This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/984185b7-0343-4a64-aa34-82f61ec0dfdc/0/728ADACFC0AC11B4A0FB4C53F08CCB290CFACDB9.mft File: 728ADACFC0AC11B4A0FB4C53F08CCB290CFACDB9.mft (raw, json) Hash identifier: TBk7qj/KFbFXNcbZUmse9+3wJTBN/7ofUIBZLjt6FOE= Subject key identifier: 33:38:FD:B0:4B:03:A1:C5:28:A4:98:2C:DB:3C:13:6D:E5:A7:69:AB Authority key identifier: 72:8A:DA:CF:C0:AC:11:B4:A0:FB:4C:53:F0:8C:CB:29:0C:FA:CD:B9 Certificate issuer: /CN=728ADACFC0AC11B4A0FB4C53F08CCB290CFACDB9 Certificate serial: 7F4796A2F8F35164BB7901BC8F9B9AF7D36EB8D3 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/728ADACFC0AC11B4A0FB4C53F08CCB290CFACDB9.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/984185b7-0343-4a64-aa34-82f61ec0dfdc/0/728ADACFC0AC11B4A0FB4C53F08CCB290CFACDB9.mft Manifest number: 04 Signing time: Thu 18 Dec 2025 00:55:05 +0000 Manifest this update: Thu 18 Dec 2025 00:50:05 +0000 Manifest next update: Fri 19 Dec 2025 04:11:05 +0000 Files and hashes: 1: 728ADACFC0AC11B4A0FB4C53F08CCB290CFACDB9.crl (hash: gPmcatzWXXVplqmSqZBHTg6YnVWDS55iIFM1Zap4DNA=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/984185b7-0343-4a64-aa34-82f61ec0dfdc/0/728ADACFC0AC11B4A0FB4C53F08CCB290CFACDB9.crl rsync://rsync.paas.rpki.ripe.net/repository/984185b7-0343-4a64-aa34-82f61ec0dfdc/0/728ADACFC0AC11B4A0FB4C53F08CCB290CFACDB9.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/728ADACFC0AC11B4A0FB4C53F08CCB290CFACDB9.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:47:96:a2:f8:f3:51:64:bb:79:01:bc:8f:9b:9a:f7:d3:6e:b8:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=728ADACFC0AC11B4A0FB4C53F08CCB290CFACDB9 Validity Not Before: Dec 18 00:50:05 2025 GMT Not After : Dec 19 04:11:05 2025 GMT Subject: CN=3338FDB04B03A1C528A4982CDB3C136DE5A769AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:3f:0b:77:48:a0:e6:b2:43:15:ac:17:8a:3f: 37:07:ce:29:a2:c0:bb:a3:9e:b9:04:10:3d:50:a3: 93:95:57:cc:19:d4:a8:e5:97:25:4a:13:94:ee:d8: ae:a3:15:3e:99:07:32:d0:0b:f3:0b:c5:6a:52:1d: 65:4a:42:71:19:70:04:9f:90:f6:6a:eb:39:cc:5c: c9:6f:a9:44:96:ba:c4:f9:14:27:fb:06:33:28:06: 56:0e:9a:49:f2:bb:18:28:03:b1:43:89:19:e0:95: 5c:d8:4d:9d:30:25:55:3f:c4:e5:62:3f:f2:b5:ec: 73:b9:e0:fd:d6:4e:74:39:b6:b5:13:9c:26:05:79: 57:c4:71:52:af:79:f4:ff:53:f8:f6:be:5b:66:2b: 62:08:24:31:65:0c:3c:b4:4c:f1:09:66:e9:da:aa: 92:1a:6b:4c:62:fa:c6:c3:00:00:94:7b:0f:af:30: cb:4e:ac:0f:ab:7e:e1:ca:aa:bb:ad:f6:56:6f:ba: e5:8c:19:a0:88:45:7f:59:f1:42:69:0b:f2:0c:21: 77:ed:9b:72:98:8f:a4:a6:48:62:6a:14:a3:73:18: 83:a7:e7:1d:aa:17:af:3b:36:e5:59:11:68:23:00: 7f:16:14:90:eb:97:44:96:77:1c:f7:7e:52:65:54: aa:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:38:FD:B0:4B:03:A1:C5:28:A4:98:2C:DB:3C:13:6D:E5:A7:69:AB X509v3 Authority Key Identifier: keyid:72:8A:DA:CF:C0:AC:11:B4:A0:FB:4C:53:F0:8C:CB:29:0C:FA:CD:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/984185b7-0343-4a64-aa34-82f61ec0dfdc/0/728ADACFC0AC11B4A0FB4C53F08CCB290CFACDB9.