This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/97b5f6f4-24be-4ae0-82a8-e5d82842e229/0/A0BBB954570CFA6E856937043DD2C1745A0A05C2.mft File: A0BBB954570CFA6E856937043DD2C1745A0A05C2.mft (raw, json) Hash identifier: yhYIEnJIyB6jFWmeTAZyo/qvv1mcR/jrWd4L88Bx3IQ= Subject key identifier: C7:62:60:47:9B:7F:C3:95:E9:56:5C:57:47:0F:8C:C4:90:28:57:31 Authority key identifier: A0:BB:B9:54:57:0C:FA:6E:85:69:37:04:3D:D2:C1:74:5A:0A:05:C2 Certificate issuer: /CN=a0bbb954570cfa6e856937043dd2c1745a0a05c2 Certificate serial: 1A502EB8999B9073485A542A8489969FEA156CD2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oLu5VFcM-m6FaTcEPdLBdFoKBcI.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/97b5f6f4-24be-4ae0-82a8-e5d82842e229/0/A0BBB954570CFA6E856937043DD2C1745A0A05C2.mft Manifest number: 80 Signing time: Sat 20 Dec 2025 01:24:37 +0000 Manifest this update: Sat 20 Dec 2025 01:19:37 +0000 Manifest next update: Sun 21 Dec 2025 02:00:37 +0000 Files and hashes: 1: A0BBB954570CFA6E856937043DD2C1745A0A05C2.crl (hash: cwcLxm5CKKu3God6tAQ9szzOdhmFbxbJf3+5beyBdBA=) 2: AS214757.asa (hash: 29YvfB9eu9yppGSh4prOQYg6dKk+YDfmBaqtqD6Y6tY=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/97b5f6f4-24be-4ae0-82a8-e5d82842e229/0/A0BBB954570CFA6E856937043DD2C1745A0A05C2.crl rsync://rsync.paas.rpki.ripe.net/repository/97b5f6f4-24be-4ae0-82a8-e5d82842e229/0/A0BBB954570CFA6E856937043DD2C1745A0A05C2.mft rsync://rpki.ripe.net/repository/DEFAULT/oLu5VFcM-m6FaTcEPdLBdFoKBcI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 02:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:50:2e:b8:99:9b:90:73:48:5a:54:2a:84:89:96:9f:ea:15:6c:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a0bbb954570cfa6e856937043dd2c1745a0a05c2 Validity Not Before: Dec 20 01:19:37 2025 GMT Not After : Dec 21 02:00:37 2025 GMT Subject: CN=C76260479B7FC395E9565C57470F8CC490285731 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:69:25:91:19:45:27:28:d6:ca:b1:90:ff:4a: 94:29:aa:7f:0f:71:53:1c:6e:f5:1b:2e:44:06:55: 90:1c:ac:10:60:23:b5:48:a8:36:a4:dd:3b:3d:77: 78:c0:7b:b5:87:99:17:71:80:6a:a2:24:ce:fe:1f: f6:13:16:f2:fe:3f:33:ad:4f:54:14:d2:6c:64:5c: 9b:c2:51:15:fc:ed:b2:eb:39:65:8d:67:56:0b:6c: b9:8f:5b:93:11:da:fa:94:5d:c2:d1:e1:a8:bd:4b: da:fd:b3:19:b4:80:8d:b8:91:4d:3e:d2:ed:d7:95: c3:2d:94:71:95:60:e2:bd:7f:3a:13:d4:5a:56:5f: 23:bb:2d:a0:b3:93:a3:f0:15:7a:55:d8:a6:9e:85: 77:71:42:83:46:6c:54:2d:ee:df:aa:0e:11:16:8a: 11:f7:34:24:8b:6a:63:68:c8:53:81:c3:74:30:63: 54:e0:5d:ef:ae:79:ee:55:59:0d:49:0f:3c:69:75: 7b:c6:e2:4b:6b:2c:5b:f9:37:16:86:82:f8:54:63: b5:a5:18:00:71:9e:8d:6b:39:ad:be:61:be:5d:3e: 53:fa:e4:ca:3a:39:66:8a:5b:01:34:8b:ec:cf:33: d3:84:c5:ea:33:e5:b5:33:ec:2b:3b:3a:12:56:c6: 95:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:62:60:47:9B:7F:C3:95:E9:56:5C:57:47:0F:8C:C4:90:28:57:31 X509v3 Authority Key Identifier: keyid:A0:BB:B9:54:57:0C:FA:6E:85:69:37:04:3D:D2:C1:74:5A:0A:05:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/97b5f6f4-24be-4ae0-82a8-e5d82842e229/0/A0BBB954570CFA6E856937043DD2C1745A0A05C2.