:01:57:4d:29:e6:3f: 09:91:12:64:01:f6:5e:f7:e4:c0:b3:d8:2b:fa:97:b2:68:16: b5:4a:cf:94:0f:df:8e:57:f0:9e:1b:29:73:df:71:04:73:11: 33:f0:1c:78:d5:e2:c7:74:fc:c4:fb:bd:c0:d1:77:23:cb:6b: 18:52:6f:d9:a0:f2:24:8f:ca:d3:b9:a8:60:31:52:12:00:5a: af:e7:e5:da:94:07:42:49:ad:62:13:a6:77:15:3d:e3:70:17: 56:33:d4:d3:fa:20:ee:70:2f:22:48:05:42:e6:ec:19:96:7a: 7a:2d:5c:5c:81:03:e8:a9:f0:60:ca:58:89:0a:81:a7:80:2f: 69:07:71:a2:e3:94:36:12:55:41:6d:8e:92:87:8b:5f:5a:3d: bb:e5:c0:69:32:2a:47:d2:f3:54:a4:62:56:4d:82:ec:63:63: 26:d3:70:51:a0:da:90:f7:9c:7e:0b:a7:60:a7:9b:57:27:ad: 1c:06:c2:d1:15:eb:e1:45:8c:52:46:4f:6a:ea:8a:0c:5a:f6: d9:2c:38:b8 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUZjNUFkBlj1wPnXEg6F0znWmWVkcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZTJjOTI5NWNjMWMzMTg3NmM4NTU0ZThiNjBkYzU3M2Nm ZWE3Y2IyNjAeFw0yNTEyMzAxMTAzMTVaFw0yNjAxMDExMzI3MTVaMDMxMTAvBgNV BAMTKERCQTFDODNBNEQyRUE0RTM5RkJBRUIwMDY4QjlBMzNBQkI1QkRDNzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5ZQTIilonUKw4L/ZiRk3ULHVZ 19PXn8WQ71rmpxZLUUKBYylqXoJpzugY7LVwxpPG1iPy80xsGHzGs8N30uYKpZZe AWokaDF87tSKxojwLRRbsQlZcL+8+r5K5pFSMdHvUmHs6WzPstUDnTFfCpfKhEYF Yb1Xopxdk3PsOPFEEPde7yP6U9TO4Z1N0JnBHzrxRvSTnoO+bxalekSBTM7yGGJ6 lY823OGmuTvD1lJkGzRXRum2BqkwgQpMoCYcNbN7AXFqBdCKXE6WUXzwLpT5hMiN dRhYsBeYl0YhtpSgdZMe+7HUc9jiaKJWDm/NvN7cGr9pK8lB2nuXywp8w8rzAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU26HIOk0upOOfuusAaLmjOrtb3HEwHwYDVR0j BBgwFoAU4skpXMHDGHbIVU6LYNxXPP6nyyYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODRkNTE4MTAtMTk4Ny00NzAxLThmMWYtODQyNTExMTk2 NGY0LzMvRTJDOTI5NUNDMUMzMTg3NkM4NTU0RThCNjBEQzU3M0NGRUE3Q0IyNi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRza3BYTUhER0hiSVZVNkxZTnhYUFA2 bnl5WS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84NGQ1MTgxMC0x OTg3LTQ3MDEtOGYxZi04NDI1MTExOTY0ZjQvMy9FMkM5Mjk1Q0MxQzMxODc2Qzg1 NTRFOEI2MERDNTczQ0ZFQTdDQjI2Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs2gWkBThSmPXqHiva1Yy yh4vnP+c1RCpwJHqYHkrsOrovitm5ODWjZaUDyVsIE6FAVdNKeY/CZESZAH2Xvfk wLPYK/qXsmgWtUrPlA/fjlfwnhspc99xBHMRM/AceNXix3T8xPu9wNF3I8trGFJv 2aDyJI/K07moYDFSEgBar+fl2pQHQkmtYhOmdxU943AXVjPU0/og7nAvIkgFQubs GZZ6ei1cXIED6KnwYMpYiQqBp4AvaQdxouOUNhJVQW2OkoeLX1o9u+XAaTIqR9Lz VKRiVk2C7GNjJtNwUaDakPecfgunYKebVyetHAbC0RXr4UWMUkZPauqKDFr22Sw4 uA== -----END CERTIFICATE-----Generated at Wed Dec 31 09:04:14 2025 by rpki-client