This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9bb77c8a-2d69-4325-b4fa-603388c96bb3/1/AD51B4FA37D423844399722D5240A94674496236.mft File: AD51B4FA37D423844399722D5240A94674496236.mft (raw, json) Hash identifier: Bf+5YKm7xUBVIFi2n7InfzKyl+vZTPNymBZTf8kzMu4= Subject key identifier: 54:C5:07:35:C3:F5:2F:9C:99:93:86:C2:C7:53:71:6E:18:90:50:E3 Authority key identifier: AD:51:B4:FA:37:D4:23:84:43:99:72:2D:52:40:A9:46:74:49:62:36 Certificate issuer: /CN=AD51B4FA37D423844399722D5240A94674496236 Certificate serial: 7C2A08B722494B7FE51BC337D4888532A5AE1CB4 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AD51B4FA37D423844399722D5240A94674496236.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9bb77c8a-2d69-4325-b4fa-603388c96bb3/1/AD51B4FA37D423844399722D5240A94674496236.mft Manifest number: 1D Signing time: Thu 18 Dec 2025 07:28:17 +0000 Manifest this update: Thu 18 Dec 2025 07:23:17 +0000 Manifest next update: Fri 19 Dec 2025 09:24:17 +0000 Files and hashes: 1: AD51B4FA37D423844399722D5240A94674496236.crl (hash: jJwB9gxPsVBlOFYHtcXdSeb3105zb9KbG70GqUIZro4=) 2: 326131343a373538333a333030303a3a2f33362d3438203d3e20323034353335.roa (hash: wa3x+YdBz4iMqCjU1AX+bNH8GFDW/LR3zugaLxxd1vE=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9bb77c8a-2d69-4325-b4fa-603388c96bb3/1/AD51B4FA37D423844399722D5240A94674496236.crl rsync://rsync.paas.rpki.ripe.net/repository/9bb77c8a-2d69-4325-b4fa-603388c96bb3/1/AD51B4FA37D423844399722D5240A94674496236.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AD51B4FA37D423844399722D5240A94674496236.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 09:24:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:2a:08:b7:22:49:4b:7f:e5:1b:c3:37:d4:88:85:32:a5:ae:1c:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AD51B4FA37D423844399722D5240A94674496236 Validity Not Before: Dec 18 07:23:17 2025 GMT Not After : Dec 19 09:24:17 2025 GMT Subject: CN=54C50735C3F52F9C999386C2C753716E189050E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:b8:1b:95:7e:5b:e3:5d:b8:1d:85:93:ba:89: 6b:58:da:8d:99:ed:b7:73:b9:37:9b:7f:10:cd:3c: 02:33:2e:f6:7a:8e:b8:e2:db:5a:40:1a:08:bf:93: ac:57:f0:f6:9d:75:18:8e:85:08:59:ef:47:02:3d: 50:77:3f:74:43:aa:b7:fa:2d:b9:ac:77:e3:be:ec: 7c:ce:ad:ab:56:99:53:0d:0b:f2:fa:4f:25:d3:12: 99:f3:21:36:60:7d:d1:98:f9:7f:ba:f1:d4:5b:fd: 89:b8:72:9e:80:8e:0d:17:4e:8a:d0:58:89:64:1c: c7:b0:52:4f:7b:8f:be:19:67:e6:32:24:62:dc:dc: 0d:6d:b4:c6:e0:8e:39:91:a6:f3:ee:66:bd:ff:9f: 71:ad:33:f9:06:8f:c9:c8:ea:ad:a3:4a:70:6f:cb: 48:4a:09:82:0f:49:55:6b:e5:37:df:7a:4e:94:eb: 3c:f2:58:1f:1c:f4:f9:20:fe:40:af:5c:2d:36:ec: d9:03:36:66:a7:53:65:f9:81:30:ca:99:2c:cc:ae: 4a:af:4f:8b:e5:34:b8:9a:9e:32:ab:fa:0b:01:8f: 80:cf:d4:0a:3f:46:59:6d:00:c6:89:1b:6c:ad:59: 11:4d:42:fc:88:a1:b7:b3:96:7f:ed:17:9b:a8:41: ef:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:C5:07:35:C3:F5:2F:9C:99:93:86:C2:C7:53:71:6E:18:90:50:E3 X509v3 Authority Key Identifier: keyid:AD:51:B4:FA:37:D4:23:84:43:99:72:2D:52:40:A9:46:74:49:62:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9bb77c8a-2d69-4325-b4fa-603388c96bb3/1/AD51B4FA37D423844399722D5240A94674496236.