This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.mft File: D8219647415018E4FFD3F11C27A807530D7B7CF1.mft (raw, json) Hash identifier: 2PclHeekqUSDk/+Fwjs0Y4QLrjwB2fkEJTcnHK00qnA= Subject key identifier: D2:97:AC:C6:29:6B:DB:8B:71:52:44:B8:AE:F2:42:1C:4D:BB:E9:A7 Authority key identifier: D8:21:96:47:41:50:18:E4:FF:D3:F1:1C:27:A8:07:53:0D:7B:7C:F1 Certificate issuer: /CN=d8219647415018e4ffd3f11c27a807530d7b7cf1 Certificate serial: 2186EE8AACC1990164ED85C6D6D859604F80BB6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2CGWR0FQGOT_0_EcJ6gHUw17fPE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.mft Manifest number: 033C Signing time: Sat 20 Dec 2025 10:15:25 +0000 Manifest this update: Sat 20 Dec 2025 10:10:25 +0000 Manifest next update: Sun 21 Dec 2025 11:01:25 +0000 Files and hashes: 1: D8219647415018E4FFD3F11C27A807530D7B7CF1.crl (hash: 149XgV+a7AgojQSbl663+XhfnJXmFGFMUW7L0e6ZbtA=) 2: AS215828.asa (hash: gn0zvNq0jqiLUYK3MJlHlnirErp0oB8cq8E7u3vxlhE=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.crl rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.mft rsync://rpki.ripe.net/repository/DEFAULT/2CGWR0FQGOT_0_EcJ6gHUw17fPE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 11:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:86:ee:8a:ac:c1:99:01:64:ed:85:c6:d6:d8:59:60:4f:80:bb:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d8219647415018e4ffd3f11c27a807530d7b7cf1 Validity Not Before: Dec 20 10:10:25 2025 GMT Not After : Dec 21 11:01:25 2025 GMT Subject: CN=D297ACC6296BDB8B715244B8AEF2421C4DBBE9A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:2f:e6:5b:25:47:0c:98:b4:40:02:7e:79:74: 81:7e:5a:5e:50:12:5e:8e:9a:78:56:8c:f2:5b:bf: c7:b1:93:58:ea:b0:9f:76:4f:fe:c9:f3:b1:91:0b: 3f:7e:20:7e:2f:da:b1:c8:86:ad:9a:2d:d1:22:49: 38:56:00:89:ec:a8:3a:af:be:46:3f:78:86:ae:cb: 0a:02:9a:5c:e2:cb:da:e9:e0:74:2f:34:a3:c9:86: ff:82:0f:27:59:ce:b2:a0:0c:ae:0a:e5:cb:ca:8c: 31:b7:09:cc:08:f0:40:91:fd:65:af:7a:68:dc:bf: f9:85:94:ca:93:6d:44:d4:99:e3:c2:91:85:9f:2c: d1:39:5e:76:77:de:eb:6a:51:d7:1a:30:00:5e:2e: 47:d6:37:00:8b:dd:f3:17:b4:28:1a:15:9a:07:26: c6:68:39:62:31:3e:ae:52:7a:b2:bb:8a:d9:7f:34: ed:bf:48:93:6b:50:20:a5:6c:09:67:1b:f1:dd:81: bf:bb:c5:17:3e:ea:4e:34:cf:96:b1:91:9d:67:4c: e1:19:e4:e0:c0:1a:d9:b5:d8:72:a1:f7:dd:f1:8c: ac:aa:ad:25:d2:06:9b:84:cf:9b:47:6c:03:b9:a0: f5:b5:99:e8:5d:57:f8:bf:38:81:07:1b:67:51:1d: ac:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:97:AC:C6:29:6B:DB:8B:71:52:44:B8:AE:F2:42:1C:4D:BB:E9:A7 X509v3 Authority Key Identifier: