This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/4/9D49BD0B2884C6DC5085C1A694DF7B970E05DAAB.mft File: 9D49BD0B2884C6DC5085C1A694DF7B970E05DAAB.mft (raw, json) Hash identifier: zVrKlkRJDTIrSvMV/PEBFxHw+WiMAxdRiKDk9GDD5n4= Subject key identifier: CF:3D:FD:25:5E:2E:21:16:34:D9:E4:9E:23:BA:4E:D9:E1:3B:DE:5B Authority key identifier: 9D:49:BD:0B:28:84:C6:DC:50:85:C1:A6:94:DF:7B:97:0E:05:DA:AB Certificate issuer: /CN=9d49bd0b2884c6dc5085c1a694df7b970e05daab Certificate serial: 768C06E007AB95A9C577785D8422F8E234D12988 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nUm9CyiExtxQhcGmlN97lw4F2qs.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/4/9D49BD0B2884C6DC5085C1A694DF7B970E05DAAB.mft Manifest number: 0275 Signing time: Sat 20 Dec 2025 23:08:15 +0000 Manifest this update: Sat 20 Dec 2025 23:03:15 +0000 Manifest next update: Mon 22 Dec 2025 23:08:15 +0000 Files and hashes: 1: AS209735.asa (hash: 4lq2i8m+npa42DYropbb29vhZU9mPbpa0ah43H0njAQ=) 2: 9D49BD0B2884C6DC5085C1A694DF7B970E05DAAB.crl (hash: /i/i8e+9kUjVttPPg+ooeGualEDRXASr2ndnPr/qzE8=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/4/9D49BD0B2884C6DC5085C1A694DF7B970E05DAAB.crl rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/4/9D49BD0B2884C6DC5085C1A694DF7B970E05DAAB.mft rsync://rpki.ripe.net/repository/DEFAULT/nUm9CyiExtxQhcGmlN97lw4F2qs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:8c:06:e0:07:ab:95:a9:c5:77:78:5d:84:22:f8:e2:34:d1:29:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d49bd0b2884c6dc5085c1a694df7b970e05daab Validity Not Before: Dec 20 23:03:15 2025 GMT Not After : Dec 22 23:08:15 2025 GMT Subject: CN=CF3DFD255E2E211634D9E49E23BA4ED9E13BDE5B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:50:9d:14:bc:5f:81:bf:5c:ae:ae:35:c5:f8: 56:ef:22:96:5b:da:b2:f3:fd:9c:9b:9f:84:b4:c6: 0c:09:52:3d:ee:54:89:33:b0:3a:83:1a:fd:58:e3: cb:a9:51:cb:4c:7f:20:f9:30:f0:f8:c1:04:d0:b2: fe:5e:09:97:67:84:2f:1e:84:bf:cf:30:78:39:b1: 28:fb:70:50:36:b4:00:8d:08:8a:71:d3:56:07:75: b9:4a:cd:da:1e:a5:cb:7c:cb:da:7e:4d:6b:c2:22: 62:c8:f6:c8:d9:ab:c6:e8:63:a6:ec:9c:1e:29:88: 0b:8c:fb:b4:4e:14:f0:88:87:ca:da:12:ba:d5:17: 53:dd:da:d9:66:15:83:89:f6:bc:99:19:d8:64:b5: ff:dd:22:a6:17:7c:94:a2:3e:2d:f6:bd:84:6a:8c: ce:4c:de:2c:78:04:9d:6e:e6:ec:a1:dc:15:b4:79: dc:50:78:83:bd:d8:6c:63:80:bd:96:4d:2b:bf:dd: 46:3c:9f:22:36:3c:a0:1e:2f:1e:40:7b:4a:a6:9e: ad:05:f6:6d:9f:8d:f5:0b:b7:81:5e:a2:70:c3:de: 07:10:6d:5e:43:fa:7c:2a:0a:4a:5d:0d:07:9a:66: 25:b1:d4:96:e1:17:b7:74:9f:8b:c7:6a:6b:64:2c: 10:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:3D:FD:25:5E:2E:21:16:34:D9:E4:9E:23:BA:4E:D9:E1:3B:DE:5B X509v3 Authority Key Identifier: keyid:9D:49:BD:0B:28:84:C6:DC:50:85:C1:A6:94:DF:7B:97:0E:05:DA:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/4/9D49BD0B2884C6DC5085C1A694DF7B970E05DAAB.