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AD51B4FA37D423844399722D5240A94674496236.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9bb77c8a-2d69-4325-b4fa-603388c96bb3/1/AD51B4FA37D423844399722D5240A94674496236.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:42:fe:27:b2:5f:83:ff:3b:59:1c:c8:d0:97:7f:7b:ed:8f: 3f:d2:07:52:ee:84:c4:75:00:92:80:1e:3f:64:4a:53:f0:59: bc:45:ca:03:a3:94:dd:60:7d:12:97:c9:df:4a:fe:0a:2f:20: 30:30:84:49:61:72:da:55:b4:12:02:14:3a:bb:14:e4:61:08: 92:fb:a5:53:f7:4f:f8:93:e3:b5:34:d0:b9:c9:81:8d:b6:31: 4e:fa:7c:0f:fd:66:bc:1d:b3:a5:5e:a8:2e:c2:53:17:72:17: 24:ee:e4:1c:95:38:e4:e3:02:87:4f:8a:32:1e:58:32:bd:ad: 14:ed:21:18:bb:01:a5:7c:5e:c4:8f:87:07:31:bd:a6:44:b5: eb:ad:65:bc:87:2b:63:2b:6a:f2:70:a6:fd:11:4d:6c:69:17: 36:c1:ea:bf:d1:1a:0c:54:59:8a:01:9a:fa:1c:e1:23:26:d3: 26:3f:a8:b6:62:30:c6:60:70:a5:c1:a2:84:87:47:78:a8:76: 85:93:83:ce:cd:69:7f:ae:cb:23:16:2d:ff:bf:25:4d:18:a0: 01:f7:ab:f4:ba:67:11:bb:53:da:3d:7e:e1:08:3a:82:1a:c4: df:9e:10:2c:03:b3:0a:3a:06:7c:07:76:30:03:38:c4:70:c3: 9c:3d:8f:59 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUfCoItyJJS3/lG8M31IiFMqWuHLQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUQ1MUI0RkEzN0Q0MjM4NDQzOTk3MjJENTI0MEE5NDY3 NDQ5NjIzNjAeFw0yNTEyMTgwNzIzMTdaFw0yNTEyMTkwOTI0MTdaMDMxMTAvBgNV BAMTKDU0QzUwNzM1QzNGNTJGOUM5OTkzODZDMkM3NTM3MTZFMTg5MDUwRTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDouBuVflvjXbgdhZO6iWtY2o2Z 7bdzuTebfxDNPAIzLvZ6jrji21pAGgi/k6xX8PaddRiOhQhZ70cCPVB3P3RDqrf6 Lbmsd+O+7HzOratWmVMNC/L6TyXTEpnzITZgfdGY+X+68dRb/Ym4cp6Ajg0XTorQ WIlkHMewUk97j74ZZ+YyJGLc3A1ttMbgjjmRpvPuZr3/n3GtM/kGj8nI6q2jSnBv y0hKCYIPSVVr5Tffek6U6zzyWB8c9Pkg/kCvXC027NkDNmanU2X5gTDKmSzMrkqv T4vlNLianjKr+gsBj4DP1Ao/RlltAMaJG2ytWRFNQvyIobezln/tF5uoQe9/AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUVMUHNcP1L5yZk4bCx1NxbhiQUOMwHwYDVR0j BBgwFoAUrVG0+jfUI4RDmXItUkCpRnRJYjYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWJiNzdjOGEtMmQ2OS00MzI1LWI0ZmEtNjAzMzg4Yzk2 YmIzLzEvQUQ1MUI0RkEzN0Q0MjM4NDQzOTk3MjJENTI0MEE5NDY3NDQ5NjIzNi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9BRDUxQjRGQTM3RDQyMzg0NDM5OTcyMkQ1 MjQwQTk0Njc0NDk2MjM2LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzliYjc3YzhhLTJkNjktNDMyNS1iNGZhLTYwMzM4OGM5NmJiMy8xL0FENTFCNEZB MzdENDIzODQ0Mzk5NzIyRDUyNDBBOTQ2NzQ0OTYyMzYubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBJQv4n sl+D/ztZHMjQl3977Y8/0gdS7oTEdQCSgB4/ZEpT8Fm8RcoDo5TdYH0Sl8nfSv4K LyAwMIRJYXLaVbQSAhQ6uxTkYQiS+6VT90/4k+O1NNC5yYGNtjFO+nwP/Wa8HbOl XqguwlMXchck7uQclTjk4wKHT4oyHlgyva0U7SEYuwGlfF7Ej4cHMb2mRLXrrWW8 hytjK2rycKb9EU1saRc2weq/0RoMVFmKAZr6HOEjJtMmP6i2YjDGYHClwaKEh0d4 qHaFk4POzWl/rssjFi3/vyVNGKAB96v0umcRu1PaPX7hCDqCGsTfnhAsA7MKOgZ8 B3YwAzjEcMOcPY9Z -----END CERTIFICATE-----Generated at Thu Dec 18 21:03:19 2025 by rpki-client