keyid:D8:21:96:47:41:50:18:E4:FF:D3:F1:1C:27:A8:07:53:0D:7B:7C:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2CGWR0FQGOT_0_EcJ6gHUw17fPE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:35:15:88:e6:b5:99:1a:6f:9c:43:42:c5:17:b2:3f:a1:03: 36:48:f7:73:36:d2:ff:9b:b6:fd:33:80:ee:c2:f1:ae:ab:76: b3:11:42:a9:ce:47:c9:19:42:02:26:ff:07:a9:5e:46:b1:22: 01:18:c6:af:51:72:0a:6d:29:45:56:82:44:29:c6:e2:c9:e4: 0f:d1:52:c4:52:4f:b0:94:43:61:ff:eb:a3:9f:a5:99:c0:f2: a2:42:07:84:c0:3d:67:94:2f:a4:7d:48:c6:77:e6:d5:8d:b1: 10:10:30:a4:f6:35:ba:38:71:22:15:84:01:7e:a0:ea:f1:8e: 1c:b7:8e:aa:ea:66:41:25:f1:c1:40:be:67:4d:cc:f4:23:de: 20:ea:de:29:3b:10:a7:d3:2e:25:08:91:8a:17:d4:5d:19:16: 5b:f3:80:61:47:05:af:8a:8c:05:65:33:23:2d:55:99:04:9c: c9:60:ef:cd:e3:7d:ae:be:27:de:cf:9f:0a:1b:f4:40:79:5f: 42:9f:43:9c:91:a4:0b:76:7f:98:00:26:02:2a:34:2d:c7:77: 4a:03:49:1d:36:9a:ea:56:9e:e9:d0:75:e1:99:78:d2:51:c0: ec:59:2c:75:1c:ca:15:d7:cc:8d:75:dd:d9:28:e9:04:39:b6: 7e:9f:b5:42 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUIYbuiqzBmQFk7YXG1thZYE+Au2swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZDgyMTk2NDc0MTUwMThlNGZmZDNmMTFjMjdhODA3NTMw ZDdiN2NmMTAeFw0yNTEyMjAxMDEwMjVaFw0yNTEyMjExMTAxMjVaMDMxMTAvBgNV BAMTKEQyOTdBQ0M2Mjk2QkRCOEI3MTUyNDRCOEFFRjI0MjFDNERCQkU5QTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcL+ZbJUcMmLRAAn55dIF+Wl5Q El6OmnhWjPJbv8exk1jqsJ92T/7J87GRCz9+IH4v2rHIhq2aLdEiSThWAInsqDqv vkY/eIauywoCmlziy9rp4HQvNKPJhv+CDydZzrKgDK4K5cvKjDG3CcwI8ECR/WWv emjcv/mFlMqTbUTUmePCkYWfLNE5XnZ33utqUdcaMABeLkfWNwCL3fMXtCgaFZoH JsZoOWIxPq5SerK7itl/NO2/SJNrUCClbAlnG/Hdgb+7xRc+6k40z5axkZ1nTOEZ 5ODAGtm12HKh993xjKyqrSXSBpuEz5tHbAO5oPW1mehdV/i/OIEHG2dRHaxhAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU0pesxilr24txUkS4rvJCHE276acwHwYDVR0j BBgwFoAU2CGWR0FQGOT/0/EcJ6gHUw17fPEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWMwZWQwNDYtZmE5NS00NWMzLTkxNDYtOTcxZGI4YTll OGJiLzAvRDgyMTk2NDc0MTUwMThFNEZGRDNGMTFDMjdBODA3NTMwRDdCN0NGMS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJDR1dSMEZRR09UXzBfRWNKNmdIVXcx N2ZQRS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85YzBlZDA0Ni1m YTk1LTQ1YzMtOTE0Ni05NzFkYjhhOWU4YmIvMC9EODIxOTY0NzQxNTAxOEU0RkZE M0YxMUMyN0E4MDc1MzBEN0I3Q0YxLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVTUViOa1mRpvnENCxRey P6EDNkj3czbS/5u2/TOA7sLxrqt2sxFCqc5HyRlCAib/B6leRrEiARjGr1FyCm0p RVaCRCnG4snkD9FSxFJPsJRDYf/ro5+lmcDyokIHhMA9Z5QvpH1Ixnfm1Y2xEBAw pPY1ujhxIhWEAX6g6vGOHLeOqupmQSXxwUC+Z03M9CPeIOreKTsQp9MuJQiRihfU XRkWW/OAYUcFr4qMBWUzIy1VmQScyWDvzeN9rr4n3s+fChv0QHlfQp9DnJGkC3Z/ mAAmAio0Lcd3SgNJHTaa6lae6dB14Zl40lHA7FksdRzKFdfMjXXd2SjpBDm2fp+1 Qg== -----END CERTIFICATE-----Generated at Sun Dec 21 03:00:31 2025 by rpki-client