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/728ADACFC0AC11B4A0FB4C53F08CCB290CFACDB9.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/984185b7-0343-4a64-aa34-82f61ec0dfdc/0/728ADACFC0AC11B4A0FB4C53F08CCB290CFACDB9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:8a:69:c3:16:65:c8:ac:45:c9:f2:f0:ee:e7:2c:89:0c:ef: d6:ee:7c:44:17:b8:92:99:8d:12:29:11:c1:44:3f:e5:b9:ea: 7a:f1:45:24:bd:5f:d7:a3:f6:25:52:56:29:fa:45:12:63:86: a2:fc:f3:37:5a:28:01:42:73:81:79:ba:01:9e:e0:10:d4:f6: b0:8d:65:fe:12:e4:e9:40:a6:8f:21:0d:50:01:7c:e8:44:57: 09:36:b2:28:63:2d:6b:2b:3d:7f:c9:d0:cc:f2:03:57:6c:a7: 1b:09:54:11:b3:16:08:db:6f:e7:8d:6a:38:2d:66:c6:af:0f: b3:0f:d9:d8:2c:09:24:8f:7f:9f:9b:e8:0c:9c:94:5b:19:76: d5:7a:c4:6b:82:1b:d2:fc:45:1e:d7:fb:7f:69:05:2f:e9:7a: 62:04:be:04:0e:b4:c1:01:02:d8:fa:ac:1e:14:00:9c:f2:c3: 70:ea:5f:5c:53:c5:01:89:fd:3d:19:ff:ae:ad:cc:74:71:37: 29:4a:fc:ea:7f:1e:a9:b1:f4:bb:02:52:44:02:27:68:b5:18: 39:cd:8d:77:46:da:0d:62:2f:e2:58:c9:c4:a0:2a:fd:7d:c6: 7a:9c:c1:aa:dd:0f:b8:db:7a:ab:28:a6:e0:6e:c7:2b:cd:2e: 01:21:c6:c2 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUf0eWovjzUWS7eQG8j5ua99NuuNMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzI4QURBQ0ZDMEFDMTFCNEEwRkI0QzUzRjA4Q0NCMjkw Q0ZBQ0RCOTAeFw0yNTEyMTgwMDUwMDVaFw0yNTEyMTkwNDExMDVaMDMxMTAvBgNV BAMTKDMzMzhGREIwNEIwM0ExQzUyOEE0OTgyQ0RCM0MxMzZERTVBNzY5QUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOPwt3SKDmskMVrBeKPzcHzimi wLujnrkEED1Qo5OVV8wZ1KjllyVKE5Tu2K6jFT6ZBzLQC/MLxWpSHWVKQnEZcASf kPZq6znMXMlvqUSWusT5FCf7BjMoBlYOmknyuxgoA7FDiRnglVzYTZ0wJVU/xOVi P/K17HO54P3WTnQ5trUTnCYFeVfEcVKvefT/U/j2vltmK2IIJDFlDDy0TPEJZuna qpIaa0xi+sbDAACUew+vMMtOrA+rfuHKqrut9lZvuuWMGaCIRX9Z8UJpC/IMIXft m3KYj6SmSGJqFKNzGIOn5x2qF687NuVZEWgjAH8WFJDrl0SWdxz3flJlVKqdAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUMzj9sEsDocUopJgs2zwTbeWnaaswHwYDVR0j BBgwFoAUcoraz8CsEbSg+0xT8IzLKQz6zbkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOTg0MTg1YjctMDM0My00YTY0LWFhMzQtODJmNjFlYzBk ZmRjLzAvNzI4QURBQ0ZDMEFDMTFCNEEwRkI0QzUzRjA4Q0NCMjkwQ0ZBQ0RCOS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC83MjhBREFDRkMwQUMxMUI0QTBGQjRDNTNG MDhDQ0IyOTBDRkFDREI5LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 Lzk4NDE4NWI3LTAzNDMtNGE2NC1hYTM0LTgyZjYxZWMwZGZkYy8wLzcyOEFEQUNG QzBBQzExQjRBMEZCNEM1M0YwOENDQjI5MENGQUNEQjkubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB4imnD FmXIrEXJ8vDu5yyJDO/W7nxEF7iSmY0SKRHBRD/luep68UUkvV/Xo/YlUlYp+kUS Y4ai/PM3WigBQnOBeboBnuAQ1PawjWX+EuTpQKaPIQ1QAXzoRFcJNrIoYy1rKz1/ ydDM8gNXbKcbCVQRsxYI22/njWo4LWbGrw+zD9nYLAkkj3+fm+gMnJRbGXbVesRr ghvS/EUe1/t/aQUv6XpiBL4EDrTBAQLY+qweFACc8sNw6l9cU8UBif09Gf+urcx0 cTcpSvzqfx6psfS7AlJEAidotRg5zY13RtoNYi/iWMnEoCr9fcZ6nMGq3Q+423qr KKbgbscrzS4BIcbC -----END CERTIFICATE-----Generated at Thu Dec 18 12:22:22 2025 by rpki-client