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nUm9CyiExtxQhcGmlN97lw4F2qs.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/4/9D49BD0B2884C6DC5085C1A694DF7B970E05DAAB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:96:93:ae:f7:12:6c:e2:19:95:f3:82:15:6d:35:9a:68:78: 1e:20:6f:08:2c:43:f8:b3:f9:04:16:55:01:c9:83:33:ac:12: 95:54:3e:e2:a2:d4:cc:6e:7a:56:a5:db:7f:cd:23:cf:a8:ae: 80:09:0f:14:ef:17:53:20:06:6f:ce:d5:2d:3c:83:4a:0f:a7: 9b:e6:27:26:9d:b2:d2:07:c2:8a:5a:77:44:56:13:75:c1:f9: 2c:44:9e:1c:7e:15:05:53:e6:40:fe:ae:a3:72:50:41:c9:b4: c3:ae:cd:d0:85:53:dc:f1:eb:6c:89:3c:4b:e7:5f:40:64:ad: 05:7c:fd:a6:16:47:40:49:99:9a:38:d8:93:95:4d:0e:15:37: 0c:3f:9c:35:a7:91:34:78:41:3f:60:dc:30:82:90:fd:c1:d7: a4:cd:fe:5b:49:e2:35:33:3c:1c:4c:8f:79:37:89:9a:98:21: 43:7d:e1:e5:b0:37:72:f0:45:e1:20:8b:cd:18:dd:b2:96:07: 75:5e:ae:6b:f5:f5:17:fe:8d:0e:cd:ec:61:0b:6c:7f:3c:ed: 85:9b:6e:3a:7b:53:13:8d:83:33:5c:df:af:59:de:48:5d:82: 13:a2:05:27:34:48:81:b9:8c:ec:53:1a:c2:63:5a:ba:e5:ae: f8:64:49:34 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUdowG4AerlanFd3hdhCL44jTRKYgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOWQ0OWJkMGIyODg0YzZkYzUwODVjMWE2OTRkZjdiOTcw ZTA1ZGFhYjAeFw0yNTEyMjAyMzAzMTVaFw0yNTEyMjIyMzA4MTVaMDMxMTAvBgNV BAMTKENGM0RGRDI1NUUyRTIxMTYzNEQ5RTQ5RTIzQkE0RUQ5RTEzQkRFNUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLUJ0UvF+Bv1yurjXF+FbvIpZb 2rLz/Zybn4S0xgwJUj3uVIkzsDqDGv1Y48upUctMfyD5MPD4wQTQsv5eCZdnhC8e hL/PMHg5sSj7cFA2tACNCIpx01YHdblKzdoepct8y9p+TWvCImLI9sjZq8boY6bs nB4piAuM+7ROFPCIh8raErrVF1Pd2tlmFYOJ9ryZGdhktf/dIqYXfJSiPi32vYRq jM5M3ix4BJ1u5uyh3BW0edxQeIO92GxjgL2WTSu/3UY8nyI2PKAeLx5Ae0qmnq0F 9m2fjfULt4FeonDD3gcQbV5D+nwqCkpdDQeaZiWx1JbhF7d0n4vHamtkLBBVAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUzz39JV4uIRY02eSeI7pO2eE73lswHwYDVR0j BBgwFoAUnUm9CyiExtxQhcGmlN97lw4F2qswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODRkNTE4MTAtMTk4Ny00NzAxLThmMWYtODQyNTExMTk2 NGY0LzQvOUQ0OUJEMEIyODg0QzZEQzUwODVDMUE2OTRERjdCOTcwRTA1REFBQi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL25VbTlDeWlFeHR4UWhjR21sTjk3bHc0 RjJxcy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84NGQ1MTgxMC0x OTg3LTQ3MDEtOGYxZi04NDI1MTExOTY0ZjQvNC85RDQ5QkQwQjI4ODRDNkRDNTA4 NUMxQTY5NERGN0I5NzBFMDVEQUFCLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkZaTrvcSbOIZlfOCFW01 mmh4HiBvCCxD+LP5BBZVAcmDM6wSlVQ+4qLUzG56VqXbf80jz6iugAkPFO8XUyAG b87VLTyDSg+nm+YnJp2y0gfCilp3RFYTdcH5LESeHH4VBVPmQP6uo3JQQcm0w67N 0IVT3PHrbIk8S+dfQGStBXz9phZHQEmZmjjYk5VNDhU3DD+cNaeRNHhBP2DcMIKQ /cHXpM3+W0niNTM8HEyPeTeJmpghQ33h5bA3cvBF4SCLzRjdspYHdV6ua/X1F/6N Ds3sYQtsfzzthZtuOntTE42DM1zfr1neSF2CE6IFJzRIgbmM7FMawmNauuWu+GRJ NA== -----END CERTIFICATE-----Generated at Sun Dec 21 10:37:55 2025 by rpki-client