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oLu5VFcM-m6FaTcEPdLBdFoKBcI.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/97b5f6f4-24be-4ae0-82a8-e5d82842e229/0/A0BBB954570CFA6E856937043DD2C1745A0A05C2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ce:d6:a1:5a:28:2d:ba:d2:a5:32:fc:33:2a:64:0d:8a:e5:27: 2a:b1:73:8f:b3:b7:4b:8e:a8:e0:95:7d:2f:56:97:92:df:63: 6a:07:1a:57:13:48:a2:0c:24:07:13:70:eb:70:bb:6b:c0:0c: 48:b0:8d:7e:27:ae:96:43:e0:63:4d:5b:73:c7:4d:bc:8f:eb: e3:c8:09:fe:1e:43:df:30:8a:39:6e:be:fa:eb:d8:f9:4b:d7: 32:ec:10:e6:6e:64:cf:7a:e0:27:4b:19:02:5b:a7:bf:3e:42: 9b:55:7c:16:35:40:71:1e:f3:6c:94:f6:ee:bd:7d:43:d5:eb: 44:7d:d8:60:7d:1a:be:2d:70:2d:00:3d:07:4a:b4:f7:a2:fa: 9a:ab:df:04:71:d0:e7:6d:ef:a5:c5:cd:1e:a5:ea:c4:4e:25: 28:5b:7e:ab:46:b7:d7:4e:7e:aa:0b:3b:40:fe:60:fc:88:1c: be:0d:9d:91:74:f8:85:3d:99:92:8c:14:ec:6e:29:d7:b5:68: d8:4f:77:e0:8d:6e:a1:84:47:eb:e8:22:66:e5:6e:ca:6b:27: 83:42:17:fe:09:b5:70:6d:2f:10:6b:d1:9e:8b:6d:64:6c:46: 0e:52:64:f6:69:a4:c1:0d:33:23:43:bc:ab:1c:d7:ac:cd:1f: e1:f2:a8:fe -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUGlAuuJmbkHNIWlQqhImWn+oVbNIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYTBiYmI5NTQ1NzBjZmE2ZTg1NjkzNzA0M2RkMmMxNzQ1 YTBhMDVjMjAeFw0yNTEyMjAwMTE5MzdaFw0yNTEyMjEwMjAwMzdaMDMxMTAvBgNV BAMTKEM3NjI2MDQ3OUI3RkMzOTVFOTU2NUM1NzQ3MEY4Q0M0OTAyODU3MzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCaSWRGUUnKNbKsZD/SpQpqn8P cVMcbvUbLkQGVZAcrBBgI7VIqDak3Ts9d3jAe7WHmRdxgGqiJM7+H/YTFvL+PzOt T1QU0mxkXJvCURX87bLrOWWNZ1YLbLmPW5MR2vqUXcLR4ai9S9r9sxm0gI24kU0+ 0u3XlcMtlHGVYOK9fzoT1FpWXyO7LaCzk6PwFXpV2KaehXdxQoNGbFQt7t+qDhEW ihH3NCSLamNoyFOBw3QwY1TgXe+uee5VWQ1JDzxpdXvG4ktrLFv5NxaGgvhUY7Wl GABxno1rOa2+Yb5dPlP65Mo6OWaKWwE0i+zPM9OExeoz5bUz7Cs7OhJWxpWzAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUx2JgR5t/w5XpVlxXRw+MxJAoVzEwHwYDVR0j BBgwFoAUoLu5VFcM+m6FaTcEPdLBdFoKBcIwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOTdiNWY2ZjQtMjRiZS00YWUwLTgyYTgtZTVkODI4NDJl MjI5LzAvQTBCQkI5NTQ1NzBDRkE2RTg1NjkzNzA0M0REMkMxNzQ1QTBBMDVDMi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL29MdTVWRmNNLW02RmFUY0VQZExCZEZv S0JjSS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85N2I1ZjZmNC0y NGJlLTRhZTAtODJhOC1lNWQ4Mjg0MmUyMjkvMC9BMEJCQjk1NDU3MENGQTZFODU2 OTM3MDQzREQyQzE3NDVBMEEwNUMyLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAztahWigtutKlMvwzKmQN iuUnKrFzj7O3S46o4JV9L1aXkt9jagcaVxNIogwkBxNw63C7a8AMSLCNfieulkPg Y01bc8dNvI/r48gJ/h5D3zCKOW6++uvY+UvXMuwQ5m5kz3rgJ0sZAlunvz5Cm1V8 FjVAcR7zbJT27r19Q9XrRH3YYH0avi1wLQA9B0q096L6mqvfBHHQ523vpcXNHqXq xE4lKFt+q0a3105+qgs7QP5g/Igcvg2dkXT4hT2ZkowU7G4p17Vo2E934I1uoYRH 6+giZuVuymsng0IX/gm1cG0vEGvRnottZGxGDlJk9mmkwQ0zI0O8qxzXrM0f4fKo /g== -----END CERTIFICATE-----Generated at Sat Dec 20 13:08:25 2025 by rpki-client